Update to 2021-12-31 14:05

roles/rpm_build_server/templates/build-watcher.service.j2

@@ -0,0 +1,16 @@
+[Unit]
+Description=RPM Build watcher service
+
+[Service]
+Type=simple
+User={{ rpm_user }}
+Group={{ rpm_user }}
+ExecStart=/usr/bin/perl {{ rpm_root_dir }}/bin/watcher.pl --config {{ rpm_root_dir }}/etc/config.yml --verbose
+WorkingDirectory={{ rpm_root_dir }}/
+Restart=always
+ReadWritePaths=/run {{ rpm_root_dir }}/repo {{ rpm_root_dir }}/cache {{ rpm_root_dir }}/builds
+PrivateTmp=true
+
+[Install]
+WantedBy=multi-user.target
+

roles/rpm_build_server/templates/config.yml.j2

@@ -0,0 +1,52 @@
+---
+
+targets:
+  el7:
+    - x86_64
+  el8:
+    - x86_64
+
+paths:
+  repo: {{ rpm_root_dir }}/repo
+  repo_cache: {{ rpm_root_dir }}/cache/repo
+  builds: {{ rpm_root_dir }}/builds
+  uploads: {{ rpm_root_dir }}/uploads
+
+notify:
+  from: buildsys@{{ ansible_domain }}
+  to: {{ rpm_admin_email }}
+
+{% if rpm_mirrors is defined and rpm_mirrors | length > 0 %}
+mirror:
+  push:
+{% for mirror in rpm_mirrors %}
+    - dest: {{ mirror.dest }}
+{% if mirror.rsync_opts is defined %}
+      rsync_opts:
+{% for opt in mirror.rsync_opts %}
+        - '{{ opt }}'
+{% endfor %}
+{% endif %}
+{% endfor %}
+  rsync_opts:
+{% for opt in rpm_mirror_rsync_opts %}
+    - '{{ opt }}'
+{% endfor %}
+{% endif %}
+
+ldap:
+{% if rpm_ldap_servers is defined and rpm_ldap_servers | length > 0 %}
+  servers:
+{% for server in rpm_ldap_servers %}
+    - {{ server }}
+{% endfor %}
+{% else %}
+  servers: []
+{% endif %}
+  start_tls: {{ rpm_ldap_start_tls | ternary('True', 'False') }}
+  bind_dn: {{ rpm_ldap_bind_dn }}
+  bind_pass: {{ rpm_ldap_bind_pass | quote }}
+  search_base: {{ rpm_ldap_search_base }}
+  search_filter: {{ rpm_ldap_search_filter }}
+  email_attr: {{ rpm_ldap_email_attr }}
+

roles/rpm_build_server/templates/gpg-agent.conf.j2

@@ -0,0 +1 @@
+allow-loopback-pinentry

roles/rpm_build_server/templates/gpg.conf.j2

@@ -0,0 +1,2 @@
+use-agent
+pinentry-mode loopback

roles/rpm_build_server/templates/mock/el7-x86_64.cfg.j2

@@ -0,0 +1,25 @@
+include('templates/centos-7.tpl')
+include('templates/epel-7.tpl')
+
+config_opts['root'] = 'el7-x86_64'
+config_opts['target_arch'] = 'x86_64'
+config_opts['legal_host_arches'] = ('x86_64',)
+config_opts['macros']['%rhel'] = '7'
+config_opts['macros']['%dist'] = '.el7.dbd'
+
+config_opts['dnf.conf'] += """
+
+[rpmfusion-free-updates]
+baseurl = http://download1.rpmfusion.org/free/el/updates/7/x86_64/
+gpgcheck = 1
+gpgkey = https://rpmfusion.org/keys?action=AttachFile&do=get&target=RPM-GPG-KEY-rpmfusion-free-el-7
+name = RPM Fusion for EL - Free - Updates
+
+[dbd]
+name=dbd
+baseurl=http://rpms.lapiole.org/el7/
+enabled=1
+gpgcheck=1
+gpgkey=https://rpms.lapiole.org/RPM-GPG-KEY
+
+"""

