New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
pulp_devel: Implement support for signing service script #371
Conversation
|
WARNING!!! This PR is not attached to an issue. In most cases this is not advisable. Please see our PR docs for more information about how to attach this PR to an issue. |
9a5b72f
to
00cae3d
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM!
I believe once the changelogs entries are added, the CI will pass
| # Maintain parity with: | ||
| # https://github.com/pulp/pulp_rpm/blob/master/.travis/post_before_script.sh |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Nice!
e4d7be2
to
547524d
Compare
| changed_when: '"secret keys imported: 1" in result.stderr' | ||
| become: true | ||
| become_user: "{{ pulp_user }}" | ||
| when: not ansible_check_mode |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
547524d
to
c25f510
Compare
c25f510
to
a476210
Compare
being copied & registered. This is in pulp_devel because the signing service is not in its permanent packaging. This is a temporary installation method. fixes: #7247 https://pulp.plan.io/issues/7247 As a pulp_installer developer-user, the pulp_rpm signing service will be installed for me Related to 4812 https://pulp.plan.io/issues/4812 As a user, I can publish a Yum repository that works with repo_gpgcheck=1 (Signed Repositories)
a476210
to
5c586f9
Compare
| - name: Copy the signing service script to {{ __pulp_devel_rpm_sign_script_path }} | ||
| copy: | ||
| src: >- | ||
| {{ pulp_install_plugins_normalized['pulp-rpm'].source_dir | default (developer_user_home ~ '/devel/pulp_rpm') |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
These 3 syntax examples will be very useful in the future:
- Eliminating the outer quotes with a block
- The use of default() with a variable
- The concatenation of the variable with the string
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
However, this file will only be executed, if pulp_install_plugins_normalized['pulp-rpm'].source_dir is defined...
| {{ pulp_django_admin_path }} shell -c | ||
| "from pulpcore.app.models.content import AsciiArmoredDetachedSigningService; | ||
| AsciiArmoredDetachedSigningService.objects.create(name='sign-metadata', | ||
| script='{{ __pulp_devel_rpm_sign_script_path }}')" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
can you try using pulpcore-manager add-signing-service here?
|
I intend to work on this at some point, but I don't want to keep the PR open. So I am going to close it. |
being copied & registered.
This is in pulp_devel because the signing service is not in
its permanent packaging. This is a temporary installation
method.
Fixes: #7247
https://pulp.plan.io/issues/7247
As a pulp_installer developer-user, the pulp_rpm signing service will be installed for me
Related to 4812
https://pulp.plan.io/issues/4812
As a user, I can publish a Yum repository that works with repo_gpgcheck=1 (Signed Repositories)