README.md 1.27 KB
Newer Older
1
2
# Freifunk Ingolstadt Site Config

Citronalco's avatar
Citronalco committed
3
4
## fastd or l2tp firmware

Neal Oakey's avatar
Neal Oakey committed
5
Set the environment variable `VPN_TYPE` to choose whether you want to create fastd or l2tp firmware.
Citronalco's avatar
Citronalco committed
6
7
8
9
10
11
12
13
14
If unset fastd firmware is built.
```
export VPN_TYPE=fastd
```
or 
```
VPN_TYPE=l2tp
```

15
16
17
## ecdsautils (e.g. using pass)

Create new Key: `ecdsakeygen -s | pass insert -e freifunk-ingolstadt.de/firmware-key`
Neal Oakey's avatar
Neal Oakey committed
18

19
20
21
22
Show public Key: `pass freifunk-ingolstadt.de/firmware-key | ecdsakeygen -p` 

### sign firmware

23
Download the `{beta,stable}.manifest` file from jenkins to `/tmp/` (experimental requires only one signature, so no extra signatures are required)
24
```
25
26
pass freifunk-ingolstadt.de/firmware-key | ecdsasign /tmp/stable.manifest
pass freifunk-ingolstadt.de/firmware-key | ecdsasign /tmp/beta.manifest
27
```
28
29
Since the Jenkins adds the `*.manifest` files before they are signed the file doesn't have to split at `---`.
If you use the uploaded `*.manifest* the snippet above won't work!
30
31
32

## Jenkins Jobs

33
Create a Pipeline Job
34

35
36
- [x] Do not allow concurrent builds
- [x] Poll SCM `H/5 * * * *`
37

38
Pipeline script from SCM
39

40
41
- Repository URL: `http://git.bingo-ev.de/freifunk/ffin-site.git`
- Branch Specifier: `*/v2018.1`
42

43
**Notice: currently the ECDSAKEY has to be added as a secret file with the ID `a405a0c0-7471-4966-be77-2d62b6617dfa`**