From 275d9ae9a8265df5c3b9d1d1a76902267aa4a9d5 Mon Sep 17 00:00:00 2001 From: Brian Dolbec Date: Thu, 25 Dec 2014 20:57:35 -0800 Subject: gkeys: Update fetchseed, verify actions to work with the new category system --- gkeys/etc/gkeys.conf | 22 ++++++++++++++++++++-- gkeys/etc/gkeys.conf.sample | 22 ++++++++++++++++++++-- 2 files changed, 40 insertions(+), 4 deletions(-) (limited to 'gkeys/etc') diff --git a/gkeys/etc/gkeys.conf b/gkeys/etc/gkeys.conf index 3c79243..d9a42c0 100644 --- a/gkeys/etc/gkeys.conf +++ b/gkeys/etc/gkeys.conf @@ -20,6 +20,11 @@ gkeysdir: /var/lib/gentoo/gkeys keyring: %(gkeysdir)s/keyrings +# The default keyring to use +# for verification if not specified +verify-keyring: gentoo + + # Base directory to use as the path prefix to use # for the signing capable keyrings, keyring settings # eg: '/' for root if absolute paths are used for homedir, keyring @@ -48,8 +53,12 @@ files: 0o002 [seeds] -# *-seedfile: json txt file of name, keyid, fingerprint -# entry per line +# file is a json text file of: nick, name, keydir, fingerprint +# one file per line +# category = category or seedfile name +# these categories/seedfile nmaes are used for the +# -C, --category input value validations +# eg: category: filepath gentoo: %(seedsdir)s/gentoo.seeds gentoo-devs: %(seedsdir)s/gentoo-devs.seeds @@ -62,6 +71,15 @@ gentoo: https://api.gentoo.org/gentoo-keys/seeds/gentoo.seeds gentoo-devs: https://api.gentoo.org/gentoo-keys/seeds/gentoo-devs.seeds +[verify-seeds] + +# mapping of the seedfile category name +# to the category-name and gpg-key keydir to use to verify the seedfile +# seedfile-name: category keydir +gentoo: gentoo gkeys +gentoo-devs: gentoo gkeys + + [sign] # GKEY nick used for verification of seeds and other gkey files diff --git a/gkeys/etc/gkeys.conf.sample b/gkeys/etc/gkeys.conf.sample index 3c79243..d9a42c0 100644 --- a/gkeys/etc/gkeys.conf.sample +++ b/gkeys/etc/gkeys.conf.sample @@ -20,6 +20,11 @@ gkeysdir: /var/lib/gentoo/gkeys keyring: %(gkeysdir)s/keyrings +# The default keyring to use +# for verification if not specified +verify-keyring: gentoo + + # Base directory to use as the path prefix to use # for the signing capable keyrings, keyring settings # eg: '/' for root if absolute paths are used for homedir, keyring @@ -48,8 +53,12 @@ files: 0o002 [seeds] -# *-seedfile: json txt file of name, keyid, fingerprint -# entry per line +# file is a json text file of: nick, name, keydir, fingerprint +# one file per line +# category = category or seedfile name +# these categories/seedfile nmaes are used for the +# -C, --category input value validations +# eg: category: filepath gentoo: %(seedsdir)s/gentoo.seeds gentoo-devs: %(seedsdir)s/gentoo-devs.seeds @@ -62,6 +71,15 @@ gentoo: https://api.gentoo.org/gentoo-keys/seeds/gentoo.seeds gentoo-devs: https://api.gentoo.org/gentoo-keys/seeds/gentoo-devs.seeds +[verify-seeds] + +# mapping of the seedfile category name +# to the category-name and gpg-key keydir to use to verify the seedfile +# seedfile-name: category keydir +gentoo: gentoo gkeys +gentoo-devs: gentoo gkeys + + [sign] # GKEY nick used for verification of seeds and other gkey files -- cgit v1.2.3-65-gdbad