Mailinglist Archive: opensuse-buildservice (266 mails)

< Previous Next >
Re: [opensuse-buildservice] obs-service-gpg-offline
  • From: Adrian Schröter <adrian@xxxxxxx>
  • Date: Tue, 08 Jan 2013 20:28:16 +0100
  • Message-id: <1469660.db7WgLGyyD@scherben>
Am Dienstag, 8. Januar 2013, 17:36:47 schrieb Stanislav Brabec:
Jan Engelhardt wrote:
On Tuesday 2013-01-08 16:43, Stanislav Brabec wrote:

OK, now I understood - create pools in cases, where it makes a sense.

It is easy to do for %prep phase validation. Just add keyring package to
BuildRequires and use %gpg_offline with -f. I can prepare some support
for it.

But it makes validation from inside a Build Service a bit more
complicated, at the keyring is not part of sources and OBS would fetch
the keyring from somewhere.

The keyring would be part of another package which in turn is in OBS. No
problem there, would there be..

If I understand correctly, obs service run before the build environment
is created. Everything needed for service files has to be part of the
build virtual engine image. On the other hand, services have a network
access.

It would be similar to the source validator.

The trusted keys are installed on developers workstation and also on the service
server.

If the package on the developers workstation is not in sync with the server (or
factory-auto bot)
it might be the case that he can commit, but the submit request will be
declined (or vice versa).

Not nice but not a big problem. We just need to ensure that the factory review
bot has always the
current valid version with trusted keys.

As usual you can skip local services, but you would have extra work since the
request
gets declined and must be fixed in a second step.


--
Adrian Schroeter
SUSE Linux Products GmbH
email: adrian@xxxxxxx

--
To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@xxxxxxxxxxxx
To contact the owner, e-mail: opensuse-buildservice+owner@xxxxxxxxxxxx

< Previous Next >