Right, and the ~/.ssh should be 700

thanks
- jf.ding

On Fri, Jul 11, 2014 at 11:13:37AM +0000, VanCutsem, Geoffroy wrote:
> From the top of my head, I have had to use 644 for all files in ~/.ssh and 
> 600 for .ssh/id_rsa specifically. Less strict permissions on these would 
> result in a failure IIRC.
> 
> Geoffroy
> 
> > -----Original Message-----
> > From: Dev [mailto:[email protected]] On Behalf Of Yang, Lin A
> > Sent: Friday, July 11, 2014 2:45 AM
> > To: Smith, Kenneth
> > Cc: [email protected]
> > Subject: Re: [Dev] Jenkins build error on private OBS instance
> > 
> > Should create ~/.ssh/config like below to make the user, which run the
> > service, can access gerrit project. And generate pair of ssh keys. This is 
> > the
> > same as that developer does to configure his local env.
> > 
> > Host review.tizen.org<http://review.tizen.org>
> > Port 29418
> > User <username>
> > IdentityFile ~/.ssh/id_rsa
> > 
> > BR,
> > Lin.
> > 
> > On Jul 11, 2014, at 6:36 AM, Smith, Kenneth
> > <[email protected]<mailto:[email protected]>>
> > wrote:
> > 
> > Yes obs-service-gbs is installed. I setup ssh as above and can clone to OBS
> > from git on the command line. Jenkins is still giving me HTTP Error 400s and
> > inside of OBS I see this error in the package being changed:
> > Files could not be expanded: service gbs failed:
> > gbp:warning: Failed to import 'rpm_tizen' as rpm python module, using host's
> > default rpm library instead
> > source_service:info: Starting GBS source service
> > gbp-repocache:info: Fetching from remote
> > source_service:error: RepoCache: Failed to fetch from remote: Error running
> > git fetch: Permission denied (publickey).
> > fatal: The remote end hung up unexpectedly
> > 
> > source_service is not using the .ssh where I put it? or wants different
> > permissions on it?
> > 
> > -Ken
> > 
> > On 10 July 2014 00:44, Bartosh, Eduard
> > <[email protected]<mailto:[email protected]>> wrote:
> > Hi Ken,
> > 
> > Do you have obs-service-gbs package installed on OBS host?
> > You're right, ssh access should be configured for gbs service.  It should be
> > able to clone git trees from Gerrit.
> > It's better to create read only user account in Gerrit and configure ssh 
> > access
> > for the user, running the service on OBS side (root by default) in
> > ~/.ssh/config:
> > Host review.tizen.org<http://review.tizen.org/>
> > Port 29418
> > User <gerrit user>
> > IdentityFile ~/.ssh/id_rsa
> > 
> > BTW, it also makes sense to configure cache directory in service
> > configuration file /etc/obs/services/gbs or at least ensure that it points 
> > to
> > the partition with enough disk space.
> > 
> > Regards,
> > Ed
> > 
> > From: Dev [mailto:[email protected]<mailto:dev-
> > [email protected]>] On Behalf Of Smith, Kenneth
> > Sent: Thursday, July 10, 2014 2:57 AM
> > To: Yang, Lin A
> > Cc: [email protected]<mailto:[email protected]>
> > Subject: Re: [Dev] Jenkins build error on private OBS instance
> > Sent: Thursday, July 10, 2014 2:57 AM
> > To: Yang, Lin A
> > Cc: [email protected]<mailto:[email protected]>
> > Subject: Re: [Dev] Jenkins build error on private OBS instance
> > 
> > Nope, that wasn't it. OBS wants to talk to gerrit, but doesn't have the
> > credentials. What is the best method for doing this? I've tried putting a 
> > .ssh in
> > /srv/obs but that isn't working.
> > 
> > -Ken
> > 
> > On 8 July 2014 16:31, Smith, Kenneth
> > <[email protected]<mailto:[email protected]>>
> > wrote:
> > jenkins-scripts are the latest release. It looks like the culprit was the 
> > obs
> > plugins. Thank you for providing me with some clues.
> > 
> > -Ken
> > 
> > On 8 July 2014 00:09, Yang, Lin A
> > <[email protected]<mailto:[email protected]>> wrote:
> > Hi,
> > 
> > Which version of jenkins-scripts package you used on private environment?
