From ba35c11afa5800b278748c0eebec43e2c76be4a2 Mon Sep 17 00:00:00 2001
From: Daniel Frank <git@danielfrank.net>
Date: Fri, 27 Oct 2017 20:48:52 +0200
Subject: [PATCH] allow automatic signing

---
 build.sh | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git a/build.sh b/build.sh
index 81d1088..7312aea 100755
--- a/build.sh
+++ b/build.sh
@@ -7,10 +7,11 @@ function announce () {
 proc=$(nproc)
 gluon_out="${HOME}/firmware"
 
-while getopts g:bj:v opt; do
+while getopts g:j:o:s:bv opt; do
 	case "$opt" in
 		g) gluon_path="$OPTARG" ;;
 		o) gluon_out="$OPTARG" ;;
+		s) signature="$OPTARG" ;;
 		b) export BROKEN=1 ;;
 		j) proc="$OPTARG" ;;
 		v) verbose=V=s ;;
@@ -20,6 +21,7 @@ if [ -z "${gluon_path}" ]; then
 	echo "Usage: $0 -g GLUON_PATH" >&2
 	echo "       -g GLUON_PATH   Path to a checkout of the gluon repository." >&2
 	echo "       -o OUT_PATH     Path to a checkout of the gluon repository. Default: ${gluon_out}" >&2
+	echo "       -s SIGNATURE    Sign firmware with signature" >&2
 	echo "       -b              BROKEN=1" >&2
 	echo "       -v              verbose" >&2
 	echo "       -j JOBS         Run build with -jJOBS. Default: ${proc}" >&2
@@ -73,5 +75,14 @@ for s in $sites; do
 	done
 	announce Building manifest...
 	make manifest
+	if [ -n "${SIGNATURE}" ]; then
+		if [ "$GLUON_BRANCH" == "experimental" ]; then
+			announce Signing
+			"${gluon_path}/contrib/sign.sh" "${SIGNATURE}" "${GLUON_IMAGEDIR}/sysupgrade/experimental.manifest"
+		else
+			echo ERROR: can only sign experimental branch >&2
+			exit 1
+		fi
+	fi
 done
 popd >/dev/null