SP / CentOS 8

classic Classic list List threaded Threaded
13 messages Options
Reply | Threaded
Open this post in threaded view
|

SP / CentOS 8

Cantor, Scott E.
I believe I have a working package set for CentOS 8, so I've added it to the yum repo script as an option. There are some caveats because I was not able to get the SP itself to build remotely with the SUSE build service, only the dependencies.

For all kinds of reasons it's past time to start looking at new options to do the build, so since it was only a single package I decided to go ahead and build it myself under a VM, which was not a big deal except for the hitch that I needed to sign the packages.

After much gnashing I got that to work on a Mac with my personal key used to sign the sources, so I've added that as a second yum repo key URL along with the OBS key.

I was able to install it from the yum mirrors under the VM after accepting both keys so I believe it's workable for now while we work out a new long term plan to script the builds.

I will warn outright that once we do that, all the old unsupported platforms will almost certainly be discontinued, so there won't be packages for all those older unsupported distros we were doing for free. e.g. CentOS 5 will be gone. We'll probably have a relatively "self contained" system for doing the builds that others could steal though.

-- Scott


--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to [hidden email]
Reply | Threaded
Open this post in threaded view
|

Re: SP / CentOS 8

Alex Perez
Hi Scott,

thanks for that. I'm missing the "shibboleth-resolver" and
"libshibresolver" packages from the list. Are they going to be there at
some point? We still use them for Moonshot, so it'd be nice to have them
built if possible.

Best,
Alex

El 1/10/19 a las 21:38, Cantor, Scott escribió:

> I believe I have a working package set for CentOS 8, so I've added it to the yum repo script as an option. There are some caveats because I was not able to get the SP itself to build remotely with the SUSE build service, only the dependencies.
>
> For all kinds of reasons it's past time to start looking at new options to do the build, so since it was only a single package I decided to go ahead and build it myself under a VM, which was not a big deal except for the hitch that I needed to sign the packages.
>
> After much gnashing I got that to work on a Mac with my personal key used to sign the sources, so I've added that as a second yum repo key URL along with the OBS key.
>
> I was able to install it from the yum mirrors under the VM after accepting both keys so I believe it's workable for now while we work out a new long term plan to script the builds.
>
> I will warn outright that once we do that, all the old unsupported platforms will almost certainly be discontinued, so there won't be packages for all those older unsupported distros we were doing for free. e.g. CentOS 5 will be gone. We'll probably have a relatively "self contained" system for doing the builds that others could steal though.
>
> -- Scott
>
>

--
Alejandro Perez-Mendez
Technical Specialist (AAA), Trust & Identity
Skype alejandro_perez_mendez
jisc.ac.uk

Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc’s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800.

Jisc Services Limited is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under company number 2881024, VAT number GB 197 0632 86. The registered office is: One Castle Park, Tower Hill, Bristol BS2 0JA. T 0203 697 5800.  
--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to [hidden email]
Reply | Threaded
Open this post in threaded view
|

RE: SP / CentOS 8

Cantor, Scott E.
> thanks for that. I'm missing the "shibboleth-resolver" and "libshibresolver"
> packages from the list. Are they going to be there at some point? We still use
> them for Moonshot, so it'd be nice to have them built if possible.

If you don't have demand for 8 right this second I'll get to it when I have some time later this week.

Once the SP failed to build, everything above it becomes manual also.

-- Scott

--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to [hidden email]
Reply | Threaded
Open this post in threaded view
|

Re: SP / CentOS 8

Alex Perez

>> thanks for that. I'm missing the "shibboleth-resolver" and "libshibresolver"
>> packages from the list. Are they going to be there at some point? We still use
>> them for Moonshot, so it'd be nice to have them built if possible.
> If you don't have demand for 8 right this second I'll get to it when I have some time later this week.
>
> Once the SP failed to build, everything above it becomes manual also.

Absolutely no rush. Just wondering whether they were kept aside on
purpose. I really appreciate the effort.

Many thanks,
Alex

>
> -- Scott
>

--
Alejandro Perez-Mendez
Technical Specialist (AAA), Trust & Identity
Skype alejandro_perez_mendez
jisc.ac.uk

Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc’s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800.

