Merge branch 'add-dpkg-sig-signature-in-all-deb-files-in-the-normal-build-des-375'

2 files changed, 18 insertions, 0 deletions

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 89eeaf05a9..03b5c2c1ad 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -26,6 +26,9 @@ Line wrap the file at 100 chars.                                              Th
 - Add customizable relay lists to the CLI on desktop. Custom lists can be managed through
   `mullvad custom-lists` and can be selected through `mullvad relay set` and `mullvad bridge set`.
 
+#### Linux
+- Start signing the deb and rpm files (GPG)
+
 ### Changed
 #### Android
 - Migrate welcome view to compose.
diff --git a/ci/buildserver-build.sh b/ci/buildserver-build.sh
index 6d491bb56f..99453caac0 100755
--- a/ci/buildserver-build.sh
+++ b/ci/buildserver-build.sh
@@ -85,6 +85,18 @@ function run_in_build_env {
     fi
 }
 
+# Sign DEB+RPM on Linux
+function sign_linux_packages {
+    for installer_path in dist/MullvadVPN-*.deb; do
+        echo "Signing $installer_path"
+        dpkg-sig --sign builder "$installer_path"
+    done
+    for installer_path in dist/MullvadVPN-*.rpm; do
+        echo "Signing $installer_path"
+        rpm --addsign "$installer_path"
+    done
+}
+
 # Builds the app and test artifacts and move them to the passed in `artifact_dir`.
 # To cross compile pass in `target` as an environment variable
 # to this function. Must also pass `artifact_dir` to show where to move the built artifacts.
@@ -94,6 +106,9 @@ function build {
     local build_args=("${@}")
 
     run_in_build_env TARGETS="$target" ./build.sh "${build_args[@]}" || return 1
+    if [[ "$(uname -s)" == "Linux" ]]; then
+        sign_linux_packages
+    fi
     mv dist/*.{deb,rpm,exe,pkg} "$artifact_dir" || return 1
 
     (run_in_build_env gui/scripts/build-test-executable.sh "$target" && \