[opensuse-buildservice] OBS + KIWI - manually calculating and signing SHA256 checksum files
Hi, everyone! As I discussed on the KIWI mailing list / Google group, I'm using OBS + KIWI to build an ISO image with a custom file name: Is it possible to customize ISO file name? https://groups.google.com/forum/#!topic/kiwi-images/oJyfcZfTdQs I'm using the kiwi_post_run script, inside the live-kiwi-hook package, to rename the ISO image and related files, such as the SHA256 checksum. But even though the checksum file is renamed correctly, the name of the ISO file inside it is wrong. Changing it (e.g. using sed) is not possible, because the checksum file is signed. I'm trying to recreate the checksum file and sign it inside the kiwi_post_run script, but GPG complains it has no secret key. Where can I find (i.e. the file path of) the GPG key used by OBS to sign the checksum file? How can I reference that file inside my kiwi_post_run script? Thanks! Antonio The Linux Kamarada Project http://kamarada.github.io/ -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org
On Fri, Dec 13, 2019 at 1:28 PM Linux Kamarada
I'm trying to recreate the checksum file and sign it inside the kiwi_post_run script, but GPG complains it has no secret key.
Where can I find (i.e. the file path of) the GPG key used by OBS to sign the checksum file? How can I reference that file inside my kiwi_post_run script?
Do you know what I discovered by accident? If I just recreate the checksum file (i.e. using sha256sum inside kiwi_post_run), it ends up signed somehow. Links: - the script that renames the image and recalculates the checksum (it does not sign the checksum file): https://build.opensuse.org/package/view_file/home:kamarada:15.1/live-kiwi-ho... - the built image and its checksum file (signed): https://build.opensuse.org/package/binaries/home:kamarada:15.1/Linux-Kamarad... Anyone who knows the internals of OBS could confirm that OBS signs the file itself? The problem was solved anyway. Thanks! Antonio The Linux Kamarada Project http://kamarada.github.io/ -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org
participants (1)
-
Linux Kamarada