rancher/packages
1
0
Fork 0
mirror of https://github.com/kairos-io/packages.git synced 2025-07-20 10:10:15 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix services and binary location (#1121)

Browse Source
This commit is contained in:
Itxaka 2024-10-24 15:44:42 +02:00 committed by GitHub
parent bd6639d81e
commit 0aa49b8e01
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
4 changed files with 39 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
packages/utils/keylime-agent/build.yaml
View File

@ -8,24 +8,24 @@ env:
prelude: prelude:
- apt-get update && apt-get install -y git libclang-dev libssl-dev libtss2-dev libzmq3-dev pkg-config cargo make - apt-get update && apt-get install -y git libclang-dev libssl-dev libtss2-dev libzmq3-dev pkg-config cargo make
- PACKAGE_VERSION=v${PACKAGE_VERSION%\+*} && git clone --depth=1 --branch ${PACKAGE_VERSION} https://github.com/${GITHUB_ORG}/${GITHUB_REPO} - PACKAGE_VERSION=v${PACKAGE_VERSION%\-*} && git clone --depth=1 --branch ${PACKAGE_VERSION} https://github.com/${GITHUB_ORG}/${GITHUB_REPO}
steps: steps:
# build # build
- cd ${GITHUB_REPO} && RELEASE=1 TARGETDIR=/build make all - cd ${GITHUB_REPO} && RELEASE=1 TARGETDIR=/build make all
# create target dirs for package # create target dirs for package
- mkdir -p /package/usr/local/bin/ - mkdir -p /package/usr/bin/
- mkdir -p /package/etc/keylime/ - mkdir -p /package/etc/keylime/
- mkdir -p /package/etc/systemd/system/ - mkdir -p /package/etc/systemd/system/
- mkdir -p /package/usr/libexec/keylime/ - mkdir -p /package/usr/libexec/keylime/
# Copy binaries # Copy binaries
- cp /build/release/keylime_agent /package/usr/local/bin/ - cp /build/release/keylime_agent /package/usr/bin/
- cp /build/release/keylime_ima_emulator /package/usr/local/bin/ - cp /build/release/keylime_ima_emulator /package/usr/bin/
# copy default config # copy default config
- cp ${GITHUB_REPO}/keylime-agent.conf /package/etc/keylime/ - cp ${GITHUB_REPO}/keylime-agent.conf /package/etc/keylime/
# copy systemd services # copy systemd services
- cp ${GITHUB_REPO}/dist/systemd/system/keylime_agent.service /package/etc/systemd/system/ - cp keylime-agent.service /package/etc/systemd/system/
- cp ${GITHUB_REPO}/dist/systemd/system/var-lib-keylime-secure.mount /package/etc/systemd/system/ - cp var-lib-keylime-secure.mount /package/etc/systemd/system/
# Some kind of needed shim for a bug # Some kind of needed shim for a bug
# Remove when https://github.com/keylime/rust-keylime/issues/325 is fixed # Remove when https://github.com/keylime/rust-keylime/issues/325 is fixed
- cp ${GITHUB_REPO}/keylime-agent/tests/actions/shim.py /package/usr/libexec/keylime/ - cp ${GITHUB_REPO}/keylime-agent/tests/actions/shim.py /package/usr/libexec/keylime/

2
packages/utils/keylime-agent/definition.yaml
View File

@ -1,6 +1,6 @@
name: "keylime-agent" name: "keylime-agent"
category: "utils" category: "utils"
version: "0.2.6" version: "0.2.6-1"
labels: labels:
github.repo: "rust-keylime" github.repo: "rust-keylime"
github.owner: "keylime" github.owner: "keylime"

20
packages/utils/keylime-agent/keylime-agent.service Normal file
View File

@ -0,0 +1,20 @@
[Unit]
Description=The Keylime compute agent
StartLimitInterval=10s
StartLimitIntervalSec=10
StartLimitBurst=5
Requires=var-lib-keylime-secure.mount
After=var-lib-keylime-secure.mount
After=network-online.target
Wants=network-online.target
ConditionPathExistsGlob=/dev/(tpm|tpmrm)[0-9]*
[Service]
ExecStart=/usr/bin/keylime_agent
TimeoutSec=60s
Restart=on-failure
RestartSec=120s
Environment="RUST_LOG=keylime_agent=info"
[Install]
WantedBy=default.target

12
packages/utils/keylime-agent/var-lib-keylime-secure.mount Normal file
View File

@ -0,0 +1,12 @@
[Unit]
Description=Kelime configuration filesystem
Before=keylime-agent.service
[Mount]
What=tmpfs
Where=/var/lib/keylime/secure
Type=tmpfs
Options=mode=0700,size=1m,uid=tss,gid=tss
[Install]
WantedBy=multi-user.target