On Fri, May 28, 2010 at 20:24, Marcus Hüwe
On 2010-05-28 18:19:47 -0600, Troy Telford wrote:
I've noted a slightly old thread where somebody asked about how to use obssigner or obssignd. However, the problem was that there wasn't any documentation; and there wasn't any discussion on how to set up the signer.
I was the one who asked that.
I'd be more than willing to help document the process on the build service wikis -- if only I knew how to set it up. I can't find any documentation on how to configure obssigner.
I've actually managed to get it working, after a few months >.>"
I've uncommented: our $sign = '/usr/bin/sign'; from BSConfig.pm
I've tried putting the following into my /etc/sign.conf: ### for build service host server:
user: obsbuild@foo.com allowuser: obsrun # ### for sign server #allow: <IP of your build service host> allow: #phrases: /root/.phrases When I start /etc/init.d/obssignd, it starts without throwing an error. After I start /etc/init.d/obssigner, there is a new logfile created in: /srv/obs/log/signer.log
This logfile has the following contents: Name "BSConfig::sign_project" used only once: possible typo at /usr/lib/obs/server//bs_signer line 96. starting build service signer waiting for an event...
When I try to create a key (from a project I've checked out), I get: ~/src/obs/myproject$ osc signkey --create Server returned an error: HTTP Error 404: Not Found don't know how to create a key
Did you restart the srcserver after modifying the BSConfig.pm? This message indicates that $sign isn't defined in BSConfig.pm.
What I did: in BSConfig.pm our $gpg_standard_key = "/etc/alst.asc"; our $sign = '/usr/bin/sign'; #Extend sign call with project name as argument "--project $NAME" # ** Let's not, sign doesn't support it O_O our $sign_project = 0; #Global sign key our $keyfile = '/etc/alst.asc'; #Create a key by default for new projects, if top level have not one our $forceprojectkeys = 1; Then in /etc/sign.conf user: software@lincomlinux.org allowuser: obsrun allow: 127.0.0.1 phrases: /root/.phrases And finally, in /etc/permissions.d/sign /usr/bin/sign root:root 4755 Whoever packaged obssignd needs to correct the permissions on it. -- later, Robert Xu -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-buildservice+help@opensuse.org