#5805: add index.asc files for cloud images for virt-builder ----------------------------+------------------------ Reporter: mattdm | Owner: rel-eng@… Type: enhancement | Status: new Milestone: Fedora 20 Beta | Component: other Keywords: | Blocked By: Blocking: | ----------------------------+------------------------ Please add a GPG-signed 'index.asc' file to the Fedora 20 Images/ directory describing cloud images for virt-builder and other tools.
The format is documented at http://libguestfs.org/virt-builder.1.html #creating-your-own-templates, and there's actually a Fedora example there.
Thanks!
#5805: add index.asc files for cloud images for virt-builder -----------------------------+----------------------- Reporter: mattdm | Owner: rel-eng@… Type: enhancement | Status: new Milestone: Fedora 20 Beta | Component: other Resolution: | Keywords: Blocked By: | Blocking: -----------------------------+-----------------------
Comment (by rjones):
That is an index file that works for the 64 bit image:
{{{ $ virt-builder --no-check-signatures --source file:///tmp/index fedora-20-alpha [ 0.0] Downloading: file:///tmp/x86_64/Fedora- x86_64-20-Alpha-20130918-sda.raw.xz ######################################################################## 100.0% [ 2.0] Creating disk image: fedora-20-alpha.img [ 2.0] Uncompressing: file:///tmp/x86_64/Fedora- x86_64-20-Alpha-20130918-sda.raw.xz [ 16.0] Opening the new disk [ 41.0] Setting a random seed [ 41.0] Random root password: XhEaeDvy972k3eBg [did you mean to use --root-password?] [ 41.0] Finishing off Output: fedora-20-alpha.img Total usable space: 1.8G Free space: 1.3G (69%) }}}
It needs the 32 bit fields filling in (checksum & compressed_size).
The whole file needs to be GPG clearsigned.
I didn't bother with all the ARM images.
#5805: add index.asc files for cloud images for virt-builder -----------------------------+----------------------- Reporter: mattdm | Owner: rel-eng@… Type: enhancement | Status: new Milestone: Fedora 20 Beta | Component: other Resolution: | Keywords: Blocked By: | Blocking: -----------------------------+-----------------------
Comment (by ausil):
We need to have tooling to create the indexes, and we do not do detached signatures. we can do inline signing like we do for the CHECKSUM files
#5805: add index.asc files for cloud images for virt-builder -----------------------------+----------------------- Reporter: mattdm | Owner: rel-eng@… Type: enhancement | Status: new Milestone: Fedora 20 Beta | Component: other Resolution: | Keywords: Blocked By: | Blocking: -----------------------------+-----------------------
Comment (by rjones):
Replying to [comment:2 ausil]:
We need to have tooling to create the indexes, and we do not do detached
signatures. we can do inline signing like we do for the CHECKSUM files
I can chuck together a sed script or something, but not right this minute.
I didn't mean detached signatures, I meant:
{{{ gpg --clearsign --armor index }}}
which is what is (probably) used for CHECKSUM.
#5805: add index.asc files for cloud images for virt-builder -----------------------------+----------------------- Reporter: mattdm | Owner: rel-eng@… Type: enhancement | Status: new Milestone: Fedora 20 Beta | Component: other Resolution: | Keywords: Blocked By: | Blocking: -----------------------------+-----------------------
Comment (by mattdm):
Dennis, if we got the tooling made in a relatively short amount of time, do you think it's reasonable to have this in place for f20? And, if so, what would "a relatively short time" be?
#5805: add index.asc files for cloud images for virt-builder -----------------------------+----------------------- Reporter: mattdm | Owner: rel-eng@… Type: enhancement | Status: new Milestone: Fedora 20 Beta | Component: other Resolution: | Keywords: Blocked By: | Blocking: -----------------------------+-----------------------
Comment (by ausil):
we would need it and integrated into the compose process before Final TC1. note, we only sign the gold release after its declared such.
#5805: add index.asc files for cloud images for virt-builder -----------------------------+----------------------- Reporter: mattdm | Owner: rel-eng@… Type: enhancement | Status: new Milestone: Fedora 20 Beta | Component: other Resolution: | Keywords: Blocked By: | Blocking: -----------------------------+-----------------------
Comment (by rjones):
I think when you say "tooling" you mean that this has to be generated as part of some existing process or program? If so could you point me to what process it is that generates the current files & directories? I don't even know where to start.
