From 84d6b4a31cd8eb682010eebbf48f39deca78e2a3 Mon Sep 17 00:00:00 2001 From: Kevin Fenzi Date: Wed, 11 Mar 2015 15:31:54 +0000 Subject: [PATCH] Add pesign and fedora-repos to koji secure boot channel --- roles/koji_hub/templates/hub.conf.j2 | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/roles/koji_hub/templates/hub.conf.j2 b/roles/koji_hub/templates/hub.conf.j2 index 4e30401b62..628aa9872a 100644 --- a/roles/koji_hub/templates/hub.conf.j2 +++ b/roles/koji_hub/templates/hub.conf.j2 @@ -61,8 +61,8 @@ Plugins = fedmsg-koji-plugin tag = - has_perm secure-boot && package kernel shim grub2 fedora-release :: allow - package kernel shim grub2 fedora-release:: deny + has_perm secure-boot && package kernel shim grub2 fedora-release fedora-repos pesign :: allow + package kernel shim grub2 fedora-release fedora-repos pesign :: deny all :: allow channel = @@ -79,6 +79,8 @@ channel = source */shim* && has_perm secure-boot :: use secure-boot source */grub2* && has_perm secure-boot :: use secure-boot source */fedora-release* && has_perm secure-boot :: use secure-boot + source */fedora-repos* && has_perm secure-boot :: use secure-boot + source */pesign* && has_perm secure-boot :: use secure-boot # we have some arm builders that have ssd's in them, eclipse is 7 hours faster building on them so lets # make sure that we always build eclipse on them.