An open API service for software projects hosted on Open Collective.

github.com/QubesOS/qubes-builder-rpm

Qubes component: builder-rpm
https://github.com/QubesOS/qubes-builder-rpm

Fix REPO_PROXY builds

I always use the updates proxy.

e5a7475b65c277ee745fcdad79c2343f2f53b5b3 authored almost 4 years ago
Copy -centos key for centos-stream

71c8dae70fcc652889ffca2770009b9b5c1c8e0c authored almost 4 years ago
Revert "Symlink centos keys for centos-stream too"

The repo file expects -centos file.
This reverts commit 18872d6f579bef586dde028b773e1c1933497701.

4d14387e27c840a48727c97989be8eb250138364 authored almost 4 years ago
Symlink centos keys for centos-stream too

18872d6f579bef586dde028b773e1c1933497701 authored almost 4 years ago
Merge remote-tracking branch 'origin/pr/107'

* origin/pr/107:
get_sources_from_srpm: ensure to enable needed repo only

2fb98461a13782a1be02e352718b717e5e3b7d57 authored almost 4 years ago
get_sources_from_srpm: ensure to enable needed repo only

We download from Fedora only. It prevents DNF issues on non-Fedora
platform like CentOS.

34d067548ae934c087756523dc8c1df714d4eeef authored almost 4 years ago
fix: Allow signing *.buildinfo with SplitGPG setup

Issue: Signing *.buildinfo is hardcoded to `$(GNUPG)`.

In the SplitGPG setup we rely on the RPM...

3f874e506e442a4b78770dd4038d6acf36c0aeba authored about 4 years ago
Merge remote-tracking branch 'origin/pr/99'

* origin/pr/99:
Disable debug package for spec renderin
legacy: builddep expanded spec from ...

a7c3a9b874a7b4e7a677b82ccdad34079eafe4a8 authored about 4 years ago
Merge remote-tracking branch 'origin/pr/104'

* origin/pr/104:
Makefile.builder: enforce condition making plugin available

215b21f05e73ad7c3df5272a7f70082b8e4e2513 authored about 4 years ago
Deduplicate setting %{dist}

1c40b8c70fe8e39d53d4dbb2492c15d8de33886e authored about 4 years ago
Makefile.builder: enforce condition making plugin available

It leads to conflicting debian and rpm plugins while building Debian
based templates because DIS...

b0e55ba7d15b86525eb6817431be46c89e2b1b5d authored about 4 years ago
Disable debug package for spec renderin

8c48389b688816030256ba3bb6da2f188bfc860c authored about 4 years ago
Fedora: exclude pipewire-* for 34 release

Ensure we can parse spec with xserver-sdk-abi-requires calls

5ad81b4db8cc9b49aa1b06f7792be7f827d3f61d authored about 4 years ago
legacy: builddep expanded spec from inside chroot

As we use DNF outside chroot we have not way for using inside
chroot particular macros. This is ...

78201b322334b3ed657f3f0c152b4c48b2f2b937 authored about 4 years ago
prepare-chroot-builder: fix install build base packages

24ad7519909af5cb25f60ab1b3f2aecbc8177481 authored about 4 years ago
distributions: make SC a little bit happier

62e556036fee607e9e5e0222ec113326e05560ea authored about 4 years ago
rpmfusion: add latest keys, repos and drop old

4f783bb5d2b5913c55148be464249ca2fc0468e5 authored about 4 years ago
gitlab-ci: fix centos reference

51dbcc4576ad5b751bb26334039217187f0e4e1c authored about 4 years ago
Merge remote-tracking branch 'origin/pr/103'

* origin/pr/103:
Define CentOS Stream as a separate dist

8e1cd3b33280756773b1f7954f3cdd99b7c454fa authored about 4 years ago
Merge remote-tracking branch 'origin/pr/100'

* origin/pr/100:
Switch from wget to curl

fca98961d68319f59a86de0be43b60973e7897ee authored about 4 years ago
Add old-style header+payload signatures

The version of RPM in R4.0.4 cannot verify packages without them,
causing fresh R4.0.4 installs ...

a1f46739aaf30f98be5f8b7d6ae9f2d1c59262ac authored about 4 years ago
Define CentOS Stream as a separate dist

We tried so far to make a switch from CentOS 8 to CentOS Stream 8
transparent for the user but i...

