chore(travis): re-encrypt secure keys for leanprover/lean

Travis-ci[1] supports encryption key feature[2]. The caveat is that
plain-texts are encrypted and decrypted using repository's public and
private keys. That is, if we migrate our blessed repo to another one, we
need to re-encrypt and update our secure keys in .travis.yml file:

 - GH_TOKEN : to push to OSX/Windows repositories
              (Github token for account "soonhokong")

 - DROPBOX_KEY : to push compiled binaries to DROPBOX
                 (DROPBOX_KEY=access token)

 - REPO : encrypt "BLESSED". If travis-ci is running on another
          repository, REPO variable is not decrypted to "BLESSED" because it
          will use a different private key. Many actions (i.e. upload to
          Dropbox, trigger OSX/Windows Builds) are protected by this
          condition.

 - COVERALLS_REPO_TOKEN: to push to https://coveralls.io
                         (https://coveralls.io/r/leanprover/lean)

[1]: http://travis-ci.com
[2]: http://docs.travis-ci.com/user/encryption-keys/
This commit is contained in:
Soonho Kong 2014-05-02 00:10:17 -04:00
parent a5229e5283
commit 219e9d6c0c
3 changed files with 22 additions and 22 deletions

View file

@ -1,6 +1,7 @@
language: objective-c language: objective-c
env: env:
global: global:
# DROPBOX_KEY=[secure]
- secure: "W8vou0KRJOOboZXP9q+D/9Wl6LlBeVS2T85MHWPz7EwCMQbJq5xWnGzYLE6FmC0iILcZkXyP63vqoYMFo5MJaEQeALGx2RuIiW7XgrD+7Bn4Vfsp6BLT7K9/AJETGGTQnLs8oZJJCXHGtzbc8EPFIZd/ZPPrve4jhEE5ZNhXnRc=" - secure: "W8vou0KRJOOboZXP9q+D/9Wl6LlBeVS2T85MHWPz7EwCMQbJq5xWnGzYLE6FmC0iILcZkXyP63vqoYMFo5MJaEQeALGx2RuIiW7XgrD+7Bn4Vfsp6BLT7K9/AJETGGTQnLs8oZJJCXHGtzbc8EPFIZd/ZPPrve4jhEE5ZNhXnRc="
matrix: matrix:
- CMAKE_CXX_COMPILER=g++ CMAKE_BUILD_TYPE=DEBUG TCMALLOC=OFF PUSH_TO_CDASH=TRUE LUA=51 - CMAKE_CXX_COMPILER=g++ CMAKE_BUILD_TYPE=DEBUG TCMALLOC=OFF PUSH_TO_CDASH=TRUE LUA=51

View file

@ -2,7 +2,7 @@ language: cpp
env: env:
global: global:
# DROPBOX_KEY # DROPBOX_KEY=[secure]
- secure: "fQ9mzDBBvId1qpEK/DhwlwRYBGrP0XG/XKUvTRTmX3kv7YIrKFZs/TGEDyvwnfaq6IY6rpHdqsnd/ic22DVsEGIGQO0BWUybZP0nmBHmL9aOqjjdUlgVs5vKhWmij8NkCp5LA3GU0fPm0tOonNmejxsxfNUdxk66hOlLLgPhzVo=" - secure: "fQ9mzDBBvId1qpEK/DhwlwRYBGrP0XG/XKUvTRTmX3kv7YIrKFZs/TGEDyvwnfaq6IY6rpHdqsnd/ic22DVsEGIGQO0BWUybZP0nmBHmL9aOqjjdUlgVs5vKhWmij8NkCp5LA3GU0fPm0tOonNmejxsxfNUdxk66hOlLLgPhzVo="
matrix: matrix:
- CMAKE_CXX_COMPILER=g++ CMAKE_BUILD_TYPE=RELEASE UPLOAD=windows DROPBOX=TRUE PUSH_TO_CDASH=TRUE PACKAGE=TRUE - CMAKE_CXX_COMPILER=g++ CMAKE_BUILD_TYPE=RELEASE UPLOAD=windows DROPBOX=TRUE PUSH_TO_CDASH=TRUE PACKAGE=TRUE

