Merge #89: Cirrus: Upload artifacts of "release" project

c8501ab Cirrus: Set $HOME in signing VM (Jeremy Rand) dc13cb9 Cirrus: Use env vars instead of conf vars for signing (Jeremy Rand) 28d6495 Set var/ncdns_version based on ncdns project (Jeremy Rand) 1474ef6 Cirrus: Sign binaries with GPG (Jeremy Rand) 11eb4bd plain-binaries: tweak output filename (Jeremy Rand) 07e64cb plain-binaries: switch to tar.xz output to match upstream Tor (Jeremy Rand) 57440bd Cirrus: Upload artifacts of "release" project (Jeremy Rand) Pull request description:
3 years ago · f465862ec9
parent 4600f147c7 c8501ab9c6
commit f465862ec9
6 changed files with 401 additions and 11 deletions
--- a/.cirrus.yml
+++ b/.cirrus.yml
@ -82,6 +82,8 @@ release_linux_x86_64_gcc_1_docker_builder:
    - ./tools/container-interrupt.sh
  build_script:
    - "./tools/cirrus_build_project.sh gcc release linux x86_64 1"
+  env:
+    SIGN_BUILD: 0
  depends_on:
    - "release_linux_x86_64_download"

@ -128,6 +130,8 @@ release_linux_x86_64_gcc_2_docker_builder:
    - ./tools/container-interrupt.sh
  build_script:
    - "./tools/cirrus_build_project.sh gcc release linux x86_64 1"
+  env:
+    SIGN_BUILD: 0
  depends_on:
    - "release_linux_x86_64_gcc_1"

@ -174,6 +178,8 @@ release_linux_x86_64_goeasyconfig_1_docker_builder:
    - ./tools/container-interrupt.sh
  build_script:
    - "./tools/cirrus_build_project.sh goeasyconfig release linux x86_64 1"
+  env:
+    SIGN_BUILD: 0
  depends_on:
    - "release_linux_x86_64_gcc_2"

@ -220,6 +226,8 @@ release_linux_x86_64_ncdns_1_docker_builder:
    - ./tools/container-interrupt.sh
  build_script:
    - "./tools/cirrus_build_project.sh ncdns release linux x86_64 1"
+  env:
+    SIGN_BUILD: 0
  depends_on:
    - "release_linux_x86_64_goeasyconfig_1"

@ -266,6 +274,8 @@ release_linux_x86_64_ncp11_1_docker_builder:
    - ./tools/container-interrupt.sh
  build_script:
    - "./tools/cirrus_build_project.sh ncp11 release linux x86_64 1"
+  env:
+    SIGN_BUILD: 0
  depends_on:
    - "release_linux_x86_64_ncdns_1"

@ -312,6 +322,8 @@ release_linux_x86_64_ncprop279_1_docker_builder:
    - ./tools/container-interrupt.sh
  build_script:
    - "./tools/cirrus_build_project.sh ncprop279 release linux x86_64 1"
+  env:
+    SIGN_BUILD: 0
  depends_on:
    - "release_linux_x86_64_ncp11_1"

@ -358,10 +370,12 @@ release_linux_x86_64_plain-binaries_1_docker_builder:
    - ./tools/container-interrupt.sh
  build_script:
    - "./tools/cirrus_build_project.sh plain-binaries release linux x86_64 1"
+  env:
+    SIGN_BUILD: 0
  depends_on:
    - "release_linux_x86_64_ncprop279_1"

