如何强制TeamCity仅对GitLab中的签名提交工作

Question

目前，我们正在使用GitLab Enterprise Edition 9.5.1和TeamCity Professional 2017.1.2（build 46812）。构建代理具有类似

git pull --verify-signature

我们组一行想拥有的TeamCity，而无需显式pull命令验证GPG签名。

你如何配置TeamCity来做到这一点？

Answer 1

社区缺乏意见，这里是第一个工作kludge。

首先生成步骤

在第一TeamCity的构建步骤的第一行是：

git verify-commit HEAD~0 

export VERIFY_EXIT_CODE=$? 

if [ "$VERIFY_EXIT_CODE" -eq "0" ] 
then 
    echo "Git commit GPG signature is VERIFIED" 
else 
    echo "Git commit GPG signature is NOT VERIFIED" 
    build stop 
fi 

GPG签名验证

当提交具有验证GPG签名，输出类似于此：

[12:17:54] Step 1/3: Verify GPG signature on commit (Command Line) 
[12:17:54][Step 1/3] Starting: /home/*******/Applications/TeamCity/buildAgent_***_1/temp/agentTmp/custom_script5468853061762530637 
[12:17:54][Step 1/3] in directory: /home/*******/Applications/TeamCity/buildAgent_***_1/work/c8edabae02b7df61 
[12:17:54][Step 1/3] 
[12:17:54][Step 1/3] git verify-commit HEAD~0 
[12:17:54][Step 1/3] gpg: Signature made Tue 05 Sep 2017 12:15:59 PM MDT using RSA key ID 71F1FCB8 
[12:17:54][Step 1/3] gpg: Good signature from "My Name (*** gpg key) <******@*****.***>" 
[12:17:54][Step 1/3] 
[12:17:54][Step 1/3] export VERIFY_EXIT_CODE=$?=0 
[12:17:54][Step 1/3] Git commit GPG signature is VERIFIED 
[12:17:54][Step 1/3] Process exited with code 0 

GPG签名未验证

当提交没有验证GPG签名，或TeamCity的找不到公钥，输出看起来是这样的：

[12:10:37] Step 1/3: Verify gpg signature on git repository (Command Line) 
[12:10:37][Step 1/3] Starting: /home/*******/Applications/TeamCity/buildAgent_***_1/temp/agentTmp/custom_script4984466249864504039 
[12:10:37][Step 1/3] in directory: /home/*******/Applications/TeamCity/buildAgent_***_1/work/c8edabae02b7df61 

[12:10:37][Step 1/3] git verify-commit HEAD~0 
[12:10:37][Step 1/3] Git repository is NOT VERIFIED 
[12:10:37][Step 1/3] 
[12:10:37][Step 1/3] export VERIFY_EXIT_CODE=$?=1 
[12:10:37][Step 1/3] Git repository is NOT VERIFIED 
[12:10:37][Step 1/3] 
[12:10:37][Step 1/3] build stop 
[12:10:37][Step 1/3] /home/*******/Applications/TeamCity/buildAgent_***_1/temp/agentTmp/custom_script4984466249864504039: line 19: build: command not found 
[12:10:37][Step 1/3] Process exited with code 127 
[12:10:37][Step 1/3] Process exited with code 127 
[12:10:37][Step 1/3] Step Verify gpg signature on git repository (Command Line) failed 
[12:10:37][Step 1/3] Error message is logged