From Fedora Project Wiki

No edit summary
(→‎Action: update signing command)
Line 3: Line 3:


== Action ==
== Action ==
1. Sign the DVD/CD shasum files by starting from the compose host:
1. Sign all CHECKSUM files:


<pre>
<pre>
$ cd /srv/pungi/13.rc4/Fedora/; for arch in *; do cat \
or checksum in $(find /mnt/fedora_koji/compose/23_Alpha_RC2/23_Alpha/ -name  *CHECKSUM); do cat $checksum >/tmp/sum && sigul sign-text -o /tmp/signed fedora-23 /tmp/sum && chmod 644 /tmp/signed && sg releng "mv /tmp/signed $checksum"; donee
$arch/iso/*CHECKSUM > /tmp/sum && sigul sign-text -o /tmp/signed \
fedora-13 /tmp/sum && sudo mv /tmp/signed \
$arch/iso/Fedora-13-$arch-CHECKSUM; done
</pre>
</pre>


2. While remaining on the compose host, sign the spins:
2. Prepare the master mirror by logging into releng2:
<pre>
$ cd /srv/pungi/live/13.rc4/; for dir in *; do pushd $dir; \
    echo "# The image checksum(s) are generated with sha256sum." > \
    $(basename `pwd`)-CHECKSUM && echo "# The PGP checksum uses sha1sum." >> \
    $(basename `pwd`)-CHECKSUM && sha256sum -b $(basename `pwd`).iso >> \
    $(basename `pwd`)-CHECKSUM && sigul sign-text -o $(basename `pwd`)-CHECKSUM \
    fedora-13 $(basename `pwd`)-CHECKSUM && cat *-CHECKSUM && rm *CHECKSUM~; \
    popd; done
</pre>
 
3. Prepare the master mirror by logging into releng2:
<pre>
<pre>
$ ssh <fas-username>@gateway.fedoraproject.org
$ ssh <fas-username>@gateway.fedoraproject.org
Line 34: Line 20:
</pre>
</pre>


4. Synchronize the ''Everything'' tree with the mirrors from releng2:
3. Synchronize the ''Everything'' tree with the mirrors from releng2:
<pre>
<pre>
$ sudo -u ftpsync rsync -rlptDHhv --progress --stats --exclude images/ - \
$ sudo -u ftpsync rsync -rlptDHhv --progress --stats --exclude images/ - \
Line 43: Line 29:
</pre>
</pre>


5. Synchronize the ''Fedora'' tree with the mirrors from releng2:
4. Synchronize the ''Fedora'' tree with the mirrors from releng2:
<pre>
<pre>
$ sudo -u ftpsync rsync -rlptDHhv --progress --stats - \
$ sudo -u ftpsync rsync -rlptDHhv --progress --stats - \
Line 51: Line 37:
</pre>
</pre>


6. Synchronize the Live images with the mirrors from releng2:
5. Synchronize the Live images with the mirrors from releng2:
<pre>
<pre>
$ sudo -u ftpsync rsync -rlptDHhv --progress --stats --exclude \*.log \
$ sudo -u ftpsync rsync -rlptDHhv --progress --stats --exclude \*.log \
Line 58: Line 44:
</pre>
</pre>


7.  Change file permissionsOpen for mirrors (also known as the ''mirror stage bit flip'') on releng2:
6.  Change file permissionsOpen for mirrors (also known as the ''mirror stage bit flip'') on releng2:
<pre>
<pre>
$ sudo -u ftpsync chmod 750 /pub/fedora/linux/releases/13
$ sudo -u ftpsync chmod 750 /pub/fedora/linux/releases/13

Revision as of 18:02, 9 September 2015

Description

When the release has been fully tested and approved at the "Go/No-Go" meeting it is ready for release to the Fedora mirrors.

Action

1. Sign all CHECKSUM files:

or checksum in $(find /mnt/fedora_koji/compose/23_Alpha_RC2/23_Alpha/ -name  *CHECKSUM); do cat $checksum >/tmp/sum && sigul sign-text -o /tmp/signed fedora-23 /tmp/sum && chmod 644 /tmp/signed && sg releng "mv /tmp/signed $checksum"; donee

2. Prepare the master mirror by logging into releng2:

$ ssh <fas-username>@gateway.fedoraproject.org
$ ssh releng2
$ sudo -u ftpsync mkdir -p /pub/fedora/linux/releases/13/{Fedora,Everything,Live} 
$ sudo -u ftpsync chmod 700 /pub/fedora/linux/releases/13/

3. Synchronize the Everything tree with the mirrors from releng2:

$ sudo -u ftpsync rsync -rlptDHhv --progress --stats --exclude images/ - \
    --exclude EFI --exclude isolinux --exclude .treeinfo \
    --exclude .discinfo - --link-dest=/pub/fedora/linux/development/13/ \
    /mnt/koji/mash/branched-20100518/13/ \
    /pub/fedora/linux/releases/13/Everything/

4. Synchronize the Fedora tree with the mirrors from releng2:

$ sudo -u ftpsync rsync -rlptDHhv --progress --stats - \
    --link-dest=/pub/fedora/linux/development/13/ \
    jkeating@compose-x86-01:/srv/pungi/13.RC4/Fedora/ \ 
    /pub/fedora/linux/releases/13/Fedora/

5. Synchronize the Live images with the mirrors from releng2:

$ sudo -u ftpsync rsync -rlptDHhv --progress --stats --exclude \*.log \
    jkeating@compose-x86-01:/srv/pungi/live/Fedora-13-i686-Live{,-KDE}/ \
    /pub/fedora/linux/releases/13/Live/i686/

6. Change file permissionsOpen for mirrors (also known as the mirror stage bit flip) on releng2:

$ sudo -u ftpsync chmod 750 /pub/fedora/linux/releases/13

Verification

Verification is somewhat difficult as one cannot look at the content via the web server due to permissions. Typically we ask somebody from the Infrastructure team to give the tree a second set of eyes.

Consider Before Running

Hope the release is good!