publish-all-in-one.groovy

pipeline {
    agent any
    tools {
        jdk 'temurin-jdk17-latest'
    }

    stages {
        stage("init") {
            steps {
                script {
                    currentBuild.displayName = sh(script: 'echo "$VERSION"', returnStdout: true).trim()
                }
            }
        }
        stage("clone-repo") {
            steps {
                cleanWs()
                git(branch: "main", url: "https://github.com/eclipse-edc/Release.git")
            }
        }

        stage("setup-credentials") {
            steps {
                withCredentials([file(credentialsId: 'secret-subkeys.asc', variable: 'KEYRING'), string(credentialsId: 'gpg-passphrase', variable: 'PASSPHRASE'), usernamePassword(credentialsId: 'ossrh-account', passwordVariable: 'OSSRH_PASSWORD', usernameVariable: 'OSSRH_USER')]) {
                    sh '''
                    echo $KEYRING
                    gpg --batch --import "${KEYRING}"
                    for fpr in $(gpg --list-keys --with-colons  | awk -F: '/fpr:/ {print $10}' | sort -u);
                    do
                        echo -e "5\\ny\\n" |  gpg --batch --command-fd 0 --expert --edit-key $fpr trust;
                    done
                    '''

                    sh '''
                    # we don't have a TTY, so we need to use the loopback mode
                    echo "use-agent" >> ~/.gnupg/gpg.conf
                    echo "pinentry-mode loopback" >> ~/.gnupg/gpg.conf
                    echo "no-tty" >> ~/.gnupg/gpg.conf
                    '''
                }
            }
        }

        stage("prepare") {
            steps {
                echo "Prepare build with version $VERSION"
                sh './prepare.sh'
            }
        }

        stage("publish") {
            steps {
                withCredentials([string(credentialsId: 'gpg-passphrase', variable: 'PASSPHRASE'), usernamePassword(credentialsId: 'ossrh-account', passwordVariable: 'OSSRH_PASSWORD', usernameVariable: 'OSSRH_USER')]) {

                    sh '''
                    echo "Will build release with version $VERSION"
                    echo "JAVA_HOME: ${JAVA_HOME}. Java --version:"
                    java --version
                    
                    cmd=""
                    versionProp=""

                    if [ ! -z "$VERSION" ]
                    then
                        # set the version property if a version was specified, use defaults otherwise
                        versionProp="-Pversion=$VERSION"

                        # if the version doesn't end with -SNAPSHOT we need to handle staging/releasing
                        if [[ $VERSION != *-SNAPSHOT ]]
                        then
                            cmd="closeAndReleaseSonatypeStagingRepository";
                        fi
                    fi

                    ./gradlew publishToSonatype ${cmd} -Psigning.gnupg.keyName=1B4555CF -Psigning.gnupg.passphrase=${PASSPHRASE} -Psigning.gnupg.executable=gpg --no-parallel ${versionProp}
                    '''
                }
            }
        }
    }

}