README.md

# Freifunk Ingolstadt Site Config

## fastd or l2tp firmware

Set the environment variable `VPN_TYPE` to choose whether you want to create fastd or l2tp firmware.
If unset fastd firmware is built.
```
export VPN_TYPE=fastd
```
or 
```
VPN_TYPE=l2tp
```

## ecdsautils (e.g. using pass)

Create new Key: `ecdsakeygen -s | pass insert -e freifunk-ingolstadt.de/firmware-key`

Show public Key: `pass freifunk-ingolstadt.de/firmware-key | ecdsakeygen -p` 

### sign firmware

Download the `{beta,stable}.manifest` file from jenkins to `/tmp/` (experimental requires only one signature, so no extra signatures are required)
```
pass freifunk-ingolstadt.de/firmware-key | ecdsasign /tmp/stable.manifest
pass freifunk-ingolstadt.de/firmware-key | ecdsasign /tmp/beta.manifest
```
Since the Jenkins adds the `*.manifest` files before they are signed the file doesn't have to split at `---`.
If you use the uploaded `*.manifest* the snippet above won't work!

## Jenkins Jobs

Create a Pipeline Job

- [x] Do not allow concurrent builds
- [x] Poll SCM `H/5 * * * *`

Pipeline script from SCM

- Repository URL: `http://git.bingo-ev.de/freifunk/ffin-site.git`
- Branch Specifier: `*/v2018.1`

**Notice: currently the ECDSAKEY has to be added as a secret file with the ID `a405a0c0-7471-4966-be77-2d62b6617dfa`**