#7555 scratch permission to build livecd for users
Closed: Fixed 2 years ago by kevin. Opened 3 years ago by kumarpraveen.

I am part of minishift[0] development team and currently, we only have support for CentOS and RHEL live iso to provision Openshift locally, we also want to add support for Fedora iso so people can try the latest development around container world.

As a starting point we only first try the scratch build of the iso with f28/f29/rawhide.

$ klist 
Ticket cache: KEYRING:persistent:1000:1000
Default principal: kumarpraveen@FEDORAPROJECT.ORG

Valid starting       Expires              Service principal
06/08/2018 12:31:28  06/09/2018 12:28:38  HTTP/koji.fedoraproject.org@FEDORAPROJECT.ORG
    renew until 06/15/2018 12:28:32
06/08/2018 12:28:38  06/09/2018 12:28:38  krbtgt/FEDORAPROJECT.ORG@FEDORAPROJECT.ORG
    renew until 06/15/2018 12:28:32

$ koji spin-livecd  --scratch minishift-fedora 1.0.0 rawhide x86_64 fedora.ks 
spin-livecd is deprecated and will be replaced with spin-livemedia
[====================================] 100% 00:00:00  19.70 KiB  33.12 KiB/sec
ActionNotAllowed: livecd permission required

[Edit]

Yesterday was talking with @ausil about a bit of the history why a user can't build a live cd as scratch like we do for packages. According to him because previously we were producing all the live cd without tag so want to put that behind the permission but since now we have everything in place so this should be enabled now as it's enabled for packages.

@mohanboddu Please let me know if anything else required.

[0] https://github.com/minishift/minishift


@kumarpraveen we cannot give you the permission to kick off images as livecds run as privileged operations. But, you can follow the change request policy to request the change - https://fedoraproject.org/wiki/Changes/Policy

Once the change is approved, we will add it to the pungi configs and start building them.

@mohanboddu Thanks for the comment, will look into it and soon file a policy request for it.

@kumarpraveen Thanks, once its approved, please let us know and we can work on adding it to pungi configs.

Metadata Update from @mohanboddu:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

3 years ago

Metadata Update from @kumarpraveen:
- Issue status updated to: Open (was: Closed)

3 years ago

@ausil I updated the description of the issue as we discussed yesterday, please add any other details which I missed here.

for fedora you need to use spin-livemedia and not spin-livecd the historical reasons for not allowing access to build images no longer exist, we do real builds for livecds and cloud images now. allowing people to do their own builds is something that will provide value to the community.

allowing people to do their own builds is something that will provide value to the community.

+1000

@mohanboddu let me know once this is done from rel eng side so I can try again and see if able to produce custom iso.

@ausil sure I will try spin-livemedia instead of spin-livecd, thanks for heads-up.

Metadata Update from @syeghiay:
- Issue assigned to mohanboddu

3 years ago

@mohanboddu reports that koji changes are needed for this ticket. Wonder if there's another way to do this. Will discuss in Releng meeting.

Metadata Update from @syeghiay:
- Issue tagged with: meeting

2 years ago

We now have a 'livemedia' permission we can grant folks so they can do this.

@kumarpraveen if you still need this permission (2 years later... sigh), please re-open this and let us know.

If other people need this permsion, please file a ticket and describe what you need and we can get you added.

Metadata Update from @kevin:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

2 years ago

Login to comment on this ticket.

Metadata