From ad4fc390f68f2e187740aacdea140fceb01e65ba Mon Sep 17 00:00:00 2001
From: Ricky Elrod <codeblock@lockbox01.phx2.fedoraproject.org>
Date: Fri, 16 Aug 2013 02:46:31 +0000
Subject: [PATCH 01/15] I guess this is why everyone says I should stay in
 school. :P

---
 inventory/host_vars/keys01.fedoraproject.org | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/inventory/host_vars/keys01.fedoraproject.org b/inventory/host_vars/keys01.fedoraproject.org
index e9b26d3dbb..4b08a8b2f1 100644
--- a/inventory/host_vars/keys01.fedoraproject.org
+++ b/inventory/host_vars/keys01.fedoraproject.org
@@ -1,6 +1,6 @@
 ---
 nm: 255.255.255.240
-gw: 80.239.156.208
+gw: 80.239.156.209
 dns: 213.248.76.210
 ks_url: http://infrastructure.fedoraproject.org/repo/rhel/ks/kvm-rhel-6
 ks_repo: http://infrastructure.fedoraproject.org/repo/rhel/RHEL6-x86_64/

From 12a4eca74631aee01023cb4a1662e0f908ac42c0 Mon Sep 17 00:00:00 2001
From: Ralph Bean <rbean@redhat.com>
Date: Fri, 16 Aug 2013 14:16:05 +0000
Subject: [PATCH 02/15] New playbook to push out packages, usually from
 lockbox.

---
 .../{package_update.yml => rkhunter_update.yml} |  0
 playbooks/update_packages.yml                   | 17 +++++++++++++++++
 2 files changed, 17 insertions(+)
 rename playbooks/{package_update.yml => rkhunter_update.yml} (100%)
 create mode 100644 playbooks/update_packages.yml

diff --git a/playbooks/package_update.yml b/playbooks/rkhunter_update.yml
similarity index 100%
rename from playbooks/package_update.yml
rename to playbooks/rkhunter_update.yml
diff --git a/playbooks/update_packages.yml b/playbooks/update_packages.yml
new file mode 100644
index 0000000000..b02cd55500
--- /dev/null
+++ b/playbooks/update_packages.yml
@@ -0,0 +1,17 @@
+# requires --extra-vars="target='host1;host2;group etc' yumcommand=update'"
+#
+# Alternatively, you could update a specific package like
+# --extra-vars="yumcommand='update python-tahrir*'"
+
+- name: push packages out
+  hosts: $target
+  user: root
+
+  tasks:
+  - name: expire-caches
+    action: command yum clean expire-cache
+    
+  - name: yum -y ${yumcommand}
+    action: command yum -y ${yumcommand}
+    async: 7200
+    poll: 15

From abb5fd2041f12e44db1e7149fe17731c036751f0 Mon Sep 17 00:00:00 2001
From: Ralph Bean <rbean@redhat.com>
Date: Fri, 16 Aug 2013 14:24:07 +0000
Subject: [PATCH 03/15] Use the ansible yum module instead of an action.

---
 playbooks/update_packages.yml | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/playbooks/update_packages.yml b/playbooks/update_packages.yml
index b02cd55500..5326beb6fa 100644
--- a/playbooks/update_packages.yml
+++ b/playbooks/update_packages.yml
@@ -1,7 +1,9 @@
-# requires --extra-vars="target='host1;host2;group etc' yumcommand=update'"
+# requires --extra-vars="target='host1;host2;group etc' package='python-tahrir'
 #
-# Alternatively, you could update a specific package like
-# --extra-vars="yumcommand='update python-tahrir*'"
+# Alternatively, you could update a group of packages like
+# --extra-vars="package='python-t*'"
+
+# TODO -- how do make it easy to select the infra-testing repo?
 
 - name: push packages out
   hosts: $target
@@ -11,7 +13,5 @@
   - name: expire-caches
     action: command yum clean expire-cache
     
-  - name: yum -y ${yumcommand}
-    action: command yum -y ${yumcommand}
-    async: 7200
-    poll: 15
+  - name: yum update ${package}
+    yum: name=${package} state=latest

From 78ac81e723ca43ddd07e68af315bf898a0e4a803 Mon Sep 17 00:00:00 2001
From: Ralph Bean <rbean@redhat.com>
Date: Fri, 16 Aug 2013 14:30:31 +0000
Subject: [PATCH 04/15] Comment out that expire-cache section for now.

