Simplify deployment process in .ci.deploy.sh

Refactor deployment script to combine decryption and Maven execution into a single Docker run command, ensuring OpenSSL is installed as needed.

Author: cjneasbi

.ci.deploy.sh

@@ -22,18 +22,8 @@ git config --local user.name "github-actions[bot]"
 mkdir -p "${HOME}/.m2"
 cp .ci.settings.xml "${HOME}"/.m2/settings.xml
 
-# First run: decrypt secrets using alpine/openssl image
-docker run --rm -v "${PWD}":/usr/src/build \
-                -w /usr/src/build \
-                -e encrypted_96e73e3cb232_key \
-                -e encrypted_96e73e3cb232_iv \
-                -e encrypted_00fae8efff8c_key \
-                -e encrypted_00fae8efff8c_iv \
-                --entrypoint "" \
-                alpine/openssl \
-                /bin/sh .ci.prepare-ssh-gpg.sh
-
-# Second run: setup keys and execute maven command using the current image
+# Execute decryption, setup keys and execute maven command using a single image
+# We install openssl in case it's missing in the maven image
 docker run --rm -v "${PWD}":/usr/src/build \
                 -v "${HOME}/.m2":/root/.m2 \
                 -w /usr/src/build \
@@ -46,7 +36,7 @@ docker run --rm -v "${PWD}":/usr/src/build \
                 -e GPG_KEY_NAME \
                 -e GPG_PASSPHRASE \
                 maven:3.9-eclipse-temurin-"${JDK_VERSION}" \
-                /bin/bash -c "cd dockerfile-image-update && mvn --quiet --batch-mode deploy -P release scm:tag -Drevision=${NEW_PATCH_VERSION}"
+                /bin/bash -c "apt-get update && apt-get install -y openssl && source .ci.prepare-ssh-gpg.sh && cd dockerfile-image-update && mvn --quiet --batch-mode deploy -P release scm:tag -Drevision=${NEW_PATCH_VERSION}"
 
 # Get MVN_VERSION
 MVN_VERSION=$(cat ./dockerfile-image-update/target/classes/version.txt)