diff --git a/plugins/README.md b/plugins/README.md index cf611fd..6c1e340 100644 --- a/plugins/README.md +++ b/plugins/README.md @@ -30,19 +30,10 @@ Make sure that the koji-sign selinux policy is installed and enabled If it's not listed - copy down the koji-sign.te file, compile and install it - checkmodule -V -M -m -o koji-sign.mod koji-sign.te + checkmodule -M -m -o koji-sign.mod koji-sign.te semodule_package -o koji-sign.pp -m koji-sign.mod semodule -i koji-sign.pp -Ensure that httpd can use tty - - getsebool daemons_use_tty - daemons_use_tty --> on - -If not --> on, set it - - setsebool -P daemons_use_tty 1 - Copy your gpg keys etc. into /etc/koji-hub/plugins/gnupg/ Copy sign.conf into /etc/koji-hub/plugins/ @@ -59,6 +50,8 @@ Set the extra options on the tag so the plugin will generate the repository: koji edit-tag -x tag2distrepo.enabled=True -x tag2distrepo.keys='44922a28' smecontribs11 +Where ONLY those rpms signed with that key will be included in the generated external repository + You can check by doing: koji taginfo smecontribs11 diff --git a/selinux/README.md b/selinux/README.md index c5d6537..b5e02a4 100644 --- a/selinux/README.md +++ b/selinux/README.md @@ -4,6 +4,6 @@ selinux policy to allow signing of rpms via the koji-hub sign plugin To install, or if you have changed the policy - checkmodule -V -M -m -o koji-sign.mod koji-sign.te + checkmodule -M -m -o koji-sign.mod koji-sign.te semodule_package -o koji-sign.pp -m koji-sign.mod semodule -i koji-sign.pp