> > And please check whether obs-plugin-gbs expand this _service file
> > successfully. Create request will fail when expand _service file faile.
> > 
> > BR,
> > Lin.
> > 
> > From: Dev [mailto:[email protected]<mailto:dev-
> > [email protected]>] On Behalf Of Smith, Kenneth
> > Sent: Tuesday, July 8, 2014 8:03 AM
> > To: [email protected]<mailto:[email protected]>
> > Subject: [Dev] Jenkins build error on private OBS instance
> > Sent: Tuesday, July 8, 2014 8:03 AM
> > To: [email protected]<mailto:[email protected]>
> > Subject: [Dev] Jenkins build error on private OBS instance
> > 
> > I'm getting an error trying to upload the _service file when updating a
> > package in OBS from the Jenkins submitobs job. The _service file does not
> > previously exist. There error is:
> > 
> > Upload service file
> > upload_obs_service: sending content: <services><service
> > name='gbs'><param
> > name='revision'>27c684af0c7550182673d4ba94382659b0101b41</param><
> > param name='url'>ssh://gerrit:29418/JLR/AGL_App_Suite</param><param
> > name='git-meta'>_git-meta</param></service></services>
> > # oscapi::commit_files: URL: https://obs-master.ngi-
> > dev:444/source/Tizen:3.0-M2-
> > EOY:AGL:build/agl_app_suite?comment=uploaded+by+prerelease+job+to+b
> > uild+JLR%2FAGL_App_Suite%2Fsubmit%2Fagl_master%2F20140703.183248
> > %2827c684af0c7550182673d4ba94382659b0101b41%29&cmd=commitfilelis
> > t&user=Admin&keeplink=1
> > # oscapi::commit_files: XML: <directory><entry name="_service"
> > md5="b00817ad8582e1a4cd3ddaca58ab08df"/></directory>
> > upload_obs_service exit
> > New request failed to be created
> > HTTP Error 400: Bad Request
> > 
> > Any ideas what is causing this error?
> > 
> > --
> > Kind Regards
> > 
> > Kenneth F. Smith
> > 
> > -------------------
> > Infotainment Engineer
> > MSX on behalf of Jaguar Land Rover
> > One World Trade Center, 121 Southwest Salmon Street, 11th Floor, Portland,
> > Oregon, 97204
> > 
> > Email:
> > [email protected]<mailto:[email protected]>
> > PGP: RSA 2048/2048 979C6B958B89909D
> > -------------------
> > 
> > Business Details:
> > Jaguar Land Rover Limited
> > Registered Office: Abbey Road, Whitley, Coventry CV3 4LF Registered in
> > England No: 1672070
> > 
> > 
> > 
> > This e-mail and any attachments contain confidential information for a
> > specific individual and purpose.  The information is private and privileged 
> > and
> > intended solely for the use of the individual to whom it is addressed.  If 
> > you
> > are not the intended recipient, please e-mail us immediately.  We apologise
> > for any inconvenience caused but you are hereby notified that any
> > disclosure, copying or distribution or the taking of any action in reliance 
> > on
> > the information contained herein is strictly prohibited.
> > 
> > This e-mail does not constitute an order for goods or services unless
> > accompanied by an official purchase order.
> > 
> > 
> > 
> > --
> > Kind Regards
> > 
> > Kenneth F. Smith
> > 
> > -------------------
> > Infotainment Engineer
> > MSX on behalf of Jaguar Land Rover
> > One World Trade Center, 121 Southwest Salmon Street, 11th Floor, Portland,
> > Oregon, 97204
> > 
> > Email:
> > [email protected]<mailto:[email protected]>
> > PGP: RSA 2048/2048 979C6B958B89909D
> > -------------------
> > 
> > Business Details:
> > Jaguar Land Rover Limited
> > Registered Office: Abbey Road, Whitley, Coventry CV3 4LF Registered in
> > England No: 1672070
> > 
> > 
> > 
> > This e-mail and any attachments contain confidential information for a
> > specific individual and purpose.  The information is private and privileged 
> > and
> > intended solely for the use of the individual to whom it is addressed.  If 
> > you
> > are not the intended recipient, please e-mail us immediately.  We apologise
> > for any inconvenience caused but you are hereby notified that any
> > disclosure, copying or distribution or the taking of any action in reliance 
> > on
> > the information contained herein is strictly prohibited.
