inteligr8/alfresco-ng2-components
1
0
Fork 0
mirror of https://github.com/Alfresco/alfresco-ng2-components.git synced 2026-09-09 18:03:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

chore: update postStartCommand to retain GPG signing across container restarts

Browse Source
This commit is contained in:
Denys Vuika
2026-07-07 15:03:05 +00:00
parent 9b5ed36acd
commit 4b27f9978d
3 changed files with 5 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.devcontainer/README.md
+2 -1
View File
@@ -107,7 +107,8 @@ entry in the container's local keyring (to select the key) and the forwarded age
``` ```
3. Rebuild the container. The `postStartCommand` auto-imports `.git/signing.pub` 3. Rebuild the container. The `postStartCommand` auto-imports `.git/signing.pub`
and removes it. on every container start, so signing survives restarts and rebuilds without
re-running the export script.
The helper auto-selects `gpg2`/`gpg` based on where your key is visible, which The helper auto-selects `gpg2`/`gpg` based on where your key is visible, which
avoids host setups where the two binaries use different keyrings. avoids host setups where the two binaries use different keyrings.
.devcontainer/devcontainer.json
+1 -1
View File
@@ -56,7 +56,7 @@
"postCreateCommand": "pnpm install --frozen-lockfile", "postCreateCommand": "pnpm install --frozen-lockfile",
"postStartCommand": "if [ -f .git/signing.pub ]; then gpg --import .git/signing.pub && rm .git/signing.pub; fi", "postStartCommand": "if [ -f .git/signing.pub ]; then gpg --import .git/signing.pub; fi",
"runArgs": ["--cap-drop=ALL", "--security-opt=no-new-privileges:true", "--pids-limit=512"] "runArgs": ["--cap-drop=ALL", "--security-opt=no-new-privileges:true", "--pids-limit=512"]
} }
docs/dev-containers.md
+2 -1
View File
@@ -94,7 +94,8 @@ This is the one-time host-side setup:
``` ```
3. Rebuild the container. The `postStartCommand` auto-imports `.git/signing.pub` 3. Rebuild the container. The `postStartCommand` auto-imports `.git/signing.pub`
and removes it. on every container start, so signing survives restarts and rebuilds without
re-running the export script.
Then verify inside the container: Then verify inside the container: