Pyff's memory requirements are ridiculous, and not suitable for the SC docker environment. Therefore, let's just replace Pyff by a simple bash script that selects the correct entities and resigns the XML.
We could then move the scripts from a docker how to a regular SURFconext management host.
As a bonus, this would make metadata signing using HSMs possible.
Pyff's memory requirements are ridiculous, and not suitable for the SC docker environment. Therefore, let's just replace Pyff by a simple bash script that selects the correct entities and resigns the XML.
We could then move the scripts from a docker how to a regular SURFconext management host. As a bonus, this would make metadata signing using HSMs possible.
See https://gitlab.surf.nl/surfconext/surfconext-metadata-publish for inspiration on how SURFconext handles this (specifically the
sign_metadata.sh
scrip)t.