Project

General

Profile

action #2734

Signing of snapshot ISOs

Added by cwh about 6 years ago. Updated over 5 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Target version:
Start date:
2014-06-18
Due date:
% Done:

100%

Estimated time:
Duration:

Related issues

Has duplicate Staging project workflow - action #2736: Checksums of snapshot ISOsResolved2014-06-18

History

#1 Updated by lnussel about 6 years ago

  • Status changed from New to In Progress
  • Assignee changed from coolo to lnussel
  • % Done changed from 0 to 10

talked to Adrian. He wants to have .sha256 files generated and sign that instead. Sent mail to Marcus Schäfer asking for that feature in kiwi.

#2 Updated by lnussel about 6 years ago

filed bnc#883508

#3 Updated by coolo about 6 years ago

  • Has duplicate action #2736: Checksums of snapshot ISOs added

#4 Updated by lnussel almost 6 years ago

The code is in the kiwi git. the obs side seems to work fine for e.g. OBS-Appliance but factory isos lack the .sha256 sum file for some reason

#5 Updated by coolo almost 6 years ago

this doesn't work at all

#6 Updated by coolo over 5 years ago

  • Assignee changed from lnussel to dimstar

this works now. the isos have a inline signed .sha256 now

There is one kiwi problem left though that kiwi signs /var/cache/obs/worker/root_1//usr/src/packages/KIWIROOT/main/openSUSE-Tumbleweed-NET-x86_64-Snapshot20150107-Media.iso

this needs to be fixed within kiwi

#7 Updated by dimstar over 5 years ago

  • % Done changed from 10 to 90

Changed kiwi to no longer pass absolute paths to the .iso file while performing signing

pull request created: https://github.com/openSUSE/kiwi/pull/428

#8 Updated by dimstar over 5 years ago

  • Status changed from In Progress to Resolved
  • % Done changed from 90 to 100

My kiwi fix has been merged and submitted to openSUSE:Factory (SR#281498)

Also available in: Atom PDF