linaro-edk2-prep: add credential to enable SCT build

Change-Id: Iccd153b17b7ce795349679a8dbfaf0e3f7db03ed
Signed-off-by: Fathi Boudra <fathi.boudra@linaro.org>

1 files changed, 41 insertions, 1 deletions

diff --git a/linaro-edk2-prep.yaml b/linaro-edk2-prep.yaml
index 2e8ed1883b..5648b568a2 100644
--- a/linaro-edk2-prep.yaml
+++ b/linaro-edk2-prep.yaml
@@ -32,6 +32,9 @@
         - string:
             name: PUB_DEST
             default: 'components/kernel/linaro-edk2-prep/${AARCH64_TOOLCHAIN}/${BUILD_NUMBER}'
+        - password:
+            name: PRIVATE_KEY
+            default: ${PRIVATE_KEY}
     disabled: false
     node: build
     child-workspace: .
@@ -75,18 +78,55 @@
         - shell: |
             #!/bin/bash
 
-            set -ex
+            set -e
 
             trap cleanup_exit INT TERM EXIT
 
             cleanup_exit()
             {
               cd ${WORKSPACE}
+              kill -9 ${SSH_AGENT_PID}
               rm -rf uefi-ci uefi-tools
               rm -rf linaro-edk2-prep-build
               rm -rf out
             }
 
+            TMPKEYDIR=$(mktemp -d /tmp/sct.XXXXXX)
+            cat > ${TMPKEYDIR}/private-key-wrapper.py << EOF
+            #!/usr/bin/python
+
+            import os
+            import sys
+
+            def main():
+                private_key = os.environ.get("PRIVATE_KEY", "Undefined")
+                if private_key == "Undefined":
+                    sys.exit("PRIVATE_KEY is not defined.")
+
+                buffer = private_key.replace(' ','\n')
+                with open('linaro-private-key', 'w') as f:
+                    f.write('-----BEGIN RSA PRIVATE KEY-----\n')
+                    f.write(buffer)
+                    f.write('\n-----END RSA PRIVATE KEY-----\n')
+
+            if __name__ == "__main__":
+                    main()
+            EOF
+            python ${TMPKEYDIR}/private-key-wrapper.py
+            chmod 0600 ${WORKSPACE}/linaro-private-key
+
+            eval `ssh-agent` >/dev/null 2>/dev/null
+            ssh-add ${WORKSPACE}/linaro-private-key >/dev/null 2>/dev/null
+            rm -rf ${WORKSPACE}/linaro-private-key ${TMPKEYDIR}
+
+            mkdir ~/.ssh
+            ssh-keyscan dev-private-git.linaro.org >> ~/.ssh/known_hosts
+            cat << EOF >> ~/.ssh/config
+            Host dev-private-git.linaro.org
+                User git
+            EOF
+            chmod 0600 ~/.ssh/*
+
             # Use pre-installed linaro toolchain
             [ ${AARCH64_TOOLCHAIN} == "GCC48" ] && export PATH="${HOME}/srv/toolchain/arm-tc-14.04/bin:${HOME}/srv/toolchain/arm64-tc-14.04/bin:$PATH"
             [ ${AARCH64_TOOLCHAIN} == "GCC49" ] && export PATH="${HOME}/srv/toolchain/arm-tc-15.02/bin:${HOME}/srv/toolchain/arm64-tc-15.02/bin:$PATH"