Add --sign option to `luarocks pack`

* Introduce a new module, `luarocks.signing`
* Add `--sign` option to `luarocks pack`, which produces a
  detached GPG signature
* Includes a basic test, along with some fixtures with
  a password-less GPG key

1 files changed, 10 insertions, 0 deletions

diff --git a/spec/pack_spec.lua b/spec/pack_spec.lua
index 08647cfb..8b3612db 100644
--- a/spec/pack_spec.lua
+++ b/spec/pack_spec.lua
@@ -50,6 +50,16 @@ describe("LuaRocks pack #integration", function()
       assert(test_env.remove_files(lfs.currentdir(), "say%-"))
    end)
 
+   pending("#gpg --sign", function()
+      assert(run.luarocks_bool("install say 1.2"))
+      assert(run.luarocks_bool("install luassert"))
+      assert(run.luarocks_bool("install say 1.0"))
+      assert(run.luarocks_bool("pack say --sign"))
+      assert.is_truthy(lfs.attributes("say-1.2-1.all.rock"))
+      assert.is_truthy(lfs.attributes("say-1.2-1.all.rock.asc"))
+      assert(test_env.remove_files(lfs.currentdir(), "say%-"))
+   end)
+
    describe("#mock", function()
 
       setup(function()