#5941: Requesting Koji user certificate for Koschei

List overview All Threads
Download

newer

older

Random thoughts/crazy idea: Drop...

#6164: bodhi2 status update...

Fedora Release Engineering

11 Jul 2014 11 Jul '14

12:08 p.m.

#5941: Requesting Koji user certificate for Koschei -----------------------------+------------------------ Reporter: msimacek | Owner: rel-eng@… Type: task | Status: new Milestone: Fedora 20 Final | Component: koji Keywords: | Blocked By: Blocking: | -----------------------------+------------------------ Koschei is a continuous integration tool for Fedora packages that does scratch-builds of packages in rawhide as their dependencies change. Right now it is using my personal certificate for initiating the scratch-builds, but since we'd like to deploy it in the Fedora Infrastructure, we need a separate Koji account for it. It will be used only for scratch-building, no other permissions are needed.

-- Ticket URL: https://fedorahosted.org/rel-eng/ticket/5941 Fedora Release Engineering http://fedorahosted.org/rel-eng Release Engineering for the Fedora Project

Show replies by thread

Fedora Release Engineering

31 Aug 31 Aug

8:59 p.m.

#5941: Requesting Koji user certificate for Koschei ------------------------------+----------------------- Reporter: msimacek | Owner: rel-eng@… Type: task | Status: new Milestone: Fedora 20 Final | Component: koji Resolution: | Keywords: meeting Blocked By: | Blocking: ------------------------------+----------------------- Changes (by till):

* keywords: => meeting

Comment:

Open question for the meeting: Is this a rel-eng task at all? AFAIK just a FAS account is needed, maybe a bot account, but this can be handled by infrastructure.

-- Ticket URL: https://fedorahosted.org/rel-eng/ticket/5941#comment:1 Fedora Release Engineering http://fedorahosted.org/rel-eng Release Engineering for the Fedora Project

Fedora Release Engineering

15 Sep 15 Sep

5:45 p.m.

Comment (by ausil):

as part of the moving into infra process we can generate a certificate, not before.

-- Ticket URL: https://fedorahosted.org/rel-eng/ticket/5941#comment:2 Fedora Release Engineering http://fedorahosted.org/rel-eng Release Engineering for the Fedora Project

Fedora Release Engineering

16 Sep 16 Sep

5:58 a.m.

Comment (by mizdebsk):

Thanks. We are working towards moving Koschei to infra, I'll let you know once we start formal process.

-- Ticket URL: https://fedorahosted.org/rel-eng/ticket/5941#comment:3 Fedora Release Engineering http://fedorahosted.org/rel-eng Release Engineering for the Fedora Project

Fedora Release Engineering

29 Sep 29 Sep

4:49 p.m.

#5941: Requesting Koji user certificate for Koschei ------------------------------+----------------------- Reporter: msimacek | Owner: rel-eng@… Type: task | Status: new Milestone: Fedora 20 Final | Component: koji Resolution: | Keywords: Blocked By: | Blocking: ------------------------------+----------------------- Changes (by ausil):

* keywords: meeting =>

Comment:

removing the meeting keyword. there is nothing to discuss here

-- Ticket URL: https://fedorahosted.org/rel-eng/ticket/5941#comment:4 Fedora Release Engineering http://fedorahosted.org/rel-eng Release Engineering for the Fedora Project

Fedora Release Engineering

19 Feb 19 Feb

7:55 p.m.

#5941: Requesting Koji user certificate for Koschei ------------------------------+----------------------- Reporter: msimacek | Owner: rel-eng@… Type: task | Status: closed Milestone: Fedora 20 Final | Component: koji Resolution: worksforme | Keywords: Blocked By: | Blocking: ------------------------------+----------------------- Changes (by till):

* status: new => closed * resolution: => worksforme

Comment:

Replying to [comment:3 mizdebsk]:

...

Thanks. We are working towards moving Koschei to infra, I'll let you

know once we start formal process.

Can you please re-open the ticket, once this is done? IMHO there is no need to keep this ticket open if there is nothing that can be done right now.

-- Ticket URL: https://fedorahosted.org/rel-eng/ticket/5941#comment:5 Fedora Release Engineering http://fedorahosted.org/rel-eng Release Engineering for the Fedora Project

Fedora Release Engineering

8:56 p.m.

#5941: Requesting Koji user certificate for Koschei ------------------------------+----------------------- Reporter: msimacek | Owner: rel-eng@… Type: task | Status: reopened Milestone: Fedora 20 Final | Component: koji Resolution: | Keywords: Blocked By: | Blocking: ------------------------------+----------------------- Changes (by mizdebsk):

* resolution: worksforme => * status: closed => reopened

Comment:

Formal process for making Koschei an official fedora service has already been starded. See: https://fedorahosted.org/fedora- infrastructure/ticket/4562 and https://lists.fedoraproject.org/pipermail/infrastructure/2014-October/014953...

