Simple dev release script

tools/dev-release.sh

@@ -0,0 +1,96 @@
+#!/bin/sh -xe
+# Release dev packages to PyPI
+
+version="0.0.0.dev$(date +%Y%m%d)"
+DEV_RELEASE_BRANCH="dev-release"
+# TODO: create a real release key instead of using Kuba's personal one
+RELEASE_GPG_KEY="${RELEASE_GPG_KEY:-148C30F6F7E429337A72D992B00B9CC82D7ADF2C}"
+
+# port for a local Python Package Index (used in testing)
+PORT=${PORT:-1234}
+
+# subpackages to be released
+SUBPKGS=${SUBPKGS:-"acme letsencrypt_apache letsencrypt_nginx letshelp_letsencrypt"}
+subpkgs_dirs="$(echo $SUBPKGS | sed s/_/-/g)"
+# letsencrypt_compatibility_test is not packaged because:
+# - it is not meant to be used by anyone else than Let's Encrypt devs
+# - it causes problems when running nosetests - the latter tries to
+#   run everything that matches test*, while there are no unittests
+#   there
+
+tag="v$version"
+mv "dist.$version" "dist.$version.$(date +%s).bak" || true
+git tag --delete "$tag" || true
+
+root="$(mktemp -d -t le.$version.XXX)"
+echo "Cloning into fresh copy at $root"  # clean repo = no artificats
+git clone . $root
+cd $root
+git branch -f "$DEV_RELEASE_BRANCH"
+git checkout "$DEV_RELEASE_BRANCH"
+
+for pkg_dir in $subpkgs_dirs
+do
+  sed -i $x "s/^version.*/version = '$version'/" $pkg_dir/setup.py
+done
+sed -i "s/^__version.*/__version__ = '$version'/" letsencrypt/__init__.py
+
+git add -p  # interactive user input
+git -c commit.gpgsign=true commit -m "Release $version"
+git tag --local-user "$RELEASE_GPG_KEY" \
+    --sign --message "Release $version" "$tag"
+
+echo "Preparing sdists and wheels"
+for pkg_dir in . $subpkgs_dirs
+do
+  cd $pkg_dir
+
+  python setup.py clean
+  rm -rf build dist
+  python setup.py sdist
+  python setup.py bdist_wheel
+
+  echo "Signing ($pkg_dir)"
+  for x in dist/*.tar.gz dist/*.whl
+  do
+      gpg2 --detach-sign --armor --sign $x
+  done
+
+  cd -
+done
+
+mkdir "dist.$version"
+mv dist "dist.$version/letsencrypt"
+for pkg_dir in $subpkgs_dirs
+do
+  mv $pkg_dir/dist "dist.$version/$pkg_dir/"
+done
+
+echo "Testing packages"
+cd "dist.$version"
+# start local PyPI
+python -m SimpleHTTPServer $PORT &
+# cd .. is NOT done on purpose: we make sure that all subpacakges are
+# installed from local PyPI rather than current directory (repo root)
+virtualenv --no-site-packages ../venv
+. ../venv/bin/activate
+# Now, use our local PyPI. --pre allows installation of pre-release (incl. dev)
+pip install \
+  --pre \
+  --extra-index-url http://localhost:$PORT \
+  letsencrypt $SUBPKGS
+# stop local PyPI
+kill $!
+
+# freeze before installing anythin else, so that we know end-user KGS
+mkdir kgs
+kgs="kgs/$version"
+pip freeze | tee $kgs
+pip install nose
+# TODO: letsencrypt_apache fails due to symlink, c.f. #838
+nosetests letsencrypt $SUBPKGS || true
+
+echo "New root: $root"
+echo "KGS is at $root/$kgs"
+echo "In order to upload packages run the following command:"
+echo twine upload "$root/dist.$version/*/*"