From 7de32fcaf0f641cf8693b22b02f96ec553a94295 Mon Sep 17 00:00:00 2001
From: Gershon Shif <gershon@influxdata.com>
Date: Tue, 22 Sep 2020 15:27:37 -0700
Subject: [PATCH] chore(build): packages signing

- add `signs` section to goreleaser to sigh all of the artifacts
- add importing of the provate key that is needed to sign p ackages
---
 .circleci/config.yml | 5 +++++
 .goreleaser.yml      | 9 +++++++--
 2 files changed, 12 insertions(+), 2 deletions(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 2fd6dd5a84..9d16df1dad 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -472,6 +472,11 @@ jobs:
       - install_rust_compiler
       - install_release_tools
       - run: make protoc # installs protoc
+      - run:
+          name: import GPG key
+          command: |
+            echo -e "$GPG_KEY" > private.key
+            gpg --batch --import private.key
       - run:
           name: "Build release"
           command: make release
diff --git a/.goreleaser.yml b/.goreleaser.yml
index a2419dea32..9f0d828a20 100644
--- a/.goreleaser.yml
+++ b/.goreleaser.yml
@@ -9,7 +9,6 @@ builds:
       - arm64
       - arm
     goarm:
-      - 5
       - 6
 
     main: ./cmd/influx/
@@ -34,7 +33,6 @@ builds:
       - arm64
       - arm
     goarm:
-      - 5
       - 6
 
     main: ./cmd/influxd/
@@ -52,6 +50,13 @@ builds:
     hooks:
       pre: make generate
 
+signs:
+  -
+    signature: "${artifact}.asc"
+    cmd: gpg
+    args: ["--armor", "--detach-sign", "${artifact}"]
+    artifacts: all
+
 nfpms:
   -
     id: "influxdata"