View file

@ -1,16 +1,15 @@
language: cpp language: cpp
cache: apt
env: env:
global: global:
# GH_TOKEN # GH_TOKEN=[secure] (to push to osx/windows repo under soonhokong)
- secure: "Zdab8c1wnKcwYWEVBvtaClCzw7sYmFPZ47urG4jSeO5FL+M4MiR6c7STeoW7wge9k3uUyMTAodD/bJ0RhskBp0wbvg0UoYQaFRm+RwsDiM7CNj+fYM8wnV0cvTJj869NsqQ92zde6L5gFEHNDrVUwC6PJpIC4JxRRfzIA4/qH5A=" - secure: "bDcZ1BusPgeFcilXBXqJ+aLWmCD6ET6SY6GaIDz66zFFVvHULkr8PcGQgKHw/VxH4Kbll52hkKwYgKhXyBF+VlHiyAxQHzlr17honzIl42vbz+tC5qr4/oDASolqayUtz9xJqNOFbTwvh5EHZLbG5hjudSdGE8LX3QC6IN7wYy8="
# DROPBOX_KEY # DROPBOX_KEY=[secure] (to send binaries to dropbox, "access_token")
- secure: "b9qdjrlr2khvQclMg12Fjg0DF3Chv46SdNRymK7cPukAhIaqaPn8g0FL4K9xW/asXRXdWcd3dYBoarjkqX43mNV9nl5Hl2VwV7T6KeGAxQSRqdYioMugIY0P8xrj4i5dwuvt8aqSlCctSozE1e/th8EWjjy6TWi890MJB//NGRE=" - secure: "CyASf1F7hGwB85jUQOfDoNBQSouSayP4BVvjqAJdRxirui/oyw2sJ02HC6ZTM+LO+ZyWy3eJOGwe81z6PEQFzovv9C8VLRbhV8Tk7aN+nQTCyyKLoxsON/T5PO/C74ZSu5hTNMwnHrbdphc88Y4ZrQqL2M3cTWT5nVFCshEq6IM="
# LEANREPO # REPO=BLESSED (to perform extra stuff only for pushes to the blessed repo)
- secure: "KsbUsMxTFDbUaObKOTxfWSu0gGzbUWlJr52nI1ITMqLxswettUR9bYAa1HTA+7hXXCT1W5I+RjxeWi74C+w/eTJGPGePX0irtzjNF/XVhP1ADoJJVQCF64yv02GNBeeUzGSDiW4bmO8ZLxTzvFr2ZskJDe/bIytQd3pJAlU6M0w=" - secure: "iZEcYPaxqGRQs7loHwO88DlewbRngBwoNGfo438jabh0adF3y9zCPw0tcAtp6IJuCw8E6QVoM9JMwoQRvPbnqBelFjpXH+U3eYdaeeZRkBkyOthTWzzdwEexlnK7dXVEc+gTDjh2NBD9juXKDSJ5xOF1HfhEJaMXSLairnhpL6k="
# COVERALLS.IO TOKEN # COVERALLS_REPO_TOKEN=[secure] (from https://coveralls.io/r/leanprover/lean)
- secure: "UaRz6E3zZeOG/2UzrGrsofYPkQG3qWzooYV6cRm5G+pMYReee8MdosnP6GtmPFhoFlkHeLQl21BpoJu3yFtrQoD2qpdrnb2uOJMYlSHLJtcZ5+pOl3DuX1qu06xXtz4PrZUSTx4WyaYynBP5kpky2Ghzmm1B5LKLUBcpCyP7uaw=" - secure: "j14U5pV2qkArCTt4MdI+rYe9MzcIcoMYrPX3Kp4bFNAyxfTALHG25bZUaEyqBJKPevch02+i8hs3I/+b9Iue0j8be8hjy7GSKDEkhbd8HIWJMvMBM1Y+h88ZPTvTiEB9OCbHa6PrETN+3WO8cSe3PufWO7cwoOqzWuY440ZZqSM="
matrix: matrix:
# ======================================================= # =======================================================
# TESTCOV Build # TESTCOV Build
@ -172,10 +171,10 @@ install:
- until sudo apt-get -qq install libstdc++-4.8-dev; do echo retry; done - until sudo apt-get -qq install libstdc++-4.8-dev; do echo retry; done
- if [[ $CMAKE_CXX_COMPILER == g++-4.8 ]]; then until sudo apt-get -qq install g++-4.8; do echo retry; done fi - if [[ $CMAKE_CXX_COMPILER == g++-4.8 ]]; then until sudo apt-get -qq install g++-4.8; do echo retry; done fi
- if [[ $CMAKE_CXX_COMPILER == clang++-3.3 ]]; then until sudo apt-get -qq install clang-3.3; do echo retry; done fi - if [[ $CMAKE_CXX_COMPILER == clang++-3.3 ]]; then until sudo apt-get -qq install clang-3.3; do echo retry; done fi
