509e3fe2d2
Resign f41 builds with f42
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-08-08 06:20:32 -07:00
e99d5ce645
robosignatory: f41-rebuild auto signing mass rebuild tag as builds happen
...
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2024-07-16 09:45:58 +00:00
d11f9c5ced
epel7 retirement
...
Drop epel7 all the places in ansible where it is and makes sense.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-07-03 20:00:59 +00:00
james02135
e244c454d8
Add epel-10 sidetag signing
...
Signed-off-by: james02135 <james02135@hotmail.com>
2024-06-20 13:05:57 +00:00
james02135
9f5ab7b7b6
robosignatory: Use epel-10 key for appropriate tags
...
Signed-off-by: james02135 <james02135@hotmail.com>
2024-06-17 09:53:48 +00:00
ac33b4287a
robosignatory: sign f41-perl side tag
...
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2024-05-28 17:47:31 +00:00
f4d3bf434b
robosignatory: sign f41-python side tag
...
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2024-05-28 17:47:31 +00:00
d366194a22
module-build-service (mbs): retire service
...
With the EOL of Fedora 38 yesterday, we are no longer building any
modules and can retire our module build service.
Note that toddlers needs to be adjusted still, that will happen after
this.
Thanks for all the modules!
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-05-22 13:38:53 -07:00
9438b39fd1
F38 is EOL
...
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2024-05-21 14:33:13 +00:00
Paul Whalen
4a8c9ecf96
IoT: Sign stable with f40 key
...
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-04-22 12:53:38 -04:00
Patrik Polakovič
0d507b06ca
Add EPEL9 to robosignatory config
...
Signed-off-by: Patrik Polakovič <ppolakov@redhat.com>
2024-03-27 22:46:17 +00:00
b0ade05e86
robosignatory: re-enable f40/branched updates flow
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-02-14 11:33:25 -08:00
a4900613e7
robosignatory: iot 'stable' should be using f39 key, not f40
...
This was a branching mistake. iot stable releases should follow the
current stable release, not switch with branching.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-02-14 11:27:14 -08:00
0f082fd3bc
robosignatory: switch eln over to fedora-41 signing
...
eln tracks rawhide, so switch it over to fedora-41 key as well.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-02-13 15:24:53 -08:00
a537aefc31
robosignatory: clean up old releases, drop old comments, reformat to be more readable add more comments
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-02-13 15:21:25 -08:00
de072aac57
robosignatory: disable signing of f40 updates until we have a branched compose
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-02-13 10:52:35 -08:00
8fa8129e80
make robosignatory changes for branching
...
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2024-02-13 13:12:33 +00:00
ebd01fab62
robosignatory: small fixes
...
Fix the fedora-41 key, had too many characters there.
Also, the add-key script needs to be readable by the robosignatory user,
so it can't be mode 711.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-02-08 15:35:31 -08:00
100c9b484d
robosignatory: resign f40 tagged packages with f41 key
...
This is to prep for branching next week.
We want to set this so we can tell robosgnatory to resign all the f40
tagged packages with f41. Also, newly tagged packages will also be
signed, so by the time we branch everything should be signed for both
branched (f40) and new rawhide (f41).
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-02-08 15:18:44 -08:00
0bb87a53e2
autosign: this should be autosign02 in prod now
...
Just use the short inventory name here so it works in prod and stg.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-01-30 09:53:19 -08:00
fc8920750b
robosignatory: f40-rebuild auto signing mass rebuild tag as builds happen
...
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2024-01-17 16:59:31 +00:00
2d4220c9e9
Fedora 37 is EOL
...
Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
2023-12-05 17:09:44 +01:00
ed45352045
robosignatory: sign stable iot with f39 key
...
Also drop 32bit arm signing info.
See https://pagure.io/releng/issue/11768
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-11-08 22:49:38 +00:00
700f1db5e3
robosignatory: switch eln to f40 signing
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-08-09 08:44:46 -07:00
218c89db5c
make robosignatory changes for branching
...
