peridot
/
mothership
mirror of https://github.com/peridotbuild/mothership.git
7
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
Tool to archive RPM packages and attest to their authenticity
1 Commit 1 Branch 0 Tags 39 KiB
Python 74.4%
Jinja 22.5%
Mako 3.1%
Go to file
Mustafa Gezen 2e94e2dff1
Initial commit 		2023-06-26 19:57:57 +02:00
alembic Initial commit 2023-06-26 19:57:57 +02:00
data Initial commit 2023-06-26 19:57:57 +02:00
mothership Initial commit 2023-06-26 19:57:57 +02:00
mothership_coordinator Initial commit 2023-06-26 19:57:57 +02:00
mothership_ui Initial commit 2023-06-26 19:57:57 +02:00
mothership_worker Initial commit 2023-06-26 19:57:57 +02:00
tests Initial commit 2023-06-26 19:57:57 +02:00
.gitignore Initial commit 2023-06-26 19:57:57 +02:00
README.md Initial commit 2023-06-26 19:57:57 +02:00
alembic.ini Initial commit 2023-06-26 19:57:57 +02:00
requirements.txt Initial commit 2023-06-26 19:57:57 +02:00

README.md

mothership

Tool to archive RPM packages and attest to their authenticity

Introduction

This tool is designed to be used by the Rocky Linux project to archive RPM packages and attest to their authenticity.

The sources are first staged, then the fully debranded sources are pushed (Optional).

The import/debrand process is connected to Peridot, while the attestation and archival is fully done by this tool.

Configuration

port: 8080
rekor_endpoint: http://rekor:8090
git_endpoint: ssh://git@git.rockylinux.org:22220/srpm-attest-test
git_ssh_key_path: PATH_TO_SSH_KEY
peridot:
  endpoint: https://peridot-api.build.resf.org
  client_id: CLIENT_ID
  client_secret: CLIENT_SECRET
  project_id: PROJECT_ID