Re: Signing RPMs

2009-11-12 Thread Steve Traylen
On Thu, Nov 12, 2009 at 8:10 AM, Jitesh Shah jite...@marvell.com wrote: ..snip.. I to have wanted to get this to work. I expect I have my key definition wrong, traceback below. I have,         self.gpg_keys = {             '89D891FB': { 'name': 'oatrelease',                          

Re: Signing RPMs

2009-11-12 Thread Jesse Keating
On Thu, 2009-11-12 at 09:38 +0100, Steve Traylen wrote: The full edited script is here http://cern.ch/steve.traylen/tmp/oat-sign_unsigned.py is there something else I need to change? The traceback is looking in the dict of your key for a size, as gpg keys can come in many sizes and

Re: Signing RPMs

2009-11-11 Thread Dennis Gilmore
On Wednesday 11 November 2009 07:15:36 am Josh Boyer wrote: On Tue, Nov 10, 2009 at 11:24:50PM -0800, Jitesh Shah wrote: So, I picked up the sign_unsigned.py script from releng. I replaced the keys in there with our keys, tweaked some minor stuff here and there and managed to get it running.

Re: Signing RPMs

2009-11-11 Thread Jitesh Shah
..snip.. The sign_unsigned script should eventually do a koji API call to do 'write-signed-rpm' on the packages you are signing. That will assemble signed RPMs in koji itself, which mash will download and used. Fedora Rel-Eng doesn't use sign_unsigned anymore because we have a

Re: Signing RPMs

2009-11-11 Thread Jitesh Shah
..snip.. I to have wanted to get this to work. I expect I have my key definition wrong, traceback below. I have, self.gpg_keys = { '89D891FB': { 'name': 'oatrelease', 'description': 'EGEE SA1 (Operations Automation Team)

Signing RPMs

2009-11-10 Thread Jitesh Shah
So, I picked up the sign_unsigned.py script from releng. I replaced the keys in there with our keys, tweaked some minor stuff here and there and managed to get it running. I use it as ./sign_unsigned.py --level level tag-name and it runs alright. I can see that the signatures are cached under

RE: Koji and Signing RPMS

2009-08-20 Thread Greg Trahair
To sign an rpm from koji, you should make a copy of the file, sign it with the appropriate rpm command, and import the signature. Fedora rel-eng has a script to help automate this. Note that you should not simply sign the file directly under /mnt/koji, as this causes an inconsistency between

Koji and Signing RPMS

2009-08-19 Thread Greg Trahair
Hi All, I'm using Koji in combination with Mash to create rpms, but at the moment I'm not signing them and I need to start that now. I'm finding it quite hard to find any way that the koji/mash combination can do this without me having to create my own mechanism. Is there anyone that can