---
 playbooks/update_packages.yml | 13 ++++++++++---
 1 file changed, 10 insertions(+), 3 deletions(-)

diff --git a/playbooks/update_packages.yml b/playbooks/update_packages.yml
index 5326beb6fa..9bb9f18ada 100644
--- a/playbooks/update_packages.yml
+++ b/playbooks/update_packages.yml
@@ -10,8 +10,15 @@
   user: root
 
   tasks:
-  - name: expire-caches
-    action: command yum clean expire-cache
-    
+
+  # TODO -- I'm not sure if state=latest will go ahead and expire the cache for
+  # us or not.  I'll comment this out for now, but if we experience problems in
+  # the future we can just uncomment it.  It definitely works with it in place,
+  # the problem is that the expire-cache command is not idempotent which results
+  # in partly confusing ansible-playbook results.  -threebean
+  #
+  #- name: expire-caches
+  #  action: command yum clean expire-cache
+  #
   - name: yum update ${package}
     yum: name=${package} state=latest

From b6918e7d3429c1d5f891be84dd79b78552f6823f Mon Sep 17 00:00:00 2001
From: Ralph Bean <rbean@redhat.com>
Date: Fri, 16 Aug 2013 14:53:06 +0000
Subject: [PATCH 05/15] First draft of a playbook for signing and importing
 rpms.

---
 playbooks/sign_and_import.yml | 38 +++++++++++++++++++++++++++++++++++
 1 file changed, 38 insertions(+)
 create mode 100644 playbooks/sign_and_import.yml

diff --git a/playbooks/sign_and_import.yml b/playbooks/sign_and_import.yml
new file mode 100644
index 0000000000..5908ebcdc6
--- /dev/null
+++ b/playbooks/sign_and_import.yml
@@ -0,0 +1,38 @@
+# This playbook takes new rpms specified with a fileglob, signs them, and adds
+# them to the infrastructure repo.
+#
+# requires --extra-vars="rpmdir='/home/fedora/ralph/rpms/'"
+
+# TODO -- grab rpms from koji build/task ids beforehand?
+# TODO -- how do make it easy to select the infra-testing repo?
+# TODO -- other arches than x86_64?
+
+- name: batch sign and import a directory full of rpms
+  user: root
+
+  tasks:
+
+  - name: sign all the rpms with our gpg key
+    local_action: /bin/rpm --resign ${rpmdir}/${item}.rpm
+    with_fileglob: ${rpmdir}/*.rpm
+
+  - name: copy the source rpms to the SRPMS dir
+    local_action: copy src=${rpmdir}/${item} dest=/mnt/fedora/app/fi-repo/6/SRPMS/${item}
+    with_fileglob: ${rpmdir}/*.src.rpm
+
+  - name: Run createrepo on the srpm dir
+    local_action: createrepo --update /mnt/fedora/app/fi-repo/6/SRPMS/
+
+  - name: copy the binary rpms to the x86_64 dir
+    local_action: copy src=${rpmdir}/${item} dest=/mnt/fedora/app/fi-repo/6/x86_64/${item}
+    with_fileglob: ${rpmdir}/*.rpm
+
+  - name: Run createrepo on the x86_64 dir
+    local_action: createrepo --update /mnt/fedora/app/fi-repo/6/x86_64/
+
+  - name: make a directory where we store the rpms afterwards
+    local_action: file path=${rpmdir}-old state=directory
+     
+  - name: move processed rpms out to ${rpmdir}-old
+    local_action: "/bin/mv ${rpmdir}/${item} ${rpmdir}-old/${item}"
+    with_fileglob: ${rpmdir}/*.rpm

From 8bb1a9e6f42238e0fd2cd483f00a56127425903c Mon Sep 17 00:00:00 2001
From: Kevin Fenzi <kevin@scrye.com>
Date: Fri, 16 Aug 2013 18:00:44 +0000
Subject: [PATCH 06/15] Add sks handlers

---
 handlers/restart_services.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/handlers/restart_services.yml b/handlers/restart_services.yml
index 4eead5b27e..805ee4e11e 100644
--- a/handlers/restart_services.yml
+++ b/handlers/restart_services.yml
@@ -83,6 +83,12 @@
 - name: restart rsyslog
   action: service name=rsyslog state=restarted
 
+- name: restart sks-db
+  action: service name=sks-db state=restarted
+
+- name: restart sks-recon
+  action: service name=sks-recon state=restarted
+
 - name: restart sshd
   action: service name=sshd state=restarted
 

From da8d00a517b46a0a41c2121d93a2474549eba0d7 Mon Sep 17 00:00:00 2001
From: Ralph Bean <rbean@redhat.com>
Date: Fri, 16 Aug 2013 20:03:57 +0000
Subject: [PATCH 07/15] Use httpd aliases for static resources.