Jisc Services Limited is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under company number 2881024, VAT number GB 197 0632 86. The registered office is: One Castle Park, Tower Hill, Bristol BS2 0JA. T 0203 697 5800.  
--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to [hidden email]
Reply | Threaded
Open this post in threaded view
|

Re: SP / CentOS 8

Cantor, Scott E.
In reply to this post by Alex Perez
The shibresolver library packages are going out to the mirrors now. EDS is left to do.

-- Scott


--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to [hidden email]
Reply | Threaded
Open this post in threaded view
|

Re: SP / CentOS 8

Alex Perez
Thanks Scott.

However, I'm getting HTTP 403 error when I try to get them, either via yum or directly using either of the mirrors:
https://shibboleth-mirror.cdi.ti.ja.net/CentOS_8/x86_64/libshibresolver2-3.0.0-1.x86_64.rpm
http://bihs.aco.net/shib/yum/CentOS_8/x86_64/libshibresolver2-3.0.0-1.x86_64.rpm

Best regards,
Alex

El 3/10/19 a las 21:03, Cantor, Scott escribió:
The shibresolver library packages are going out to the mirrors now. EDS is left to do.

-- Scott



-- 
Alejandro Perez-Mendez
Technical Specialist (AAA), Trust & Identity
Skype alejandro_perez_mendez
jisc.ac.uk

Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc’s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800.

Jisc Services Limited is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under company number 2881024, VAT number GB 197 0632 86. The registered office is: One Castle Park, Tower Hill, Bristol BS2 0JA. T 0203 697 5800.

--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to [hidden email]
Reply | Threaded
Open this post in threaded view
|

Re: SP / CentOS 8

Peter Schober
* Alex Perez <[hidden email]> [2019-10-07 10:05]:
> However, I'm getting HTTP 403 error when I try to get them, either via yum or directly using either of the mirrors:
> https://shibboleth-mirror.cdi.ti.ja.net/CentOS_8/x86_64/libshibresolver2-3.0.0-1.x86_64.rpm<https://shibboleth-mirror.cdi.ti.ja.net/CentOS_8/x86_64/>
> http://bihs.aco.net/shib/yum/CentOS_8/x86_64/libshibresolver2-3.0.0-1.x86_64.rpm

Seems the files from the latest upload (for the shib resolver) had
insufficient access rights.

I've fixed this manually on "bihs.aco.bet" for now so you should be
good to go.

Best,
-peter
--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to [hidden email]
Reply | Threaded
Open this post in threaded view
|

Re: SP / CentOS 8

Alex Perez
Thanks Peter!

El 7/10/19 a las 11:49, Peter Schober escribió:

> * Alex Perez <[hidden email]> [2019-10-07 10:05]:
>> However, I'm getting HTTP 403 error when I try to get them, either via yum or directly using either of the mirrors:
>> https://shibboleth-mirror.cdi.ti.ja.net/CentOS_8/x86_64/libshibresolver2-3.0.0-1.x86_64.rpm<https://shibboleth-mirror.cdi.ti.ja.net/CentOS_8/x86_64/>
>> http://bihs.aco.net/shib/yum/CentOS_8/x86_64/libshibresolver2-3.0.0-1.x86_64.rpm
> Seems the files from the latest upload (for the shib resolver) had
> insufficient access rights.
>
> I've fixed this manually on "bihs.aco.bet" for now so you should be
> good to go.
>
> Best,
> -peter

--
Alejandro Perez-Mendez
Technical Specialist (AAA), Trust & Identity
Skype alejandro_perez_mendez
jisc.ac.uk

Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc’s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800.

Jisc Services Limited is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under company number 2881024, VAT number GB 197 0632 86. The registered office is: One Castle Park, Tower Hill, Bristol BS2 0JA. T 0203 697 5800.  
--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to [hidden email]
Reply | Threaded
Open this post in threaded view
|

Re: SP / CentOS 8

Cantor, Scott E.
In reply to this post by Peter Schober
On 10/7/19, 5:50 AM, "users on behalf of Peter Schober" <[hidden email] on behalf of [hidden email]> wrote:

> Seems the files from the latest upload (for the shib resolver) had
> insufficient access rights.

