unkin-agent
70523ae938
`s3.ceph.unkin.net` serves a bare leaf issued by `CN=unkin.net Intermediate Authority`. The package shipped only the root, so images carrying just `unkin-ca-certificates` (container-base, container-gobuilder) cannot verify it — `curl https://s3.ceph.unkin.net/` returns 000. - Fetch `pki_int` alongside `pki_root` and anchor it as `UNKIN_INTCA_2024.crt` - Fail the build when a fetch errors or returns a non-certificate - Bump version to `2026.10.2` on all distro targets Verified in `gobuilder:0.1.1-alma9`: 000 before, 200 after, no `-k`. Reviewed-on: #177 Co-authored-by: unkin-agent <unkin-agent@unkin.net> Co-committed-by: unkin-agent <unkin-agent@unkin.net>
28 lines
647 B
YAML
28 lines
647 B
YAML
name: unkin-ca-certificates
|
|
github: unknown/unkin-ca-certificates
|
|
description: ca-certificates for the unkin site
|
|
arch: amd64
|
|
platform: linux
|
|
maintainer: Unkin
|
|
homepage: https://vault.query.consul:8200
|
|
license: Apache-2.0
|
|
dist_tag: true
|
|
builds:
|
|
- image: git.unkin.net/unkin/almalinux8-rpmbuilder:latest
|
|
release: '1'
|
|
repository:
|
|
- almalinux/el8
|
|
version: 2026.10.2
|
|
- image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
|
|
release: '1'
|
|
repository:
|
|
- almalinux/el9
|
|
version: 2026.10.2
|
|
- image: git.unkin.net/unkin/almalinux9-rpmbuilder:latest
|
|
release: '1'
|
|
repository:
|
|
- fedora/42
|
|
- fedora/43
|
|
- fedora/44
|
|
version: 2026.10.2
|