Merge pull request #46 from ericwcc/setup_github_action

Replace travis-ci with github action

Author: ericzai

.github/workflows/build.yml

@@ -0,0 +1,20 @@
+name: build
+on:
+  push:
+    branches: [ master ]
+    tags: [ "*.*.*" ]
+jobs:
+  build:
+    runs-on: ubuntu-18.04
+    steps:
+      - uses: actions/checkout@v2
+      - uses: actions/setup-java@v1
+        with:
+          java-version: 8
+        env:
+          SONATYPE_USERNAME: ${{ secrets.SONATYPE_USERNAME }}
+          SONATYPE_PASSWORD: ${{ secrets.SONATYPE_PASSWORD }}
+      - name: install
+        run: mvn --settings .github/workflows/mvnsettings.xml install -DskipTests=true -Dgpg.skip -Dmaven.javadoc.skip=true -B -V
+      - name: deploy
+        run: .github/workflows/deploy.sh

.github/workflows/deploy.sh

@@ -0,0 +1,26 @@
+#!/usr/bin/env bash
+set -e
+
+# update current version number to a TAG version if this is a tag build
+if [ "$GITHUB_REF_TYPE" = "tag" ]
+then
+    echo "on a tag -> set pom.xml <version> to $GITHUB_REF_NAME for release"
+    mvn --settings .github/workflows/mvnsettings.xml org.codehaus.mojo:versions-maven-plugin:2.3:set -DnewVersion=$GITHUB_REF_NAME
+else
+    echo "not on a tag -> keep snapshot version in pom.xml"
+fi
+
+# cleanup and generate gpg keys
+if [ -d "$HOME/.gnupg" ]; then
+    shred -v ~/.gnupg/*
+    rm -rf ~/.gnupg
+fi
+
+source .github/workflows/gpg.sh
+
+# DEPLOY \o/
+mvn clean deploy --settings .github/workflows/mvnsettings.xml -DskipTests=true --batch-mode --update-snapshots
+
+# cleanup gpg keys, just to be safe
+find ~/.gnupg/ -type f -exec shred -v {} \;
+rm -rf ~/.gnupg

.travis/gpg.sh .github/workflows/gpg.sh.travis/gpg.sh renamed to .github/workflows/gpg.sh

@@ -29,15 +29,15 @@ gpg --batch --gen-key gen-key-script
 # uid                  Lars K.W. Gohlke <[email protected]>
 # ssb   4096R/CC1613B2 2016-09-08
 # ssb   4096R/55B7CAA2 2016-09-08
-gpg -K
-export GPG_KEYNAME=$(gpg -K | grep ^sec | cut -d/  -f2 | cut -d\  -f1 | head -n1)
+gpg -K --keyid-format=short
+export GPG_KEYNAME=$(gpg -K --keyid-format=short | grep ^sec | cut -d/  -f2 | cut -d\  -f1 | head -n1)
 
 # cleanup local configuration
 shred gen-key-script
 
 # publish the gpg key
-# (use keyserver.ubuntu.com as travis request keys from this server,
-#  we avoid synchronization issues, while releasing)
+# (use a single public key server e.g.keyserver.ubuntu.com
+# to avoid synchronization issues, while releasing)
 echo "Uploading key ${GPG_KEYNAME} to keyserver.ubuntu.com"
 gpg --keyserver keyserver.ubuntu.com --send-keys ${GPG_KEYNAME}
 

.travis/mvnsettings.xml .github/workflows/mvnsettings.xml.travis/mvnsettings.xml renamed to .github/workflows/mvnsettings.xml

@@ -413,6 +413,14 @@
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-gpg-plugin</artifactId>
                 <version>${maven-gpg-plugin.version}</version>
+                <configuration>
+                    <!-- refer to https://github.com/actions/setup-java/blob/main/docs/advanced-usage.md#extra-setup-for-pomxml,
+                    required for Github Action runner to prevent gpg from using pinentry programs -->
+                    <gpgArguments>
+                        <arg>--pinentry-mode</arg>
+                        <arg>loopback</arg>
+                    </gpgArguments>
+                </configuration>
                 <executions>
                     <execution>
                         <id>sign-artifacts</id>