Add support for SSH Authentication to ObsRsync Plugin

[josegomezr]

ObsRsync Plugin now supports the new authentication mechanism of Build Service.

Heavily inspired by:

• https://github.com/openSUSE/obs-build/blob/master/PBuild/SigAuth.pm
• openSUSE/cavil@583009d
• https://www.suse.com/c/multi-factor-authentication-on-suses-build-service/

Addresses poo#139073

---

Important: The production openqa.ini config must be updated. obs_rsync.project_status_url must not include /public/.

[kraih]

One problem i'm seeing is that the URLs still use the /public/... API endpoints. Those will be shut down completely for IBS and cannot be used anymore. So this PR is still incomplete.

Edit: According to new information the /public endpoints should remain available with authentication.
Edit2: And now i got the update that /public will indeed become unavailable.

[josegomezr]

Thanks @kraih, Leaving a note for all watchers (and updated the PR description too).

Important: The production openqa.ini config must be updated. obs_rsync.project_status_url must not include /public/.

[okurz]

Please make sure this is tested against both

1. build.opensuse.org
2. build.suse.de

[okurz]

See https://app.circleci.com/pipelines/github/os-autoinst/openQA/12483/workflows/c08ea15d-a06f-46f6-ab2e-dc3f7a5cf878/jobs/116513 . We still need to install ssh-keygen for tests. I guess we already do a similar approach for other packages?

Take a look how rsync is part of hard test dependencies put only recommended for installing on user systems. So in dependencies.yaml add the package to "devel_no_selenium_requires:"

[perlpunk]

For new packages I think we just put them into https://github.com/os-autoinst/openQA/blob/master/tools/ci/ci-packages.txt without a version to make CI happy. The next dependency PR will add a version.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Comparison is base (e6799a9) 98.32% compared to head (b08b00c) 98.35%.
Report is 14 commits behind head on master.

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #5360      +/-   ##
==========================================
+ Coverage   98.32%   98.35%   +0.03%     
==========================================
  Files         389      389              
  Lines       37330    37391      +61     
==========================================
+ Hits        36704    36777      +73     
+ Misses        626      614      -12     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[Martchus]

Actually, the condition mentioned in my last review should be double-checked. (I might be wrong but we should at least double-check.)

[okurz]

content all good, commits need to be squashd

[josegomezr]

Waiting for the ->touch discussion resolution.

Squashd 🚀

[Martchus]

Ok, nice. Even after squashing we normally keep starting the commit message with a verb in imperative. I would also rephrase it a bit: Add support for HTTP authentication in ObsRsync plugin