1b2d3a92d82f05525de1b4b22db54b8b364d1b88 authored about 4 years ago
Switch from wget to curl

curl has a better security track record than wget, and on Fedora uses a
better TLS library (Open...

fa6bd9cb894f370dcdffd1f9a21dded1326adba5 authored about 4 years ago
Always build the RPMDB from scratch

Fedora 34 does not support the old Berkeley DB RPMDB, so we need to
rebuild the RPMDB from scrat...

ee74a38c505e4ea5c11360fd94d7d07e2bd1f165 authored about 4 years ago
Merge remote-tracking branch 'origin/pr/98'

* origin/pr/98:
additional excludes to minimize fedora template
fix cleanup script with abso...

4c48cfba8a7f2fe719d127a5fae39ea711f92451 authored about 4 years ago
additional excludes to minimize fedora template

Exclude annobin plugin and it dependencies devs tools,
xdg-desktop-portal and it deps since it n...

f1ea093251f74ffe95844a02b4e2ad5fa1ea57be authored over 4 years ago
fix cleanup script with absolute chroot path

and drop deprecated backticks

0bd69f65150951c9ac8f9d10eeffd396f91ca88d authored over 4 years ago
Do not re-check build dependencies inside chroot

The build dependencies are installed separately, and since 6ea6b19a94,
they are installed using ...

17cb553ddbfeaf5bbd207ccf59f11cd6e73a614f authored over 4 years ago
Fix fedora updates URLs for mirrors

2fe749d0b9047aa9d35a0da0cae0825429a5c750 authored over 4 years ago
centos: include centos-repos

centos-release-stream no longer depends on centos-repos, install it
explicitly. And also centos-...

bc0582b0bdab979004b8c7385af8fb876e7f0160 authored over 4 years ago
Merge branch 'freeze-fc25'

* freeze-fc25:
metalink: drop md5 and sha1 hashes, drop rsync mirrors
Enable checking repo m...

36639707392650eafec883853e671e027ac71df7 authored over 4 years ago
metalink: drop md5 and sha1 hashes, drop rsync mirrors

We don't want to use them.

b305d92fe8b63f1c626de2c9ab5ec355fec448b0 authored over 4 years ago
Enable checking repo metadata for all qubes repositories

d4eac24d321b8947dd66b7f715ded85d6a2ba68d authored over 4 years ago
Use dnf from the host for legacy builder too

Install packages in the build env using dnf from outside of the build
chroot. The main reason is...

6ea6b19a943fc2177e5462d47bb8dfb5ad1c90b7 authored over 4 years ago
Typo fix

595bd3046288f0a7213a50d0637dfebeeffaec8d authored over 4 years ago
Properly use shell variables in makefile

$ needs to be doubled

fd26f0cf23df20a0ae6c53a03a004fcbadd36d13 authored over 4 years ago
Drop support for yum, centos-7

yum is a python2-only packages, mostly unsupported (outside of life
support for centos-7), and i...

01d770f7a925edf297248d31ad651a11d03126b8 authored over 4 years ago
Freeze repository metadata for Fedora 25

Repositories for Fedora 25 should not change, ever. Hardcode repository
metadata hash (in a form...

24412e4089d7b698ff4c65f196d2e520df0ed950 authored over 4 years ago
Do not store chosen mirrors premanently in repository config

Set them via command line only - this way it's easier to reason about
initial state of the repos...

20345820d77ed2b81b0fb3c14c036be2e4c08c12 authored over 4 years ago
No signed metadata for EPEL :(

This broke the CentOS template.

f2811ef685d4ba040073c02351295e5cbffb08a3 authored over 4 years ago
Add RPM version check

This avoids a spurious “package is not signed” error later.

c3967ab7418dee1694abb9bb530655a81e56f2dc authored over 4 years ago
Use actual arrays for YUM and INITIAL_PACKAGES

The conversion started the previous commit but was incomplete.

4ed00497f837b8ce31bb47447523afc867a64f40 authored over 4 years ago
RPM builder hardening

We *always* want RPM signature verification so hard-require it
everywhere we can. Also turn off...