-release_linux_x86_64_release_1_docker_builder:
+release_linux_x86_64_release_nosign_docker_builder:
  timeout_in: 120m
  out_release_linux_x86_64_cache:
    folder: out
@ -404,6 +418,64 @@ release_linux_x86_64_release_1_docker_builder:
    - ./tools/container-interrupt.sh
  build_script:
    - "./tools/cirrus_build_project.sh release release linux x86_64 1"
+  binaries_artifacts:
+    path: "release/**/*"
+  env:
+    SIGN_BUILD: 0
+  only_if: $CIRRUS_REPO_OWNER != "namecoin"
+  depends_on:
+    - "release_linux_x86_64_plain-binaries_1"
+
+release_linux_x86_64_release_sign_docker_builder:
+  timeout_in: 120m
+  out_release_linux_x86_64_cache:
+    folder: out
+    fingerprint_script:
+      - "echo out_release_linux_x86_64"
+    reupload_on_changes: true
+    populate_script:
+      - "mkdir -p out"
+  out1_release_linux_x86_64_cache:
+    folder: out_cache1
+    fingerprint_script:
+      - "echo out1_release_linux_x86_64"
+    reupload_on_changes: true
+    populate_script:
+      - "mkdir -p out_cache1"
+  git_release_linux_x86_64_cache:
+    folder: git_clones
+    fingerprint_script:
+      - "echo git_release_linux_x86_64"
+    reupload_on_changes: true
+    populate_script:
+      - "mkdir -p git_clones"
+  interrupted_aa_release_linux_x86_64_cache:
+    folder: tmp/interrupted_dirs.tar.gz.partaa.folder
+    fingerprint_script:
+      - "echo interrupted_aa_release_linux_x86_64"
+    reupload_on_changes: true
+  interrupted_ab_release_linux_x86_64_cache:
+    folder: tmp/interrupted_dirs.tar.gz.partab.folder
+    fingerprint_script:
+      - "echo interrupted_ab_release_linux_x86_64"
+    reupload_on_changes: true
+  interrupted_ac_release_linux_x86_64_cache:
+    folder: tmp/interrupted_dirs.tar.gz.partac.folder
+    fingerprint_script:
+      - "echo interrupted_ac_release_linux_x86_64"
+    reupload_on_changes: true
+  checkpoint_background_script:
+    - sleep 110m
+    - ./tools/container-interrupt.sh
+  build_script:
+    - "./tools/cirrus_build_project.sh release release linux x86_64 1"
+  binaries_artifacts:
+    path: "release/**/*"
+  only_if: $CIRRUS_REPO_OWNER == "namecoin"
+  env:
+    SIGN_BUILD: 1
+    SIGN_KEY: ENCRYPTED[33d4594d76774e6447dfd9fabee90f6214b34e209fa1c1c2ce93ed1a40447a235b013b78afe85db52d5561651a821be1]
+    HOME: /root
  depends_on:
    - "release_linux_x86_64_plain-binaries_1"

@ -491,6 +563,8 @@ release_linux_i686_gcc_1_docker_builder:
    - ./tools/container-interrupt.sh
  build_script:
    - "./tools/cirrus_build_project.sh gcc release linux i686 1"
+  env:
+    SIGN_BUILD: 0
  depends_on:
    - "release_linux_i686_download"

@ -537,6 +611,8 @@ release_linux_i686_gcc_2_docker_builder:
    - ./tools/container-interrupt.sh
  build_script:
    - "./tools/cirrus_build_project.sh gcc release linux i686 1"
+  env:
+    SIGN_BUILD: 0
  depends_on:
    - "release_linux_i686_gcc_1"

@ -583,6 +659,8 @@ release_linux_i686_goeasyconfig_1_docker_builder:
    - ./tools/container-interrupt.sh
  build_script:
    - "./tools/cirrus_build_project.sh goeasyconfig release linux i686 1"
+  env:
+    SIGN_BUILD: 0
  depends_on:
    - "release_linux_i686_gcc_2"

@ -629,6 +707,8 @@ release_linux_i686_ncdns_1_docker_builder:
    - ./tools/container-interrupt.sh
  build_script:
    - "./tools/cirrus_build_project.sh ncdns release linux i686 1"
+  env:
+    SIGN_BUILD: 0
  depends_on:
    - "release_linux_i686_goeasyconfig_1"

@ -675,6 +755,8 @@ release_linux_i686_ncp11_1_docker_builder:
    - ./tools/container-interrupt.sh
  build_script:
    - "./tools/cirrus_build_project.sh ncp11 release linux i686 1"
+  env:
+    SIGN_BUILD: 0
  depends_on:
    - "release_linux_i686_ncdns_1"

