Some Useful Recipes

Audience

For the impatient.

Make a bash script to wrap the degasolv jar like this, making sure to make the script executable:

#!/bin/sh
# Filename: /usr/bin/degasolv
java -jar <location-of-degasolv.jar>/degasolv.jar "${@}"

Generate a card:

degasolv generate-card -i "name" -v "0.1.0" -l "https://example.com/repo/name-0.1.0.zip" -r "a-dep" -r "another-dep>=3.5.0" -C name-0.1.0.zip.dscard

BASH: Download each location, then its signature, and verify it:

#!/bin/sh
set -exou pipefail
degasolv resolve-locations -R ./index.dsrepo -r a -o json | \
    jq -r .packages[].location | \
    while read url
    do
        wget $url
        wget $url.asc
        gpg --verify $url.asc
    done