buildsystem/manifests/signbot.pp

class buildsystem::signbot {
    include buildsystem::scheduler::var
    $login = 'signbot'
    $home_dir = "/var/lib/$login"
    $sign_keydir = "$home_dir/keys"
    # FIXME: maybe keyid should be defined at an other place
    $keyid = '80420F66'
    $sched_login = $buildsystem::scheduler::var::login

    sshuser { $login:
        homedir => $home_dir,
        comment => 'System user used to sign packages',
        groups  => [$sched_login],
    }

    gnupg::keys{ 'packages':
        email    => "packages@$::domain",
        #FIXME there should be a variable somewhere to change
        # the name of the distribution
        key_name => 'Mageia Packages',
        login    => $login,
        batchdir => "$home_dir/batches",
        keydir   => $sign_keydir,
    }

    sudo::sudoers_config { 'signpackage':
        content => template('buildsystem/signbot/sudoers.signpackage')
    }

    file { "$home_dir/.rpmmacros":
        content => template('buildsystem/signbot/signbot-rpmmacros')
    }

    local_script {
        'sign-check-package': content => template('buildsystem/signbot/sign-check-package');
        'mga-signpackage':    content => template('buildsystem/signbot/mga-signpackage');
    }
}
1	class buildsystem::signbot {
2	include buildsystem::scheduler::var
3	$login = 'signbot'
4	$home_dir = "/var/lib/$login"
5	$sign_keydir = "$home_dir/keys"
6	# FIXME: maybe keyid should be defined at an other place
7	$keyid = '80420F66'
8	$sched_login = $buildsystem::scheduler::var::login
9
10	sshuser { $login:
11	homedir => $home_dir,
12	comment => 'System user used to sign packages',
13	groups => [$sched_login],
14	}
15
16	gnupg::keys{ 'packages':
17	email => "packages@$::domain",
18	#FIXME there should be a variable somewhere to change
19	# the name of the distribution
20	key_name => 'Mageia Packages',
21	login => $login,
22	batchdir => "$home_dir/batches",
23	keydir => $sign_keydir,
24	}
25
26	sudo::sudoers_config { 'signpackage':
27	content => template('buildsystem/signbot/sudoers.signpackage')
28	}
29
30	file { "$home_dir/.rpmmacros":
31	content => template('buildsystem/signbot/signbot-rpmmacros')
32	}
33
34	local_script {
35	'sign-check-package': content => template('buildsystem/signbot/sign-check-package');
36	'mga-signpackage': content => template('buildsystem/signbot/mga-signpackage');
37	}
38	}