@ -721,6 +803,8 @@ release_linux_i686_ncprop279_1_docker_builder:
    - ./tools/container-interrupt.sh
  build_script:
    - "./tools/cirrus_build_project.sh ncprop279 release linux i686 1"
+  env:
+    SIGN_BUILD: 0
  depends_on:
    - "release_linux_i686_ncp11_1"

@ -767,10 +851,12 @@ release_linux_i686_plain-binaries_1_docker_builder:
    - ./tools/container-interrupt.sh
  build_script:
    - "./tools/cirrus_build_project.sh plain-binaries release linux i686 1"
+  env:
+    SIGN_BUILD: 0
  depends_on:
    - "release_linux_i686_ncprop279_1"

-release_linux_i686_release_1_docker_builder:
+release_linux_i686_release_nosign_docker_builder:
  timeout_in: 120m
  out_release_linux_i686_cache:
    folder: out
@ -813,6 +899,64 @@ release_linux_i686_release_1_docker_builder:
    - ./tools/container-interrupt.sh
  build_script:
    - "./tools/cirrus_build_project.sh release release linux i686 1"
+  binaries_artifacts:
+    path: "release/**/*"
+  env:
+    SIGN_BUILD: 0
+  only_if: $CIRRUS_REPO_OWNER != "namecoin"
+  depends_on:
+    - "release_linux_i686_plain-binaries_1"
+
+release_linux_i686_release_sign_docker_builder:
+  timeout_in: 120m
+  out_release_linux_i686_cache:
+    folder: out
+    fingerprint_script:
+      - "echo out_release_linux_i686"
+    reupload_on_changes: true
+    populate_script:
+      - "mkdir -p out"
+  out1_release_linux_i686_cache:
+    folder: out_cache1
+    fingerprint_script:
+      - "echo out1_release_linux_i686"
+    reupload_on_changes: true
+    populate_script:
+      - "mkdir -p out_cache1"
+  git_release_linux_i686_cache:
+    folder: git_clones
+    fingerprint_script:
+      - "echo git_release_linux_i686"
+    reupload_on_changes: true
+    populate_script:
+      - "mkdir -p git_clones"
+  interrupted_aa_release_linux_i686_cache:
+    folder: tmp/interrupted_dirs.tar.gz.partaa.folder
+    fingerprint_script:
+      - "echo interrupted_aa_release_linux_i686"
+    reupload_on_changes: true
+  interrupted_ab_release_linux_i686_cache:
+    folder: tmp/interrupted_dirs.tar.gz.partab.folder
+    fingerprint_script:
+      - "echo interrupted_ab_release_linux_i686"
+    reupload_on_changes: true
+  interrupted_ac_release_linux_i686_cache:
+    folder: tmp/interrupted_dirs.tar.gz.partac.folder
+    fingerprint_script:
+      - "echo interrupted_ac_release_linux_i686"
+    reupload_on_changes: true
+  checkpoint_background_script:
+    - sleep 110m
+    - ./tools/container-interrupt.sh
+  build_script:
+    - "./tools/cirrus_build_project.sh release release linux i686 1"
+  binaries_artifacts:
+    path: "release/**/*"
+  only_if: $CIRRUS_REPO_OWNER == "namecoin"
+  env:
+    SIGN_BUILD: 1
+    SIGN_KEY: ENCRYPTED[33d4594d76774e6447dfd9fabee90f6214b34e209fa1c1c2ce93ed1a40447a235b013b78afe85db52d5561651a821be1]
+    HOME: /root
  depends_on:
    - "release_linux_i686_plain-binaries_1"

@ -900,6 +1044,8 @@ release_windows_x86_64_mingw-w64_1_docker_builder:
    - ./tools/container-interrupt.sh
  build_script:
    - "./tools/cirrus_build_project.sh mingw-w64 release windows x86_64 1"
+  env:
+    SIGN_BUILD: 0
  depends_on:
    - "release_windows_x86_64_download"

@ -946,6 +1092,8 @@ release_windows_x86_64_mingw-w64_2_docker_builder:
    - ./tools/container-interrupt.sh
  build_script:
    - "./tools/cirrus_build_project.sh mingw-w64 release windows x86_64 1"
+  env:
+    SIGN_BUILD: 0
  depends_on:
    - "release_windows_x86_64_mingw-w64_1"

