packagedrone icon indicating copy to clipboard operation
packagedrone copied to clipboard

RPM signing feature

Open wbfunk92 opened this issue 6 years ago • 7 comments

RSA signing feature added alongside YUM signing service for RPM channels

wbfunk92 avatar Jul 09 '19 13:07 wbfunk92

Also added a couple of code snippets in ModifyContextImpl.java and ChannelServiceImpl.java for deleting empty directories after channels were cleared or deleted

wbfunk92 avatar Jul 09 '19 13:07 wbfunk92

Thanks for the PR! I will take a look in the next few days.

Two more formal things: you will need to sign the Eclipse ECA and add the Signed-off-by footer in the commit message, using the same e-mail you signed the ECA for. You will need to edit and force push the existing commit.

You would also need to add proper license headers for the new files and add yourself to the license header of the files you modified.

I also saw that you modified the code of the RPM utilities. As indicated in issue #137, this functionality is being relocated into a new project, which only focuses on this aspect. It would be great if you could create a PR in this project (https://github.com/eclipse/packager). I hope to be able to create a new release of that project soon, so I could refactor Package Drone to actually pick up those libraries and re-use the functionality.

ctron avatar Jul 11 '19 07:07 ctron

Signed the ECA, added license info and signatures. I had forgotten about contributing to the eclipse packager project and I don't have time today to create a pull request but I will take care of it tomorrow!

wbfunk92 avatar Jul 11 '19 20:07 wbfunk92

Ok, it looks like there are still commits, signed off with an e-mail address, that has not signed the ECA. Maybe you can squash the commits and force-push the result to this PR. Only using the correct e-mail address in the process.

ctron avatar Sep 03 '19 08:09 ctron

Ok yes, I went back and squashed all the commits together and signed off with my work email. Just to be safe I signed the ECA with my personal email which I use for my github account. Does that seem like it will suffice? Sorry for the inconvenience.

On Tue, Sep 3, 2019 at 4:13 AM Jens Reimann [email protected] wrote:

Ok, it looks like there are still commits, signed off with an e-mail address, that has not signed the ECA. Maybe you can squash the commits and force-push the result to this PR. Only using the correct e-mail address in the process.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/eclipse/packagedrone/pull/141?email_source=notifications&email_token=AHO7IUGXJ3A4WZELRGU3EU3QHYMCRA5CNFSM4H7FTUVKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOD5XMUSA#issuecomment-527354440, or mute the thread https://github.com/notifications/unsubscribe-auth/AHO7IUHXZODOPOOKPAEVLDDQHYMCRANCNFSM4H7FTUVA .

wbfunk92 avatar Sep 11 '19 18:09 wbfunk92

I think you misspelled the footer entry Signed-off-by vs Signed-off by (missing dash).

You should be able to see the validation results in the checks box of the PR. The check is named eclipsefdn/eca.

ctron avatar Sep 12 '19 06:09 ctron

Haha I will get it right one of these days. I see what you mean now. After amending the commit it seems to be approving the eclipsefdn/eca check.

wbfunk92 avatar Sep 12 '19 16:09 wbfunk92