On Wed, 11 Sept 2024 at 17:23, Neal Gompa <[email protected]> wrote:

> On Wed, Sep 11, 2024 at 11:16 PM Kevin Fenzi <[email protected]> wrote:
> >
> > Our containers are built in koji via the kiwi plugins.
> > At first, koji included the buildroot repo in building these, but this
> > has a unintended problem: the rpms in the buildroot are not signed, so
> > this causes the packages in the produced containers to not be signed. ;(
> >
> > See:
> > https://bugzilla.redhat.com/show_bug.cgi?id=2270397
> >
> > So, to fix this we had made a koji patch to not use the buildroot repo
> > when making kiwi containers, it was then tweaked and upstreamed, so we
> > dropped out patch and started using the upstream version, but
> > unfortunately it's not working for us because upstream there's a check
> > to use the old behavior for older koji versions (to avoid changing
> > people in a minor release).
> >
> > So, I would like to apply this:
> >
> > diff --git a/plugins/hub/kiwi.py b/plugins/hub/kiwi.py
> > index 4aeb1048..b9ad0c6a 100644
> > --- a/plugins/hub/kiwi.py
> > +++ b/plugins/hub/kiwi.py
> > @@ -17,7 +17,7 @@ koji.tasks.LEGACY_SIGNATURES['createKiwiImage'] = [
> >  @export
> >  def kiwiBuild(target, arches, desc_url, desc_path,
> optional_arches=None, profile=None,
> >                scratch=False, priority=None, make_prep=False,
> repos=None, release=None,
> > -              type=None, type_attr=None,
> result_bundle_name_format=None, use_buildroot_repo=True,
> > +              type=None, type_attr=None,
> result_bundle_name_format=None, use_buildroot_repo=False,
> >                version=None, repo_releasever=None):
> >      context.session.assertPerm('image')
> >      for i in [desc_url, desc_path, profile, version, release,
> repo_releasever]:
> >
> > to our f40-koji package and update the hubs.
> >
> > +1s?
> >
>

+1 from sysadmin-emeritus

>
> +1
>
>
>
> --
> 真実はいつも一つ!/ Always, there's only one truth!
> --
> _______________________________________________
> infrastructure mailing list -- [email protected]
> To unsubscribe send an email to
> [email protected]
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedoraproject.org/archives/list/[email protected]
> Do not reply to spam, report it:
> https://pagure.io/fedora-infrastructure/new_issue
>


-- 
Stephen Smoogen, Red Hat Automotive
Let us be kind to one another, for most of us are fighting a hard battle.
-- Ian MacClaren
-- 
_______________________________________________
infrastructure mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to