swm: wft/workflow -- limit snap consistency checks to published risks
We currently report snaps as inconsistent if any risk level is out of
step. This makes no sense if we have not yet released to that risk.
Only check risks we believe we have published to for consistent versions
of the snap.
Signed-off-by: Andy Whitcroft <email address hidden>
swm: add initial ancillary package support and handle lrs/lrg for lrm
Add support for the `lrs` and `lrg` ancillary packages. These are a
challenge because `lrg` contains non-distributable data in its custom
binary upload. This necessitates `lrg` be built in a private PPA and
`lrs` must be built with it to gain access to its signed content. `lrg`
also only has meaning in `build` and `Signing` and absolutely must not
progress beyond there.
This series introduces the ability for package lists to vary by pocket
and uses this to control where were expect to find `lrg`. It also
introduces the `build-private` route and selects this when for `lrg` and
`lrs`. Finally it introduces handlers for these new packages so we track
them through the build life cycle.
Acked-by: Stefan Bader <email address hidden>
Signed-off-by: Andy Whitcroft <email address hidden>
We use pocket_route to work out which archive in a route we are using.
This is used when emitting testing requests. Those requests only make
sense against the PPAs in which the main kernels are built. Exclude the
ancillary routes in our search.
Signed-off-by: Andy Whitcroft <email address hidden>
When searching later pockets to confirm that the specified pocket does
not contain live kernel packages we need to take account of packages
which are embargoed and therefore do not proceed beyond a cirtain
pocket. If everything other than the embargoed packages have moved
beyond the specified pocket then the embargoed package has performed its
function and can be replaced. Therefore for an embargoed package
consider it present in a pocket for which it is not permitted.
Signed-off-by: Andy Whitcroft <email address hidden>
swm: package,wft/promote_to_proposed -- detect lrs as a signable
We route packages direct to -proposed even if they have a signing route
if they don't have a signable item. We need to consider `signed` and
`lrs` as signables.
Signed-off-by: Andy Whitcroft <email address hidden>
swm: add support for adjunct build PPAs and direct ancillary packages lrs/lrg to them
We are introducing a private adjunct PPA for each build PPA, this is used
for components of an otherwise public build which must remain embargoed.
We also introduce the concept of an ancillary package, one which is
entirely derived from another. These are version locked together and the
ancillary packages themselves have no source repo, tags or independant
versions. Finally drive ancillary packages for lrm via the adjunct
PPAs.
Signed-off-by: Andy Whitcroft <email address hidden>