24 lines
428 B
Plaintext
24 lines
428 B
Plaintext
|
#!/usr/bin/env sh
|
||
|
|
|
||
|
|
set -eu
|
||
|
|
|
||
|
|
. ./common.sh
|
||
|
|
|
||
|
|
trap ci_error INT TERM
|
||
|
|
|
||
|
|
ci_branch=$(date +"%Y%m%dT%H%M%S%z")
|
||
|
|
can_sign=0
|
||
|
|
|
||
|
|
for i in $(ssh-add -L | awk '{print $NF}'); do
|
||
|
|
grep -q $i .allowed_signers && can_sign=1
|
||
|
|
done
|
||
|
|
|
||
|
|
if [ $can_sign != 1 ]; then
|
||
|
|
echo "Can't find signing key."
|
||
|
|
exit 1
|
||
|
|
fi
|
||
|
|
|
||
|
|
git checkout -b "${ci_branch}" || handle_co_fail
|
||
|
|
nix flake update --commit-lock-file || handle_update_fail
|
||
|
|
nix flake check || handle_check_fail
|