The tools/gce/linux_kokoro_performance_worker_init.sh executes a script that installs a ruby version manager, RVM. For security reasons, this script relies on PGP keys from RVM maintainers.
It's execution failed at the installation of RVM, because the key for a new maintainer had not been received. This commit adds GPG key 7D2BAF1CF37B13E2069D6956105BD0E739499BDB for RVM's maintainer "pkuczynski". It results in the successful installation of rvm stable.
The current keyserver, hkp://keys.gnupg.net, is not one of the keyservers listed on https://rvm.io/rvm/security. When navigating to https://keys.gnupg.net in a browser, the server does not provide a way to search for keys without authenticating and redirecting to a strange domain. This commit also moves the script to use hkp://pgp.mit.edu, a listed keyserver that is maintained by MIT.
Signed-off-by: Ben Reed <benreed@google.com>
Since remote builds do not use port server, GRPC_PORT_ISOLATED_RUNTIME
is needed and it is missing from mac.bazelrc.
Before this fix
tools/bazel --bazelrc=tools/remote_build/mac.bazelrc test --config=opt test/cpp/end2end/...
failed with errors like
D0117 00:38:28.961089757 16 port_server_client.cc:139] failed port pick from server: retrying
After this fix
build and test succeeded
This PR contains:
1. An ALTS context exposed for users to use, and a GetAltsContextFromAuthContext() function to get ALTS context from an AuthContext. Functionality-wise this part is similar with a previous PR https://github.com/grpc/grpc/pull/21536, but in this PR, we adjusted the code structure and made some minor changes to better suit function clientAuthzCheck()
2. A clientAuthzCheck() function for users to check if the server is authorized