mirror of
https://github.com/NLnetLabs/krill.git
synced 2026-09-22 01:14:54 +02:00
Koen van HoveandGitHub
0ccc5cdff4
This PR adds API access via a local Unix socket on Unix systems allowing to use the username of local user accessing the API as the authentication username. Configuration options are provided to map user names to roles similar to the configfile authentication provider. This will allow using Krill without authentication tokens if it is only accessed via krillc on the same machine. The PR also removes the example configuration files and moves the documentation included in those files into a krill.conf.5 manual page. By doing this, it simplifies the creation of the configuation file in the binary packages. Those are now very minimal and only contain the mandatory config options.
62 lines
2.6 KiB
YAML
62 lines
2.6 KiB
YAML
# See: https://github.com/NLnetLabs/ploutos/blob/main/docs/os_packaging.md#package-build-rules
|
|
---
|
|
pkg:
|
|
- "krill"
|
|
- "krillup"
|
|
- "krillta"
|
|
image:
|
|
- "ubuntu:focal" # ubuntu/20.04
|
|
- "ubuntu:jammy" # ubuntu/22.04
|
|
- "ubuntu:noble" # ubuntu/24.04
|
|
- "debian:bullseye" # debian/11
|
|
- "debian:bookworm" # debian/12
|
|
- "debian:trixie" # debian/13
|
|
- "almalinux:8" # compatible with EOL centos:8
|
|
- "almalinux:9"
|
|
- "almalinux:10"
|
|
target:
|
|
- "x86_64"
|
|
include:
|
|
# cargo-generate-rpm doesn't support specifying feature variations in Cargo.toml so we have to do it via
|
|
# custom build arguments instead.
|
|
|
|
# CentOS 8 became EOL and is in theory still usable as a build container as there is still a Docker image
|
|
# available, and package installation can be done by switching the yum config in the container to use packages
|
|
# from the CentOS 8 vault rather than the now offline actual CentOS 8 repository. However, due to experiencing
|
|
# lots of timed out connections to the vault we will build the CentOS 8 compatible package in a Rocky Linux
|
|
# container instead, as Rocky Linux is 100% compatible with CentOS 8. The server at packages.nlnetlabs.nl
|
|
# however has a repo for CentOS 8, not Rocky Linux, and determines the repo to publish in based on the name of
|
|
# the archive that we produce below which is in turn based by default on the container image used to build. We
|
|
# therefore in this case need to specify that the O/S we are building for has a different name than the Docker
|
|
# image we are building it in.
|
|
- image: "almalinux:8"
|
|
os: "centos:8"
|
|
rpm_systemd_service_unit_file: "pkg/common/krill-ubuntu-focal.krill.service"
|
|
rpm_rpmlint_check_filters:
|
|
|
|
- image: "almalinux:9"
|
|
rpm_systemd_service_unit_file: "pkg/common/krill-ubuntu-focal.krill.service"
|
|
rpm_rpmlint_check_filters:
|
|
|
|
- image: "almalinux:10"
|
|
rpm_systemd_service_unit_file: "pkg/common/krill-ubuntu-focal.krill.service"
|
|
rpm_rpmlint_check_filters:
|
|
|
|
- image: "debian:bullseye"
|
|
deb_extra_lintian_args: "--suppress-tags systemd-service-file-outside-lib"
|
|
|
|
- image: "ubuntu:focal"
|
|
deb_extra_lintian_args: "--suppress-tags systemd-service-file-outside-lib"
|
|
|
|
# package for the Raspberry Pi 4b as an ARMv7 cross compiled variant of the Debian Bullseye upon which
|
|
# Raspbian 11 is based.
|
|
- pkg: "krill"
|
|
image: "debian:bullseye"
|
|
target: "armv7-unknown-linux-gnueabihf"
|
|
deb_extra_lintian_args: "--suppress-tags systemd-service-file-outside-lib"
|
|
- pkg: "krillup"
|
|
image: "debian:bullseye"
|
|
target: "armv7-unknown-linux-gnueabihf"
|
|
deb_extra_lintian_args: "--suppress-tags systemd-service-file-outside-lib"
|
|
|