Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add Rust tool for updating/signing TUF repository via pipeline #646

Merged
merged 1 commit into from
Jan 15, 2020

Conversation

zmrow
Copy link
Contributor

@zmrow zmrow commented Jan 13, 2020

Issue #, if available:
Closes #609
Related to #608

Description of changes:
Adds a tool meant to be run in a CI environment that will update an
existing TUF repo with contents from a recent build. It updates all
of the metadata/target files, signs them and the new targets, and
places them in a directory suitable for syncing to your existing
TUF repository.

Testing done:
This is based on quite a few other changes currently in PR, once those land we can include it in the environment and run it in the pipeline.

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

@zmrow zmrow self-assigned this Jan 13, 2020
@zmrow zmrow force-pushed the update-sign-tuf-repo branch from a5eed99 to 5a1fcdb Compare January 13, 2020 22:49
@zmrow
Copy link
Contributor Author

zmrow commented Jan 13, 2020

Added the README tooling

@zmrow zmrow force-pushed the update-sign-tuf-repo branch from 5a1fcdb to 6be152e Compare January 14, 2020 21:26
@zmrow
Copy link
Contributor Author

zmrow commented Jan 14, 2020

Address PR comments

@zmrow zmrow force-pushed the update-sign-tuf-repo branch from 6be152e to 84c5680 Compare January 14, 2020 21:30
Adds a tool meant to be run in a CI environment that will update an
existing TUF repo with contents from a recent build. It updates all
of the metadata/target files, signs them and the new targets, and
places them in a directory suitable for syncing to your existing
TUF repository.
@zmrow zmrow force-pushed the update-sign-tuf-repo branch from 84c5680 to 7ba98aa Compare January 15, 2020 16:37
@zmrow
Copy link
Contributor Author

zmrow commented Jan 15, 2020

Rename env variables to lower case.

@zmrow
Copy link
Contributor Author

zmrow commented Jan 15, 2020

Created an issue over in the tough repo to cover all the code I ended up using out of tuftool: awslabs/tough#43

@zmrow zmrow marked this pull request as ready for review January 15, 2020 18:37
Copy link
Member

@jahkeup jahkeup left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Let's do this!

@zmrow zmrow merged commit 664fa4a into develop Jan 15, 2020
@zmrow zmrow deleted the update-sign-tuf-repo branch January 15, 2020 20:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

relauto: Rust binary to update manifest and sign artifacts
3 participants