Am Dienstag, 8. Januar 2013, 17:36:47 schrieb Stanislav Brabec:
Jan Engelhardt wrote:
On Tuesday 2013-01-08 16:43, Stanislav Brabec wrote:
OK, now I understood - create pools in cases, where it makes a sense.
It is easy to do for %prep phase validation. Just add keyring package to BuildRequires and use %gpg_offline with -f. I can prepare some support for it.
But it makes validation from inside a Build Service a bit more complicated, at the keyring is not part of sources and OBS would fetch the keyring from somewhere.
The keyring would be part of another package which in turn is in OBS. No problem there, would there be..
If I understand correctly, obs service run before the build environment is created. Everything needed for service files has to be part of the build virtual engine image. On the other hand, services have a network access.
It would be similar to the source validator. The trusted keys are installed on developers workstation and also on the service server. If the package on the developers workstation is not in sync with the server (or factory-auto bot) it might be the case that he can commit, but the submit request will be declined (or vice versa). Not nice but not a big problem. We just need to ensure that the factory review bot has always the current valid version with trusted keys. As usual you can skip local services, but you would have extra work since the request gets declined and must be fixed in a second step.
-- Adrian Schroeter SUSE Linux Products GmbH email: adrian@suse.de -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org