Differences between revisions 24 and 25

Deletions are marked like this. Additions are marked like this.
Line 38: Line 38:
|| ~/.centos-ca.cert || The CA Certificate from ACO || || ~/.centos-server-ca.cert || The CA Certificate from ACO ||

Building in CBS


We provide a set of tools in the CentOS-Extras repository for building SIG packages in the Community Build System. If your development workstation is running CentOS 7:

    yum install centos-packager

Many of these tools will become the building blocks for Centpkg (HowTos/Centpkg).

If your workstation is on Fedora (23/24/25) there is a Copr available:

    dnf copr enable bstinson/centos-packager
    dnf install centos-packager

Step 1: Signing up for an account (ACO)
  1. Visit the Accounts System

  2. Select 'New Account'
  3. Fill out the form with your information

Step 2: Join a Special Interest Group

Your account will not be active in CBS until you are a member of a SIG

  1. After signing in to accounts.centos.org, choose 'Group List' and locate the SIG you are interested in joining. (SIGs are listed under 's', for example, 'sig-cloud'.)
  2. Apply for membership
  3. Speak with your SIG Chair to have your request approved

Step 3: Generating your user certificate

Your user certificate bundle comes in the form of 3 files:




PEM file with your X509 Client Certificate and Key


The CA Certificate from ACO


The CA Certificate for the lookaside

To generate your certificate you can use the 'centos-cert' tool included in the centos-packager package:

  Usage: centos-cert [OPTIONS] 

  -h, --help            show this help message and exit
  -u USERNAME, --username=USERNAME
                        ACO Username.
  -n, --new-cert        Generate a new User Certificate.
                        User Certificate.
  -v, --verify-cert     Verify Certificate.

If you've signed up with the account name tuser, you can generate your new certificate like this:

    [tuser@myworkstation]$ centos-cert -u tuser -n
    ACO Password: <password_goes_here>

Attention that centos-cert -u tuser -n will request a new certificate, so that will automatically revoke any other certificate you had in the past. If you need to use cbs/koji on multiple machines, just copy the files mentioned above on the other machine.

Step 3.1: Renewing your certificate

/!\ Your user certificate is valid for 6 months. If your certificate expires and you do not renew it after another 4 months, your account will be disabled in accounts.centos.org

To renew your certificate:

    [tuser@myworkstation]$ centos-cert -u tuser -n
    ACO Password: <password_goes_here>

Step 4: Building

centos-packager provides a binary /usr/bin/cbs that connects to the CentOS koji instance using the appropriate profile and is cli compatible with /usr/bin/koji. Profiles allow you to be a client of multiple koji build systems without interfering with one another.

As an example, if you have an SRPM (a2ps in this case) to build for the bananas7 target, you can do the following:

    [tuser@myworkstation]$ cbs build bananas7-el7 a2ps-4.14-23.el7.src.rpm

HowTos/CentosPackager (last edited 2019-10-07 12:23:37 by ThomasOulevey)