---
 roles/badges-frontend/files/tahrir.conf | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/roles/badges-frontend/files/tahrir.conf b/roles/badges-frontend/files/tahrir.conf
index d5bc4622c4..b65d7041d0 100644
--- a/roles/badges-frontend/files/tahrir.conf
+++ b/roles/badges-frontend/files/tahrir.conf
@@ -1,5 +1,5 @@
-# We serve static resources dynamically for now.
-#Alias /static /usr/share/tahrir/static
+Alias /static /usr/lib/python2.6/site-packages/tahrir/static
+Alias /pngs /usr/share/badges/pngs
 
 WSGIDaemonProcess tahrir user=tahrir group=tahrir maximum-requests=1000 display-name=tahrir processes=4 threads=4
 WSGISocketPrefix run/wsgi

From 85e118ae2688095f1e93e128749601c997ba858f Mon Sep 17 00:00:00 2001
From: Kevin Fenzi <kevin@scrye.com>
Date: Mon, 19 Aug 2013 15:44:55 +0000
Subject: [PATCH 08/15] Add rdiff-backup reporting emails.

---
 playbooks/rdiff-backup.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/playbooks/rdiff-backup.yml b/playbooks/rdiff-backup.yml
index cf7ff70be9..9b13046c15 100644
--- a/playbooks/rdiff-backup.yml
+++ b/playbooks/rdiff-backup.yml
@@ -20,11 +20,11 @@
 
   tasks:
   - name: run rdiff-backup hitting all the global targets
-    local_action: "shell rdiff-backup --create-full-path --print-statistics ${inventory_hostname}::${item} /fedora_backups/${inventory_hostname}/`basename ${item}`"
+    local_action: "shell rdiff-backup --create-full-path --print-statistics ${inventory_hostname}::${item} /fedora_backups/${inventory_hostname}/`basename ${item}` | mail -r sysadmin-backup-members@fedoraproject.org -s 'rdiff-backup: ${inventory_hostname}:${item}' sysadmin-backup-members@fedoraproject.org"
     with_items: $global_backup_targets
     when: global_backup_targets is defined
 
   - name: run rdiff-backup hitting all the host targets
-    local_action: "shell rdiff-backup --create-full-path --print-statistics ${inventory_hostname}::${item} /fedora_backups/${inventory_hostname}/`basename ${item}`"
+    local_action: "shell rdiff-backup --create-full-path --print-statistics ${inventory_hostname}::${item} /fedora_backups/${inventory_hostname}/`basename ${item}` | mail -r sysadmin-backup-members@fedoraproject.org -s 'rdiff-backup: ${inventory_hostname}:${item}' sysadmin-backup-members@fedoraproject.org"
     with_items: $host_backup_targets
     when: host_backup_targets is defined

From 7fc9bc2ff24015c090cfbc94dd1eafaf6fa28806 Mon Sep 17 00:00:00 2001
From: Kevin Fenzi <kevin@scrye.com>
Date: Mon, 19 Aug 2013 16:27:01 +0000
Subject: [PATCH 09/15] Add value03 to backups

---
 inventory/host_vars/value03.phx2.fedoraproject.org | 3 +++
 inventory/inventory                                | 1 +
 2 files changed, 4 insertions(+)
 create mode 100644 inventory/host_vars/value03.phx2.fedoraproject.org

diff --git a/inventory/host_vars/value03.phx2.fedoraproject.org b/inventory/host_vars/value03.phx2.fedoraproject.org
new file mode 100644
index 0000000000..a26aff6ed3
--- /dev/null
+++ b/inventory/host_vars/value03.phx2.fedoraproject.org
@@ -0,0 +1,3 @@
+---
+host_backup_targets: ['/srv']
+host_backup_targets: ['/var/lib/zodbot']
diff --git a/inventory/inventory b/inventory/inventory
index cb8e5c2189..3b259ad14c 100644
--- a/inventory/inventory
+++ b/inventory/inventory
@@ -59,6 +59,7 @@ lockbox01.phx2.fedoraproject.org
 people03.vpn.fedoraproject.org
 pkgs01.phx2.fedoraproject.org
 log02.phx2.fedoraproject.org
+value03.phx2.fedoraproject.org
 
 [badges-backend]
 badges-backend01.phx2.fedoraproject.org

From 3f44fe132e46ac388559d7871fc57b35cf622f9c Mon Sep 17 00:00:00 2001
From: Kevin Fenzi <kevin@scrye.com>
Date: Mon, 19 Aug 2013 17:26:14 +0000
Subject: [PATCH 10/15] releng03 is no more

---
 inventory/inventory | 1 -
 1 file changed, 1 deletion(-)

diff --git a/inventory/inventory b/inventory/inventory
index 3b259ad14c..bfdd311095 100644
--- a/inventory/inventory
+++ b/inventory/inventory
@@ -148,7 +148,6 @@ collab04.fedoraproject.org
 [releng]
 releng01.phx2.fedoraproject.org
 releng02.phx2.fedoraproject.org
-releng03.phx2.fedoraproject.org
 releng04.phx2.fedoraproject.org
 relepel01.phx2.fedoraproject.org
 

From 69fab89a0c2b85aa55756291ee3053370cd35f5b Mon Sep 17 00:00:00 2001
From: Ralph Bean <rbean@redhat.com>
Date: Mon, 19 Aug 2013 17:39:10 +0000
Subject: [PATCH 11/15] Remove some unneeded whitespace from the copr
 playbooks.

