releng: Sign 3rd party artifacts with Trace Compass's PGP key

Both Trace Compass update site and RCP update site will be signed.

Signing of RCP update site requires Tycho 4.0.10 or later.

Use tycho-gpg-plugin:
https://tycho.eclipseprojects.io/doc/4.0.11/tycho-gpg-plugin/sign-p2-artifacts-mojo.html

Signed-off-by: Bernd Hufmann <[email protected]>

Author: bhufmann

pom.xml

@@ -480,6 +480,23 @@
 
     <pluginManagement>
       <plugins>
+        <plugin>
+          <groupId>org.eclipse.tycho</groupId>
+          <artifactId>tycho-gpg-plugin</artifactId>
+          <version>${tycho-version}</version>
+          <executions>
+            <execution>
+              <id>pgpsigner</id>
+              <goals>
+                <goal>sign-p2-artifacts</goal>
+              </goals>
+              <configuration>
+                <keyname>FDA6044E56578104</keyname>
+                <skipIfJarsigned>false</skipIfJarsigned>
+              </configuration>
+            </execution>
+          </executions>
+        </plugin>
         <plugin>
           <groupId>org.eclipse.tycho</groupId>
           <artifactId>tycho-compiler-plugin</artifactId>

rcp/org.eclipse.tracecompass.rcp.product/pom.xml

@@ -124,6 +124,10 @@
                     <source>repository</source>
                 </configuration>
             </plugin>
+            <plugin>
+                <groupId>org.eclipse.tycho</groupId>
+                <artifactId>tycho-gpg-plugin</artifactId>
+            </plugin>
         </plugins>
       </build>
     </profile>

releng/org.eclipse.tracecompass.releng-site/pom.xml

@@ -68,6 +68,17 @@
       </plugins>
     </build>
   </profile>
+  <profile>
+    <id>sign-update-site</id>
+    <build>
+      <plugins>
+        <plugin>
+          <groupId>org.eclipse.tycho</groupId>
+          <artifactId>tycho-gpg-plugin</artifactId>
+        </plugin>
+      </plugins>
+    </build>
+  </profile>
 </profiles>
 
 </project>