roles/rpm_build_server/templates/mock/el8-x86_64.cfg.j2

@@ -0,0 +1,28 @@
+include('templates/almalinux-8.tpl')
+include('templates/epel-8.tpl')
+
+# Disable use_bootstrap_image until new release
+# See https://github.com/rpm-software-management/mock/issues/831
+config_opts['use_bootstrap_image'] = False
+config_opts['root'] = 'el8-x86_64'
+config_opts['target_arch'] = 'x86_64'
+config_opts['legal_host_arches'] = ('x86_64',)
+config_opts['macros']['%rhel'] = '8'
+config_opts['macros']['%dist'] = '.el8.dbd'
+
+config_opts['dnf.conf'] += """
+
+[rpmfusion-free-updates]
+baseurl = http://download1.rpmfusion.org/free/el/updates/8/x86_64/
+gpgcheck = 1
+gpgkey = https://rpmfusion.org/keys?action=AttachFile&do=get&target=RPM-GPG-KEY-rpmfusion-free-el-8
+name = RPM Fusion for EL - Free - Updates
+
+[dbd]
+name=dbd
+baseurl=http://rpms.lapiole.org/el8/
+enabled=1
+gpgcheck=1
+gpgkey=https://rpms.lapiole.org/RPM-GPG-KEY
+
+"""

roles/rpm_build_server/templates/mock/site-defaults.cfg.j2

@@ -0,0 +1,17 @@
+{% if system_proxy is defined and system_proxy != '' %}
+config_opts['environment']['http_proxy'] = '{{ system_proxy }}'
+config_opts['environment']['https_proxy'] = '{{ system_proxy }}'
+{% endif %}
+config_opts['createrepo_on_rpms'] = False
+config_opts['cleanup_on_failure'] = 1
+config_opts['cleanup_on_success'] = 1
+config_opts['use_bootstrap_image'] = True
+config_opts['plugin_conf']['root_cache_opts']['compress_program'] = "zstd"
+config_opts['plugin_conf']['root_cache_opts']['extension'] = ".zst"
+config_opts['rpmbuild_networking'] = True
+config_opts['macros']['%distribution'] = "{{ rpm_packager }}"
+config_opts['macros']['%packager'] = "{{ rpm_packager }}"
+config_opts['macros']['%vendor'] = "{{ rpm_packager }}"
+config_opts['basedir'] = '{{ rpm_root_dir }}/mock'
+config_opts['cache_topdir'] = '{{ rpm_root_dir }}/cache/mock'
+

roles/rpm_build_server/templates/perms.sh.j2

@@ -0,0 +1,9 @@
+#!/bin/bash
+
+set -eo pipefail
+
+chown -R {{ rpm_user }} {{ rpm_root_dir }}
+chmod 770 {{ rpm_root_dir }}
+setfacl -b -k -R {{ rpm_root_dir }}
+setfacl -m g:{{ rpm_build_group }}:rX {{ rpm_root_dir }}
+setfacl -R -m g:{{ rpm_build_group }}:rwX,d:g:{{ rpm_build_group }}:rwX {{ rpm_root_dir }}/uploads {{ rpm_root_dir }}/builds {{ rpm_root_dir }}/repo

roles/rpm_build_server/templates/rpmmacros.j2

@@ -0,0 +1,3 @@
+%_signature gpg
+%_gpg_name {{ rpm_gpg_name }}
+%__gpg_sign_cmd %{__gpg} gpg --no-verbose --no-armor --batch --pinentry-mode loopback --passphrase '{{ (rpm_gpg_pass is defined) | ternary(rpm_gpg_pass, '') }}' --no-secmem-warning -u "%{_gpg_name}" -sbo %{__signature_filename} %{__plaintext_filename}