Ne plus fournir l’identité et le mot de passe de la clé en dur

aptly.boot

@@ -32,7 +32,10 @@ fi
 
 container_id=$(docker run -d -v ${PACKAGES_FOLDER}:/packages -v ${GPG_FOLDER}:/signing-key -p $PORT:8080 cadoles/aptly:dev)
 
-if [ $(docker ps -q --no-trunc | grep -q $container_id) ]
+docker ps -q --no-trunc | grep -q ${container_id}
+res=$?
+
+if [ "${res}" -eq 0 ]
 then
     echo "container with id $container_id started"
 

aptly.sh

@@ -1,16 +1,18 @@
 #!/bin/bash
 
+passphrase="$(pwgen -1 -n 20)"
+
 cat >keyparms <<EOF
      %echo Generating a basic OpenPGP key
      Key-Type: DSA
      Key-Length: 1024
      Subkey-Type: ELG-E
      Subkey-Length: 1024
-     Name-Real: Benjamin Bohard
+     Name-Real: $(git config user.name)
      Name-Comment: dev deb repo
-     Name-Email: bbohard@cadoles.com
+     Name-Email: $(git config user.email)
      Expire-Date: 0
-     Passphrase: abc
+     Passphrase: ${passphrase}
      %commit
      %echo done
 EOF
@@ -20,5 +22,5 @@ gpg --export --armor > /signing-key/dev.pubkey
 
 aptly repo create --component="main" --distribution="ubuntu" dev
 aptly repo add dev /packages
-aptly publish repo --batch --passphrase="abc" dev
+aptly publish repo --batch --passphrase="${passphrase}" dev
 aptly serve