opendev/system-config
Code Issues Proposed changes
90cc9688ce
system-config/modules/jenkins/files/slave_scripts/pypi-upload.sh

21 lines
577 B
Bash
Raw Normal View History

Run pypi uploads more securely. To run pypi uploads more securely perform the `python setup.py sdist` on a normal build slave, then copy the sdist to the pypi slave and perform only the upload from that host. Change-Id: Ie68d484ef6d129749186c792d0ced812ac25818b Reviewed-on: https://review.openstack.org/16335 Reviewed-by: Monty Taylor <mordred@inaugust.com> Reviewed-by: James E. Blair <corvus@inaugust.com> Approved: Clark Boylan <clark.boylan@gmail.com> Tested-by: Jenkins
2012-11-16 13:16:26 -08:00
#!/bin/bash
PROJECT=$1
FILENAME=`ls ${PROJECT}*.tar.gz`
# Strip project name and extension leaving only the version.
VERSION=`echo ${FILENAME} | sed -n "s/${PROJECT}-\(.*\).tar.gz/\1/p"`
MD5_DIGEST=`md5sum ${FILENAME} | cut -d' ' -f1`
curl --config /home/jenkins/.pypicurl \
Correct pypi upload form and copy artifact source The file type form entry is 'filetype' not 'file_type'. Correct that in pypi-upload.sh. The artifact to copy is 'dist/project*.tar.gz' not 'project*.tar.gz'. Correct that in pypi-jobs.yaml. Also cd into the dist dir that will be created before attempting to copy the sdist out of that dir. Change-Id: Ifa27e683c162f5acfc5136d0729be42af9b4ca41 Reviewed-on: https://review.openstack.org/16493 Reviewed-by: Jeremy Stanley <fungi@yuggoth.org> Reviewed-by: Paul Belanger <paul.belanger@polybeacon.com> Reviewed-by: James E. Blair <corvus@inaugust.com> Approved: James E. Blair <corvus@inaugust.com> Tested-by: Jenkins
2012-11-19 15:17:14 -08:00
-F "filetype=sdist" \
Run pypi uploads more securely. To run pypi uploads more securely perform the `python setup.py sdist` on a normal build slave, then copy the sdist to the pypi slave and perform only the upload from that host. Change-Id: Ie68d484ef6d129749186c792d0ced812ac25818b Reviewed-on: https://review.openstack.org/16335 Reviewed-by: Monty Taylor <mordred@inaugust.com> Reviewed-by: James E. Blair <corvus@inaugust.com> Approved: Clark Boylan <clark.boylan@gmail.com> Tested-by: Jenkins
2012-11-16 13:16:26 -08:00
-F "content=@${FILENAME};filename=${FILENAME}" \
-F ":action=file_upload" \
-F "protocol_version=1" \
-F "name=${PROJECT}" \
-F "version=${VERSION}" \
-F "md5_digest=${MD5_DIGEST}" \
http://pypi.python.org/pypi > /dev/null 2>&1
exit $?
Copy Permalink