From 5dff72c903c873e767db3816ef53f9771e977d4e Mon Sep 17 00:00:00 2001
From: Matt Prahl <mprahl@redhat.com>
Date: Fri, 28 Oct 2016 16:09:47 -0400
Subject: [PATCH] Migrate Vagrant to use Kerberos auth instead of certs

---
 Vagrantfile | 30 +++++++++++++++++++++---------
 1 file changed, 21 insertions(+), 9 deletions(-)

diff --git a/Vagrantfile b/Vagrantfile
index 3e7ab10b..074726e8 100644
--- a/Vagrantfile
+++ b/Vagrantfile
@@ -2,27 +2,39 @@
 # vi: set ft=ruby :
 
 $script = <<SCRIPT
-    dnf install -y python python-virtualenv python-devel libffi-devel redhat-rpm-config openssl-devel gcc gcc-c++ koji git swig fedmsg-relay rpm-build python-mock
+    dnf install -y \
+        python \
+        python-virtualenv \
+        python-devel \
+        libffi-devel \
+        redhat-rpm-config \
+        openssl-devel \
+        gcc \
+        gcc-c++ \
+        koji \
+        git \
+        swig \
+        fedmsg-relay \
+        rpm-build \
+        python-mock \
+        krb5-workstation
     pip install -r /opt/module_build_service/src/requirements.txt
     pip install -r /opt/module_build_service/src/test-requirements.txt
     cd /opt/module_build_service/src
     mkdir -p /etc/module_build_service
-    cp -av koji.conf /etc/module_build_service/
-    cp -av copr.conf /etc/module_build_service/
+    ln -s /opt/module_build_service/koji.conf /etc/module_build_service/koji.conf
+    ln -s /opt/module_build_service/copr.conf /etc/module_build_service/copr.conf
+    ln -s /opt/module_build_service/krb5-stg.fp.o /etc/krb5.conf.d/stg_fedoraproject_org
     python manage.py upgradedb
     python manage.py generatelocalhostcert
-    cp /home/vagrant/.fedora-server-ca.cert /root/.fedora-server-ca.cert
-    cp /home/vagrant/.fedora-upload-ca.cert /root/.fedora-upload-ca.cert
-    cp /home/vagrant/.fedora.cert /root/.fedora.cert
     systemctl start fedmsg-relay
+    echo "export KRB5CCNAME=FILE:/var/tmp/krbcc" >> ~/.bashrc
 SCRIPT
 
 Vagrant.configure("2") do |config|
   config.vm.box = "boxcutter/fedora24"
   config.vm.synced_folder "./", "/opt/module_build_service/src"
-  config.vm.provision "file", source: "~/.fedora-server-ca.cert", destination: "~/.fedora-server-ca.cert"
-  config.vm.provision "file", source: "~/.fedora-upload-ca.cert", destination: "~/.fedora-upload-ca.cert"
-  config.vm.provision "file", source: "~/.fedora.cert", destination: "~/.fedora.cert"
+  config.vm.provision "file", source: "/var/tmp/krbcc", destination: "/var/tmp/krbcc", run: "always"
   config.vm.network "forwarded_port", guest: 5000, host: 5000
   config.vm.provision "shell", inline: $script
   config.vm.provision :shell, inline: "cd /opt/module_build_service/src && python manage.py runssl --debug &", run: "always"