From 0f0ac05107994220a3ec3d569b25f03e87fd0bec Mon Sep 17 00:00:00 2001
From: Knut Ahlers <knut@ahlers.me>
Date: Sat, 17 Nov 2018 20:14:14 +0100
Subject: [PATCH] Add optional package signing

Signed-off-by: Knut Ahlers <knut@ahlers.me>
---
 Dockerfile | 2 +-
 run.sh     | 8 +++++++-
 2 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index a6ec0cd..3b553b0 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -14,7 +14,7 @@ RUN set -ex \
       /usr/local/bin/dumb-init \
       /usr/local/bin/gosu
 
-VOLUME ["/src", "/repo"]
+VOLUME ["/src", "/repo", "/config"]
 WORKDIR /src
 
 COPY run.sh /usr/local/bin/
diff --git a/run.sh b/run.sh
index b7e1eab..6400d5d 100755
--- a/run.sh
+++ b/run.sh
@@ -2,6 +2,7 @@
 set -euxo pipefail
 
 SRC=${1:-}
+MAKEPKG_OPTS=(-cCs --noconfirm --needed)
 
 # Override WORKDIR
 cd /src
@@ -19,11 +20,16 @@ if [ ! -e PKGBUILD ]; then
 	cd /src/git
 fi
 
+[ -e /config/signing.asc ] && {
+	gosu builder gpg --import </config/signing.asc
+	MAKEPKG_OPTS+=(--sign)
+}
+
 # Update pacman index
 pacman -Sy
 
 # Execute the build itself
-gosu builder makepkg -cCs --noconfirm --needed
+gosu builder makepkg ${MAKEPKG_OPTS[@]}
 
 PACKAGE=$(ls *.pkg.*) # This should be only one file