- if [[ $LEANREPO == BLESSED && $MEMCHECK == TRUE ]]; then - if [[ $REPO == BLESSED && $MEMCHECK == TRUE ]]; then
sudo apt-get -qq install valgrind; sudo apt-get -qq install valgrind;
fi fi
- if [[ $LEANREPO == BLESSED && ($UPLOAD || $BUILD_DOXYGEN == TRUE) ]]; then - if [[ $REPO == BLESSED && ($UPLOAD || $BUILD_DOXYGEN == TRUE) ]]; then
sudo apt-get -qq install python python-pip; sudo apt-get -qq install python python-pip;
sudo pip install dropbox; sudo pip install dropbox;
fi fi
@ -189,7 +188,7 @@ install:
fi fi
before_script: before_script:
- if [[ $LEANREPO == BLESSED && $TRIGGER_OSX == TRUE ]]; then - if [[ $REPO == BLESSED && $TRIGGER_OSX == TRUE ]]; then
MSG=`git log --pretty=oneline --abbrev-commit -n 1 | cut -d ' ' -f 2-`; MSG=`git log --pretty=oneline --abbrev-commit -n 1 | cut -d ' ' -f 2-`;
cp .travis.yml /tmp/.travis.temp.yml; cp .travis.yml /tmp/.travis.temp.yml;
cp .travis.osx.yml .travis.yml; cp .travis.osx.yml .travis.yml;
@ -201,7 +200,7 @@ before_script:
mv /tmp/.travis.temp.yml .travis.yml; mv /tmp/.travis.temp.yml .travis.yml;
git reset --hard HEAD~; git reset --hard HEAD~;
fi fi
- if [[ $LEANREPO == BLESSED && $TRIGGER_WINDOWS == TRUE ]]; then - if [[ $REPO == BLESSED && $TRIGGER_WINDOWS == TRUE ]]; then
MSG=`git log --pretty=oneline --abbrev-commit -n 1 | cut -d ' ' -f 2-`; MSG=`git log --pretty=oneline --abbrev-commit -n 1 | cut -d ' ' -f 2-`;
cp .travis.yml /tmp/.travis.temp.yml; cp .travis.yml /tmp/.travis.temp.yml;
cp .travis.windows.yml .travis.yml; cp .travis.windows.yml .travis.yml;
@ -255,20 +254,20 @@ script:
after_script: after_script:
- cd build - cd build
- if [[ $LEANREPO == BLESSED && $TESTCOV == ON ]]; then - if [[ $REPO == BLESSED && $TESTCOV == ON ]]; then
ctest -D ExperimentalCoverage; ctest -D ExperimentalCoverage;
ninja cov; ninja cov;
npm install coveralls --save; npm install coveralls --save;
cat coverage.info.cleaned | ./node_modules/coveralls/bin/coveralls.js; cat coverage.info.cleaned | ./node_modules/coveralls/bin/coveralls.js;
fi fi
- if [[ $LEANREPO == BLESSED && $MEMCHECK == TRUE ]]; then - if [[ $REPO == BLESSED && $MEMCHECK == TRUE ]]; then
MEMCHECK_SUPP=`readlink -f ../src/memcheck.supp`; MEMCHECK_SUPP=`readlink -f ../src/memcheck.supp`;
CONFIG_FILE=DartConfiguration.tcl; CONFIG_FILE=DartConfiguration.tcl;
sed -i "s,^MemoryCheckSuppressionFile:\W*$,MemoryCheckSuppressionFile:$MEMCHECK_SUPP," $CONFIG_FILE; sed -i "s,^MemoryCheckSuppressionFile:\W*$,MemoryCheckSuppressionFile:$MEMCHECK_SUPP," $CONFIG_FILE;
ulimit -s unlimited; ulimit -s unlimited;
