[Qa-jenkins-scm] [jenkins.debian.net] 01/01: reproducible Arch Linux: ignore that certificates expire in the future

Holger Levsen holger at layer-acht.org
Wed Jan 3 12:28:09 UTC 2018


This is an automated email from the git hooks/post-receive script.

holger pushed a commit to branch master
in repository jenkins.debian.net.

commit 473cf45b0f1b6188656df5c479543f360b53bda1
Author: kpcyrd <git at rxv.cc>
Date:   Wed Jan 3 00:07:50 2018 +0100

    reproducible Arch Linux: ignore that certificates expire in the future
    
    Signed-off-by: Holger Levsen <holger at layer-acht.org>
---
 bin/reproducible_setup_archlinux_schroot.sh | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/bin/reproducible_setup_archlinux_schroot.sh b/bin/reproducible_setup_archlinux_schroot.sh
index 37a14d9..1966bcf 100755
--- a/bin/reproducible_setup_archlinux_schroot.sh
+++ b/bin/reproducible_setup_archlinux_schroot.sh
@@ -132,6 +132,11 @@ echo 'jenkins ALL= NOPASSWD: /usr/sbin/pacman *' | $ROOTCMD tee -a /etc/sudoers
 $ROOTCMD mkdir /var/lib/jenkins
 $ROOTCMD chown -R jenkins:jenkins /var/lib/jenkins
 echo ". /etc/profile.d/proxy.sh" | tee -a $SCHROOT_BASE/$TARGET/var/lib/jenkins/.bashrc
+if [ "$HOSTNAME" = "profitbricks-build4-amd64" ] ; then
+	# workaround for certificates that aren't valid in the future.
+	# we might need to replace this with a mitm proxy in the future
+	echo "insecure" | tee -a $SCHROOT_BASE/$TARGET/var/lib/jenkins/.curlrc
+fi
 $USERCMD bash -l -c 'gpg --check-trustdb' # first run will create ~/.gnupg/gpg.conf
 echo "keyserver-options auto-key-retrieve" | tee -a $SCHROOT_BASE/$TARGET/var/lib/jenkins/.gnupg/gpg.conf
 

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/qa/jenkins.debian.net.git



More information about the Qa-jenkins-scm mailing list