unkin/rpmbuilder
3
0
Fork 0
Code Issues 9 Pull Requests 2 Actions Packages Projects Releases Wiki Activity

Publish RPMs to artifactapi rpm-vendor repos #169

Merged
benvin merged 1 commits from benvin/rpm-vendor-deploy into master 2026-07-18 16:00:11 +10:00
Conversation 0 Commits 1 Files Changed 6
+119 -67
unkinben commented 2026-07-18 00:10:14 +10:00
Owner
Copy Link
Copy Source

Why: vendored RPMs currently upload to Gitea's per-distro RPM registry. Publish them instead to the artifactapi per-distro rpm-vendor local repos (real yum repos; repodata regenerates automatically), keeping them separate from in-house software (rpm-internal). The existing per-distro build-all build jobs are unchanged.

Changes:

  • .woodpecker/deploy-*.yaml: retarget the deploy-rpms step from git.unkin.net/api/packages/... to a PUT against artifactapi /api/v2/remotes/rpm-vendor-/files/ (unauthenticated, like the other repos), with an existence probe to skip re-uploads. Drops the DRONECI_PASSWORD secret.
  • tools/build: repoint check_package_exists from the Gitea packages API to the artifactapi rpm-vendor repo so build-all's skip check matches the real publish target; verify artifactapi's internal TLS cert against the OS CA bundle; carry arch on PackageInfo so the probed filename matches the built RPM.

Depends on the already-merged rpm-vendor repos (terraform-artifactapi) and pairs with puppet-prod rpm-vendor yumrepo.

Why: vendored RPMs currently upload to Gitea's per-distro RPM registry. Publish them instead to the artifactapi per-distro rpm-vendor local repos (real yum repos; repodata regenerates automatically), keeping them separate from in-house software (rpm-internal). The existing per-distro build-all build jobs are unchanged. Changes: - .woodpecker/deploy-*.yaml: retarget the deploy-rpms step from git.unkin.net/api/packages/... to a PUT against artifactapi /api/v2/remotes/rpm-vendor-<distro>/files/ (unauthenticated, like the other repos), with an existence probe to skip re-uploads. Drops the DRONECI_PASSWORD secret. - tools/build: repoint check_package_exists from the Gitea packages API to the artifactapi rpm-vendor repo so build-all's skip check matches the real publish target; verify artifactapi's internal TLS cert against the OS CA bundle; carry arch on PackageInfo so the probed filename matches the built RPM. Depends on the already-merged rpm-vendor repos (terraform-artifactapi) and pairs with puppet-prod rpm-vendor yumrepo.
unkinben added 1 commit 2026-07-18 15:40:09 +10:00
Publish RPMs to artifactapi rpm-vendor repos
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
ci/woodpecker/pr/build-fedora42 Pipeline was successful
Details
ci/woodpecker/pr/build-fedora43 Pipeline was successful
Details
ci/woodpecker/pr/build-fedora44 Pipeline was successful
Details
ci/woodpecker/pr/build-almalinux8 Pipeline was successful
Details
ci/woodpecker/pr/build-almalinux9 Pipeline was successful
Details
173ffd0f22 
Vendored RPMs currently upload to Gitea's per-distro RPM registry. Publish
them instead to the artifactapi per-distro rpm-vendor local repos (real yum
repos; repodata regenerates automatically), keeping them separate from
in-house software (rpm-internal). The build jobs are unchanged (build-all
per distro).

- .woodpecker/deploy-*.yaml: retarget the deploy-rpms step from
  git.unkin.net/api/packages/... to a PUT against artifactapi
  /api/v2/remotes/rpm-vendor-<distro>/files/ (unauthenticated, like the other
  repos), with an existence probe to skip re-uploads. Drops the
  DRONECI_PASSWORD secret.
- tools/build: repoint check_package_exists from the Gitea packages API to
  the artifactapi rpm-vendor repo so build-all's skip check matches the real
  publish target; verify artifactapi's internal TLS cert against the OS CA
  bundle; carry arch on PackageInfo so the probed filename matches the RPM.
unkinben force-pushed benvin/rpm-vendor-deploy from 28d4348e2b to 173ffd0f22 2026-07-18 15:40:09 +10:00 Compare
unkinben changed title from Publish vendor RPMs to artifactapi rpm-vendor, one package per job to Publish RPMs to artifactapi rpm-vendor repos 2026-07-18 15:40:32 +10:00
benvin merged commit 8c0d23afae into master 2026-07-18 16:00:11 +10:00
benvin deleted branch benvin/rpm-vendor-deploy 2026-07-18 16:00:12 +10:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
benvin (BenVincent) droneci unkinben (Ben Vincent)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: unkin/rpmbuilder#169
Delete Branch "benvin/rpm-vendor-deploy"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?