build: generate signatures for kernel and base set

build/base.sh

@@ -44,4 +44,8 @@ ${ENVFILTER} make -C${SRCDIR} -j${CPUS} buildworld ${MAKEARGS} NO_CLEAN=yes
 ${ENVFILTER} make -C${SRCDIR}/release obj ${MAKEARGS}
 ${ENVFILTER} make -C${SRCDIR}/release base.txz ${MAKEARGS}
 
-mv $(make -C${SRCDIR}/release -V .OBJDIR)/base.txz ${SETSDIR}/base-${REPO_VERSION}-${ARCH}.txz
+BASESET=${SETSDIR}/base-${REPO_VERSION}-${ARCH}
+
+mv $(make -C${SRCDIR}/release -V .OBJDIR)/base.txz ${BASESET}.txz
+
+generate_signature ${BASESET}.txz

build/clean.sh

@@ -44,10 +44,12 @@ for ARG in ${@}; do
 	kernel)
 		echo ">>> Removing kernel set"
 		rm -f ${SETSDIR}/kernel-*-${ARCH}.txz
+		rm -f ${SETSDIR}/kernel-*-${ARCH}.txz.sig
 		;;
 	base)
 		echo ">>> Removing base set"
 		rm -f ${SETSDIR}/base-*-${ARCH}.txz
+		rm -f ${SETSDIR}/base-*-${ARCH}.txz.sig
 		;;
 	packages)
 		echo ">>> Removing packages set"

build/common.sh

@@ -293,6 +293,14 @@ setup_distfiles()
 	fi
 }
 
+generate_signature()
+{
+	if [ -n "$(${TOOLSDIR}/scripts/pkg_fingerprint.sh)" ]; then
+		SIGNCMD="${TOOLSDIR}/scripts/pkg_sign.sh"
+		sha256 -q ${1} | ${SIGNCMD} > ${1}.sig
+	fi
+}
+
 extract_packages()
 {
 	echo ">>> Extracting packages in ${1}"
@@ -425,8 +433,7 @@ bundle_packages()
 		SIGNARGS="signing_command: ${SIGNCMD}"
 
 		# generate pkg bootstrap signature
-		sha256 -q ${1}${PACKAGESDIR}-new/Latest/pkg.txz | \
-		    ${SIGNCMD} > ${1}${PACKAGESDIR}-new/Latest/pkg.txz.sig
+		generate_signature ${1}${PACKAGESDIR}-new/Latest/pkg.txz
 	fi
 
 	# generate index files

build/kernel.sh

@@ -44,4 +44,8 @@ make -C${SRCDIR} -j${CPUS} buildkernel ${MAKEARGS} NO_KERNELCLEAN=yes
 make -C${SRCDIR}/release obj ${MAKEARGS}
 make -C${SRCDIR}/release kernel.txz ${MAKEARGS}
 
-mv $(make -C${SRCDIR}/release -V .OBJDIR)/kernel.txz ${SETSDIR}/kernel-${REPO_VERSION}-${ARCH}.txz
+KERNELSET=${SETSDIR}/kernel-${REPO_VERSION}-${ARCH}
+
+mv $(make -C${SRCDIR}/release -V .OBJDIR)/kernel.txz ${KERNELSET}.txz
+
+generate_signature ${KERNELSET}.txz