-
Notifications
You must be signed in to change notification settings - Fork 1
Ascendos/koji-setup-scripts
Folders and files
Name | Name | Last commit message | Last commit date | |
---|---|---|---|---|
Repository files navigation
One of the biggest PITA issues with koji is the initial setup as it's a long series of steps where a single typo can furstrate your efforts. This directory contains a chain of shell scripts that can be used to quickly setup a simple localized koji environment. Recommendation: If you have the resources, I'd recommend working with a minimal vm at least to start with. (see virt-manager (kvm/xen/qemu)) That way you can play around a bit without accidentally 'damaging' your system Caveat: Assumes that postgres has no other databases being managed If you have databases on postgres, BACK THEM UP because this WILL destroy them Step 1: change directory to the directory where the setup files are eg cd /export/setup Step 2: *EDIT* the 'defaults' file a number of variables are automagically set but you may wish to override those with your own preferances Step 3: run the 'makeworld' script from that directory You may notice that some services are restarted a number of times, this is because some scripts can be run standalone but need certain services to be available when run outside of the makeworld script. Adding new users after the fact eg user 'joe' cd /etc/pki/koji openssl genrsa -out certs/joe.key 2048 openssl req -config /etc/pki/koji/ssl.cnf -new -nodes \ -subj /C=US/ST=CA/O=Oracle/OU=OSS/CN=joe/emailAddress=joe@blackknight \ -out certs/joe.csr -key certs/joe.key openssl ca -config /etc/pki/koji/ssl.cnf \ -subj /C=US/ST=CA/O=Oracle/OU=OSS/CN=joe/emailAddress=joe@blackknight \ -keyfile private/koji_ca_cert.key -cert koji_ca_cert.crt \ -outdir certs -out certs/joe.crt -infiles certs/joe.csr openssl pkcs12 -export -password pass: -inkey certs/joe.key -in certs/joe.crt \ -CAfile koji_ca_cert.crt -out certs/joe_browser_cert.p12 koji add-user joe copy/tarball up koji_ca_cert.crt, joe.pem, joe_browser_cert.p12 and /etc/koji.conf (as 'config') making sure to change the "cert = " line to joe.pem and have your user install it all under the directory .koji in their home directory ie [joe@blackknight /tmp]# ls ~/.koji config joe_browser_cert.p12 koji_ca_cert.crt joe.pem For firefox, the joe_browser_cert.p12 file can be imported through Edit -> Preferences -> Advanced -> Encryption -> View Certificates -> Your Certificates -> Import Type in the location of the .p12 file There is no password set on the .p12 file so just press ok After Firefox imports the .p12 file you should be able to access the koji webpage and use the login link in the top right
About
(OBSOLETED by the github.com/Ascendos/Ascendos unified repository) Scripts used to setup a koji server in a consistant manner.
Resources
Stars
Watchers
Forks
Releases
No releases published
Packages 0
No packages published