Re: [magnum] Help / Pointers on mirroring https://opendev.org/starlingx in github.com for CNCF certification of starlingx
Hello Bin, Yes, that's correct. When you are connecting to the GitHub, your username should be git. GitHub recognizes you by your SSH key [0]. Example: [roman@pc ~]$ ssh git@github.com PTY allocation request failed on channel 0 Hi gorshunovr! You've successfully authenticated, but GitHub does not provide shell access. Connection to github.com closed. [roman@pc ~]$ As you may see, GitHub has recognized me as 'gorshunovr', despite I was using 'git' as a username for SSH. [0] https://help.github.com/en/github/authenticating-to-github/testing-your-ssh-... Please, use mailing list for the communication, not direct e-mail. Thank you. Best regards, -- Roman Gorshunov On Mon, Feb 3, 2020 at 3:53 PM Qian, Bin <Bin.Qian@windriver.com> wrote:
Hi Roman,
Thank you for the information about GitHub mirroring. Based on the info below, I think what we want to do is to: 1. create a GitHub account, which has the privilege to commit to our repos, 2. with the account, create ssh key on zuul server and upload the ssh key to GitHub 3. use zuul tool [3] to create zuul job secret, embed it to the upload job in zuul.yaml 4. add the upload job a post job
But I am not very sure about the step 1, as in the reference [4] below, it states, "For GitHub, the user parameter is git, not your personal username."
Would you please let me know if my steps above is correct?
Thanks,
Bin
________________________________ From: Waines, Greg Sent: Thursday, January 30, 2020 10:21 AM To: Qian, Bin Cc: Eslimi, Dariush; Khalil, Ghada Subject: FW: [magnum] Help / Pointers on mirroring https://opendev.org/starlingx in github.com for CNCF certification of starlingx
fyi
From: Roman Gorshunov <paye600@gmail.com> Date: Thursday, January 30, 2020 at 11:38 AM To: "openstack-discuss@lists.openstack.org" <openstack-discuss@lists.openstack.org> Subject: Re: [magnum] Help / Pointers on mirroring https://opendev.org/starlingx in github.com for CNCF certification of starlingx
Hello Greg,
- Create a GitHub account for the starlingx, you will have URL on
GitHub like [0]. You may try to contact GitHub admins and ask to
release starlingx name, as it seems to be unused.
- Then create SSH key and upload onto GitHub for that account in
GitHub interface
- Create empty repositories under [1] to match your existing
repositories names here [2]
- Encrypt SSH private key as described here [3] or here [4] using this tool [5]
- Create patch to all your projects under [2] to '/.zuul.yaml' file,
similar to what is listed here [6]
- Change job name shown on line 407 via URL above, description (line
409), git_mirror_repository variable (line 411), secret name (line 414
and 418), and SSH key starting from line 424 to 463, to match your
project's name, repo path on GitHub, and SSH key
- Submit changes to Gerrit with patches for all your project and get
them merged. If all goes good, the next change merged would trigger
your repositories to be synced to GitHub. Status could be seen here
[7] - search for your newly created job manes, they should be nested
under "upload-git-mirrorMirrors a tested project repository to a
remote git server."
Hope it helps.
[0] https://github.com/starlingxxxx
[1] https://github.com/starlingxxxx/...
[2] https://opendev.org/starlingx/...
[3] https://docs.openstack.org/infra/manual/zuulv3.html#secret-variables
[4] https://docs.openstack.org/infra/manual/creators.html#mirroring-projects-to-...
[5] https://opendev.org/zuul/zuul/src/branch/master/tools/encrypt_secret.py
[6] https://opendev.org/airship/deckhand/src/commit/51dcea4fa12b0bcce65c381c286e...
[7] https://zuul.openstack.org/jobs
Sample content of your addition (patch) to your '/.zuul.yaml' files:
===================================================
- job:
name: starlingx-compile-upload-git-mirror
parent: upload-git-mirror
description: Mirrors starlingx/compile to starlingxxxx/compile
vars:
git_mirror_repository: starlingxxxx/compile
secrets:
- name: git_mirror_credentials
secret: starlingx-compile-github-secret
pass-to-parent: true
- secret:
name: starlingx-compile-github-secret
data:
user: git
host: github.com
host_key: github.com ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAQEAq2A7hRGmdnm9tUDbO9IDSwBK6TbQa+PXYPCPy6rbTrTtw7PHkccKrpp0yVhp5HdEIcKr6pLlVDBfOLX9QUsyCOV0wzfjIJNlGEYsdlLJizHhbn2mUjvSAHQqZETYP81eFzLQNnPHt4EVVUh7VfDESU84KezmD5QlWpXLmvU31/yMf+Se8xhHTvKSCZIFImWwoG6mbUoWf9nzpIoaSjB+weqqUUmpaaasXVal72J+UX2B+2RPW3RcT0eOzQgqlJL3RKrTJvdsjE3JEAvGq3lGHSZXy28G3skua2SmVi/w4yCE6gbODqnTWlg7+wC604ydGXA8VJiS5ap43JXiUFFAaQ==
ssh_key: !encrypted/pkcs1-oaep
- <here goes encrypted SSH private key>
===================================================
Best regards,
--
Roman Gorshunov
Roman, That works on my account too with specifying my private key. Thanks, Bin ________________________________________ From: Roman Gorshunov [paye600@gmail.com] Sent: Monday, February 03, 2020 7:36 AM To: openstack-discuss@lists.openstack.org Cc: Qian, Bin Subject: Re: [magnum] Help / Pointers on mirroring https://opendev.org/starlingx in github.com for CNCF certification of starlingx Hello Bin, Yes, that's correct. When you are connecting to the GitHub, your username should be git. GitHub recognizes you by your SSH key [0]. Example: [roman@pc ~]$ ssh git@github.com PTY allocation request failed on channel 0 Hi gorshunovr! You've successfully authenticated, but GitHub does not provide shell access. Connection to github.com closed. [roman@pc ~]$ As you may see, GitHub has recognized me as 'gorshunovr', despite I was using 'git' as a username for SSH. [0] https://help.github.com/en/github/authenticating-to-github/testing-your-ssh-... Please, use mailing list for the communication, not direct e-mail. Thank you. Best regards, -- Roman Gorshunov On Mon, Feb 3, 2020 at 3:53 PM Qian, Bin <Bin.Qian@windriver.com> wrote:
Hi Roman,
Thank you for the information about GitHub mirroring. Based on the info below, I think what we want to do is to: 1. create a GitHub account, which has the privilege to commit to our repos, 2. with the account, create ssh key on zuul server and upload the ssh key to GitHub 3. use zuul tool [3] to create zuul job secret, embed it to the upload job in zuul.yaml 4. add the upload job a post job
But I am not very sure about the step 1, as in the reference [4] below, it states, "For GitHub, the user parameter is git, not your personal username."
