Koji build system local server from scratch

Ask Fedora
1 
$ koji -d hello
2023-03-04 12:45:31,516 [DEBUG] koji: Opening new requests session
2023-03-04 12:45:31,516 [DEBUG] koji: Opening new requests session
2023-03-04 12:45:32,059 [DEBUG] koji: Opening new requests session
2023-03-04 12:45:32,060 [ERROR] koji: (gssapi auth failed: requests.exceptions.SSLError: HTTPSConnectionPool(host='koji.fedoraproject.org', port=443): Max retries exceeded with url: /kojihub/ssllogin (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:992)'))))
Use following documentation to debug kerberos/gssapi auth issues. https://docs.pagure.org/koji/kerberos_gssapi_debug/
Traceback (most recent call last):
  File "/usr/bin/koji", line 331, in <module>
    rv = locals()[command].__call__(options, session, args)
         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3.11/site-packages/koji_cli/commands.py", line 7398, in handle_moshimoshi
    activate_session(session, options)
  File "/usr/lib/python3.11/site-packages/koji_cli/lib.py", line 764, in activate_session
    session.gssapi_login(proxyuser=runas)
  File "/usr/lib/python3.11/site-packages/koji/__init__.py", line 2669, in gssapi_login
    raise GSSAPIAuthError(err)
koji.GSSAPIAuthError: unable to obtain a session (gssapi auth failed: requests.exceptions.SSLError: HTTPSConnectionPool(host='koji.fedoraproject.org', port=443): Max retries exceeded with url: /kojihub/ssllogin (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:992)'))))
Use following documentation to debug kerberos/gssapi auth issues. https://docs.pagure.org/koji/kerberos_gssapi_debug/
2

You should be using kerberos authentication with Fedora’s koji. Certs are only used for a small number of internal services, and nothing external.

ie, you need a valid kerberos ticket and that will let you authenticate.

See Infrastructure/Kerberos - Fedora Project Wiki for more info.

1 Like
3

I’m having trouble understanding the title — can you elaborate?

4

Hello, we’re trying to setup the Koji server from localhost. We followed all the steps given in https://docs.pagure.org/koji/server_howto/

Yet somehow the CLI doesn’t seem to work and keeps giving us the mentioned error.
Are we missing any step ?

openssl s_client -showcerts -connect koji.fedoraproject.org:443
gives a valid output.

5

thankyou for your inputs. Is there some reference manual or documentation to setup Koji Server on Local host?

6

There’s a bunch of docs at Welcome to Koji’s documentation! — Koji 1.32.0 documentation

2 Likes