Learn more about these different git repos.
Other Git URLs
Please create detached signatures for the binaries we will upload to GitHub for the FCCT 0.7.0 release. This is a manual process for now, pending the automation discussed in https://pagure.io/releng/issue/9057 and https://github.com/coreos/fedora-coreos-tracker/issues/335.
The binaries themselves have been built in koji. Here is a small script to grab all of the rpms and the files out of the rpms and name them appropriately:
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33
#!/bin/bash set -eux -o pipefail # Use the Fedora 32 key for the detached signatures KEYTOSIGNWITH='fedora-32' VR='0.7.0-1.fc32' RPMKEY='12c944d0' # Fedora 32 key ARCHES='x86_64 aarch64 ppc64le s390x' # Grab the windows/mac binaries out of the nonlinux rpm rpm="fedora-coreos-config-transpiler-nonlinux-${VR}.noarch.rpm" koji download-build --key $RPMKEY --rpm $rpm rpm -qip $rpm | grep -P "^Signature.*${RPMKEY}$" # Verify the output has the key in it rpm2cpio $rpm | cpio -idv ./usr/share/fcct/fcct-x86_64-apple-darwin ./usr/share/fcct/fcct-x86_64-pc-windows-gnu.exe mv ./usr/share/fcct/fcct-x86_64-apple-darwin ./usr/share/fcct/fcct-x86_64-pc-windows-gnu.exe ./ sigul sign-data -a $KEYTOSIGNWITH ./fcct-x86_64-apple-darwin -o ./fcct-x86_64-apple-darwin.asc sigul sign-data -a $KEYTOSIGNWITH ./fcct-x86_64-pc-windows-gnu.exe -o ./fcct-x86_64-pc-windows-gnu.exe.asc rm $rpm; rmdir ./usr/share/fcct; rmdir ./usr/share; rmdir ./usr # Grab the linux binary for a few arches we care about for arch in $ARCHES; do mkdir $arch; pushd $arch rpm="fedora-coreos-config-transpiler-${VR}.${arch}.rpm" outfile="fcct-${arch}-unknown-linux-gnu" koji download-build --key $RPMKEY --rpm $rpm rpm -qip $rpm | grep $RPMKEY # Verify the output has the key in it rpm2cpio "${rpm}" | cpio -idv ./usr/bin/fcct mv ./usr/bin/fcct "../${outfile}" # Add detached signature step here using $KEYTOSIGNWITH rm "${rpm}"; rmdir ./usr/bin; rmdir ./usr popd; rmdir $arch sigul sign-data -a $KEYTOSIGNWITH "./${outfile}" -o "./${outfile}.asc" done
After running this you should end up with a directory with files in it like:
$ ls -1 fcct-aarch64-unknown-linux-gnu fcct-ppc64le-unknown-linux-gnu fcct-s390x-unknown-linux-gnu fcct-x86_64-apple-darwin fcct-x86_64-pc-windows-gnu.exe fcct-x86_64-unknown-linux-gnu
Metadata Update from @humaton: - Issue tagged with: low-trouble, medium-gain, ops
Sorry, I couldn't get to it today due to the F33 release work, I will work on it tomorrow.
Done.
https://mohanboddu.fedorapeople.org/ignition_detached_sigs/fedora-coreos-config-transpiler-nonlinux-0.7.0-1.fc32_detached_sigs/
Metadata Update from @mohanboddu: - Issue close_status updated to: Fixed - Issue status updated to: Closed (was: Open)
Issue status updated to: Open (was: Closed)
Issue status updated to: Closed (was: Open) Issue close_status updated to: Fixed
Login to comment on this ticket.