@ -992,6 +1140,8 @@ release_windows_x86_64_goeasyconfig_1_docker_builder:
    - ./tools/container-interrupt.sh
  build_script:
    - "./tools/cirrus_build_project.sh goeasyconfig release windows x86_64 1"
+  env:
+    SIGN_BUILD: 0
  depends_on:
    - "release_windows_x86_64_mingw-w64_2"

@ -1038,6 +1188,8 @@ release_windows_x86_64_ncdns_1_docker_builder:
    - ./tools/container-interrupt.sh
  build_script:
    - "./tools/cirrus_build_project.sh ncdns release windows x86_64 1"
+  env:
+    SIGN_BUILD: 0
  depends_on:
    - "release_windows_x86_64_goeasyconfig_1"

@ -1084,6 +1236,8 @@ release_windows_x86_64_ncp11_1_docker_builder:
    - ./tools/container-interrupt.sh
  build_script:
    - "./tools/cirrus_build_project.sh ncp11 release windows x86_64 1"
+  env:
+    SIGN_BUILD: 0
  depends_on:
    - "release_windows_x86_64_ncdns_1"

@ -1130,6 +1284,8 @@ release_windows_x86_64_ncprop279_1_docker_builder:
    - ./tools/container-interrupt.sh
  build_script:
    - "./tools/cirrus_build_project.sh ncprop279 release windows x86_64 1"
+  env:
+    SIGN_BUILD: 0
  depends_on:
    - "release_windows_x86_64_ncp11_1"

@ -1176,10 +1332,12 @@ release_windows_x86_64_plain-binaries_1_docker_builder:
    - ./tools/container-interrupt.sh
  build_script:
    - "./tools/cirrus_build_project.sh plain-binaries release windows x86_64 1"
+  env:
+    SIGN_BUILD: 0
  depends_on:
    - "release_windows_x86_64_ncprop279_1"

-release_windows_x86_64_release_1_docker_builder:
+release_windows_x86_64_release_nosign_docker_builder:
  timeout_in: 120m
  out_release_windows_x86_64_cache:
    folder: out
@ -1222,6 +1380,64 @@ release_windows_x86_64_release_1_docker_builder:
    - ./tools/container-interrupt.sh
  build_script:
    - "./tools/cirrus_build_project.sh release release windows x86_64 1"
+  binaries_artifacts:
+    path: "release/**/*"
+  env:
+    SIGN_BUILD: 0
+  only_if: $CIRRUS_REPO_OWNER != "namecoin"
+  depends_on:
+    - "release_windows_x86_64_plain-binaries_1"
+
+release_windows_x86_64_release_sign_docker_builder:
+  timeout_in: 120m
+  out_release_windows_x86_64_cache:
+    folder: out
+    fingerprint_script:
+      - "echo out_release_windows_x86_64"
+    reupload_on_changes: true
+    populate_script:
+      - "mkdir -p out"
+  out1_release_windows_x86_64_cache:
+    folder: out_cache1
+    fingerprint_script:
+      - "echo out1_release_windows_x86_64"
+    reupload_on_changes: true
+    populate_script:
+      - "mkdir -p out_cache1"
+  git_release_windows_x86_64_cache:
+    folder: git_clones
+    fingerprint_script:
+      - "echo git_release_windows_x86_64"
+    reupload_on_changes: true
+    populate_script:
+      - "mkdir -p git_clones"
+  interrupted_aa_release_windows_x86_64_cache:
+    folder: tmp/interrupted_dirs.tar.gz.partaa.folder
+    fingerprint_script:
+      - "echo interrupted_aa_release_windows_x86_64"
+    reupload_on_changes: true
+  interrupted_ab_release_windows_x86_64_cache:
+    folder: tmp/interrupted_dirs.tar.gz.partab.folder
+    fingerprint_script:
+      - "echo interrupted_ab_release_windows_x86_64"
+    reupload_on_changes: true
+  interrupted_ac_release_windows_x86_64_cache:
+    folder: tmp/interrupted_dirs.tar.gz.partac.folder
+    fingerprint_script:
+      - "echo interrupted_ac_release_windows_x86_64"
+    reupload_on_changes: true
+  checkpoint_background_script:
+    - sleep 110m
+    - ./tools/container-interrupt.sh
+  build_script:
+    - "./tools/cirrus_build_project.sh release release windows x86_64 1"
+  binaries_artifacts:
+    path: "release/**/*"
+  only_if: $CIRRUS_REPO_OWNER == "namecoin"
+  env:
+    SIGN_BUILD: 1
+    SIGN_KEY: ENCRYPTED[33d4594d76774e6447dfd9fabee90f6214b34e209fa1c1c2ce93ed1a40447a235b013b78afe85db52d5561651a821be1]
+    HOME: /root
  depends_on:
    - "release_windows_x86_64_plain-binaries_1"

