fedora-infrastructure

#11050 osbuildImage rights for obudai
Closed: Fixed by obudai. Opened by obudai.

Closed: Fixed
Reopen Issue

Describe what you would like us to do:

I would like to iterate on the osbuild integration as quickly as possible. The biggest limitation for me is currently that osbuild is currently only used to build Fedora IoT nightly artifacts, so whenever we deploy a new change, I need to wait a day. Additionally, Fedora IoT has been recently having issues with compose stability, so it quite often doesn't even reach to the image phase. Currently, the last osbuild task ran on 2022-12-07.

The best solution that comes to my mind is to give me the rights to run osbuildImage tasks on prod, create an extra package just for test purposes and make sure that tagging works for me. These builds should be treated as scratch ones, the only purpose of them is my validation work of the integration. I don't expect many of them happening, but I feel this will benefit the integration a lot.

I don't know how garbage collection works in Koji, but it would be great if these builds could be deleted after some time as they are just scratch ones.

An alternative is to perform these tests on staging koji, but I noticed that it has quite a lot of downtime and sometimes long task queues, so using prod instead should be much better for me.

cc @kevin

Hi @obudai ,

@kevin is on PTO until next year, so I believe we wont hear from him so soon
@humaton , @smooge do you know how to proceed with this issue

Metadata Update from @zlopez:
- Issue tagged with: OSBS, permissions

FTR, this is not OSBS, but osbuild (aka image builder). Two different beasts. :)
Edited by obudai

Metadata Update from @phsmoura:
- Issue priority set to: Waiting on Assignee (was: Needs Review)

This is going to have to wait until @kevin is back as it needs some architecting work on how this can or should proceed. There may also be other plans for doing things I am not aware of which kevin would probably have a better handle on.

No worries, I can wait. ;)

So, I can grant you perms in prod easily enough. Done.

For a scratch build that should be all you need right?
Can you see if that meets your needs or if you need more?

Success! https://koji.fedoraproject.org/koji/taskinfo?taskID=96065072

Do I understand it correctly that you didn't give me rights to tag builds, right? I think this is actually exactly what I need because untagged builds are garbage collected after some time, right?

Example of an untagged build: https://koji.fedoraproject.org/koji/buildinfo?buildID=2110251

Yeah, no special tagging rights. ie, you have the same rights other users do and could take things into candidate tags, but please don't as the images will confuse bodhi. ;)

and yes, untagged things get GC'ed after time. :)

Anything more to do here, or shall we close it?

This is perfect, thank you! :) I will just use --skip-tag in koji-osbuild, that's the easiest and sanest thing for my use-case. ;)

Metadata Update from @obudai:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)
Metadata
None

OSBS permissions

None
None
Normal
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.