travis-ci.sh

#! /usr/bin/env nix-shell
#! nix-shell --show-trace --pure --keep encrypted_de4911fc7d4a_key --keep encrypted_de4911fc7d4a_iv --keep TRAVIS_PULL_REQUEST --keep TRAVIS_TAG --keep TRAVIS_BRANCH --keep SIGNING_PASSWORD --keep SONAR_TOKEN --keep NEXUS_PASSWORD --keep GITHUB_KEY -i bash -p git cacert graphviz adoptopenjdk-bin openssl

set -euo pipefail

scan() {
    # update sonar (including failing tests)
    echo "building skipping tests"
    ./gradlew -x test build
    echo " running tests"
    ./gradlew test || true
    ./gradlew jacocoTestReport
    git fetch --unshallow #get all commit history for exact blame info
    echo "running sonar skipping tests"
    ./gradlew -Dsonar.host.url=https://sonarcloud.io -Dsonar.organization=moaxcp -Dsonar.login=$SONAR_TOKEN sonarqube
}

build() {
    # run build
    ./gradlew build
    ./gradlew javadoc
    ./gradlew asciidoctor
}

release() {
    # publish
    ./gradlew publishAllPublicationsToOSSRepository closeAndReleaseRepository \
        -Pnexus.username=moaxcp \
        -Pnexus.password="$NEXUS_PASSWORD" \
        -Psigning.keyId=A9A4043B \
        -Psigning.secretKeyRingFile="$PWD"/signingkey.gpg \
        -Psigning.password="$SIGNING_PASSWORD" \
        -Pgithub.user="moaxcp" \
        -Pgithub.key="$GITHUB_KEY"
        publishSite
}

publishSite() {
    ./gradlew asciidoctor
    ./gradlew gitPublishPush \
        -Dorg.ajoberstar.grgit.auth.username="$GITHUB_KEY"
}

./gradlew -version
dot -V
neato -V
openssl version

JAVA_HOME=$(readlink -e $(type -p javac) | sed  -e 's/\/bin\/javac//g')
GIT_SSL_CAINFO=~/.nix-profile/etc/ssl/certs/ca-bundle.crt

echo "JAVA_HOME is ${JAVA_HOME}"

openssl aes-256-cbc -K "$encrypted_de4911fc7d4a_key" -iv "$encrypted_de4911fc7d4a_iv" -in signingkey.gpg.enc -out signingkey.gpg -d

if [ "$TRAVIS_PULL_REQUEST" == "true" ]; then
    echo "build for pull request not yet supported"
    exit 1
fi

if [ -n "$TRAVIS_TAG" ]; then
    echo "release for $TRAVIS_TAG"
    scan
    build
    release

elif [ "$TRAVIS_BRANCH" == "master" ] && [ "$TRAVIS_PULL_REQUEST" == "false" ]; then
    echo "build for master branch"
    scan
    build
    publishSite
else
    echo "build for different branch not yet supported"
    exit 1
fi