WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-05-03 17:52:28 +08:00
Code Issues Packages Projects Releases Wiki Activity
41,474 Commits 9 Branches 0 Tags
289bda56985f9cf20ff56b091e367a3e94de24ff
Commit Graph

322 Commits

Author SHA1 Message Date
Samyak Jain
e99d5ce645 robosignatory: f41-rebuild auto signing mass rebuild tag as builds happen 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2024-07-16 09:45:58 +00:00
Kevin Fenzi
d11f9c5ced epel7 retirement 
Drop epel7 all the places in ansible where it is and makes sense.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-07-03 20:00:59 +00:00
james02135
e244c454d8 Add epel-10 sidetag signing 
Signed-off-by: james02135 <james02135@hotmail.com>
 2024-06-20 13:05:57 +00:00
james02135
9f5ab7b7b6 robosignatory: Use epel-10 key for appropriate tags 
Signed-off-by: james02135 <james02135@hotmail.com>
 2024-06-17 09:53:48 +00:00
Samyak Jain
ac33b4287a robosignatory: sign f41-perl side tag 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2024-05-28 17:47:31 +00:00
Samyak Jain
f4d3bf434b robosignatory: sign f41-python side tag 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2024-05-28 17:47:31 +00:00
Kevin Fenzi
d366194a22 module-build-service (mbs): retire service 
With the EOL of Fedora 38 yesterday, we are no longer building any
modules and can retire our module build service.

Note that toddlers needs to be adjusted still, that will happen after
this.

Thanks for all the modules!

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-05-22 13:38:53 -07:00
Samyak Jain
9438b39fd1 F38 is EOL 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2024-05-21 14:33:13 +00:00
Paul Whalen
4a8c9ecf96 IoT: Sign stable with f40 key 
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
 2024-04-22 12:53:38 -04:00
Patrik Polakovič
0d507b06ca Add EPEL9 to robosignatory config 
Signed-off-by: Patrik Polakovič <ppolakov@redhat.com>
 2024-03-27 22:46:17 +00:00
Kevin Fenzi
b0ade05e86 robosignatory: re-enable f40/branched updates flow 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-02-14 11:33:25 -08:00
Kevin Fenzi
a4900613e7 robosignatory: iot 'stable' should be using f39 key, not f40 
This was a branching mistake. iot stable releases should follow the
current stable release, not switch with branching.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-02-14 11:27:14 -08:00
Kevin Fenzi
0f082fd3bc robosignatory: switch eln over to fedora-41 signing 
eln tracks rawhide, so switch it over to fedora-41 key as well.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-02-13 15:24:53 -08:00
Kevin Fenzi
a537aefc31 robosignatory: clean up old releases, drop old comments, reformat to be more readable add more comments 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-02-13 15:21:25 -08:00
Kevin Fenzi
de072aac57 robosignatory: disable signing of f40 updates until we have a branched compose 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-02-13 10:52:35 -08:00
Samyak Jain
8fa8129e80 make robosignatory changes for branching 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2024-02-13 13:12:33 +00:00
Kevin Fenzi
ebd01fab62 robosignatory: small fixes 
Fix the fedora-41 key, had too many characters there.
Also, the add-key script needs to be readable by the robosignatory user,
so it can't be mode 711.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-02-08 15:35:31 -08:00
Kevin Fenzi
100c9b484d robosignatory: resign f40 tagged packages with f41 key 
This is to prep for branching next week.
We want to set this so we can tell robosgnatory to resign all the f40
tagged packages with f41. Also, newly tagged packages will also be
signed, so by the time we branch everything should be signed for both
branched (f40) and new rawhide (f41).

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-02-08 15:18:44 -08:00
Kevin Fenzi
0bb87a53e2 autosign: this should be autosign02 in prod now 
Just use the short inventory name here so it works in prod and stg.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-01-30 09:53:19 -08:00
Kevin Fenzi
c764d1ea86 autosign: adjust playbooks for prod 
We need to setup things in prod slightly differently, using keyctl.
Copy in the service and scripts.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-01-30 09:33:45 -08:00
Samyak Jain
fc8920750b robosignatory: f40-rebuild auto signing mass rebuild tag as builds happen 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2024-01-17 16:59:31 +00:00
Tomas Hrcka
2d4220c9e9 Fedora 37 is EOL 
Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
 2023-12-05 17:09:44 +01:00
Kevin Fenzi
ed45352045 robosignatory: sign stable iot with f39 key 
Also drop 32bit arm signing info.

