Some Eclipse Foundation services are deprecated, or will be soon. Please ensure you've read this important communication.

Bug 548867

Summary: [Xtext, OI2JIRO] Provide settings-security.xml
Product: Community Reporter: Karsten Thoms <karsten.thoms>
Component: CI-JenkinsAssignee: CI Admin Inbox <ci.admin-inbox>
Status: CLOSED FIXED QA Contact:
Severity: normal    
Priority: P3 CC: christian.dietrich.opensource, frederic.gurr, nobody, webmaster
Version: unspecified   
Target Milestone: ---   
Hardware: All   
OS: All   
Whiteboard:
Bug Depends on:    
Bug Blocks: 546150    

Description Karsten Thoms CLA 2019-07-02 09:07:46 EDT
On JIPP there is the file ~/.m2/settings-security.xml. We don't have that on JIRO, and we think that this might be required to decrypt the password for the GPG key

if (gpgServer !== null) {
	if (cipher.isEncryptedString(gpgServer.passphrase)) {
		if (decryptionKey === null)
			throw new GradleException('Missing settings-security.xml file.')
		logger.info('Maven Settings: using encrypted server entry for pgp signing')
		ext.set(PublishingPlugin.SIGNING_PASSWORD, cipher.decryptDecorated(gpgServer.passphrase, decryptionKey))


Could you please configure this file as a secret file, so that we can use it like  secret-subkeys.asc?
Comment 1 Karsten Thoms CLA 2019-07-02 09:09:37 EDT
For reference: Code mentioned above is from https://github.com/xtext/publishing/blob/master/buildSrc/src/main/java/io/typefox/publishing/MavenPublishing.xtend
Comment 2 Frederic Gurr CLA 2019-07-02 09:33:11 EDT
The corresponding volume (settings-security-xml) must be added, when using a custom container. I've added a section to the wiki here:
=> https://wiki.eclipse.org/Jenkins#Custom_container_on_Jiro_2
Comment 3 Karsten Thoms CLA 2019-07-02 10:57:55 EDT
Thanks. I wonder how we should have guessed this...
Comment 4 Frederic Gurr CLA 2019-07-02 11:21:07 EDT
Volume mount for settings.xml and the yaml in the console log, when default pod-templates are used, kinda give it away, but it requires some reading between the lines.

Thanks for bringing this to our attention.