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2023-08-08 19:46:38 +00:00
1dd91a8543
init: remove modularity
...
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2023-08-03 09:28:43 +00:00
4d76ccac6b
autosign: setup to resign f39 packages with f40 key before branching
...
Branching of f39 is next week, so we need to resign most of everything
with the f40 key so rawhide can be signed after branching.
we will need to make another pass after this one is done.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-08-03 01:20:45 -07:00
9fd21ff5d1
robosignatory: fix to use right key for rebuild
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-19 08:02:26 -07:00
e525521345
robosignatory: signing for f39-rebuild tag
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-18 17:49:11 -07:00
9784ace94c
Robosig: don't prefetch so that priorities can work their magic
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2023-06-27 18:17:40 +02:00
627b39112f
Add signing for f39-perl sidetag
...
Fix the key
Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
2023-06-15 20:53:58 +00:00
9673a0f445
robosignatory: fix name of key for f39-python sidetag signing
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-13 15:13:18 -07:00
d601017cad
Update roles/robosignatory/templates/robosignatory.toml.j2
2023-06-06 16:50:12 +00:00
cc3715271d
Enable signing for f39-python sidetag
...
Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
2023-06-06 16:45:34 +00:00
700488dfc7
robosignatory: drop eol ostree signing and add onyx
...
We should not need to sign f33/34/35/36 anymore, so drop those.
Add the new onyx variant for rawhide.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-05-27 14:29:28 -07:00
725150cf6b
[f36-eol] Make changes to robosignatory for 36 eol
...
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2023-05-16 15:56:28 +05:30
9a664eadb5
robosignatory: fix key for f38-infra
...
This should be the infra key, not the normal f38 one.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-04-28 09:29:38 -07:00
35fb511e18
robosignatory: adjust iot so it can release.
...
We update the stable signing refs here for iot release
Fixes releng 11389
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-04-18 11:58:31 -07:00
597f85aa21
Retire epel8-modular
...
Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
2023-03-28 15:09:06 +00:00
749d6f395a
robosignatory: add sericea ostree signing for all arches and testing and updates repos
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-03-16 20:37:24 -07:00
32eb660981
Fedora 38 Bodhi enablement and Beta freeze
...
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2023-02-21 14:05:55 +00:00
de219ace6b
robosignatory: fix a few more typos
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-02-13 08:57:15 -08:00
17a83f33e2
robosignatory: fix the boneheaded mistake that took me hours to find
...
When I pushed this config, I forgot to change fedora-39 to fedora-38.
This amusingly caused signing to fail in a completely non obvious way.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-02-09 15:42:35 -08:00
a1463e1b3e
robosignatory: fix up config for f38/f39/eln
...
Added some comments, made sure all releases had the needed config.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-02-09 11:56:56 -08:00
f391d8dd45
robosignatory: fix typo and add resigning
...
There was a typo and we were resigning eln with f38 ima key instead of
f39 one. ;( Fixed
Also added f38/f39 retag signing so we can get everything signed with
the right keys.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-02-08 13:29:47 -08:00
ce8a92b311
Uncomment f37 tags
...
Update f39 key
Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
2023-02-08 20:53:04 +01:00
549e5d3ace
Branch Fedora 38 from rawhide
...
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2023-02-08 20:30:05 +01:00
337285c85f
autosign: switch eln to sign things already in it's tag with f39 key
...
This will allow us to resign everything with this new key.
Normal builds shouldn't be using it as they come via bodhi.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-02-07 16:49:02 -08:00
d456669e4b
robosignatory: disable f38 resigning section
...
If this is there, robosignatory will see two 'from: f38's and error out.
We no longer need to resign f38, so drop this at least for now.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-01-31 13:54:19 -08:00
d4eeaa51b2
robosignatory: add f39 signing before branching
...
This is an attempt to allow us to sign f38 with the f39 key also in
addition to the f38 one. Using this we can make a ugly loop that signs
all the stuff in the f38 tag with the f39 key. (Hopefully)
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-01-31 13:07:39 -08:00
