Commit Graph

15 Commits

Author SHA1 Message Date
Ryan Lerch
89f6f1fc32 Fix majority of remaining yamllint warnings and errors
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2024-11-28 17:31:45 +10:00
Kevin Fenzi
6a1c1e8d6b bkernel: token name has changed, adjust to new name
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-11-21 09:44:20 -08:00
Nils Philippsen
fad81b48af Install bkernel site-defaults.cfg from template
Otherwise, Jinja directives will be present verbatim. 😬

Signed-off-by: Nils Philippsen <nils@redhat.com>
2024-08-15 18:38:03 +02:00
Kevin Fenzi
b08a95a1d6 bkernel: we can't use the kojibuilder group because it uses mock group in the chroot
So, instead we need to user the kojibuilder user on the acl. That should
match up to the mockbuild user in the chroot.
Hopefully.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-02-01 12:15:30 -08:00
Kevin Fenzi
b4cf3d1cf0 bkernel: use more acls
We need also to allow pesign to the dir/socket so it can start and then
we need kojibuilder access to the socket too.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-02-01 10:59:32 -08:00
Kevin Fenzi
4e23d73129 bkernel: set pesign perms with acl instead of user/group
We have to use acls here because the mock chroot has it's own user/group
files and it dynamically adds users, but if we use acls it will look up
the user and do the right thing because the name is the same.
(Hopefully)

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-02-01 10:36:37 -08:00
Kevin Fenzi
50f413c3eb bkernel: set pesign perms locally now.
This used to get set in pesignd when it started, but upstream has
dropped that because it's more of a local config issue.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-02-01 09:39:18 -08:00
James Antill
b9f1c5b840 bkernel: Convert from dnf/with_items to package/name. 2019-06-11 15:02:03 +00:00
Kevin Fenzi
b1a2d105c9 In ansible 2.2 always_run is depreciated. Switch to check_mode. 2016-11-01 16:29:49 +00:00
Kevin Fenzi
d06960f64d drop this eth0 bkernel config here it is now done in base 2016-05-25 23:04:46 +00:00
Kevin Fenzi
760c446c77 Use present instead of latest and switch to dnf for bkernel packages. 2016-01-05 17:45:17 +00:00
Kevin Fenzi
7eb05308e7 Adjust the bkernel playbook for new pesign 2015-11-16 17:57:42 +00:00
Kevin Fenzi
504514d62e Some bkernel role fixes 2014-05-30 16:29:04 +00:00
Kevin Fenzi
dda7a6165b Set facls for pesign to work with mock 2014-05-29 17:33:41 +00:00
Kevin Fenzi
ad799abed9 Fold bkernel into buildhw with it's own role. 2014-05-29 16:24:09 +00:00