Clark Boylan d6b19ef205 Run pypi uploads more securely.
To run pypi uploads more securely perform the `python setup.py sdist` on
a normal build slave, then copy the sdist to the pypi slave and perform
only the upload from that host.

Change-Id: Ie68d484ef6d129749186c792d0ced812ac25818b
Reviewed-on: https://review.openstack.org/16335
Reviewed-by: Monty Taylor <mordred@inaugust.com>
Reviewed-by: James E. Blair <corvus@inaugust.com>
Approved: Clark Boylan <clark.boylan@gmail.com>
Tested-by: Jenkins
2012-11-19 18:45:20 +00:00

21 lines
578 B
Bash
Executable File

#!/bin/bash
PROJECT=$1
FILENAME=`ls ${PROJECT}*.tar.gz`
# Strip project name and extension leaving only the version.
VERSION=`echo ${FILENAME} | sed -n "s/${PROJECT}-\(.*\).tar.gz/\1/p"`
MD5_DIGEST=`md5sum ${FILENAME} | cut -d' ' -f1`
curl --config /home/jenkins/.pypicurl \
-F "content=@${FILENAME};filename=${FILENAME}" \
-F ":action=file_upload" \
-F "protocol_version=1" \
-F "name=${PROJECT}" \
-F "version=${VERSION}" \
-F "file_type=sdist" \
-F "md5_digest=${MD5_DIGEST}" \
http://pypi.python.org/pypi > /dev/null 2>&1
exit $?