From 53be9f3cbf0dac040aaf0a05935c8ca37f08c25f Mon Sep 17 00:00:00 2001 From: Trevor Batley Date: Sat, 28 Sep 2024 12:40:46 +1000 Subject: [PATCH] plugins README re: selinux koji-sign policy --- plugins/README.md | 13 ++++++++++--- 1 file changed, 10 insertions(+), 3 deletions(-) diff --git a/plugins/README.md b/plugins/README.md index 7e9589f..cf611fd 100644 --- a/plugins/README.md +++ b/plugins/README.md @@ -27,6 +27,13 @@ Make sure that the koji-sign selinux policy is installed and enabled semodule --list-modules=full | grep koji-sign +If it's not listed +- copy down the koji-sign.te file, compile and install it + + checkmodule -V -M -m -o koji-sign.mod koji-sign.te + semodule_package -o koji-sign.pp -m koji-sign.mod + semodule -i koji-sign.pp + Ensure that httpd can use tty getsebool daemons_use_tty @@ -36,11 +43,11 @@ If not --> on, set it setsebool -P daemons_use_tty 1 -Copy your gpg keys etc. into /etc/koji-hub/gnupgp +Copy your gpg keys etc. into /etc/koji-hub/plugins/gnupg/ -Copy sign.conf into /etc/koji-hub-plugins +Copy sign.conf into /etc/koji-hub/plugins/ -Edit /etc/koji-hub-plugins/sign.conf to have the correct gpg key names for each tag +Edit /etc/koji-hub/plugins/sign.conf to have the correct gpg key names for each tag ### tag2distrepo