Commit `4f5e4ba710`

4f5e4ba710f30a87cbaa359c45e87c847f208c33

parent: a7777ef2ad

Verified · cmc ci/build: failure ci/test: failure

cmc <hello@cleberg.net> · 2026-09-17 15:47 UTC

CI: fetch signing keys to a file and extract the toolchain atomically

Layout: unified · split

.gitbay/ci.yml +20 −12

		@@ -12,12 +12,16 @@ jobs:
12	12	SWIFT="$HOME/swift-6.4.0-RELEASE-debian13"
13	13	if [ ! -x "$SWIFT/usr/bin/swift" ]; then
14	14	base="https://download.swift.org/swift-6.4.0-release/debian13/swift-6.4.0-RELEASE/swift-6.4.0-RELEASE-debian13.tar.gz"
15		curl -fsSL "$base" -o /tmp/swift.tar.gz "$base.sig" -o /tmp/swift.tar.gz.sig
16		export GNUPGHOME="$(mktemp -d)"
17		curl -fsSL https://swift.org/keys/all-keys.asc \| gpg --batch --quiet --import
18		gpg --batch --verify /tmp/swift.tar.gz.sig /tmp/swift.tar.gz
19		tar -xzf /tmp/swift.tar.gz -C "$HOME"
20		rm -rf /tmp/swift.tar.gz /tmp/swift.tar.gz.sig "$GNUPGHOME"
	15	work="$(mktemp -d)"
	16	curl -fsSL "$base" -o "$work/swift.tar.gz" "$base.sig" -o "$work/swift.tar.gz.sig"
	17	curl -fsSL https://www.swift.org/keys/all-keys.asc -o "$work/keys.asc"
	18	ls -l "$work"
	19	export GNUPGHOME="$work/gnupg"; mkdir -m 700 "$GNUPGHOME"
	20	gpg --batch --quiet --import "$work/keys.asc"
	21	gpg --batch --verify "$work/swift.tar.gz.sig" "$work/swift.tar.gz"
	22	tar -xzf "$work/swift.tar.gz" -C "$work"
	23	mv "$work/swift-6.4.0-RELEASE-debian13" "$SWIFT" \|\| true
	24	rm -rf "$work"
21	25	fi
22	26	export PATH="$SWIFT/usr/bin:$PATH"
23	27	swift --version
		@@ -33,12 +37,16 @@ jobs:
33	37	SWIFT="$HOME/swift-6.4.0-RELEASE-debian13"
34	38	if [ ! -x "$SWIFT/usr/bin/swift" ]; then
35	39	base="https://download.swift.org/swift-6.4.0-release/debian13/swift-6.4.0-RELEASE/swift-6.4.0-RELEASE-debian13.tar.gz"
36		curl -fsSL "$base" -o /tmp/swift.tar.gz "$base.sig" -o /tmp/swift.tar.gz.sig
37		export GNUPGHOME="$(mktemp -d)"
38		curl -fsSL https://swift.org/keys/all-keys.asc \| gpg --batch --quiet --import
39		gpg --batch --verify /tmp/swift.tar.gz.sig /tmp/swift.tar.gz
40		tar -xzf /tmp/swift.tar.gz -C "$HOME"
41		rm -rf /tmp/swift.tar.gz /tmp/swift.tar.gz.sig "$GNUPGHOME"
	40	work="$(mktemp -d)"
	41	curl -fsSL "$base" -o "$work/swift.tar.gz" "$base.sig" -o "$work/swift.tar.gz.sig"
	42	curl -fsSL https://www.swift.org/keys/all-keys.asc -o "$work/keys.asc"
	43	ls -l "$work"
	44	export GNUPGHOME="$work/gnupg"; mkdir -m 700 "$GNUPGHOME"
	45	gpg --batch --quiet --import "$work/keys.asc"
	46	gpg --batch --verify "$work/swift.tar.gz.sig" "$work/swift.tar.gz"
	47	tar -xzf "$work/swift.tar.gz" -C "$work"
	48	mv "$work/swift-6.4.0-RELEASE-debian13" "$SWIFT" \|\| true
	49	rm -rf "$work"
42	50	fi
43	51	export PATH="$SWIFT/usr/bin:$PATH"
44	52	swift test

Commit 4f5e4ba710

Commit `4f5e4ba710`