infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions

debuginfod: enable --koji-sigcache to serve IMA signatures

Browse source 
With f41's elfutils-debuginfod-0.192-5, we're finally ready to start
serving per-file IMA signatures to remote debuginfo clients.  This
additional flag is needed because fedora/koji stores stripped rpm-ima
signatures in a nearby file rather than in the retained RPM.
This commit is contained in:
Frank Ch. Eigler 2024-10-31 12:54:46 -04:00 • committed by fche
parent b2368ae447
commit 943342509c
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
files/debuginfod/sysconfig.debuginfod
View file

@ -2,7 +2,7 @@
DEBUGINFOD_PORT="8002"
#DEBUGINFOD_VERBOSE="-vv"
DEBUGINFOD_PATHS="--fdcache-mintmp=15 --fdcache-mbs=100000 --fdcache-prefetch-fds=1024 -t43200 -g604800 -C20 -c6 -vv -r -R /mnt/fedora_koji_prod/koji/packages -X /data/ -I \.(module_f|fc)(35|36|37|38|39|4.)[.+].*\.rpm"
DEBUGINFOD_PATHS="--fdcache-mintmp=15 --fdcache-mbs=100000 --fdcache-prefetch-fds=1024 -t43200 -g604800 -C20 -c6 -vv -r --koji-sigcache -R /mnt/fedora_koji_prod/koji/packages -X /data/ -I \.(module_f|fc)(35|36|37|38|39|4.)[.+].*\.rpm"
# to age old fedoras, change the -I regex