> > 
> > This e-mail does not constitute an order for goods or services unless
> > accompanied by an official purchase order.
> > 
> > 
> > 
> > --
> > Kind Regards
> > 
> > Kenneth F. Smith
> > 
> > -------------------
> > Infotainment Engineer
> > MSX on behalf of Jaguar Land Rover
> > One World Trade Center, 121 Southwest Salmon Street, 11th Floor, Portland,
> > Oregon, 97204
> > 
> > Email:
> > [email protected]<mailto:[email protected]>
> > PGP: RSA 2048/2048 979C6B958B89909D
> > -------------------
> > 
> > Business Details:
> > Jaguar Land Rover Limited
> > Registered Office: Abbey Road, Whitley, Coventry CV3 4LF Registered in
> > England No: 1672070
> > 
> > 
> > 
> > This e-mail and any attachments contain confidential information for a
> > specific individual and purpose.  The information is private and privileged 
> > and
> > intended solely for the use of the individual to whom it is addressed.  If 
> > you
> > are not the intended recipient, please e-mail us immediately.  We apologise
> > for any inconvenience caused but you are hereby notified that any
> > disclosure, copying or distribution or the taking of any action in reliance 
> > on
> > the information contained herein is strictly prohibited.
> > 
> > This e-mail does not constitute an order for goods or services unless
> > accompanied by an official purchase order.
> > 
> > ---------------------------------------------------------------------
> > 
> > Intel Finland Oy
> > 
> > Registered Address: PL 281, 00181 Helsinki
> > 
> > Business Identity Code: 0357606 - 4
> > 
> > Domiciled in Helsinki
> > 
> > This e-mail and any attachments may contain confidential material for
> > 
> > the sole use of the intended recipient(s). Any review or distribution
> > 
> > by others is strictly prohibited. If you are not the intended
> > 
> > recipient, please contact the sender and delete all copies.
> > 
> > 
> > 
> > --
> > Kind Regards
> > 
> > Kenneth F. Smith
> > 
> > -------------------
> > Infotainment Engineer
> > MSX on behalf of Jaguar Land Rover
> > One World Trade Center, 121 Southwest Salmon Street, 11th Floor, Portland,
> > Oregon, 97204
> > 
> > Email:
> > [email protected]<mailto:[email protected]>
> > PGP: RSA 2048/2048 979C6B958B89909D
> > -------------------
> > 
> > Business Details:
> > Jaguar Land Rover Limited
> > Registered Office: Abbey Road, Whitley, Coventry CV3 4LF Registered in
> > England No: 1672070
> > 
> > 
> > 
> > This e-mail and any attachments contain confidential information for a
> > specific individual and purpose.  The information is private and privileged 
> > and
> > intended solely for the use of the individual to whom it is addressed.  If 
> > you
> > are not the intended recipient, please e-mail us immediately.  We apologise
> > for any inconvenience caused but you are hereby notified that any
> > disclosure, copying or distribution or the taking of any action in reliance 
> > on
> > the information contained herein is strictly prohibited.
> > 
> > This e-mail does not constitute an order for goods or services unless
> > accompanied by an official purchase order.
> > 
> > _______________________________________________
> > Dev mailing list
> > [email protected]
> > https://lists.tizen.org/listinfo/dev
> Intel Corporation NV/SA
> Kings Square, Veldkant 31
> 2550 Kontich
> RPM (Bruxelles) 0415.497.718. 
> Citibank, Brussels, account 570/1031255/09
> 
> This e-mail and any attachments may contain confidential material for the 
> sole use of the intended recipient(s). Any review or distribution by others 
> is strictly prohibited. If you are not the intended recipient, please contact 
> the sender and delete all copies.
> 
> _______________________________________________
> Dev mailing list
> [email protected]
> https://lists.tizen.org/listinfo/dev
_______________________________________________
Dev mailing list
[email protected]
https://lists.tizen.org/listinfo/dev

Reply via email to