8de9370b4011dcfa0d61aa33330d6af80fae0a8b authored over 4 years ago
Add Fedora 34 and 35 primary keys

c9bf280b658b0524bb3ce7d873c77b2f739b00ab authored over 4 years ago
Exclude pipewire-pulseaudio until we have qubes integration for it

It conflicts with pulseaudio daemon

QubesOS/qubes-issues#6358

e14910d89ca763b55b659662c00c6e55b932723f authored over 4 years ago
rpmbuildinfo: remove '.(none)' arch package

5a78012a579572f70cd011765dab9252357b575c authored over 4 years ago
rpmbuildinfo: fix typo in checksums

ba366097f6aa68c1a930f65acaaed0cf16a59589 authored over 4 years ago
rpmbuildinfo: add %{arch} field

99253ae27e1e37bc75f267fd4dc7088ecdd7094e authored over 4 years ago
rpmbuildinfo: add %{release} field

068d9b3f1fd6705dd005e0f8bc04bdf3488c6b3d authored over 4 years ago
XFCE: update Thunar desktop file

76602c765819d541855104e70c0336a6b95c610e authored over 4 years ago
Switch to CentOS 8 Stream

a3e39f53a30719cf6350a7189813ea6f68877226 authored over 4 years ago
Merge remote-tracking branch 'origin/pr/88'

* origin/pr/88:
centos8: repo files have been renamed

1e48e57e3b9ec4f93cb3afdd0a8a7c2bf7744f89 authored over 4 years ago
centos8: repo files have been renamed

c480420bfdd78c4a046a1d087743374d4da56a1f authored over 4 years ago
Use dnf download to get SRPM

As package signature is verified only another substep which would
need to check the hash would n...

cd2331c5e8ed53bad1a0df68e91d7ffc217fc26b authored over 4 years ago
ci: allow shellcheck to fail for now

Not all scripts are cleaned up yet.

4f754b07c21c31e4d4f3d1ddd1fc6dd3db766df4 authored over 4 years ago
Merge remote-tracking branch 'origin/pr/85'

* origin/pr/85:
Better shell quoting

9685cb57158963381e79f193297b80ce892ac9de authored over 4 years ago
gitlab-ci: update tags

98298077ddd2e829e633d7777adf61acc58c29a0 authored over 4 years ago
gitlab-ci: add shellcheck test

dbeb0f3c6b136df223528b957ac07dc19e82dab1 authored over 4 years ago
Better shell quoting

Mostly adding double quotes

00e21a5e735139031ecf023c3fe5ebbff8496e5c authored over 4 years ago
Fix the second place too

35723a9a7c363820b880507bdc9a6b8678c1192a authored over 4 years ago
Fix modular repo disable one more time

- the option was correct: --disable

fccc7b522f0e1a57c3faaf6706b2496773ca7633 authored over 4 years ago
Fix modular repo disable

- the option is --disablerepo
- don't try to disable modular repos where they didn't existed

85f55882256647749b6eafea9693176de0eaba22 authored over 4 years ago
Merge remote-tracking branch 'origin/pr/84'

* origin/pr/84:
prepare-chroot-base: fix typo

b71362d676cca978857ca6292d881707decad98b authored over 4 years ago
prepare-chroot-base: fix typo

9375dbbf9c464b85a5e04a411b2dbcfd901bbe0c authored over 4 years ago
Modular repositories are provided as subpackage since Fedora 33

https://fedoraproject.org/wiki/Releases/33/ChangeSet#Distribute_.repo_files_for_modular_reposito...

08ac1bfb62621035b4f7d1253a13c6a6cb6f74e0 authored over 4 years ago
Fix remaining symlink issue with resolv.conf

493f23f79e5ba8695879bee85cc6c50a2d304f1b authored over 4 years ago
gitlab: prepare chroot cache

b9ede0efdf9ef17f7f6f967b296d9a56b4ec034a authored over 4 years ago
Merge remote-tracking branch 'fepitre/ci-cache'

* fepitre/ci-cache:
Add chroot cache generation

a89cac209fcbda9063b06eff2eb6c721fe8655b3 authored over 4 years ago
Merge remote-tracking branch 'origin/pr/81'

* origin/pr/81:
Allow to prepare Mock chroot before build

be84d68ddbcb324aa334b23eb62f6e6225653c11 authored over 4 years ago
Allow to prepare Mock chroot before build

This intends to allow backuping chroot for CI.

d62345f8951c04010fc92cf11ba64471c76c4554 authored over 4 years ago
Add chroot cache generation

958e9987f72329ef3eec319d15d682f32ce3ead0 authored over 4 years ago
Merge remote-tracking branch 'origin/pr/80'

* origin/pr/80:
Add .gitlab-ci.yml

33b93803f556ec9ed73450f28c30b0c5dfc0f0ce authored over 4 years ago
Add .gitlab-ci.yml

5011985e78a2bca0ad6c139a705c1218e294e13f authored over 4 years ago
prepare-chroot-builder: specify --releasever in all cases

In docker, there is issue with detecting --releasever.

