#11217 Verify Fedora Media Writer ownership on Flathub
Closed: Fixed 2 years ago by ryanlerch. Opened 2 years ago by jgrulich.

Hi,

There is a new Flathub page shaping up with intention to verify builds that come from the developers itself. I would like to verify FMW as it comes from me (main developer).

Bug: https://github.com/flathub/org.fedoraproject.MediaWriter/issues/21

When I log in I'm provided with instructions:
Create a page at https://fedoraproject.org/.well-known/org.flathub.VerifiedApps.txt containing the following token: bff1e08b-7f4e-4b97-b765-106904657e3c

Can such page be created so we can verify FMW builds?

Thank you.


Metadata Update from @kevin:
- Issue priority set to: Waiting on Assignee (was: Needs Review)
- Issue tagged with: low-gain, low-trouble, ops

2 years ago

@jgrulich do you know if it has to be at that specific location?

the reason why i am asking, is that it would be trivial to put a text file like that at this location:

https://apps.fedoraproject.org/.well-known/org.flathub.VerifiedApps.txt

which is still under the fedoraproject.org domain.

@kevin would putting it under app.fp.o be okay? or should i dig more into getting it on the main fp.o

Metadata Update from @ryanlerch:
- Issue assigned to ryanlerch

2 years ago

If that works for the validation, sure...

Got response:

We would need to get it at this specific location, as it directly maps to the ID used by the app.

Since I was fiddling with the fedoraproject-org config, I went ahead and made https://pagure.io/fedora-infra/ansible/pull-request/1376

Commit 493b7712 relates to this ticket

thanks darknao!

merged it, will get the playbook run tonight, so we can close this one off!

thanks

Metadata Update from @ryanlerch:
- Issue priority set to: None (was: Waiting on Assignee)

2 years ago

Do note that we are still in freeze right now, so technically we shouldn't push this, but it's really pretty minor, so +1 to just doing it.

token is now visible at:

https://fedoraproject.org/.well-known/org.flathub.VerifiedApps.txt

just to document this kind of for future changes, this was the commit for it:
https://pagure.io/fedora-infra/ansible/c/493b77124818ebe9f3bd06e14bde55dfe602a9e5?branch=main

and shows the file that needs to be changed in ansible to change this token in the future.

Metadata Update from @ryanlerch:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

2 years ago

Log in to comment on this ticket.

Metadata
Boards 1
ops Status: Backlog
Related Pull Requests
  • #1376 Merged 2 years ago