@ -1309,6 +1525,8 @@ release_windows_i686_mingw-w64_1_docker_builder:
    - ./tools/container-interrupt.sh
  build_script:
    - "./tools/cirrus_build_project.sh mingw-w64 release windows i686 1"
+  env:
+    SIGN_BUILD: 0
  depends_on:
    - "release_windows_i686_download"

@ -1355,6 +1573,8 @@ release_windows_i686_mingw-w64_2_docker_builder:
    - ./tools/container-interrupt.sh
  build_script:
    - "./tools/cirrus_build_project.sh mingw-w64 release windows i686 1"
+  env:
+    SIGN_BUILD: 0
  depends_on:
    - "release_windows_i686_mingw-w64_1"

@ -1401,6 +1621,8 @@ release_windows_i686_goeasyconfig_1_docker_builder:
    - ./tools/container-interrupt.sh
  build_script:
    - "./tools/cirrus_build_project.sh goeasyconfig release windows i686 1"
+  env:
+    SIGN_BUILD: 0
  depends_on:
    - "release_windows_i686_mingw-w64_2"

@ -1447,6 +1669,8 @@ release_windows_i686_ncdns_1_docker_builder:
    - ./tools/container-interrupt.sh
  build_script:
    - "./tools/cirrus_build_project.sh ncdns release windows i686 1"
+  env:
+    SIGN_BUILD: 0
  depends_on:
    - "release_windows_i686_goeasyconfig_1"

@ -1493,6 +1717,8 @@ release_windows_i686_ncp11_1_docker_builder:
    - ./tools/container-interrupt.sh
  build_script:
    - "./tools/cirrus_build_project.sh ncp11 release windows i686 1"
+  env:
+    SIGN_BUILD: 0
  depends_on:
    - "release_windows_i686_ncdns_1"

@ -1539,6 +1765,8 @@ release_windows_i686_ncprop279_1_docker_builder:
    - ./tools/container-interrupt.sh
  build_script:
    - "./tools/cirrus_build_project.sh ncprop279 release windows i686 1"
+  env:
+    SIGN_BUILD: 0
  depends_on:
    - "release_windows_i686_ncp11_1"

@ -1585,10 +1813,63 @@ release_windows_i686_plain-binaries_1_docker_builder:
    - ./tools/container-interrupt.sh
  build_script:
    - "./tools/cirrus_build_project.sh plain-binaries release windows i686 1"
+  env:
+    SIGN_BUILD: 0
  depends_on:
    - "release_windows_i686_ncprop279_1"

