Commit graph

175 commits

Author SHA1 Message Date
fd17adce36 Branch Fedora 42 from Rawhide
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2025-02-04 15:02:50 +00:00
fb06fb5d5c Resign f42 builds with f43 key
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2025-01-30 09:50:15 +00:00
8fa1e3de8c robosignatory: autosign f42 mass rebuild tag
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-01-13 15:01:00 -08:00
d279fdc48d autosign: remove f39 from signing
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-11-26 11:02:58 -08:00
Paul Whalen
912cac3238 IoT: sign stable with f41 key
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-10-25 15:04:23 -04:00
8a0f0dae94 robosignatory: switch eln to fedora-42 key
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-08-14 14:30:32 -07:00
0e4e647574 robosignatory: also allow resigning f42 tagged packages
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-08-13 08:04:33 -07:00
5096677f85 make robosignatory changes for f41 branching
Remove resigning of 41 keys with 42; updated artificats to f41 and rawhide to f42;
updated infra-candidate/openh264 for new f42; f41 signing pending, buildsidetags etc

Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2024-08-13 14:13:43 +00:00
d967d2ae46 robosignatory: fix f42 key signing
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-08-08 07:13:47 -07:00
509e3fe2d2 Resign f41 builds with f42
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-08-08 06:20:32 -07:00
e99d5ce645 robosignatory: f41-rebuild auto signing mass rebuild tag as builds happen
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2024-07-16 09:45:58 +00:00
d11f9c5ced epel7 retirement
Drop epel7 all the places in ansible where it is and makes sense.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-07-03 20:00:59 +00:00
james02135
e244c454d8 Add epel-10 sidetag signing
Signed-off-by: james02135 <james02135@hotmail.com>
2024-06-20 13:05:57 +00:00
james02135
9f5ab7b7b6 robosignatory: Use epel-10 key for appropriate tags
Signed-off-by: james02135 <james02135@hotmail.com>
2024-06-17 09:53:48 +00:00
ac33b4287a robosignatory: sign f41-perl side tag
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2024-05-28 17:47:31 +00:00
f4d3bf434b robosignatory: sign f41-python side tag
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2024-05-28 17:47:31 +00:00
d366194a22 module-build-service (mbs): retire service
With the EOL of Fedora 38 yesterday, we are no longer building any
modules and can retire our module build service.

Note that toddlers needs to be adjusted still, that will happen after
this.

Thanks for all the modules!

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-05-22 13:38:53 -07:00
9438b39fd1 F38 is EOL
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2024-05-21 14:33:13 +00:00
Paul Whalen
4a8c9ecf96 IoT: Sign stable with f40 key
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-04-22 12:53:38 -04:00
Patrik Polakovič
0d507b06ca Add EPEL9 to robosignatory config
Signed-off-by: Patrik Polakovič <ppolakov@redhat.com>
2024-03-27 22:46:17 +00:00
b0ade05e86 robosignatory: re-enable f40/branched updates flow
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-02-14 11:33:25 -08:00
a4900613e7 robosignatory: iot 'stable' should be using f39 key, not f40
This was a branching mistake. iot stable releases should follow the
current stable release, not switch with branching.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-02-14 11:27:14 -08:00
0f082fd3bc robosignatory: switch eln over to fedora-41 signing
eln tracks rawhide, so switch it over to fedora-41 key as well.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-02-13 15:24:53 -08:00
a537aefc31 robosignatory: clean up old releases, drop old comments, reformat to be more readable add more comments
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-02-13 15:21:25 -08:00
de072aac57 robosignatory: disable signing of f40 updates until we have a branched compose
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-02-13 10:52:35 -08:00
8fa8129e80 make robosignatory changes for branching
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2024-02-13 13:12:33 +00:00
ebd01fab62 robosignatory: small fixes
Fix the fedora-41 key, had too many characters there.
Also, the add-key script needs to be readable by the robosignatory user,
so it can't be mode 711.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-02-08 15:35:31 -08:00
100c9b484d robosignatory: resign f40 tagged packages with f41 key
This is to prep for branching next week.
We want to set this so we can tell robosgnatory to resign all the f40
tagged packages with f41. Also, newly tagged packages will also be
signed, so by the time we branch everything should be signed for both
branched (f40) and new rawhide (f41).

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-02-08 15:18:44 -08:00
0bb87a53e2 autosign: this should be autosign02 in prod now
Just use the short inventory name here so it works in prod and stg.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-01-30 09:53:19 -08:00
fc8920750b robosignatory: f40-rebuild auto signing mass rebuild tag as builds happen
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2024-01-17 16:59:31 +00:00
2d4220c9e9 Fedora 37 is EOL
Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
2023-12-05 17:09:44 +01:00
ed45352045 robosignatory: sign stable iot with f39 key
Also drop 32bit arm signing info.

See https://pagure.io/releng/issue/11768

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-11-08 22:49:38 +00:00
700f1db5e3 robosignatory: switch eln to f40 signing
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-08-09 08:44:46 -07:00
218c89db5c make robosignatory changes for branching
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2023-08-08 19:46:38 +00:00
1dd91a8543 init: remove modularity
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2023-08-03 09:28:43 +00:00
4d76ccac6b autosign: setup to resign f39 packages with f40 key before branching
Branching of f39 is next week, so we need to resign most of everything
with the f40 key so rawhide can be signed after branching.
we will need to make another pass after this one is done.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-08-03 01:20:45 -07:00
9fd21ff5d1 robosignatory: fix to use right key for rebuild
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-19 08:02:26 -07:00
e525521345 robosignatory: signing for f39-rebuild tag
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-18 17:49:11 -07:00
9784ace94c
Robosig: don't prefetch so that priorities can work their magic
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2023-06-27 18:17:40 +02:00
627b39112f Add signing for f39-perl sidetag
Fix the key

Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
2023-06-15 20:53:58 +00:00
9673a0f445 robosignatory: fix name of key for f39-python sidetag signing
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-13 15:13:18 -07:00
d601017cad Update roles/robosignatory/templates/robosignatory.toml.j2 2023-06-06 16:50:12 +00:00
cc3715271d Enable signing for f39-python sidetag
Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
2023-06-06 16:45:34 +00:00
700488dfc7 robosignatory: drop eol ostree signing and add onyx
We should not need to sign f33/34/35/36 anymore, so drop those.

Add the new onyx variant for rawhide.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-05-27 14:29:28 -07:00
725150cf6b [f36-eol] Make changes to robosignatory for 36 eol
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2023-05-16 15:56:28 +05:30
9a664eadb5 robosignatory: fix key for f38-infra
This should be the infra key, not the normal f38 one.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-04-28 09:29:38 -07:00
35fb511e18 robosignatory: adjust iot so it can release.
We update the stable signing refs here for iot release
Fixes releng 11389

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-04-18 11:58:31 -07:00
597f85aa21 Retire epel8-modular
Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
2023-03-28 15:09:06 +00:00
749d6f395a robosignatory: add sericea ostree signing for all arches and testing and updates repos
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-03-16 20:37:24 -07:00
32eb660981 Fedora 38 Bodhi enablement and Beta freeze
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2023-02-21 14:05:55 +00:00