Hi Christian, On Mon, 2020-04-20 at 19:26 +0200, Christian wrote:
Am 20.04.20 um 11:46 schrieb Hans-Peter Jansen:
Does "GPG Key / SSL Certificate" dialog provide both buttons <GPG Key> and <SSL Cert.> for you, or just the former?
Please have a look here: https://paste.opensuse.org/22077495
and here: https://paste.opensuse.org/64193109
Looks like 'SSL' is missing, isn't it ?
Yes, this is why I had requested [1] you to run "osc signkey --sslcert --create" command. This will create a SSL certificate for your project where you want to build your kernel / kernel module packages. I was replying to your previous email - I'll merge that reply here since it is related: On Mon, 2020-04-20 at 11:27 +0200, Christian wrote:
my signer is up and running and signing ... just not the 'kernel built stuff'
something missing for the kernel stuff ?
You need to create a SSL certificate for your project ... snipped because I've covered it above.
what is confusing to me ...: [ 50s] warning: No buildservice project certificate found,
I wasn't aware that I need a project 'certificate' ... and where is it on openSUSE.org ?
You should find it in the project / package page - just like Pete pointed out and you have found out that SSL certificate is missing.
I can't find anything helpful in docs, wiki or READMEs ... Any help from the OBS guys would be really apreciated.
Once you have a SSL certificate and GPG pubkey for your project, you can now attempt a kernel build. In other words, you need to make sure that following files exists for your project on the backend: /srv/obs/projects/<project-name>.pkg/_pubkey /srv/obs/projects/<project-name>.pkg/_signkey /srv/obs/projects/<project-name>.pkg/_sslcert Now, in the spec file of your kernel (or kernel module package (KMP)), you need to make sure that you have "# needssslcertforbuild" before the preamble. For example, look at line #17 here: https://build.opensuse.org/package/view_file/openSUSE:Factory/kernel-default... A couple of points to note: 1. If you (or a user) branch the kernel package, then build will fail because of missing SSL certificate. In that case, you need to remove "# needssslcertforbuild" line from the spec file. 2. From what I've seen (I could be wrong though) local builds might fail. From the code that I've read, only bs_worker understands needssslcertforbuild. If you want to solve this, then you might have to package the certificate file along with package sources. Hope this helps. Regards, Srinidhi. [1] https://lists.opensuse.org/opensuse-buildservice/2020-04/msg00047.html