services/nomad/build/signing.nomad: move signing to xbps-legacy-sign

[classabbyamp]

No description provided.

[classabbyamp]

some notes

also, buildsync-dist could maybe be added to using rsyncd but i grok it less

[the-maldridge]

Here are the remaining patches that I added to deploy this successfully. As to why its not attached, that would be because github, a source code hosting site, does not support patch files...

From 7472296e2ecd1412d510c8bd4dc4d87fb03cffc1 Mon Sep 17 00:00:00 2001
From: Michael Aldridge <[email protected]>
Date: Wed, 16 Aug 2023 14:42:42 -0500
Subject: [PATCH] outstanding-patches


diff --git a/services/nomad/build/build-rsyncd.nomad b/services/nomad/build/build-rsyncd.nomad
index cb0fd35..55490a2 100644
--- a/services/nomad/build/build-rsyncd.nomad
+++ b/services/nomad/build/build-rsyncd.nomad
@@ -26,7 +26,7 @@ job "build-rsyncd" {
       driver = "docker"
 
       config {
-        image = "ghcr.io/void-linux/infra-rsync:20230812"
+        image = "ghcr.io/void-linux/infra-rsync:20230815"
         volumes = [ "local/buildsync.conf:/etc/rsyncd.conf.d/buildsync.conf" ]
       }
 
@@ -45,11 +45,14 @@ job "build-rsyncd" {
         data = <<EOF
 [pkgs]
 path = /pkgs
+uid = 992
+gid = 991
 read only = no
 list = yes
 transfer logging = true
 timeout = 600
-filter = + */ + *-repodata + otime + *.xbps - * - .*
+incoming chmod = D0755,F0644
+filter = + */ + *-repodata + otime + *.xbps - *.sig - *.sig2 - *-repodata.* - *-stagedata.* - .*
 post-xfer exec = /local/xbps-clean-sigs
 EOF
         destination = "local/buildsync.conf"
diff --git a/services/nomad/build/buildsync-musl.nomad b/services/nomad/build/buildsync-musl.nomad
index e6ac7ea..108a22d 100644
--- a/services/nomad/build/buildsync-musl.nomad
+++ b/services/nomad/build/buildsync-musl.nomad
@@ -7,7 +7,7 @@ job "buildsync-musl" {
     count = 1
     network { mode = "bridge" }
 
-    volume "hostdir" {
+    volume "musl_hostdir" {
       type = "host"
       source = "musl_hostdir"
       read_only = true
-- 
2.41.0

[classabbyamp]

thanks, rebased