Project

General

Profile

Actions
Copy link

Feature #33733

closed

need to generate private db key for pulpcore 3.15

Added by Justin Sherrill over 2 years ago. Updated over 2 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Justin Sherrill
Category:
Foreman modules
Target version:
Foreman - 3.1.0
Difficulty:
Triaged:
Yes
Bugzilla link:
Pull request:
https://github.com/theforeman/puppet-pulpcore/pull/235
Fixed in Releases:
Foreman - 3.1.0
Found in Releases:
Red Hat JIRA:

Description

The pulp installer runs:

openssl rand -base64 32    | tr '+/' '-_' > /etc/pulp/certs/database_fields.symmetric.key

and sets ownership to pulp

https://github.com/pulp/pulp_installer/blob/120942e1cb98ad3fb47c63ac9568f2fda09f25f5/roles/pulp_database_config/tasks/generate_database_fields_key.yml

Actions
Copy link
 #1

Updated by Justin Sherrill over 2 years ago

foreman does something similar by running a rake task in an rpm script, i could see doing this either in:
1) the installer
2) the pulpcore rpm post script

Actions
Copy link
 #2

Updated by Evgeni Golov over 2 years ago

  • Description updated (diff)
Actions
Copy link
 #3

Updated by Ewoud Kohl van Wijngaarden over 2 years ago

  • Target version set to 3.1.0

Justin Sherrill wrote:

The pulp installer runs:

[...]

and sets ownership to pulp

Does it need to own it or should it really be read-only to the pulp user? If so I'd prefer to set the owner to root and group to pulp.

Actions
Copy link
 #4

Updated by Justin Sherrill over 2 years ago

  • Target version deleted (3.1.0)

I think what you suggest with regard to ownership makes sense, edit isn't needed

Actions
Copy link
 #5

Updated by Justin Sherrill over 2 years ago

  • Target version set to 3.1.0
Actions
Copy link
 #6

Updated by The Foreman Bot over 2 years ago

  • Status changed from New to Ready For Testing
  • Assignee set to Justin Sherrill
  • Pull request https://github.com/theforeman/puppet-pulpcore/pull/235 added
Actions
Copy link
 #7

Updated by Justin Sherrill over 2 years ago

  • Status changed from Ready For Testing to Closed
Actions
Copy link
 #8

Updated by Ewoud Kohl van Wijngaarden over 2 years ago

  • Triaged changed from No to Yes
  • Fixed in Releases 3.1.0 added
Actions
Copy link

Also available in: Atom PDF