Code signing
Jenkins Code Signing
4 min
this guide shows how to integrate jenkins code signing with the {{k3}} this section provides useful terms, definitions, and concepts for this integration jenkins terminology a plugin implements one or more build steps for consumption by a pipeline or project by convention, though, a plugin generally implements only one build step to support separation a pipeline is essentially a set of configurable build steps this terminology generally refers to the pipeline plugin in general a build step is the fundamental building block of build automation in jenkins everything that performs an action in your project is a build step everything, from pulling from git to notifying users that a build is complete, is a build step in relation, a stage is a logical grouping of those build steps for example, you can skip the test stage, but you must specify individual build steps to skip over it also helps you visualize progress for consumers of the build results stages are not a required part of a pipeline and are strictly logical pipeline scripting pipeline scripting comes in the following forms declarative a pre defined set of tasks and environments in which to run build steps or groovy expressions imperative (or scripted) similar to the declarative version, this form has some limitations because of the lack of a declarative environment in exchange, you take advantage of the full power of groovy it's very powerful but difficult to use fxcl jenkins plugin without the fxcl jenkins plugin, the existing jenkins code signing plugins have no approval process the resulting signature must be given immediately, or failure occurs when you submit a request to sign, it fails because there is no time for approval to occur there is also no way to query for the same request by using something like jarsigner, which relies on pkcs11 the fxcl jenkins plugin accomplishes the following tasks enables the standard approval process to take place by interfacing with the cryptohub registration authority enables you to sign files in bulk by incorporating fxcl functionality into the plugin integration overview this guide shows you how to perform the following tasks configure the {{k3}} download and configure jenkins and test the fxcl jenkins plugin the following sections show you how to perform these tasks