releng: compose: add koji CA cert to central system ca-trust

roles/releng/tasks/main.yml

@@ -43,6 +43,11 @@
 - name: add masher koji ca upload cert
   action: copy src="{{ private }}/files/koji/buildercerts/fedora-ca.cert" dest=/home/masher/.fedora-upload-ca.cert
 
+- name: add koji ca cert to central system ca-trust
+  action: copy src="{{ private }}/files/koji/buildercerts/fedora-ca.cert" dest=/etc/pki/ca-trust/source/anchors/fedora-server-ca.cert
+- name: update ca-trust
+  command: /usr/bin/update-ca-trust
+
 # rawhide group
 - name: rawhide group
   action: group name=rawhide gid=265

roles/releng/templates/fedora-22-compose-aarch64.cfg

@@ -22,7 +22,7 @@ assumeyes=1
 
 [fedora]
 name=fedora
-baseurl=http://infrastructure.fedoraproject.org/pub/fedora-secondary/releases/22/Everything/aarch64/os/
+baseurl=https://infrastructure.fedoraproject.org/pub/fedora-secondary/releases/22/Everything/aarch64/os/
 enabled=1
 cost=5000
 

roles/releng/templates/fedora-branched-compose-aarch64.cfg

@@ -23,13 +23,13 @@ assumeyes=1
 
 [fedora]
 name=fedora
-baseurl=http://{{kojipkgs_url}}/mash/branched/aarch64/os
+baseurl=https://{{kojipkgs_url}}/mash/branched/aarch64/os
 enabled=1
 cost=5000
 
 [static]
 name=static
-baseurl=http://{{kojipkgs_url}}/repos/f23-build/latest/aarch64
+baseurl=https://{{kojipkgs_url}}/repos/f23-build/latest/aarch64
 enabled=1
 #cost=2000
 """

roles/releng/templates/fedora-rawhide-compose-aarch64.cfg

@@ -22,13 +22,13 @@ assumeyes=1
 
 [fedora]
 name=fedora
-baseurl=http://{{kojipkgs_url}}/mash/rawhide/aarch64/os
+baseurl=https://{{kojipkgs_url}}/mash/rawhide/aarch64/os
 enabled=1
 cost=5000
 
 [static]
 name=static
-baseurl=http://{{kojipkgs_url}}/repos/rawhide/latest/aarch64
+baseurl=https://{{kojipkgs_url}}/repos/rawhide/latest/aarch64
 enabled=1
 #cost=2000
 """