-release_windows_i686_release_1_docker_builder:
+release_windows_i686_release_nosign_docker_builder:
+  timeout_in: 120m
+  out_release_windows_i686_cache:
+    folder: out
+    fingerprint_script:
+      - "echo out_release_windows_i686"
+    reupload_on_changes: true
+    populate_script:
+      - "mkdir -p out"
+  out1_release_windows_i686_cache:
+    folder: out_cache1
+    fingerprint_script:
+      - "echo out1_release_windows_i686"
+    reupload_on_changes: true
+    populate_script:
+      - "mkdir -p out_cache1"
+  git_release_windows_i686_cache:
+    folder: git_clones
+    fingerprint_script:
+      - "echo git_release_windows_i686"
+    reupload_on_changes: true
+    populate_script:
+      - "mkdir -p git_clones"
+  interrupted_aa_release_windows_i686_cache:
+    folder: tmp/interrupted_dirs.tar.gz.partaa.folder
+    fingerprint_script:
+      - "echo interrupted_aa_release_windows_i686"
+    reupload_on_changes: true
+  interrupted_ab_release_windows_i686_cache:
+    folder: tmp/interrupted_dirs.tar.gz.partab.folder
+    fingerprint_script:
+      - "echo interrupted_ab_release_windows_i686"
+    reupload_on_changes: true
+  interrupted_ac_release_windows_i686_cache:
+    folder: tmp/interrupted_dirs.tar.gz.partac.folder
+    fingerprint_script:
+      - "echo interrupted_ac_release_windows_i686"
+    reupload_on_changes: true
+  checkpoint_background_script:
+    - sleep 110m
+    - ./tools/container-interrupt.sh
+  build_script:
+    - "./tools/cirrus_build_project.sh release release windows i686 1"
+  binaries_artifacts:
+    path: "release/**/*"
+  env:
+    SIGN_BUILD: 0
+  only_if: $CIRRUS_REPO_OWNER != "namecoin"
+  depends_on:
+    - "release_windows_i686_plain-binaries_1"
+
+release_windows_i686_release_sign_docker_builder:
  timeout_in: 120m
  out_release_windows_i686_cache:
    folder: out
@ -1631,6 +1912,13 @@ release_windows_i686_release_1_docker_builder:
    - ./tools/container-interrupt.sh
  build_script:
    - "./tools/cirrus_build_project.sh release release windows i686 1"
+  binaries_artifacts:
+    path: "release/**/*"
+  only_if: $CIRRUS_REPO_OWNER == "namecoin"
+  env:
+    SIGN_BUILD: 1
+    SIGN_KEY: ENCRYPTED[33d4594d76774e6447dfd9fabee90f6214b34e209fa1c1c2ce93ed1a40447a235b013b78afe85db52d5561651a821be1]
+    HOME: /root
  depends_on:
    - "release_windows_i686_plain-binaries_1"

@ -1718,6 +2006,8 @@ release_osx_x86_64_macosx-toolchain_1_docker_builder:
    - ./tools/container-interrupt.sh
  build_script:
    - "./tools/cirrus_build_project.sh macosx-toolchain release osx x86_64 1"
+  env:
+    SIGN_BUILD: 0
  depends_on:
    - "release_osx_x86_64_download"

@ -1764,6 +2054,8 @@ release_osx_x86_64_macosx-toolchain_2_docker_builder:
    - ./tools/container-interrupt.sh
  build_script:
    - "./tools/cirrus_build_project.sh macosx-toolchain release osx x86_64 1"
+  env:
+    SIGN_BUILD: 0
  depends_on:
    - "release_osx_x86_64_macosx-toolchain_1"

@ -1810,6 +2102,8 @@ release_osx_x86_64_goeasyconfig_1_docker_builder:
    - ./tools/container-interrupt.sh
  build_script:
    - "./tools/cirrus_build_project.sh goeasyconfig release osx x86_64 1"
+  env:
+    SIGN_BUILD: 0
  depends_on:
    - "release_osx_x86_64_macosx-toolchain_2"

@ -1856,6 +2150,8 @@ release_osx_x86_64_ncdns_1_docker_builder:
    - ./tools/container-interrupt.sh
  build_script:
    - "./tools/cirrus_build_project.sh ncdns release osx x86_64 1"
+  env:
+    SIGN_BUILD: 0
  depends_on:
    - "release_osx_x86_64_goeasyconfig_1"

@ -1902,6 +2198,8 @@ release_osx_x86_64_ncp11_1_docker_builder:
    - ./tools/container-interrupt.sh
  build_script:
    - "./tools/cirrus_build_project.sh ncp11 release osx x86_64 1"
+  env:
+    SIGN_BUILD: 0
  depends_on:
    - "release_osx_x86_64_ncdns_1"

