clr-distro-factory icon indicating copy to clipboard operation
clr-distro-factory copied to clipboard

Inject certificate used by sign_update function into mixer's chroot

Open gtkramer opened this issue 5 years ago • 1 comments

A file named os-core-update-extra-files needs to be created in mixer's server state directory containing the paths that need to be added to the os-core-update manifest. These files need to be created with the proper permissions inside mixer's full chroot. This needs done after mixer build bundles but before mixer build update. Without this, users are not able to perform swupd update from the content that mixer creates when custom update signing is used.

At a minimum, need the following:

/usr/share/clear/update-ca
/usr/share/clear/update-ca/Swupd_Root.pem

This is because swupd-client has an option in it's configure.ac for:

default_cert_path="/usr/share/clear/update-ca/Swupd_Root.pem"

gtkramer avatar Dec 13 '19 02:12 gtkramer

#88 was merged. So I think this can be closed now, right?

mbelluzzo avatar Dec 24 '19 04:12 mbelluzzo