only sign firmware when necessary

.github/workflows/main.yml

@@ -24,7 +24,6 @@ jobs:
 
       - name: Create header files
         run: |
-          cp "${GITHUB_WORKSPACE}/.github/workflows/dummy_priv_key.pem" "${GITHUB_WORKSPACE}/priv_key.pem"
           cp "${GITHUB_WORKSPACE}/noisemeter-device/config.h.example" "${GITHUB_WORKSPACE}/noisemeter-device/config.h"
           python "${GITHUB_WORKSPACE}/noisemeter-device/certs.py" -s api.tracket.info > "${GITHUB_WORKSPACE}/noisemeter-device/certs.h"
 
@@ -33,3 +32,4 @@ jobs:
 
       - name: Build PlatformIO Project (esp32-breadboard)
         run: pio run -e esp32-breadboard
+

.github/workflows/ota-release.yml

@@ -32,8 +32,8 @@ jobs:
           cp "${GITHUB_WORKSPACE}/noisemeter-device/config.h.example" "${GITHUB_WORKSPACE}/noisemeter-device/config.h"
           python "${GITHUB_WORKSPACE}/noisemeter-device/certs.py" -s api.tracket.info > "${GITHUB_WORKSPACE}/noisemeter-device/certs.h"
 
-      - name: Build PlatformIO Project
-        run: pio run -e esp32-pcb
+      - name: Build signed firmware
+        run: pio run -t ota -e esp32-pcb
 
       - name: Upload signed firmware
         uses: djn24/add-asset-to-release@v1

build_hooks.py

@@ -1,16 +1,13 @@
 Import("env")
 
-env.AddPostAction(
-    "$BUILD_DIR/${PROGNAME}.bin",
-    env.VerboseAction(
+env.AddCustomTarget(
+    name="ota",
+    dependencies="$BUILD_DIR/${PROGNAME}.bin",
+    actions=[
         "openssl dgst -sha256 -sign priv_key.pem -keyform PEM -out $BUILD_DIR/${PROGNAME}.sig -binary $BUILD_DIR/${PROGNAME}.bin",
-        "Creating OTA signature...")
-)
-
-env.AddPostAction(
-    "$BUILD_DIR/${PROGNAME}.bin",
-    env.VerboseAction(
-        "cat $BUILD_DIR/${PROGNAME}.sig $BUILD_DIR/${PROGNAME}.bin > ${PROGNAME}_signed.bin",
-        "Creating ${PROGNAME}_signed.bin")
+        "cat $BUILD_DIR/${PROGNAME}.sig $BUILD_DIR/${PROGNAME}.bin > ${PROGNAME}_signed.bin"
+    ],
+    title="OTA Signing",
+    description="Create a signed OTA update"
 )
 

platformio.ini

@@ -14,7 +14,7 @@ include_dir = noisemeter-device
 default_envs = esp32-pcb
 
 [env]
-extra_scripts = post:build_hooks.py
+extra_scripts = build_hooks.py
 framework = arduino
 platform = [email protected]
 board_build.partitions = nmpartitions.csv