Would you please let me know if my steps above is correct?
Thanks,
Bin
________________________________ From: Waines, Greg Sent: Thursday, January 30, 2020 10:21 AM To: Qian, Bin Cc: Eslimi, Dariush; Khalil, Ghada Subject: FW: [magnum] Help / Pointers on mirroring https://opendev.org/starlingx in github.com for CNCF certification of starlingx
fyi
From: Roman Gorshunov <paye600@gmail.com> Date: Thursday, January 30, 2020 at 11:38 AM To: "openstack-discuss@lists.openstack.org" <openstack-discuss@lists.openstack.org> Subject: Re: [magnum] Help / Pointers on mirroring https://opendev.org/starlingx in github.com for CNCF certification of starlingx
Hello Greg,
- Create a GitHub account for the starlingx, you will have URL on
GitHub like [0]. You may try to contact GitHub admins and ask to
release starlingx name, as it seems to be unused.
- Then create SSH key and upload onto GitHub for that account in
GitHub interface
- Create empty repositories under [1] to match your existing
repositories names here [2]
- Encrypt SSH private key as described here [3] or here [4] using this tool [5]
- Create patch to all your projects under [2] to '/.zuul.yaml' file,
similar to what is listed here [6]
- Change job name shown on line 407 via URL above, description (line
409), git_mirror_repository variable (line 411), secret name (line 414
and 418), and SSH key starting from line 424 to 463, to match your
project's name, repo path on GitHub, and SSH key
- Submit changes to Gerrit with patches for all your project and get
them merged. If all goes good, the next change merged would trigger
your repositories to be synced to GitHub. Status could be seen here
[7] - search for your newly created job manes, they should be nested
under "upload-git-mirrorMirrors a tested project repository to a
remote git server."
Hope it helps.
[0] https://github.com/starlingxxxx
[1] https://github.com/starlingxxxx/...
[2] https://opendev.org/starlingx/...
[3] https://docs.openstack.org/infra/manual/zuulv3.html#secret-variables
[4] https://docs.openstack.org/infra/manual/creators.html#mirroring-projects-to-...
[5] https://opendev.org/zuul/zuul/src/branch/master/tools/encrypt_secret.py
[6] https://opendev.org/airship/deckhand/src/commit/51dcea4fa12b0bcce65c381c286e...
[7] https://zuul.openstack.org/jobs
Sample content of your addition (patch) to your '/.zuul.yaml' files:
===================================================
- job:
name: starlingx-compile-upload-git-mirror
parent: upload-git-mirror
description: Mirrors starlingx/compile to starlingxxxx/compile
vars:
git_mirror_repository: starlingxxxx/compile
secrets:
- name: git_mirror_credentials
secret: starlingx-compile-github-secret
pass-to-parent: true
- secret:
name: starlingx-compile-github-secret
data:
user: git
host: github.com
host_key: github.com ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAQEAq2A7hRGmdnm9tUDbO9IDSwBK6TbQa+PXYPCPy6rbTrTtw7PHkccKrpp0yVhp5HdEIcKr6pLlVDBfOLX9QUsyCOV0wzfjIJNlGEYsdlLJizHhbn2mUjvSAHQqZETYP81eFzLQNnPHt4EVVUh7VfDESU84KezmD5QlWpXLmvU31/yMf+Se8xhHTvKSCZIFImWwoG6mbUoWf9nzpIoaSjB+weqqUUmpaaasXVal72J+UX2B+2RPW3RcT0eOzQgqlJL3RKrTJvdsjE3JEAvGq3lGHSZXy28G3skua2SmVi/w4yCE6gbODqnTWlg7+wC604ydGXA8VJiS5ap43JXiUFFAaQ==
ssh_key: !encrypted/pkcs1-oaep
- <here goes encrypted SSH private key>
===================================================
Best regards,
--
Roman Gorshunov
participants (2)
-
Qian, Bin
-
Roman Gorshunov