releng: secondary: add ability to sign packages from secondary compose servers

roles/releng/files/sigul-client-secondary.conf

@@ -0,0 +1,14 @@
+[client]
+bridge-hostname: secondary-signer
+server-hostname: secondary-signer-server
+
+[koji]
+# Config file used to connect to the Koji hub
+; koji-config: ~/.koji/config
+# # Recognized alternative instances
+koji-instances: ppc s390 arm
+
+koji-config-ppc: /etc/koji/ppc-config
+koji-config-s390: /etc/koji/s390-config
+koji-config-arm: /etc/koji/arm-config
+

roles/releng/tasks/main.yml

@@ -112,6 +112,18 @@
     - compose-utils
   when: ansible_distribution_major_version|int > 21
 
+# add sigul to secondary arch compose boxes
+- name: add pkgs
+  dnf: state=present pkg={{ item }}
+  with_items:
+    - sigul
+  when: ansible_distribution_major_version|int > 21 and "'releng-secondary' in group_names"
+
+# put secondary sigul config on secondary compose boxes
+- name: secondary sigul config
+  copy: src="sigul-client-secondary.conf" dest=/etc/sigul/client.conf
+  when: "'releng-secondary' in group_names"
+
 - name: copy over our mash.conf
   template: src=mash.conf dest=/etc/mash/mash.conf