#8145 Need some info about livemedia permission
Closed: Fixed 3 years ago by kevin. Opened 5 years ago by zsun.

  • Describe the issue
    This is a general question.

Given I am the LXQt spin maintainer, when I want to test my changes to kickstart files of generating livemedia, I need a way to try like the production.

I saw there is a page about Building Images in Koji. So I tried like that

koji spin-livemedia fedora-lxqt 30 f30 x86_64 ./flat-live-lxqt.ks --scratch

But I got

2019-02-20 11:20:15,915 [ERROR] koji: ActionNotAllowed: livemedia permission required

So my questions are

  • Is the livemedia permission granted only to Release Engineering people, or also spin maintainers
  • If this also grants to spin maintainers, can you grant me this permission?
  • If this only grants to Release Engineering, can you provide some guide for building a livemedia like it does in Koji? I saw this wiki already but I always need to set selinux --permissive to make a working Fedora Rawhide(f30) livemedia.

Thanks!

  • When do you need this? (YYYY/MM/DD)
    No ETA but as soon as possible

  • When is this no longer needed or useful? (YYYY/MM/DD)
    As long as I am still contributing to Fedora, this is still useful ;-)

  • If we cannot complete your request, what is the impact?
    Minimal. It just makes my work a little complex

@mizdebsk Currently only release engineers and some infra people have permissions to build livemedia, but it would be good to give permissions to spin maintainers to build livemedia images.

Is there a way that we can restrict them so that they can only build scratch builds of livemedia images?

Oh thanks for the info. I just fixed the format in the description. So this way, is it possible to point out the difference for generating the live media manually vs building it in Koji? As I mentioned above, the most significant difference is that I need to change to selinux --permissive in kickstart file to make the live media work. But I assume that isn't needed for builds in koji.

Is there a way that we can restrict them so that they can only build scratch builds of livemedia images?

No. With current Koji code, livemedia image build submitter must have either livemedia or admin permission. But I can try sending PR to Koji to make this more flexible, if you think we need it.

Metadata Update from @syeghiay:
- Issue assigned to mohanboddu

4 years ago

So, I think we decided that livemedia permission was enough...

@zsun do you still want this permission? If so, please re-open this and let us know and we can get you added.

Metadata Update from @kevin:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

4 years ago

Metadata Update from @zsun:
- Issue status updated to: Open (was: Closed)

3 years ago

Hi Kevin,

Yes, if possible, please grant me the permission for generating livemedia.

Metadata Update from @cverna:
- Assignee reset

3 years ago

Sorry for the long delays here.

It's done. You should be able to do livemedia scratch builds now. Let us know if there's anything further to do here.

Metadata Update from @kevin:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

3 years ago

Login to comment on this ticket.

Metadata