See https://pagure.io/releng/issue/11768

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-08 22:49:38 +00:00
Kevin Fenzi
700f1db5e3 robosignatory: switch eln to f40 signing 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-08-09 08:44:46 -07:00
Samyak Jain
218c89db5c make robosignatory changes for branching 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2023-08-08 19:46:38 +00:00
Samyak Jain
1dd91a8543 init: remove modularity 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2023-08-03 09:28:43 +00:00
Kevin Fenzi
4d76ccac6b autosign: setup to resign f39 packages with f40 key before branching 
Branching of f39 is next week, so we need to resign most of everything
with the f40 key so rawhide can be signed after branching.
we will need to make another pass after this one is done.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-08-03 01:20:45 -07:00
Kevin Fenzi
9fd21ff5d1 robosignatory: fix to use right key for rebuild 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-07-19 08:02:26 -07:00
Kevin Fenzi
e525521345 robosignatory: signing for f39-rebuild tag 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-07-18 17:49:11 -07:00
Aurélien Bompard
6ed2d3ab2d Robosig: restart on config changes 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-06-27 18:23:40 +02:00
Aurélien Bompard
9784ace94c Robosig: don't prefetch so that priorities can work their magic 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-06-27 18:17:40 +02:00
Tomas Hrcka
627b39112f Add signing for f39-perl sidetag 
Fix the key

Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
 2023-06-15 20:53:58 +00:00
Kevin Fenzi
9673a0f445 robosignatory: fix name of key for f39-python sidetag signing 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-13 15:13:18 -07:00
Tomáš Hrčka
d601017cad Update roles/robosignatory/templates/robosignatory.toml.j2 2023-06-06 16:50:12 +00:00
Tomas Hrcka
cc3715271d Enable signing for f39-python sidetag 
Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
 2023-06-06 16:45:34 +00:00
Kevin Fenzi
700488dfc7 robosignatory: drop eol ostree signing and add onyx 
We should not need to sign f33/34/35/36 anymore, so drop those.

Add the new onyx variant for rawhide.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-05-27 14:29:28 -07:00
Samyak Jain
725150cf6b [f36-eol] Make changes to robosignatory for 36 eol 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2023-05-16 15:56:28 +05:30
Kevin Fenzi
9a664eadb5 robosignatory: fix key for f38-infra 
This should be the infra key, not the normal f38 one.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-04-28 09:29:38 -07:00
Kevin Fenzi
35fb511e18 robosignatory: adjust iot so it can release. 
We update the stable signing refs here for iot release
Fixes releng 11389

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-04-18 11:58:31 -07:00
Tomas Hrcka
597f85aa21 Retire epel8-modular 
Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
 2023-03-28 15:09:06 +00:00
Kevin Fenzi
749d6f395a robosignatory: add sericea ostree signing for all arches and testing and updates repos 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-03-16 20:37:24 -07:00
Samyak Jain
32eb660981 Fedora 38 Bodhi enablement and Beta freeze 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2023-02-21 14:05:55 +00:00
Kevin Fenzi
de219ace6b robosignatory: fix a few more typos 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-02-13 08:57:15 -08:00
Kevin Fenzi
17a83f33e2 robosignatory: fix the boneheaded mistake that took me hours to find 
When I pushed this config, I forgot to change fedora-39 to fedora-38.
This amusingly caused signing to fail in a completely non obvious way.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-02-09 15:42:35 -08:00
Kevin Fenzi
a1463e1b3e robosignatory: fix up config for f38/f39/eln 
Added some comments, made sure all releases had the needed config.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-02-09 11:56:56 -08:00
Kevin Fenzi
f391d8dd45 robosignatory: fix typo and add resigning 
There was a typo and we were resigning eln with f38 ima key instead of
f39 one. ;( Fixed

Also added f38/f39 retag signing so we can get everything signed with
the right keys.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-02-08 13:29:47 -08:00
Tomas Hrcka
ce8a92b311 Uncomment f37 tags 
Update f39 key

Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
 2023-02-08 20:53:04 +01:00
Samyak Jain
549e5d3ace Branch Fedora 38 from rawhide 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2023-02-08 20:30:05 +01:00
Kevin Fenzi
337285c85f autosign: switch eln to sign things already in it's tag with f39 key 
This will allow us to resign everything with this new key.
Normal builds shouldn't be using it as they come via bodhi.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-02-07 16:49:02 -08:00
Kevin Fenzi
d456669e4b robosignatory: disable f38 resigning section 
If this is there, robosignatory will see two 'from: f38's and error out.
We no longer need to resign f38, so drop this at least for now.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-01-31 13:54:19 -08:00