Commit graph

10 commits

Author SHA1 Message Date
Pavel Raiskup
896e8fd296 bkernel: mock+nspawn pesign config cleanup
It is better to keep the Mock's default for `nspawn_args`, and just
append to them (mock can change that configuration option dynamically).

Complements: b6669bc5f6
2022-09-14 18:20:33 +00:00
Kevin Fenzi
b6669bc5f6 bkernel: add config for nspawn bind mount
We want to keep the old mock bind mount for non rawhide branches, but
rawhide is using nspawn, so we want to add a directive there to pass
'--bind' to it to correctly mount the pesign socket directory so kernels
can be signed for secure boot.

See https://github.com/rpm-software-management/mock/issues/140

Moving forward this could be fixed in mock, in which case we remove the
nspawn args. Or it could be fixed by pesign moving the socket directory,
in which case we remove nspawn args and adjust the old mock bind mount
to the new location. For now, this works around the current crop of
issues.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-09-01 12:58:18 -07:00
Kevin Fenzi
3d121ae5ee bkernel: drop nosync here too and fix logic to not change site-defaults in kojibuilder role
This caused a bit of trouble since I disabled nosync in the kojibuilder
role. I think applied that with -t site-defaults, which updated
everything, _including_ bkernel machines. Sadly, bkernel machines have
additional config in site-defaults to allow for secure boot signing and
this was lost. So, make sure only the bkernel role changes site-defaults
on bkernel machines and also drop nosync from it's private config.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-12-10 09:04:18 -08:00
Kevin Fenzi
d4b609e25a bkernel: sync mock site defaults to bkernel
We want to make sure to not use bootstrap mode yet.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-07-01 12:22:18 -07:00
Kevin Fenzi
93a530d5af set some more new mock vars 2018-12-11 20:13:38 +00:00
Kevin Fenzi
b09bc43e2d set nosync on for prod mock builds 2018-12-10 20:04:14 +00:00
Kevin Fenzi
252126c28d add bugurl default to koji builders 2018-02-16 23:08:05 +00:00
Kevin Fenzi
26a0bffc20 add pesign user 2017-08-08 20:42:55 +00:00
Kevin Fenzi
7eb05308e7 Adjust the bkernel playbook for new pesign 2015-11-16 17:57:42 +00:00
Kevin Fenzi
ad799abed9 Fold bkernel into buildhw with it's own role. 2014-05-29 16:24:09 +00:00