#5805: add index.asc files for cloud images for virt-builder -----------------------------+----------------------- Reporter: mattdm | Owner: rel-eng@… Type: enhancement | Status: new Milestone: Fedora 20 Beta | Component: other Resolution: | Keywords: Blocked By: | Blocking: -----------------------------+-----------------------
Comment (by mattdm):
The release engineering scripts live at https://git.fedorahosted.org/cgit/releng/tree/scripts, but I'm not sure exactly how they all fit together. Maybe it would be called from https://git.fedorahosted.org/cgit/releng/tree/scripts/build-cloud-images?
#5805: add index.asc files for cloud images for virt-builder -----------------------------+----------------------- Reporter: mattdm | Owner: rel-eng@… Type: enhancement | Status: new Milestone: Fedora 20 Beta | Component: other Resolution: | Keywords: Blocked By: | Blocking: -----------------------------+-----------------------
Comment (by ausil):
what we need is a stand alone script that generates the data in the correct format, then we can call it with the paths etc in https://git.fedorahosted.org/cgit/releng/tree/scripts/run-pungi which is the overview compose script. we would call it after we gather the whole tree together. I do beleve we should generate the data for all arches, i.e. the armhfp, i386 and x86_64 trees.
#5805: add index.asc files for cloud images for virt-builder ------------------------------+----------------------- Reporter: mattdm | Owner: rel-eng@… Type: enhancement | Status: new Milestone: Fedora 21 Alpha | Component: other Resolution: | Keywords: Blocked By: | Blocking: ------------------------------+----------------------- Changes (by ausil):
* milestone: Fedora 20 Beta => Fedora 21 Alpha
Comment:
We composed Final TC1 yesterday, so at this point we will have to work on it for F21
#5805: add index.asc files for cloud images for virt-builder ------------------------------+----------------------- Reporter: mattdm | Owner: rel-eng@… Type: enhancement | Status: new Milestone: Fedora 21 Alpha | Component: other Resolution: | Keywords: Blocked By: | Blocking: ------------------------------+-----------------------
Comment (by rjones):
I'm going to host an index file pointing to the F20 images to mitigate this. It requires a small change to virt-builder (since currently it only allows relative links).
#5805: add index.asc files for cloud images for virt-builder ------------------------------+----------------------- Reporter: mattdm | Owner: rel-eng@… Type: enhancement | Status: new Milestone: Fedora 21 Alpha | Component: other Resolution: | Keywords: Blocked By: | Blocking: ------------------------------+----------------------- Changes (by ptoscano):
* cc: ptoscano@… (added)
#5805: add index.asc files for cloud images for virt-builder ------------------------------+----------------------- Reporter: mattdm | Owner: rel-eng@… Type: enhancement | Status: new Milestone: Fedora 21 Alpha | Component: other Resolution: | Keywords: Blocked By: | Blocking: ------------------------------+----------------------- Changes (by kashyapc):
* cc: kchamart@… (added)
#5805: add index.asc files for cloud images for virt-builder ------------------------------+----------------------- Reporter: mattdm | Owner: rel-eng@… Type: enhancement | Status: new Milestone: Fedora 21 Alpha | Component: other Resolution: | Keywords: Blocked By: | Blocking: ------------------------------+-----------------------
Comment (by till):
This needs a script to create the index file.
#5805: add index.asc files for cloud images for virt-builder ------------------------------+----------------------- Reporter: mattdm | Owner: rel-eng@… Type: enhancement | Status: new Milestone: Fedora 21 Alpha | Component: other Resolution: | Keywords: Blocked By: | Blocking: ------------------------------+-----------------------
Comment (by rjones):
Attached is an example of a shell script that could be used to create the index for this directory: http://www.mirrorservice.org/sites/dl.fedoraproject.org/pub/fedora/linux/rel...
#5805: add index.asc files for cloud images for virt-builder ------------------------------+----------------------- Reporter: mattdm | Owner: rel-eng@… Type: enhancement | Status: new Milestone: Fedora 23 Alpha | Component: other Resolution: | Keywords: planning Blocked By: | Blocking: ------------------------------+----------------------- Changes (by ausil):
* keywords: => planning * milestone: Fedora 21 Alpha => Fedora 23 Alpha
Comment:
we need to work out a way to integrate this into Fedora 23
#5805: add index.asc files for cloud images for virt-builder ------------------------------+----------------------- Reporter: mattdm | Owner: rel-eng@… Type: enhancement | Status: new Milestone: Fedora 23 Alpha | Component: other Resolution: | Keywords: planning Blocked By: | Blocking: ------------------------------+-----------------------
Comment (by ausil):
Some extra info. we use sigul to do all signing of things, we need to have a tool that we point at the Cloud images tree and it has to figure out everything from teh contents of the directory. we can pass along things like the fedora version. but the filenames, size of the image, etc needs to be calculated on the fly.
rel-eng@lists.fedoraproject.org