Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

pulp_devel: Implement support for signing service script #371

Closed
wants to merge 1 commit into from

Conversation

mikedep333
Copy link
Member

being copied & registered.

This is in pulp_devel because the signing service is not in
its permanent packaging. This is a temporary installation
method.

Fixes: #7247
https://pulp.plan.io/issues/7247
As a pulp_installer developer-user, the pulp_rpm signing service will be installed for me

Related to 4812
https://pulp.plan.io/issues/4812
As a user, I can publish a Yum repository that works with repo_gpgcheck=1 (Signed Repositories)

@pulpbot
Copy link
Member

pulpbot commented Jul 30, 2020

WARNING!!! This PR is not attached to an issue. In most cases this is not advisable. Please see our PR docs for more information about how to attach this PR to an issue.

Copy link
Member

@fao89 fao89 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!
I believe once the changelogs entries are added, the CI will pass

Comment on lines +4 to +5
# Maintain parity with:
# https://github.com/pulp/pulp_rpm/blob/master/.travis/post_before_script.sh
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nice!

@mikedep333 mikedep333 force-pushed the rpm_signing_service branch 18 times, most recently from e4d7be2 to 547524d Compare August 6, 2020 18:57
@mikedep333 mikedep333 requested a review from fao89 August 6, 2020 19:48
changed_when: '"secret keys imported: 1" in result.stderr'
become: true
become_user: "{{ pulp_user }}"
when: not ansible_check_mode
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@fao89 This was the fix. It is documented here.

being copied & registered.

This is in pulp_devel because the signing service is not in
its permanent packaging. This is a temporary installation
method.

fixes: #7247
https://pulp.plan.io/issues/7247
As a pulp_installer developer-user, the pulp_rpm signing service will be installed for me

Related to 4812
https://pulp.plan.io/issues/4812
As a user, I can publish a Yum repository that works with repo_gpgcheck=1 (Signed Repositories)
- name: Copy the signing service script to {{ __pulp_devel_rpm_sign_script_path }}
copy:
src: >-
{{ pulp_install_plugins_normalized['pulp-rpm'].source_dir | default (developer_user_home ~ '/devel/pulp_rpm')
Copy link
Member Author

@mikedep333 mikedep333 Jun 2, 2021

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

These 3 syntax examples will be very useful in the future:

  • Eliminating the outer quotes with a block
  • The use of default() with a variable
  • The concatenation of the variable with the string

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

However, this file will only be executed, if pulp_install_plugins_normalized['pulp-rpm'].source_dir is defined...

{{ pulp_django_admin_path }} shell -c
"from pulpcore.app.models.content import AsciiArmoredDetachedSigningService;
AsciiArmoredDetachedSigningService.objects.create(name='sign-metadata',
script='{{ __pulp_devel_rpm_sign_script_path }}')"
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

can you try using pulpcore-manager add-signing-service here?

@mikedep333
Copy link
Member Author

I intend to work on this at some point, but I don't want to keep the PR open.

So I am going to close it.

@mikedep333 mikedep333 closed this Sep 29, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants