kind: pipeline
name: check

volumes:
- name: debian-package-cache
  host:
    path: /var/cache/debian-package-cache

trigger:
  event:
    exclude:
    - tag

steps:
- name: shellcheck
  image: debian:stretch-slim
  pull: always
  commands:
  - rm /etc/apt/apt.conf.d/docker-clean
  - rm /var/cache/apt/archives/lock
  - echo "APT::Default-Release \"stretch\";" >> /etc/apt/apt.conf.d/00default_release
  - echo "deb http://deb.debian.org/debian buster main" >> /etc/apt/sources.list.d/buster.list
  - apt-get update -q
  - apt-get install -qy -t buster shellcheck
  - shellcheck hashboot
  volumes:
  - name: debian-package-cache
    path: /var/cache/apt/archives

- name: notify
  image: drillster/drone-email
  pull: always
  settings:
    host: cryptoparty-celle.de
    from: drone@tzend.de
    username:
      from_secret: email_username
    password:
      from_secret: email_password
  when:
    status: [ changed, failure ]

---

kind: pipeline
name: release

volumes:
- name: debian-package-cache
  host:
    path: /var/cache/debian-package-cache
- name: gpg-key
  host:
    path: /home/tastytea/misc/autosign_gpg.key

trigger:
  event:
    - tag

steps:
- name: download tar.gz
  image: plugins/download
  settings:
    source: https://schlomp.space/tastytea/hashboot/archive/${DRONE_TAG}.tar.gz
    destination: hashboot-${DRONE_TAG}.tar.gz

- name: download zip
  image: plugins/download
  settings:
    source: https://schlomp.space/tastytea/hashboot/archive/${DRONE_TAG}.zip
    destination: hashboot-${DRONE_TAG}.zip

- name: signature
  image: debian:stretch-slim
  pull: always
  commands:
  - rm /etc/apt/apt.conf.d/docker-clean
  - rm -f /var/cache/apt/archives/lock
  - apt-get update -q
  - apt-get install -qy gnupg
  - gpg --import /var/autosign_gpg.key
  - gpg --verbose --detach-sign *.tar.gz
  - gpg --verbose --detach-sign *.zip
  volumes:
  - name: debian-package-cache
    path: /var/cache/apt/archives
  - name: gpg-key
    path: /var/autosign_gpg.key

- name: release
  image: plugins/gitea-release
  pull: always
  settings:
    base_url: https://schlomp.space
    api_key:
      from_secret: gitea_token
    title: ${DRONE_TAG}
    prerelease: true
    files:
      - hashboot-${DRONE_TAG}.tar.gz
      - hashboot-${DRONE_TAG}.tar.gz.sig
      - hashboot-${DRONE_TAG}.zip
      - hashboot-${DRONE_TAG}.zip.sig
    checksum:
      - sha256
      - sha512

- name: notify
  image: drillster/drone-email
  pull: always
  settings:
    host: cryptoparty-celle.de
    from: drone@tzend.de
    username:
      from_secret: email_username
    password:
      from_secret: email_password
  when:
    status: [ changed, failure ]