yes "C" | ctest -D ExperimentalMemCheck -VV -I $MEMCHECK_RANGE | ../script/demangle_cpptype.py; yes "C" | ctest -D ExperimentalMemCheck -VV -I $MEMCHECK_RANGE | ../script/demangle_cpptype.py;
fi fi
- if [[ $LEANREPO == BLESSED && $PUSH_TO_CDASH == TRUE ]]; then - if [[ $REPO == BLESSED && $PUSH_TO_CDASH == TRUE ]]; then
GIT_COMMIT=`git log --oneline -n 1 | cut -d ' ' -f 1`; GIT_COMMIT=`git log --oneline -n 1 | cut -d ' ' -f 1`;
GIT_SUBJECT=`git log --oneline -n 1 | cut -d ' ' -f 2-`; GIT_SUBJECT=`git log --oneline -n 1 | cut -d ' ' -f 2-`;
GIT_SUBJECT=${GIT_SUBJECT//\"/\\\"}; GIT_SUBJECT=${GIT_SUBJECT//\"/\\\"};
@ -278,11 +277,11 @@ after_script:
find Testing \( -name "LastTest_*.log" -o -name "LastDynamicAnalysis_*.log" \) -exec sh -c 'TMP=`mktemp /tmp/ctesttmp_XXXX`; ../script/demangle_cpptype.py {} > $TMP; mv -v $TMP {}' ";"; find Testing \( -name "LastTest_*.log" -o -name "LastDynamicAnalysis_*.log" \) -exec sh -c 'TMP=`mktemp /tmp/ctesttmp_XXXX`; ../script/demangle_cpptype.py {} > $TMP; mv -v $TMP {}' ";";
ctest -D ExperimentalSubmit; ctest -D ExperimentalSubmit;
fi fi
- if [[ $LEANREPO == BLESSED && $PACKAGE == TRUE ]]; then - if [[ $REPO == BLESSED && $PACKAGE == TRUE ]]; then
make package; make package;
fi fi
- cd .. - cd ..
- if [[ $LEANREPO == BLESSED && $BUILD_DOXYGEN == TRUE ]]; then - if [[ $REPO == BLESSED && $BUILD_DOXYGEN == TRUE ]]; then
sudo apt-get -qq install graphviz doxygen parallel; sudo apt-get -qq install graphviz doxygen parallel;
script/doxygen.sh > /dev/null; script/doxygen.sh > /dev/null;
DOXYGEN_DIR=doc/html; DOXYGEN_DIR=doc/html;
@ -290,7 +289,7 @@ after_script:
find $DOXYGEN_DIR -type f | split -l 100 - doxygen_files.txt.; find $DOXYGEN_DIR -type f | split -l 100 - doxygen_files.txt.;
ls -1 doxygen_files.txt.* | parallel -u -j 10 ./script/dropbox_upload.py --destpath /Public --dropbox-token ${DROPBOX_KEY} --copylist {}; ls -1 doxygen_files.txt.* | parallel -u -j 10 ./script/dropbox_upload.py --destpath /Public --dropbox-token ${DROPBOX_KEY} --copylist {};
fi fi
- if [[ $LEANREPO == BLESSED && $UPLOAD ]]; then - if [[ $REPO == BLESSED && $UPLOAD ]]; then
UPLOAD_DIR=bin; UPLOAD_DIR=bin;
BINARY=lean_${UPLOAD}; BINARY=lean_${UPLOAD};
NOW=`TZ='America/Los_Angeles' date +"%Y%m%d_%H%M"`; NOW=`TZ='America/Los_Angeles' date +"%Y%m%d_%H%M"`;
@ -302,7 +301,7 @@ after_script:
ARCHIVE_BINARY=${ARCHIVE_BINARY}_tcmalloc; ARCHIVE_BINARY=${ARCHIVE_BINARY}_tcmalloc;
fi; fi;
mkdir ${UPLOAD_DIR}; mkdir ${UPLOAD_DIR};
if [[ $LEANREPO == BLESSED && $PACKAGE == TRUE ]]; then if [[ $REPO == BLESSED && $PACKAGE == TRUE ]]; then
cp -v build/lean*.tar.gz ${UPLOAD_DIR}/; cp -v build/lean*.tar.gz ${UPLOAD_DIR}/;
fi; fi;
cp -v build/shell/lean ${UPLOAD_DIR}/${BINARY}; cp -v build/shell/lean ${UPLOAD_DIR}/${BINARY};