particle-os/debian-koji-osbuild
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
No description
316 commits 1 branch 0 tags 1.8 MiB
Find a file
Christian Kellner 4f0dcb8a7b schutzbot: don't start weldr API 
We don't use that api, so let's disable it, otherwise it might
want to load repo configurations and fail; but we don't need
them anayway.
2022-01-31 18:44:28 +00:00
.devcontainer devcontainer: include openssl 2022-01-24 23:21:31 +01:00
.github CI: Fix failure in Coverity Scan 2021-11-22 11:47:18 +01:00
docs README.md: add call schemata 2020-11-16 13:23:34 +00:00
plugins cli: do not use translation helper 2022-01-26 18:40:23 +01:00
schutzbot schutzbot: don't start weldr API 2022-01-31 18:44:28 +00:00
test test: integration tests adapt to the host 2022-01-31 15:55:26 +01:00
.editorconfig editorconfig: add markdown settings 2020-09-30 15:17:03 +02:00
.gitignore gitignore: ignore vscode files 2021-02-25 16:01:51 +01:00
.gitlab-ci.yml ci: remove testing on Fedora 33 2022-01-31 15:55:26 +01:00
HACKING.md tests: change all mentions of Fedora 32 to Fedora 33 2021-07-23 15:24:05 +02:00
koji-osbuild.spec Remove rhel.repo to avoid dnf being confused 2021-07-29 11:19:33 +02:00
LICENSE LICENSE: add ASL 2.0 2020-09-06 16:02:54 +02:00
meson.build koji-osbuild.spec: don't generate from .in file 2020-11-20 19:37:45 +01:00
meson_options.txt Support for generating rpms via meson 2020-09-08 16:58:06 +02:00
NEWS.md NEWS.md: prepare for release version 3 2020-11-19 14:38:32 +01:00
README.md README.md: add call schemata 2020-11-16 13:23:34 +00:00
run-tests.sh run-tests: explicitly specify --cached 2022-01-26 18:02:33 +01:00
setup.cfg pylint: move config to setup.cfg 2022-01-24 23:21:31 +01:00

README.md

Koji osbuild

This project provides osbuild integration with Koji. It makes it possible to build images and other OS artifacts via osbuild-composer through koji, This is done via three plugins:

  • Koji hub plugin: Provides a new XMLRPC API endpoint that clients can use to create new osbuildImage Koji tasks.

  • Koji builder plugin: Handles osbuildImage Koji tasks and will talk to osbuild-composer to create new composes via composer's Koji API.

  • Koji cli plugin: Adds a new osbuild-image to the existing koji command line client. This will then use the new XMLRPC API to request a new compose.

The following image visualizes the overall architecture and integration points of koji-osbuild with koji/brew and Composer:

overview

Installation

The plugins need to be installed on the machines running the corresponding services. Installation via RPMs is recommended. The RPMs for the latest git commit of the source can be easily created via meson:

meson . build
ninja -C build rpms

The RPMs should then be in build/rpmbuild. The hub and builder plugin also need to be explicitly enabled in the respective configuration files. The hub plugin configuration file at /etc/koji-hub/hub.conf. The plugin is enabled by adding osbuild to the Plugins directive. The builder: configuration file at /etc/kojid/kojid.conf. Here osbuild needs to be added to the plugin directive. For an example, see the test container configuration files hub.conf for the hub and kojid.conf for the builder.

Additionally, an osbuild-composer instance, at least version 21, with the koji API enabled needs to be running and reachable via TCP from the host running the koji builder.

Configuration

The builder plugin needs to be configured via a builder.conf file that can be located in either /usr/share/koji-osbuild or /etc/koji-osbuild.

[composer]
# The host, port and transport (https vs http) of osbuild composer
# NB: The 'https' transport is required for SSL/TLS authorization
server = https://composer.osbuild.org

# Authorization via client side certificates: can be either a pair of
# certificate and key files separated by comma or a file combining both.
ssl_cert = /share/worker-crt.pem, /share/worker-key.pem

# Verification of the server side: either a boolean (True / False) to
# enable or disable verification, or a path to a CA_BUNDLE file or a
# directory containing certificates of trusted CAs.
ssl_verify = /share/worker-ca.pem

[koji]
# The URL to the koji hub XML-RPC endpoint
server = https://koji.fedoraproject.org/kojihub

Development

See HACKING.md for how to develop and test this project.