HowTos/CentosPackager-ACO

Building in CBS

0.1. Prerequisites

We provide a set of tools in the CentOS-Extras repository for building SIG packages in the Community Build System. If your development workstation is running CentOS 7:

    yum install centos-packager

Many of these tools will become the building blocks for Centpkg (HowTos/Centpkg).

If your workstation is on Fedora (23/24/25) there is a Copr available:

    dnf copr enable bstinson/centos-packager
    dnf install centos-packager

0.2. Step 1: Signing up for an account (ACO)

Visit the Accounts System
Select 'New Account'
Fill out the form with your information

0.3. Step 2: Join a Special Interest Group

Your account will not be active in CBS until you are a member of a SIG

After signing in to accounts.centos.org, choose 'Group List' and locate the SIG you are interested in joining. (SIGs are listed under 's', for example, 'sig-cloud'.)
Apply for membership
Speak with your SIG Chair to have your request approved

0.4. Step 3: Generating your user certificate

Your user certificate bundle comes in the form of 3 files:

Filename	Purpose
~/.centos.cert	PEM file with your X509 Client Certificate and Key
~/.centos-server-ca.cert	The CA Certificate from ACO
~/.centos-upload-ca.cert	The CA Certificate for the lookaside

To generate your certificate you can use the 'centos-cert' tool included in the centos-packager package:

  Usage: centos-cert [OPTIONS] 

Options:
  -h, --help            show this help message and exit
  -u USERNAME, --username=USERNAME
                        ACO Username.
  -n, --new-cert        Generate a new User Certificate.
  -f CERTFILE, --file=CERTFILE
                        User Certificate.
  -v, --verify-cert     Verify Certificate.

If you've signed up with the account name tuser, you can generate your new certificate like this:

    [tuser@myworkstation]$ centos-cert -u tuser -n
    ACO Password: <password_goes_here>

Attention that centos-cert -u tuser -n will request a new certificate, so that will automatically revoke any other certificate you had in the past. If you need to use cbs/koji on multiple machines, just copy the files mentioned above on the other machine.

0.5. Step 3.1: Renewing your certificate

$/!\$ Your user certificate is valid for 6 months. If your certificate expires and you do not renew it after another 4 months, your account will be disabled in accounts.centos.org

To renew your certificate:

    [tuser@myworkstation]$ centos-cert -u tuser -n
    ACO Password: <password_goes_here>

0.6. Step 4: Building

centos-packager provides a binary /usr/bin/cbs that connects to the CentOS koji instance using the appropriate profile and is cli compatible with /usr/bin/koji. Profiles allow you to be a client of multiple koji build systems without interfering with one another.

As an example, if you have an SRPM (a2ps in this case) to build for the bananas7 target, you can do the following:

    [tuser@myworkstation]$ cbs build bananas7-el7 a2ps-4.14-23.el7.src.rpm