chore(build): packages signing

- add `signs` section to goreleaser to sigh all of the artifacts
- add importing of the provate key that is needed to sign p ackages

.circleci/config.yml

@@ -472,6 +472,11 @@ jobs:
       - install_rust_compiler
       - install_release_tools
       - run: make protoc # installs protoc
+      - run:
+          name: import GPG key
+          command: |
+            echo -e "$GPG_KEY" > private.key
+            gpg --batch --import private.key
       - run:
           name: "Build release"
           command: make release

.goreleaser.yml

@@ -9,7 +9,6 @@ builds:
       - arm64
       - arm
     goarm:
-      - 5
       - 6
 
     main: ./cmd/influx/
@@ -34,7 +33,6 @@ builds:
       - arm64
       - arm
     goarm:
-      - 5
       - 6
 
     main: ./cmd/influxd/
@@ -52,6 +50,13 @@ builds:
     hooks:
       pre: make generate
 
+signs:
+  -
+    signature: "${artifact}.asc"
+    cmd: gpg
+    args: ["--armor", "--detach-sign", "${artifact}"]
+    artifacts: all
+
 nfpms:
   -
     id: "influxdata"