First cut at GH auto-release uploads

Author: zbeekman

.travis.yml

@@ -69,14 +69,22 @@ matrix:
 before_install:
   - |
     set -o errexit
-    if [[ "$TRAVIS_TAG" ]] && [[ "X$TRAVIS_OS_NAME" = "Xlinux" ]] && $TRAVIS_SECURE_ENV_VARS ; then
-      openssl aes-256-cbc -K $encrypted_ef4535c39461_key -iv $encrypted_ef4535c39461_iv -in subkey-328B3A0E-secret.asc.enc -out ./subkey-328B3A0E-secret.asc -d
-      gpg --allow-secret-key-import --import ./subkey-328B3A0E-secret.asc && rm subkey-328B3A0E-secret.asc
+    if [[ "$TRAVIS_TAG" ]] && [[ "X$TRAVIS_OS_NAME" = "Xosx" ]] && $TRAVIS_SECURE_ENV_VARS ; then
+      brew update > /dev/null
+      [[ "$(brew ls --versions gpg2)" ]] || brew install gpg2
+      brew outdated gpg2 || brew upgrade gpg2
+      which openssl || brew install openssl
+    fi
+    if ! [[ "$TRAVIS_TAG" ]] || ! $TRAVIS_SECURE_ENV_VARS ; then
+      unset encrypted_ef4535c39461_key || true
+      unset encrypted_ef4535c39461_iv || true
+      rm subkey-328B3A0E-secret.asc{,.enc} || true
+
     fi
     set +o errexit
-  - unset encrypted_ef4535c39461_key || true
-  - unset encrypted_ef4535c39461_iv || true
-  - rm subkey-328B3A0E-secret.asc{,.enc} || true
+  - 
+  - 
+  - 
   - |
     set -o errexit
     if [[ $TRAVIS ]] && [[ "X$TRAVIS_OS_NAME" = "Xosx" ]]; then
@@ -179,6 +187,51 @@ after_success:
   - gcov-6 --version
   - bash <(curl -s https://codecov.io/bash) -x $(which gcov-6)
 
+before_deploy:
+  - git archive -v --prefix "OpenCoarrays-${TRAVIS_TAG}/" -o "OpenCoarrays-${TRAVIS_TAG}.tar.gz" ${TRAVIS_TAG}
+  - |
+    echo '# To verify cryptographic checksums `shasum -c opencoarrays-'"${TRAVIS_TAG}"'-SHA256.txt` on Mac OS X,' > "opencoarrays-${TRAVIS_TAG}-SHA256.txt
+    echo '# `sha256sum -c  opencoarrays-'"${TRAVIS_TAG}"'-SHA256.txt` on Linux.' >> "opencoarrays-${TRAVIS_TAG}-SHA256.txt
+    if [[ "X$(uname -s)" == "XDarwin" ]]; then
+      shasum -a 256 "OpenCoarrays-${TRAVIS_TAG}.tar.gz" >> "opencoarrays-${TRAVIS_TAG}-SHA256.txt
+    else
+      sha256sum  "OpenCoarrays-${TRAVIS_TAG}.tar.gz" >> "opencoarrays-${TRAVIS_TAG}-SHA256.txt
+    fi
+  - |
+    set -o errexit
+    openssl aes-256-cbc -K $encrypted_ef4535c39461_key -iv $encrypted_ef4535c39461_iv -in subkey-328B3A0E-secret.asc.enc -out ./subkey-328B3A0E-secret.asc -d
+    gpg --allow-secret-key-import --import ./subkey-328B3A0E-secret.asc && rm subkey-328B3A0E-secret.asc
+    rm subkey-328B3A0E-secret.* || true
+    unset encrypted_ef4535c39461_key || true
+    unset encrypted_ef4535c39461_iv || true
+    gpg --armor --detach-sign -u 328B3A0E --comment 'Mac users can use GPGTools - https://gpgtools.org' \
+      --comment "Download Izaak Beekman's GPG public key from your" \
+      --comment 'trusted key server or from' \
+      --comment 'https://izaakbeekman.com/izaak.pubkey.txt' \
+      --comment 'Next add it to your GPG keyring, e.g.,' \
+      --comment '`curl https://izaakbeekman.com/izaak.pubkey.txt | gpg --import`' \
+      --comment "Make sure you have verified that the release archive's" \
+      --comment 'SHA256 checksum matches the provided' \
+      --comment "opencoarrays-${TRAVIS_TAG}-SHA256.txt and ensure that this file" \
+      --comment "and it's signature are in the same directory. Then" \
+      --comment 'verify with:' \
+      --comment '`gpg --verify opencoarrays-'"${TRAVIS_TAG}"'-SHA256.txt.asc`' \
+      "opencoarrays-${TRAVIS_TAG}-SHA256.txt"
+    set +o errexit
+
+deploy:
+  provider: releases
+  api_key:
+    secure: lBj4VgKhU74xfzPc0CDIji6cFrN/xEQIHLHjMcnDPWEF5JQe79aunMS5qiYu5ttve6khGI1WMFEe7clUO3TXiDUPyRMS4M8B2q3fuvUIsIbYgWcKq7ut+x6+dEQDj4DE3yWpPb8IDugWFp4vno1eQ2Rid1yr6Vn+rjnbE2i6z5SkXPnIv1ziQ9G+TF4ChUA8IOd1T78gJmML86P0rbt6nW8eVuJbza2y1ggHAY//q/b6rrbOFw5PqiOBqZ/BRrKJ5d2U2mvsoZtNn4OYyXw4eKEvNDIydwaIZROXfPRmN9zJ5G7+01QA5jlXpq17KfPBr7MXkn7nrQ5q9Z2ji4hRHk/AFzM/etfl1k4WCshYs13NlORpnU0vZtCMmmmsXWxj2kpsOHLWZQKdUAPs3olMPIG6aVnO5Abk1vrVSNy/ZeknbBTKCGScET1qRSaj6d43ynBwGkqHgaJdLBAwGe0Dpap6SsLGsAg56ZqHTngGlXB1KsbJKMkUsSC5RAgEuh9m55nsMaRlTYTrv+YADAQts7lV8yMCciMeJlrd3EYryyn4ZY1O82eOofhZZ5vQUktbXHtg6YnzguFwQyn+9yY/CQfi/vu2Aoq79NJEO/9UJ82ogn6gOoIebzb0xgIONjw4M68luR2U1CXtibzSYKWLGTeOj43khqZdbOpp6xncIv0=
+  file: 
+    - "OpenCoarrays-${TRAVIS_TAG}.tar.gz"
+    - "opencoarrays-${TRAVIS_TAG}-SHA256.txt"
+    - "opencoarrays-${TRAVIS_TAG}-SHA256.txt.asc"
+  skip_cleanup: true
+  on:
+    tags: true
+#    repo: sourceryinstitute/opencoarrays
+
 notifications:
   webhooks:
     urls: