Skip to main content

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
Re: [cross-project-issues-dev] Sign code from Hudson

You need to be a special user that has signing privileges, as Jesse mentioned.  You can then use ssh keys to invoke the signing script, poll the server to check when the signed zip is available and copy your signed zip back to your non-eclipse.org servers.

The way the Eclipse project accomplishes this task is described here...

http://dev.eclipse.org/mhonarc/lists/cross-project-issues-dev/msg05187.html

Kim



From:        Mark Russell <mrrussell@xxxxxxxxxx>
To:        Cross project issues <cross-project-issues-dev@xxxxxxxxxxx>
Cc:        Eric Clayberg <clayberg@xxxxxxxxxx>
Date:        05/04/2011 02:53 PM
Subject:        Re: [cross-project-issues-dev] Sign code from Hudson
Sent by:        cross-project-issues-dev-bounces@xxxxxxxxxxx




The process is running a the Hudson user.  I don't think that the Hudson user should have signing authority then anyone that ran build code could sign the code.  How do groups that build their code on external servers sign the code?

On Wed, May 4, 2011 at 2:40 PM, Jesse McConnell <jesse.mcconnell@xxxxxxxxx> wrote:
if the build process is doing it it should have the rights to do it,
if your running it as any other user you need to open a bug with
webmaster to get added onto the special signer group list

cheers,
jesse

--
jesse mcconnell

jesse.mcconnell@xxxxxxxxx



On Wed, May 4, 2011 at 13:36, Mark Russell <
mrrussell@xxxxxxxxxx> wrote:
> I'm not sure if this is the correct group for this.  If not please let me
> know which group I should post this on.
> The Window Builder project is currently build on Google servers (I'm in the
> process of moving it to Eclipse Servers).  Until I get the code on the
> Eclipse Servers I wrote a Python script to optimize, sign, and deploy the
> code once it is on
build.eclipse.org. I tried to run it from Hudson and got
> an error that it could not execute the sign code because the user was not in
> the correct group.
>
> F1 2011-05-04 14:26:51,636 DEBUG
> signFiles(/home/data/httpd/download-staging.priv/tools/windowbuilder)
> Traceback (most recent call last):
>   File "StageDrop.py", line 320, in <module>
>     main()
>   File "StageDrop.py", line 54, in main
>     signedDir = signZipFiles(signDir)
>   File "StageDrop.py", line 223, in signZipFiles
>     subprocess.check_call(['/usr/local/bin/sign', zipPath, 'nomail',
> 'signed'])
>   File "/usr/lib64/python2.6/subprocess.py", line 457, in check_call
>     retcode = call(*popenargs, **kwargs)
>   File "/usr/lib64/python2.6/subprocess.py", line 444, in call
>     return Popen(*popenargs, **kwargs).wait()
>   File "/usr/lib64/python2.6/subprocess.py", line 595, in __init__
>     errread, errwrite)
>   File "/usr/lib64/python2.6/subprocess.py", line 1106, in _execute_child
>     raise child_exception
> OSError: [Errno 2] No such file or directory
> Sending e-mails to:
mrrussell@xxxxxxxxxx clayberg@xxxxxxxxxx
>
> How do I get the code to sign the zip files from Hudson?
> --
> Mark R Russell
>
(724) 473-3140
> Release Engineer
> Google Pittsburgh
>
>

> _______________________________________________
> cross-project-issues-dev mailing list
>
cross-project-issues-dev@xxxxxxxxxxx
>
https://dev.eclipse.org/mailman/listinfo/cross-project-issues-dev
>
>
_______________________________________________
cross-project-issues-dev mailing list

cross-project-issues-dev@xxxxxxxxxxx
https://dev.eclipse.org/mailman/listinfo/cross-project-issues-dev



--
Mark R Russell

(724) 473-3140
Release Engineer
Google Pittsburgh

_______________________________________________
cross-project-issues-dev mailing list
cross-project-issues-dev@xxxxxxxxxxx
https://dev.eclipse.org/mailman/listinfo/cross-project-issues-dev


Back to the top