Mailinglist Archive: opensuse-buildservice (351 mails)

< Previous Next >
Re: [opensuse-buildservice] How can i setup package signing on local obs?
  • From: Christian <chris@xxxxxxxxxxxxxxxx>
  • Date: Thu, 10 Jul 2008 13:22:28 +0000
  • Message-id: <48760D14.1080309@xxxxxxxxxxxxxxxx>
Hi Michael,

sorry, your right, I did 'chmod 4750'. Don't know why I wrote '2750'.
-rwsr-x--- 1 root obsrun 54905 2008-06-25 21:21 sign*

but "allowuser:" should be "obsrun", shouldn't it ?
- snip of obs-server.spec -
/usr/sbin/useradd -r -o -s /bin/false -c "User for build service backend" -d /usr/lib/obs -g obsrun obsrun
- snip of obs-server.spec -


Michael Schroeder schrieb:
On Wed, Jul 09, 2008 at 10:19:51PM +0000, Christian wrote:

'/root/bin/sign' is nonsense. "obsrun" will never be able to execute this file (Permission denied).
so placing it to '/usr/bin' (755,root,root) will not work at all, because "binderesvport: Permission denied"

but chown root:obsrun, and chmod 2750 will then allow signing packages.

If this is not the right way, i'm willing to learn the right one.

You probably mean 'chmod 4750'. And /etc/sign.conf must include
"allowuser: bsrun" to tell sign that "bsrun" may use sign.


To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse-buildservice+help@xxxxxxxxxxxx

< Previous Next >
Follow Ups