From Fedora Project Wiki
m (1 revision(s))
m (remove toc)
 
Line 1: Line 1:
= releng RHEL5 Migration =
= releng RHEL5 Migration =
[[TableOfContents()] 
 


== What is the releng1 to RHEL5 migration? ==
== What is the releng1 to RHEL5 migration? ==
Line 7: Line 7:
== Owners ==
== Owners ==
releng1 used by the following people:
releng1 used by the following people:
* JesseKeating
* [[JesseKeating]]
* LukeMacken
* [[LukeMacken]]
* BillNottingham
* [[BillNottingham]]


== Services ==
== Services ==
Line 65: Line 65:
* Requires ~/.gnupg setup with the Fedora keys imported.
* Requires ~/.gnupg setup with the Fedora keys imported.
* Requires /srv/releng/signing path created, /srv/releng should have <code>releng</code> group ownership and group write, sticky group permissions
* Requires /srv/releng/signing path created, /srv/releng should have <code>releng</code> group ownership and group write, sticky group permissions
[[Category:Infrastructure]]

Latest revision as of 09:24, 29 October 2008

releng RHEL5 Migration

What is the releng1 to RHEL5 migration?

releng1 is the xen guest that Fedora Release Engineering uses for various tasks related to the day to day release engineering tasks for Fedora.

Owners

releng1 used by the following people:

Services

releng1 hosts the following services:

  • bodhi
  • Fedora package signing
  • rawhide creation
  • writing to Fedora's public netapp

Migration Plan

The migration will happen in phases.

Phase 1

  • Creation of releng2 guest
  • Install RHEL5 on releng2 guest
  • Modify and test above services (as best one can) on releng2

Phase 2

  • Shut down releng1
  • Bring up releng2 as releng1 and mount Fedora public netapp as rw
  • Validate services in production environment
  • Monitor closely each service for proper operation

Current Status

Guest

  • releng2 created and running

Rawhide Creation

  • rawhide creation service scripts have been modified
  • buildrawhide
  • mash
  • rawhide creation scripts partially tested
  • chroot creation
  • additional packages installed into chroot

Package Signing

  • package signing scripts modified
  • package signing verified

Notes

Various notes about the setup, to be documented elsewhere for SOPs perhaps

Rawhide Creation

  • The createrepo calling scripts should pass the --unique-md-filenames option, which will change the repodata to have names like "de6f00e3dd09cfb297da614f6b5dffb60d61f3e7-primary.xml.gz" instead of just "primary.xml.gz". This makes HTTP (esp. proxies) happier. Note that YUM before 3.2.14 did not deal well with this, so this can't be turned on in anything earlier than Fedora 9.

Package Signing

  • Scripts come from git://git.fedorahosted.org/releng git repo, under scripts/
  • Required koji certs put in place for the person doing the signing/importing
  • Requires a ~/.rpmmacros setup:
%_signature gpg
%_gpg_path ~/.gnupg
%_gpgbin /usr/bin/gpg
  • Requires ~/.gnupg setup with the Fedora keys imported.
  • Requires /srv/releng/signing path created, /srv/releng should have releng group ownership and group write, sticky group permissions