Line 403: |
Line 403: |
| FQDN: build1.koozali.org | | FQDN: build1.koozali.org |
| | | |
− | You'll need to set up your network: You can do this during the install or post install (ensure network activated, IP address, FQDN, Gateway, DNS)
| + | ===== Koji Hub setup for build server ===== |
| + | First off, set up some items on the koji hub for your build server/s |
| | | |
− | Log into your server as root and<syntaxhighlight lang="bash">
| + | Create a ssl cert for the build server with CN=build1.koozali.org<syntaxhighlight lang="bash"> |
− | nmtui
| + | koji_make_cert.sh build1.koozali.org |
− | ip addr
| + | </syntaxhighlight> |
− | ping google.com
| + | Add the build server into the koji database<syntaxhighlight lang="bash"> |
− | </syntaxhighlight>Let's bring the server up to date<syntaxhighlight lang="bash"> | + | su - kojiadmin |
− | dnf update
| + | koji add-host build1.koozali.org x86_64 noarch |
− | | + | koji add-host-to-channel build1.koozali.org createrepo |
− | </syntaxhighlight><more to come...>
| + | exit |
− | | + | </syntaxhighlight> |
− | ===== Koji Hub setup for build server =====
| |
| We'll want the build servers to have access to the koji filesystem via nfs, so on the koji hub server (koji.koozali.org)<syntaxhighlight lang="bash"> | | We'll want the build servers to have access to the koji filesystem via nfs, so on the koji hub server (koji.koozali.org)<syntaxhighlight lang="bash"> |
| dnf install nfs-utils | | dnf install nfs-utils |
Line 432: |
Line 432: |
| firewall-cmd --reload | | firewall-cmd --reload |
| | | |
| + | </syntaxhighlight> |
| + | |
| + | ===== Build Server setup ===== |
| + | You'll need to set up your network: You can do this during the install or post install (ensure network activated, IP address, FQDN, Gateway, DNS) |
| + | |
| + | Log into your build server as root and<syntaxhighlight lang="bash"> |
| + | nmtui |
| + | ip addr |
| + | ping google.com |
| + | </syntaxhighlight>Let's bring the server up to date<syntaxhighlight lang="bash"> |
| + | dnf update |
| + | |
| + | </syntaxhighlight>Add the epel repository and some tools to help with debugging (cockpit available at http://<IP addr or FQDN>:9090<syntaxhighlight lang="bash"> |
| + | systemctl enable --now cockpit.socket |
| + | systemctl start cockpit.socket |
| + | dnf config-manager --set-enabled powertools |
| + | dnf install epel-release |
| + | dnf install rsyslog |
| + | dnf install setroubleshoot-server |
| + | |
| + | </syntaxhighlight>Install the koji build tools<syntaxhighlight lang="bash"> |
| + | dnf install koji-builder |
| + | </syntaxhighlight>Edit the kojid config file<syntaxhighlight lang="bash"> |
| + | nano /etc/kojid/kojid.conf |
| + | </syntaxhighlight>Point the builder at your koji hub and setup user/SSL credentials<syntaxhighlight lang="ini"> |
| + | ; The directory root where work data can be found from the koji hub |
| + | topdir=/mnt/koji |
| + | |
| + | ; The directory root for temporary storage |
| + | workdir=/tmp/koji |
| + | |
| + | ; The URL for the xmlrpc server |
| + | server=http://koji.koozali.org/kojihub |
| + | user=build1.koozali.org |
| + | |
| + | ; The URL for the file access |
| + | topurl=http://koji.koozali.org/kojifiles |
| + | |
| + | ;client certificate |
| + | cert = /etc/kojid/client.crt |
| + | |
| + | ;certificate of the CA that issued the HTTP server certificate |
| + | serverca = /etc/kojid/serverca.crt |
| + | </syntaxhighlight>Copy over you ssl certs from your koji hub and set their correct permissions<syntaxhighlight lang="bash"> |
| + | scp root@koji.koozali.org:/etc/pki/koji/build1.koozali.org.pem /etc/kojid/client.crt |
| + | scp root@koji.koozali.org:/etc/pki/koji/koji_ca_cert.crt /etc/kojid/serverca.crt |
| + | chmod 0600 /etc/kojid/*.crt |
| + | |
| + | </syntaxhighlight>Enable and start the kojid service<syntaxhighlight lang="bash"> |
| + | systemctl enable kojid --now |
| + | systemctl start kojid |
| </syntaxhighlight> | | </syntaxhighlight> |