-- Ticket URL: https://fedorahosted.org/rel-eng/ticket/5941#comment:6 Fedora Release Engineering http://fedorahosted.org/rel-eng Release Engineering for the Fedora Project

Fedora Release Engineering

9:37 p.m.

Comment (by till):

Replying to [comment:6 mizdebsk]:

...

Formal process for making Koschei an official fedora service has already

been started. See: https://fedorahosted.org/fedora- infrastructure/ticket/4562 and https://lists.fedoraproject.org/pipermail/infrastructure/2014-October/014953...

Thank you for the links. IMHO this can be tracked in the infra ticket for now. If for some reason the missing koji certificate is blocking the progress, then please re-open this ticket again.

-- Ticket URL: https://fedorahosted.org/rel-eng/ticket/5941#comment:7 Fedora Release Engineering http://fedorahosted.org/rel-eng Release Engineering for the Fedora Project

Fedora Release Engineering

20 Feb 20 Feb

8:41 a.m.

Comment (by mizdebsk):

Lack of Koji certificate is already blocking several things:

**FMN**. Currently it's not possible to filter Koji scratch builds done by Koschei. I would like to develop FMN rule that would notify users whenever Koschei finishes build of any of their package, but lack of dedicated Koji user for Koschei makes this impossible.

**Dedicated channel**. There have been complains that Koschei uses or may use excessive amount of resources (builders). Creating a Koji channel with just a few builders would help to make sure Koschei doesn't overload Koji, but this requires policy change and Koschei user.

**Scratch builds from repo ID**. There are technical reasons why it would be beneficial for Koschei to run scratch builds from specific repo ID. This again requires policy change and can't be done without dedicated Koji user for Koschei.

-- Ticket URL: https://fedorahosted.org/rel-eng/ticket/5941#comment:8 Fedora Release Engineering http://fedorahosted.org/rel-eng Release Engineering for the Fedora Project

Fedora Release Engineering

3:04 p.m.

Comment (by ausil):

It is a hard requirement that everything be run inside of fedora infrastructure to get a cert. The cert needs to be deployed by ansible and will not be available to the developers of koschei.

It is true that koschei creates a lot of noise in koji, often making it impossible to see what is actually going on in koji, having a different cert will not change that.

-- Ticket URL: https://fedorahosted.org/rel-eng/ticket/5941#comment:9 Fedora Release Engineering http://fedorahosted.org/rel-eng Release Engineering for the Fedora Project

Fedora Release Engineering

4:33 p.m.

Comment (by mizdebsk):

Koschei does run on Fedora infrastructure (Fedora cloud) and uses Ansible for deployment (see below), it's just not yet official service, but the process to make it an official service has already been initiated.

Ansible playbook for Koschei: https://infrastructure.fedoraproject.org/cgit/ansible.git/tree/playbooks/hos...

-- Ticket URL: https://fedorahosted.org/rel-eng/ticket/5941#comment:10 Fedora Release Engineering http://fedorahosted.org/rel-eng Release Engineering for the Fedora Project

Fedora Release Engineering

19 Mar 19 Mar

2:41 p.m.

Comment (by mizdebsk):

Deployment of Koji certificate and private key has just been added to Koschei Ansible playbook ({{{playbooks/hosts/koschei.cloud.fedoraproject.org.yml}}}). Now it should be enough to put generated key and signed certificate in {{{/srv/private/ansible/files/koschei/koschei.pem}}} and they will be deployed by Ansible.

-- Ticket URL: https://fedorahosted.org/rel-eng/ticket/5941#comment:11 Fedora Release Engineering http://fedorahosted.org/rel-eng Release Engineering for the Fedora Project

Fedora Release Engineering

27 Apr 27 Apr

8:47 p.m.

#5941: Requesting Koji user certificate for Koschei ------------------------------+----------------------- Reporter: msimacek | Owner: rel-eng@… Type: task | Status: closed Milestone: Fedora 20 Final | Component: koji Resolution: fixed | Keywords: Blocked By: | Blocking: ------------------------------+----------------------- Changes (by mizdebsk):

* status: reopened => closed * resolution: => fixed

Comment:

Certificate has been generated. Koschei has its [http://koji.fedoraproject.org/koji/userinfo?userID=koschei Koji user] now.

-- Ticket URL: https://fedorahosted.org/rel-eng/ticket/5941#comment:12 Fedora Release Engineering http://fedorahosted.org/rel-eng Release Engineering for the Fedora Project

3456

Age (days ago)

3746

Last active (days ago)

rel-eng@lists.fedoraproject.org

12 comments

1 participants

tags (0)

participants (1)

Fedora Release Engineering