[Bug 1771346] New: Review Request: Intel SecL Attestation Hub - Security Attribute Orchestration
https://bugzilla.redhat.com/show_bug.cgi?id=1771346
Bug ID: 1771346 Summary: Review Request: Intel SecL Attestation Hub - Security Attribute Orchestration Product: Fedora Version: rawhide Hardware: All OS: Linux Status: NEW Component: Package Review Severity: medium Assignee: nobody@fedoraproject.org Reporter: timothy.e.knoll@intel.com QA Contact: extras-qa@fedoraproject.org CC: package-review@lists.fedoraproject.org Target Milestone: --- Classification: Fedora
Spec URL: https://01.org/sites/default/files/downloads//attestation-hub-1.5.1.zip SRPM URL: https://01.org/sites/default/files/downloads//attestation-hub-1.5.1.zip Spec and SRPM are bundled into a single zip file.
Description: This package provides the Attestation hub component of Intel Security Libraries for Datacenter. This service facilitates integration of Intel SecL with cloud orchestrators (currently supporting OpenStack and Kubernetes), allowing cloud platforms to include security attributes based on Intel SecL in workload placement decisions. The Intel SecL Verification Service and Trust Agent applications can provide remote attestation of a platform's boot-time integrity based on Intel hardware security features like Intel TXT and Intel Boot Guard. The attestation results can be retrieved by the Hub and "pushed" to designated orchestrator services, requiring workloads that have Intel SecL security attribute requirements to be scheduled only on compute resources that have matching security attributes.
Fedora Account System Username: teknoll
https://bugzilla.redhat.com/show_bug.cgi?id=1771346
Neil Horman nhorman@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |nhorman@redhat.com Blocks| |177841 (FE-NEEDSPONSOR) Doc Type|--- |If docs needed, set a value
--- Comment #1 from Neil Horman nhorman@redhat.com --- Adding FE-NEEDSPONSOR, as the submitter is not currently a packager
Submission is in incorrect format, should not be zipped into a single file, SPEC url and SRPM URL should point to those files specifically, so that fedora-review works with the BZ
Package fails to build: [exec] main: [exec] [mkdir] Created dir: /home/nhorman/rpmbuild/BUILD/contrib/features/hex2bin/target/dist [exec] [mkdir] Created dir: /home/nhorman/rpmbuild/BUILD/contrib/features/hex2bin/target/dist-deps [exec] [touch] Creating /home/nhorman/rpmbuild/BUILD/contrib/features/hex2bin/target/dist/builder/x [exec] [exec] PREFIX=/opt/mtwilson/share/hex2bin [exec] [exec] mkdir: cannot create directory '/opt/mtwilson': Permission denied [exec] [exec] gcc -fstack-protector-strong -fPIE -fPIC -O2 -D_FORTIFY_SOURCE=2 -Wformat -Wformat-security -o hex2bin hex2bin.c -z noexecstack -z relro -z now -pie [exec] [exec] mkdir: cannot create directory '/opt/mtwilson': Permission denied [exec] [exec] mkdir: cannot create directory '/opt/mtwilson': Permission denied [exec] [exec] make: *** [Makefile:13: install] Error 1 [exec] [exec] chmod +x hex2bin [exec] [exec] mkdir -p /opt/mtwilson/share/hex2bin/bin [exec] [exec] Failed to make install hex2bin [exec] [exec] mkdir: cannot create directory '/opt/mtwilson': Permission denied [exec] [exec] make: *** [Makefile:13: install] Error 1 [exec] [INFO] ------------------------------------------------------------------------ [exec] [INFO] Reactor Summary: [exec] [INFO] [exec] [INFO] hex2bin-dist 1.0 ................................... FAILURE [ 1.867 s] [exec] [INFO] mtwilson-maven-build-contrib-features 1.1 .......... SKIPPED [exec] [INFO] ------------------------------------------------------------------------ [exec] [INFO] BUILD FAILURE [exec] [INFO] ------------------------------------------------------------------------ [exec] [INFO] Total time: 1.969 s [exec] [INFO] Finished at: 2019-11-18T12:37:31-05:00 [exec] [INFO] ------------------------------------------------------------------------ [exec] [ERROR] Failed to execute goal org.apache.maven.plugins:maven-antrun-plugin:1.7:run (default-cli) on project hex2bin-dist: An Ant BuildException has occured: exec returned: 2 [exec] [ERROR] around Ant part ...<exec failonerror="true" dir="/home/nhorman/rpmbuild/BUILD/contrib/features/hex2bin/target" executable="/bin/bash">... @ 27:122 in /home/nhorman/rpmbuild/BUILD/contrib/features/hex2bin/target/antrun/build-main.xml [exec] [ERROR] -> [Help 1] [exec] [ERROR] [exec] [ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch. [exec] [ERROR] Re-run Maven using the -X switch to enable full debug logging. [exec] [ERROR] [exec] [ERROR] For more information about the errors and possible solutions, please read the following articles: [exec] [ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoExecutionException [exec] Result: 1
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=177841 [Bug 177841] Tracker: Review requests from new Fedora packagers who need a sponsor
https://bugzilla.redhat.com/show_bug.cgi?id=1771346
Tim Knoll timothy.e.knoll@intel.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |timothy.e.knoll@intel.com
--- Comment #2 from Tim Knoll timothy.e.knoll@intel.com --- We have re-uploaded the source RPM and spec files to a new location:
Spec URL: https://github.com/intel-secl/attestation-hub/blob/v1.5.1/packages/attestati... SRPM URL: https://github.com/intel-secl/attestation-hub/blob/v1.5.1/packages/attestati...
We are currently still working through the Koji build failures and will update once we have a resolution.
https://bugzilla.redhat.com/show_bug.cgi?id=1771346
Fabian Affolter mail@fabian-affolter.ch changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |mail@fabian-affolter.ch
--- Comment #3 from Fabian Affolter mail@fabian-affolter.ch --- The URL for the SPEC file needs to point to a raw text for fedora-review to work.
https://bugzilla.redhat.com/show_bug.cgi?id=1771346
Didik Supriadi didiksupriadi41@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Flags| |needinfo?(timothy.e.knoll@i | |ntel.com) CC| |didiksupriadi41@gmail.com
package-review@lists.fedoraproject.org
-
bugzilla＠redhat.com