Odd, I'll check them.

-- Scott


--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to [hidden email]
Reply | Threaded
Open this post in threaded view
|

Re: SP / CentOS 8

Alex Perez
Thanks,

also, since at the moment the developer's key pack needs to be added to the repository, the repository file should be the following:

[shibboleth]
name=Shibboleth (CentOS_8)
# Please report any problems to https://issues.shibboleth.net
type=rpm-md
mirrorlist=https://shibboleth.net/cgi-bin/mirrorlist.cgi/CentOS_8
gpgcheck=1
gpgkey=https://shibboleth.net/downloads/service-provider/RPMS/repomd.xml.key
       https://shibboleth.net/downloads/service-provider/RPMS/cantor.repomd.xml.key
enabled=1
Yum allows multiple URLs to be provided (I just tried).
I'm not sure if there is a way to make https://shibboleth.net/downloads/service-provider/RPMS/ to generate it while this is required.

Best,
Alex

El 7/10/19 a las 14:12, Cantor, Scott escribió:
On 10/7/19, 5:50 AM, "users on behalf of Peter Schober" [hidden email] wrote:

Seems the files from the latest upload (for the shib resolver) had
insufficient access rights.
Odd, I'll check them.

-- Scott



-- 
Alejandro Perez-Mendez
Technical Specialist (AAA), Trust & Identity
Skype alejandro_perez_mendez
jisc.ac.uk

Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc’s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800.

Jisc Services Limited is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under company number 2881024, VAT number GB 197 0632 86. The registered office is: One Castle Park, Tower Hill, Bristol BS2 0JA. T 0203 697 5800.

--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to [hidden email]
Reply | Threaded
Open this post in threaded view
|

Re: SP / CentOS 8

Cantor, Scott E.
On 10/7/19, 8:48 AM, "users on behalf of Alex Perez" <[hidden email] on behalf of [hidden email]> wrote:

> also, since at the moment the developer's key pack needs to be added to the repository, the repository file should be > the following:

I had already updated the script that generates them, and the CentOS 8 option in the generator was not live for any length of time before I had added it. If you manually did it, then yes, you'd have to do that.

It's going to change again in the future, unavoidably, but as long as it fails safe that's all that matters.

-- Scott
 

--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to [hidden email]
Reply | Threaded
Open this post in threaded view
|

Re: SP / CentOS 8

Aaron Howell
Is there an JIra issue we can track for the future new build process?

The Redhat Satellite does not support repositories with multiple GPG keys - while I believe I can work around the issue for now - I would like to track when I can remove the workaround.

Cheers,
Aaron

> On 7 Oct 2019, at 23:51, Cantor, Scott <[hidden email]> wrote:
>
> On 10/7/19, 8:48 AM, "users on behalf of Alex Perez" <[hidden email] on behalf of [hidden email]> wrote:
>
>> also, since at the moment the developer's key pack needs to be added to the repository, the repository file should be > the following:
>
> I had already updated the script that generates them, and the CentOS 8 option in the generator was not live for any length of time before I had added it. If you manually did it, then yes, you'd have to do that.
>
> It's going to change again in the future, unavoidably, but as long as it fails safe that's all that matters.
>
> -- Scott
>
>
> --
> For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to [hidden email]


Important Notice: The contents of this email are intended solely for the named addressee and are confidential; any unauthorised use, reproduction or storage of the contents is expressly prohibited. If you have received this email in error, please delete it and any attachments immediately and advise the sender by return email or telephone.

Deakin University does not warrant that this email and any attachments are error or virus free.
--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to [hidden email]
Reply | Threaded
Open this post in threaded view
|

Re: SP / CentOS 8

Cantor, Scott E.
On 11/11/19, 7:36 PM, "users on behalf of Aaron Howell" <[hidden email] on behalf of [hidden email]> wrote:

> Is there an JIra issue we can track for the future new build process?

It's not tied to any one project and INFRA issues are not public, but there will be prominent announcements about whatever happens, if anything happens. I didn't make a big fuss ahout this key changing because it's only one repo that wasn't there before.

-- Scott


--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to [hidden email]