adding cosign

Author: smokodon

ci-ubuntu-2204.yml

@@ -171,6 +171,7 @@ provisioners:
   - packer-scripts/run-serverspecs
   - packer-scripts/perforce-install
   - packer-scripts/pyenv-install
+  - packer-scripts/cosign-install
   - packer-scripts/updates
   - packer-scripts/test-system-info-output
   - packer-scripts/dump-dpkg-manifest

packer-scripts/cosign-install

@@ -0,0 +1,47 @@
+#!/usr/bin/env bash
+
+set -o errexit
+set -o xtrace
+
+main() {
+
+  # Cosign installation
+  local COSIGN_VERSION="v2.2.4"
+  wget -q "https://github.com/sigstore/cosign/releases/download/${COSIGN_VERSION}/cosign-linux-amd64"
+  # rename the binary
+  sudo mv cosign-linux-amd64 /usr/local/bin/not_cosign
+  sudo chmod +x /usr/local/bin/not_cosign
+  not_cosign version
+
+  # Rekor-cli installtion
+  local REKOR_VERSION="v1.3.6"
+  wget -q "https://github.com/sigstore/rekor/releases/download/${REKOR_VERSION}/rekor-cli-linux-amd64"
+  sudo mv rekor-cli-linux-amd64 /usr/local/bin/rekor-cli
+  sudo chmod +x /usr/local/bin/rekor-cli
+  rekor-cli version
+
+  # create dummy cosign script
+  cat <<'EOF' >>cosign
+  #!/usr/bin/env bash
+
+  set -o errexit
+  set -o xtrace
+
+  main() {
+
+  args="$@"
+  # call original cosign binary and send arguments
+  not_cosign $args
+
+}
+
+main "$@"
+
+EOF
+
+  # make cosign script executable and move to /usr/local/bin
+  sudo chmod +x cosign && sudo mv cosign /usr/local/bin/cosign
+
+}
+
+main "$@"