@ -1948,6 +2246,8 @@ release_osx_x86_64_ncprop279_1_docker_builder:
    - ./tools/container-interrupt.sh
  build_script:
    - "./tools/cirrus_build_project.sh ncprop279 release osx x86_64 1"
+  env:
+    SIGN_BUILD: 0
  depends_on:
    - "release_osx_x86_64_ncp11_1"

@ -1994,10 +2294,63 @@ release_osx_x86_64_plain-binaries_1_docker_builder:
    - ./tools/container-interrupt.sh
  build_script:
    - "./tools/cirrus_build_project.sh plain-binaries release osx x86_64 1"
+  env:
+    SIGN_BUILD: 0
  depends_on:
    - "release_osx_x86_64_ncprop279_1"

-release_osx_x86_64_release_1_docker_builder:
+release_osx_x86_64_release_nosign_docker_builder:
+  timeout_in: 120m
+  out_release_osx_x86_64_cache:
+    folder: out
+    fingerprint_script:
+      - "echo out_release_osx_x86_64"
+    reupload_on_changes: true
+    populate_script:
+      - "mkdir -p out"
+  out1_release_osx_x86_64_cache:
+    folder: out_cache1
+    fingerprint_script:
+      - "echo out1_release_osx_x86_64"
+    reupload_on_changes: true
+    populate_script:
+      - "mkdir -p out_cache1"
+  git_release_osx_x86_64_cache:
+    folder: git_clones
+    fingerprint_script:
+      - "echo git_release_osx_x86_64"
+    reupload_on_changes: true
+    populate_script:
+      - "mkdir -p git_clones"
+  interrupted_aa_release_osx_x86_64_cache:
+    folder: tmp/interrupted_dirs.tar.gz.partaa.folder
+    fingerprint_script:
+      - "echo interrupted_aa_release_osx_x86_64"
+    reupload_on_changes: true
+  interrupted_ab_release_osx_x86_64_cache:
+    folder: tmp/interrupted_dirs.tar.gz.partab.folder
+    fingerprint_script:
+      - "echo interrupted_ab_release_osx_x86_64"
+    reupload_on_changes: true
+  interrupted_ac_release_osx_x86_64_cache:
+    folder: tmp/interrupted_dirs.tar.gz.partac.folder
+    fingerprint_script:
+      - "echo interrupted_ac_release_osx_x86_64"
+    reupload_on_changes: true
+  checkpoint_background_script:
+    - sleep 110m
+    - ./tools/container-interrupt.sh
+  build_script:
+    - "./tools/cirrus_build_project.sh release release osx x86_64 1"
+  binaries_artifacts:
+    path: "release/**/*"
+  env:
+    SIGN_BUILD: 0
+  only_if: $CIRRUS_REPO_OWNER != "namecoin"
+  depends_on:
+    - "release_osx_x86_64_plain-binaries_1"
+
+release_osx_x86_64_release_sign_docker_builder:
  timeout_in: 120m
  out_release_osx_x86_64_cache:
    folder: out
@ -2040,6 +2393,13 @@ release_osx_x86_64_release_1_docker_builder:
    - ./tools/container-interrupt.sh
  build_script:
    - "./tools/cirrus_build_project.sh release release osx x86_64 1"
+  binaries_artifacts:
+    path: "release/**/*"
+  only_if: $CIRRUS_REPO_OWNER == "namecoin"
+  env:
+    SIGN_BUILD: 1
+    SIGN_KEY: ENCRYPTED[33d4594d76774e6447dfd9fabee90f6214b34e209fa1c1c2ce93ed1a40447a235b013b78afe85db52d5561651a821be1]
+    HOME: /root
  depends_on:
    - "release_osx_x86_64_plain-binaries_1"

