Sidetag config gets the key/keyid to use to sign sidetags with from the
previous tag stanza. When this is after the one that has moved to the
fedora-46 key, it starts using fedora-46 to sign with. We don't want to
move to that until next week, so move this sidetag stanza up above the
fedora-46 using one.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
The old key we were using for old releases had some sha1 in it
somewhere, so rhel10 rejects it (great!). So, lets use a newly generated
key that is acceptable to rhel10 and much nicer.
This adds the public key file, the repos that use that file, the rhel10
post kickstart that sets up the repo, robosignatory to sign epel10-infra
stuff with this new key and finally on rhel10 hosts put the new repo in
place.
Note that this only changes the rhel10 setup, all rhel8/9 machines are
still using the old key. We may want to move them over, or just not care
as we retire all of them.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This reverts commit 4fdd0c9fca.
This causes robosignatory's priorities to not work.
We want to handle some requests before others, but if we prefetch 25 of
them, there could any mix of requests and we wouldn't process the most
important ones first.
We are resigning in prep for branching next week, we need to also make
sure to sign things with the f45 ima key.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
The robosignatory is currently stuck on one failing message, this should
allow it to process other messages in queue as well even when there is
one bad message.
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
This introduces a set of variables for managing infrastructure changes
as EPEL minor versions change over time. This should drastically
simplify our changes during EPEL mass branching. This also drops the
earlier attempt of EPELCycleNumber and EPELBootstrapNumber variables,
which are no longer used.
Signed-off-by: Carl George <carlwgeorge@gmail.com>
We added this in pungi-fedora, so its sitting there trying over and over
to sign it. We need to either merge and deploy this, or revert
the pungi-fedora changes, kill rawhide compose and re-run.
Seems easier to just push this. ;)
+1s?
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This will unify all the handlers to use first uppercase letter for
ansible-lint to stop complaining.
I went through all `notify:` occurrences and fixed them by running
```
set TEXT "text_to_replace"; set REPLACEMENT "replacement_text"; git grep
-rlz "$TEXT" . | xargs -0 sed -i "s/$TEXT/$REPLACEMENT/g"
```
Then I went through all the changes and removed the ones that wasn't
expected to be changed.
Fixes https://pagure.io/fedora-infrastructure/issue/12391
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
