aboutsummaryrefslogtreecommitdiffstats
path: root/modules/buildsystem/manifests/signbot.pp
blob: 6c0e46c474c7ec879dde26d85521f339be5c3ec3 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
class buildsystem {
    class signbot {
        $sign_login = "signbot"
        $sign_home_dir = "/var/lib/$sign_login"
        $sign_keydir = "$sign_home_dir/keys"
	    # FIXME: maybe keyid should be defined at an other place
	    $sign_keyid = "80420F66"
        # FIXME refactor with base class ( once variables are placed in a separate module )
        $sched_login = "schedbot"
	
        sshuser { $sign_login:
            homedir => $sign_home_dir,
            comment => "System user used to sign packages",
	        groups => [$sched_login],
        }

    	gnupg::keys{"packages":
            email => "packages@$domain",
	        #FIXME there should be a variable somewhere to change the name of the distribution
  	        key_name => 'Mageia Packages',
	        login => $sign_login,
	        batchdir => "$sign_home_dir/batches",
	        keydir => $sign_keydir,
        }

	    sudo::sudoers_config { "signpackage":
            content => template("buildsystem/sudoers.signpackage")
        }

        file { "$sign_home_dir/.rpmmacros":
	        mode => 644,
	        content => template("buildsystem/signbot-rpmmacros")
	    }

        file { "/usr/local/bin/sign-check-package":
            mode => 755,
            content => template("buildsystem/sign-check-package")
        }
    }
}