From 9951cad5793bc3350751cf95ca0c8686cbff0a62 Mon Sep 17 00:00:00 2001
From: Peter Robinson <pbrobinson@fedoraproject.org>
Date: Sat, 9 Apr 2016 08:21:54 +0000
Subject: [PATCH] releng: secondary: add ability to sign packages from
 secondary compose servers

---
 roles/releng/files/sigul-client-secondary.conf | 14 ++++++++++++++
 roles/releng/tasks/main.yml                    | 12 ++++++++++++
 2 files changed, 26 insertions(+)
 create mode 100644 roles/releng/files/sigul-client-secondary.conf

diff --git a/roles/releng/files/sigul-client-secondary.conf b/roles/releng/files/sigul-client-secondary.conf
new file mode 100644
index 0000000000..5894ad3588
--- /dev/null
+++ b/roles/releng/files/sigul-client-secondary.conf
@@ -0,0 +1,14 @@
+[client]
+bridge-hostname: secondary-signer
+server-hostname: secondary-signer-server
+
+[koji]
+# Config file used to connect to the Koji hub
+; koji-config: ~/.koji/config
+# # Recognized alternative instances
+koji-instances: ppc s390 arm
+
+koji-config-ppc: /etc/koji/ppc-config
+koji-config-s390: /etc/koji/s390-config
+koji-config-arm: /etc/koji/arm-config
+
diff --git a/roles/releng/tasks/main.yml b/roles/releng/tasks/main.yml
index fd49116760..d1e253ecff 100644
--- a/roles/releng/tasks/main.yml
+++ b/roles/releng/tasks/main.yml
@@ -112,6 +112,18 @@
     - compose-utils
   when: ansible_distribution_major_version|int > 21
 
+# add sigul to secondary arch compose boxes
+- name: add pkgs
+  dnf: state=present pkg={{ item }}
+  with_items:
+    - sigul
+  when: ansible_distribution_major_version|int > 21 and "'releng-secondary' in group_names"
+
+# put secondary sigul config on secondary compose boxes
+- name: secondary sigul config
+  copy: src="sigul-client-secondary.conf" dest=/etc/sigul/client.conf
+  when: "'releng-secondary' in group_names"
+
 - name: copy over our mash.conf
   template: src=mash.conf dest=/etc/mash/mash.conf