ralph added a new comment to an issue you are following:
``
Posting it here for review:
diff --git a/roles/koji_hub/templates/hub.conf.j2
b/roles/koji_hub/templates/hub.conf.j2
index 3caab3b..61f6edb 100644
--- a/roles/koji_hub/templates/hub.conf.j2
+++ b/roles/koji_hub/templates/hub.conf.j2
@@ -109,6 +109,7 @@ Plugins = fedmsg-koji-plugin runroot_hub hub_containerbuild
tag =
+ user
mbs/mbs.fedoraproject.org && tag module-* && package kernel
shim grub2 fedora-release fedora-repos pesign :: allow
has_perm autosign && fromtag *-pending && package kernel shim
grub2 fedora-release fedora-repos pesign :: allow
has_perm secure-boot && package kernel shim grub2 fedora-release
fedora-repos pesign :: allow
package kernel shim grub2 fedora-release fedora-repos pesign :: deny
The result of this is that the MBS will be allowed to build secure-boot packages and tag
them into `module-*` tags, but it still will not be able to build them in the secure-boot
channel and they therefore will not get signed.
We'll eventually need to come up with a long-term way to solve that, but it can wait
until after F26.
``
To reply, visit the link below or just reply to this email
https://pagure.io/releng/issue/6678