782169cf2b6d177171732980de80b155fb9e263d authored over 4 years ago
prepare-chroot-base: check if required dev are present

In docker /dev/console is not available. Don't fail for that.

c0a715bfcec5f7bcd4d0c99c157f9923132c71ca authored over 4 years ago
Merge remote-tracking branch 'origin/pr/77'

* origin/pr/77:
Allow avahi for hplip and libsane-hpaio

6ef6e31cd51feb82eb74c8cdf865b0f445a74b5a authored over 4 years ago
Allow avahi for hplip and libsane-hpaio

9b21efe9e38a2e3606d6eaae3f51bfb57936edce authored over 4 years ago
travis: update for prepare/build split

2ff9e1e6223dae430d4473d013f9c8dad19dba2f authored over 4 years ago
resolv.conf: ensure to remove systemd-resolved symlink

25cf4e45f4db208157e8880d79d9b5b2020023cd authored over 4 years ago
Fix concurrent package signing

When multiple instances of qubes-builder try to sign packages at the
same time, they may conflic...

c910be7f5d213f9149f4127e9fba16e4e7b6a800 authored almost 5 years ago
rpmfusion: add rpm for FC33 from banched ones

QubesOS/qubes-issues#6039

b3a796ef31169e55a65d1de15c31d048d218c9de authored almost 5 years ago
distributions: set invalid proxy for CentOS 8

99e85fcb568c708528ef0144ccfc0a118b936982 authored almost 5 years ago
centos: enable python38-devel:3.8 stream

9e058a7349345321d1e98210373816a5aba495cc authored almost 5 years ago
Pre-install python38 in centos8's mock environment

Choose to build python packages with python38.

6634ea460d8029afa81ebb0d93243d13edd5bafe authored almost 5 years ago
CentOS 8: use python38 by default

Use @fepitre's COPR repository with Python3.8 dependencies

293aa6a29e68ffb34780cef654c19f92ad6e9da1 authored almost 5 years ago
prepare-chroot-builder: add @fepitre's COPR repository for Centos 7

5ff4a9ca61f4ae8b0488b33a0611895610aa29d1 authored almost 5 years ago
Finally exclude catfish due to already excluded mlocate

84b5314257efa1b6279a415e020e57bd40aca8a9 authored about 5 years ago
Readd catfish and simplescan

ef8cadbc08d1319045e7adf77c45510a6ef8bb1b authored about 5 years ago
centos: adapt XFCE package list

fa7f34c48202c0eb623e6aaee5b17cff9c1382b1 authored about 5 years ago
distribution: nobest for only CentOS8+

388327e7c55ed46d7c8bdded246a598828e02e9c authored about 5 years ago
prepare-chroot-builder: disable modular earlier

42afc30a9ba341eb1577c407a5d585c78faf23e6 authored about 5 years ago
distribution: add --nobest for CentOS for solving conflicting requests

6f0c8a4f4e702df2be32785583cf6de6b1be8752 authored about 5 years ago
Update Fedora and CentOS package list based on upstream kickstart

For GNOME and XFCE

566e256129648100c7120e4fbf17ba91c56ce683 authored about 5 years ago
keys: add Fedora 33 primary key

8a943df4be0e94ebf9e6baa907b87aee9cb96677 authored about 5 years ago
Create 9 loop devices inside chroot

5 is too little in Travis CI, because at startup they are already
occupied by mounted snaps.

7be914c0f572624f1d35764b6a843eba27f86d08 authored about 5 years ago
generate-changelog: don't hardcode $giturl

It was wrong for QubesOS-contrib.

Also include the GIT_SUFFIX: Without this suffix, the URL mig...

de3fe6e4d832f10006d88ae1aaba84ebccf68dc1 authored about 5 years ago
Make legacy builds reproducible too

... if they have a changelog, or $SOURCE_DATE_EPOCH is otherwise set.
(Same as for mock builds.)

d23882ad508f68b3ee982098c379aa014bcf7cff authored about 5 years ago
Remove repo file to disable it, instead of --disablerepo

If the repository is not installed yet, --disablerepo makes yum fail.
Remove repo file instead, ...

95b2e96db9572519d6bebc5fc79aeeb6d3f70200 authored about 5 years ago
Initially disable local repo in prepare-chroot-builder

At the initial yum call it isn't mounted yet. When creating chroot
for the first time it isn't a...

eadf4afe34f11c0842ead49a8f7d3973f0fcda6b authored about 5 years ago
mock: Use centos keys for centos qubes packages

2fe6373e9fc6db3b1ea44551b46ebbf0ca0a4fb1 authored about 5 years ago