CI configuration and Debian packaging

.gitlab-ci.yml

+
+stages:
+  - build_src
+  - build_pkg
+  - upload
+
+build:src:
+  stage: build_src
+  image: "ai/build:stretch"
+  script: "build-dsc"
+  artifacts:
+    paths:
+      - build-deb/
+  only:
+    - master
+
+build:pkg:
+  stage: build_pkg
+  image: "ai/build:stretch"
+  script: "build-deb"
+  dependencies:
+    - build:src
+  artifacts:
+    paths:
+      - output-deb/
+  only:
+    - master
+
+upload:pkg:
+  stage: upload
+  image: "ai/pkg:base"
+  script: "upload-packages -r ai3"
+  dependencies:
+    - build:pkg
+  only:
+    - master
+

debian/changelog

+keystore (0.1) unstable; urgency=medium
+
+  * Initial Release.
+
+ -- Autistici/Inventati <debian@autistici.org>  Mon, 11 Dec 2017 09:41:38 +0000

debian/compat

+10

debian/control

+Source: keystore
+Section: admin
+Priority: optional
+Maintainer: Autistici/Inventati <debian@autistici.org>
+Build-Depends: debhelper (>=9), golang-go, dh-systemd, dh-golang
+Standards-Version: 3.9.6
+
+Package: keystored
+Architecture: any
+Depends: ${shlibs:Depends}, ${misc:Depends}
+Description: User private key server.
+ Stores user encryption keys in-memory for the session duration.
+

debian/copyright

+Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
+Upstream-Name: keystore
+Source: <https://git.autistici.org/id/keystore>
+
+Files: *
+Copyright: 2017 Autistici/Inventati <info@autistici.org>
+License: GPL-3.0+
+
+License: GPL-3.0+
+ This program is free software: you can redistribute it and/or modify
+ it under the terms of the GNU General Public License as published by
+ the Free Software Foundation, either version 3 of the License, or
+ (at your option) any later version.
+ .
+ This package is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ GNU General Public License for more details.
+ .
+ You should have received a copy of the GNU General Public License
+ along with this program. If not, see <https://www.gnu.org/licenses/>.
+ .
+ On Debian systems, the complete text of the GNU General
+ Public License version 3 can be found in "/usr/share/common-licenses/GPL-3".
+

debian/keystored.default

+ADDR=:5006

debian/keystored.service

+[Unit]
+Description=User Private Key Store
+After=network.target
+
+[Service]
+User=keystored
+Group=keystored
+EnvironmentFile=-/etc/default/keystored
+ExecStart=/usr/bin/keystored --addr $ADDR
+Restart=always
+
+# Hardening
+NoNewPrivileges=yes
+PrivateTmp=yes
+PrivateDevices=yes
+ProtectHome=yes
+ProtectSystem=full
+ReadOnlyDirectories=/
+CapabilityBoundingSet=CAP_NET_BIND_SERVICE
+
+[Install]
+WantedBy=multi-user.target
+

debian/postinst

+#!/bin/sh
+
+set -e
+
+case "$1" in
+configure)
+    addgroup --system --quiet keystored
+    adduser --system --no-create-home --home /run/keystored \
+      --disabled-password --disabled-login \
+      --quiet --ingroup keystored keystored
+    ;;
+esac
+
+#DEBHELPER#
+
+exit 0

debian/rules

+#!/usr/bin/make -f
+
+export DH_GOPKG = git.autistici.org/id/keystore
+export DH_GOLANG_EXCLUDES = vendor
+
+
+%:
+	dh $@ --with systemd --with golang --buildsystem golang
+
+override_dh_install:
+	rm -fr $(CURDIR)/debian/keystored/usr/share/gocode
+	dh_install
+

debian/source/format

+3.0 (native)