--- a/projects/plain-binaries/build
+++ b/projects/plain-binaries/build
@ -11,5 +11,5 @@ tar -C /var/tmp/dist/[% project %] -xf [% c('input_files_by_name/ncprop279') %]
 cd $distdir
 [% c('tar', {
   tar_src   => [ '.' ],
-   tar_args  => '-czf ' _ dest_dir _ '/' _ c('filename'),
+   tar_args  => '-cJf ' _ dest_dir _ '/' _ c('filename'),
 }) %]
--- a/projects/plain-binaries/config
+++ b/projects/plain-binaries/config
@ -1,5 +1,5 @@
 version: '[% c("var/ncdns_version") %]'
-filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.gz'
+filename: 'ncdns-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.xz'

 var:
  container:
--- a/rbm.conf
+++ b/rbm.conf
@ -24,7 +24,7 @@ buildconf:
  git_signtag_opt: '-s'

 var:
-  ncdns_version: '10.5a10'
+  ncdns_version: '[% pc("ncdns", "version") %]'
  ncdns_build: 'build1'
  ncdns_incremental_from:
    - 10.5a8
--- a/tools/cirrus_build_project.sh
+++ b/tools/cirrus_build_project.sh
@ -61,6 +61,15 @@ fi
 #df -h

 if [[ "$SHOULD_BUILD" -eq 1 ]]; then
+    if [[ "$SIGN_BUILD" == "1" ]]; then
+        echo "Configuring signing key..."
+        export RBM_SIGN_BUILD=1
+        export RBM_GPG_OPTS="--local-user jeremy@namecoin.org"
+        echo "$SIGN_KEY" | gpg --import
+    else
+        echo "Signing is disabled."
+    fi
+
    echo "Building project..."
    # If rbm fails, we consider it a success as long as it saved a checkpoint.
    ./rbm/rbm build "$PROJECT" --target "$CHANNEL" --target ncdns-"$OS"-"$ARCH" || [ ! -z "$(ls -A ./tmp/interrupted_dirs/)" ]
--- a/tools/cirrus_gen_yml.sh
+++ b/tools/cirrus_gen_yml.sh
@ -51,7 +51,7 @@ print_os_arch () {
    echo ""

    # TODO fine-tune this list
-    for PROJECT in compiler.1 compiler.2 goeasyconfig.1 ncdns.1 ncp11.1 ncprop279.1 plain-binaries.1 release.1; do
+    for PROJECT in compiler.1 compiler.2 goeasyconfig.1 ncdns.1 ncp11.1 ncprop279.1 plain-binaries.1 release.nosign release.sign; do
        PROJECT_BASE=$(echo $PROJECT | cut -d . -f 1)
        if [[ "$PROJECT_BASE" == "compiler" ]]; then
            if [[ "$OS" == "android" ]]; then
@ -112,6 +112,25 @@ print_os_arch () {
  build_script:
    - \"./tools/cirrus_build_project.sh ${PROJECT_BASE} ${CHANNEL} ${OS} ${ARCH} 1\""

+        if [[ "$PROJECT_BASE" == "release" ]]; then
+            echo "  binaries_artifacts:
+    path: \"${CHANNEL}/**/*\""
+        fi
+
+        if [[ "$PROJECT_ITER" == "sign" ]]; then
+            echo '  only_if: $CIRRUS_REPO_OWNER == "namecoin"'
+            echo "  env:
+    SIGN_BUILD: 1
+    SIGN_KEY: ENCRYPTED[33d4594d76774e6447dfd9fabee90f6214b34e209fa1c1c2ce93ed1a40447a235b013b78afe85db52d5561651a821be1]
+    HOME: /root"
+        else
+            echo "  env:
+    SIGN_BUILD: 0"
+        fi
+        if [[ "$PROJECT_ITER" == "nosign" ]]; then
+            echo '  only_if: $CIRRUS_REPO_OWNER != "namecoin"'
+        fi
+
        # Depend on previous project
        if [[ "$PROJECT" == "compiler.1" ]]; then
            echo "  depends_on:
@ -121,8 +140,10 @@ print_os_arch () {
    - \"${CHANNEL}_${OS}_${ARCH}_${PREV_PROJECT_BASE}_${PREV_PROJECT_ITER}\""
        fi

-        local PREV_PROJECT_BASE="$PROJECT_BASE"
-        local PREV_PROJECT_ITER="$PROJECT_ITER"
+        if [[ "$PROJECT_ITER" != "nosign" ]]; then
+            local PREV_PROJECT_BASE="$PROJECT_BASE"
+            local PREV_PROJECT_ITER="$PROJECT_ITER"
+        fi
        echo ""
    done
 }