Cronjob to release on new tags

The last addition to the make_release is not needed anymore as
deployment is now done via the server.

- Setup extra environment variables
- Trigger tests on gitlab
- GPG tag is checked against local keyring on the server
- Script can be used also in GitLab to do a trial run
- When there is an unknown signer for a tag (or not signed) SLACK will
be alerted. This should only run once.

In the future the docs can also be updated.

Author: vmcj

cron_tag_release.sh

@@ -0,0 +1,63 @@
+#!/bin/bash
+
+set -eu
+
+main=master
+
+RELEASE_DIR="/srv/http/domjudge/releases"
+DOWNLOAD_RELEASE_SCRIPT=""
+
+notify_channel () {
+    # Local debug
+    echo "$1"
+    # When cron is run often one should have time to
+    # fix the issue.
+    if [ ! -f /tmp/$2 ]; then
+        # Write to syslog on server
+        logger "$1"
+        DATA='{"text":"'"$1"'"}'
+        # Notify DOMjudge Slack channel (github-notifications)
+        # SLACK_URL should be exported in the .bashrc (it should be secret)
+        curl -X POST -H 'Content-type: application/json' --data "$DATA" "$SLACK_URL"
+        touch /tmp/$2
+    fi
+}
+
+process_tag () {
+    TAG="$1"
+    NUMB="[0-9]+"
+    DOT="\."
+    RELEASE="$NUMB$DOT$NUMB$DOT$NUMB"
+    OPTRC="((RC|rc)[0-9])?"
+    if [[ $TAG =~ ^$RELEASE$OPTRC$ ]]; then
+       # TODO: check if the file already exists
+       if [ -f "$RELEASE_DIR/domjudge-$TAG.tar.gz" ]; then
+           # Tag is already handled
+           return 0
+       fi
+       # To find the signer key of a earlier tag:
+       # gpg --search 780355B5EA6BFC8235A99C4B56F61A79401DAC04
+       # And if one trusts the internet to be correct
+       # gpg --recv-keys 780355B5EA6BFC8235A99C4B56F61A79401DAC04
+       set +e # Some tags are not signed
+       if git verify-tag $TAG; then
+           set -e
+           # At this point the tarball should already be locally tested
+           ~/domjudge-scripts/make_release.sh "$TAG"
+           mv domjudge-$TAG.* $RELEASE_DIR/
+           notify_channel "Tarball finished ($TAG)." "$TAG"
+       else
+           notify_channel "Untrusted tag ($TAG)" "$TAG"
+       fi
+    fi
+}
+
+# Reset to main branch
+cd ~domjudge/domjudge
+git checkout $main
+
+while read -r tag; do
+    #echo "Handling tag: $tag"
+    process_tag "$tag"
+done <<< "$(git tag)"
+

make_release.sh

@@ -3,12 +3,13 @@
 # Script to create a DOMjudge release package. Release file is
 # generated in the current directory.
 
-if [ -z "${CI+x}" ]; then
+CI_USAGE=${CI+x}
+if [ -z "$CI_USAGE" ]; then
     set -e
 else
     set -eux
     export PS4='(${0}:): - [$?] $ '
-fi
+fi 
 
 GITURL="https://github.com/DOMjudge/domjudge.git"
 
@@ -19,11 +20,11 @@ if [ -z "$1" ]; then
     exit 1
 fi
 
-if [ -n "${CI+x}" ]; then
+if [ -n "$CI_USAGE" ]; then
     set +x
 fi
 TAG="$1" ; shift
-if [ -n "${CI+x}" ]; then
+if [ -n "$CI_USAGE" ]; then
     set -x
 fi
 
@@ -53,6 +54,10 @@ CHLOG_VERSION="$(echo "$CHLOG" | sed -r 's/^Version ([0-9\.]+) .*$/\1/')"
 if [ "$VERSION" != "$CHLOG_VERSION" ]; then
     echo "WARNING: version strings in README* and ChangeLog differ:"
     echo "'$VERSION' != '$CHLOG_VERSION'"
+    if [ ! -t 1 && -z ${CI+x} ] ; then
+        # In the cronjob this would be reason to not release
+        exit 1
+    fi
 fi
 
 # Add released tag for revision information:
@@ -64,17 +69,17 @@ cd ..
 
 mv domjudge "domjudge-$VERSION"
 
-tar -cf "domjudge-$VERSION.tar" "domjudge-$VERSION"
-gzip -9 "domjudge-$VERSION.tar"
+tar -cf "domjudge-$TAG.tar" "domjudge-$VERSION"
+gzip -9 "domjudge-$TAG.tar"
 
 cd "$OWD"
 
-mv "$TEMPDIR/domjudge-$VERSION.tar.gz" .
+mv "$TEMPDIR/domjudge-$TAG.tar.gz" .
 rm -rf "$TEMPDIR"
 
-sha256sum "domjudge-$VERSION.tar.gz" > "domjudge-$VERSION.tar.gz.sha256sum"
+sha256sum "domjudge-$TAG.tar.gz" > "domjudge-$TAG.tar.gz.sha256sum"
 
-GPG_ARGS="-a --detach-sign --digest-algo SHA256 domjudge-$VERSION.tar.gz"
+GPG_ARGS="-a --detach-sign --digest-algo SHA256 domjudge-$TAG.tar.gz"
 if [ -t 1 ] ; then
     # Explicit not quoted!
     gpg $GPG_ARGS