VIB signing

[pdhamdhere]

ESX VIB is not signed. Need to setup process to sign VIB automatically for each tagged release.

RPM and Deb files also need signing. Please see #273 (comment)

[kerneltime]

Signing is not limited to vib, vmware also signs rpms and general gpg signing.
We will need to mirror the github repo internally and sign the releases.
The releases will then have to uploaded to bintray and releases page on github.
We should spend the time to automate this as far as possible so that a tagging event in github will result in signed release on github and bintray.
We plan to do this work post TP.

[kerneltime]

We have a solution for signing the artifacts for the upcoming beta. A more formal workflow is being worked on for GA. Once the binaries are built, I will upload the signed binaries to github releases.

[pdhamdhere]

Let's keep it open until we figure out a process to sign binaries.

[shuklanirdesh82]

starting vDVS 0.13 we are recommending to use managed docker volume plugin by pulling from docker store so updating the title to have signing only for VIB.

[shuklanirdesh82]

when the artifacts is ready for VIB, it will be signed by vmware EE team. Following each releases, signed VIB should be uploaded to bintray for download.