---
 playbooks/hosts/copr-be-dev.cloud.fedoraproject.org.yml | 6 ------
 playbooks/hosts/copr-be.cloud.fedoraproject.org.yml     | 6 ------
 playbooks/hosts/copr-fe-dev.cloud.fedoraproject.org.yml | 2 --
 playbooks/hosts/copr-fe.cloud.fedoraproject.org.yml     | 2 --
 4 files changed, 16 deletions(-)

diff --git a/playbooks/hosts/copr-be-dev.cloud.fedoraproject.org.yml b/playbooks/hosts/copr-be-dev.cloud.fedoraproject.org.yml
index 0b886559b3..0cf3e3e308 100644
--- a/playbooks/hosts/copr-be-dev.cloud.fedoraproject.org.yml
+++ b/playbooks/hosts/copr-be-dev.cloud.fedoraproject.org.yml
@@ -141,11 +141,5 @@
     tags:
     - provision_config
 
-
-
-
-
-
-
   handlers:
   - include: $handlers/restart_services.yml
diff --git a/playbooks/hosts/copr-be.cloud.fedoraproject.org.yml b/playbooks/hosts/copr-be.cloud.fedoraproject.org.yml
index a1c7bd2324..51e24d0e10 100644
--- a/playbooks/hosts/copr-be.cloud.fedoraproject.org.yml
+++ b/playbooks/hosts/copr-be.cloud.fedoraproject.org.yml
@@ -146,11 +146,5 @@
     tags:
     - provision_config
 
-
-
-
-
-
-
   handlers:
   - include: $handlers/restart_services.yml
diff --git a/playbooks/hosts/copr-fe-dev.cloud.fedoraproject.org.yml b/playbooks/hosts/copr-fe-dev.cloud.fedoraproject.org.yml
index 2b9551de79..7b0758218b 100644
--- a/playbooks/hosts/copr-fe-dev.cloud.fedoraproject.org.yml
+++ b/playbooks/hosts/copr-fe-dev.cloud.fedoraproject.org.yml
@@ -53,7 +53,5 @@
     - httpd
     - postgresql
 
-
-
   handlers:
   - include: $handlers/restart_services.yml
diff --git a/playbooks/hosts/copr-fe.cloud.fedoraproject.org.yml b/playbooks/hosts/copr-fe.cloud.fedoraproject.org.yml
index a8dcf2c95f..3856880805 100644
--- a/playbooks/hosts/copr-fe.cloud.fedoraproject.org.yml
+++ b/playbooks/hosts/copr-fe.cloud.fedoraproject.org.yml
@@ -61,7 +61,5 @@
     - --service=https
     - --service=http
 
-
-
   handlers:
   - include: $handlers/restart_services.yml

From 332db02c1c1fcf3a144402e1c43a19ebfad09780 Mon Sep 17 00:00:00 2001
From: Ralph Bean <rbean@redhat.com>
Date: Mon, 19 Aug 2013 19:20:01 +0000
Subject: [PATCH 12/15] Try out this badge awarder as a cronjob.

---
 .../files/cron/award-oldschool-badges         | 156 ++++++++++++++++++
 .../files/cron/award-oldschool-badges.cron    |   1 +
 roles/badges-backend/tasks/main.yml           |  38 +++++
 3 files changed, 195 insertions(+)
 create mode 100644 roles/badges-backend/files/cron/award-oldschool-badges
 create mode 100644 roles/badges-backend/files/cron/award-oldschool-badges.cron

diff --git a/roles/badges-backend/files/cron/award-oldschool-badges b/roles/badges-backend/files/cron/award-oldschool-badges
new file mode 100644
index 0000000000..7fa6ebda47
--- /dev/null
+++ b/roles/badges-backend/files/cron/award-oldschool-badges
@@ -0,0 +1,156 @@
+import __main__
+# This is going to require sqlalchemy 0.8 sooner than later.
+__main__.__requires__ = __requires__ = ["tahrir-api", "sqlalchemy>=0.7"];
+import pkg_resources
+pkg_resources.require(__requires__)
+
+import time
+import urllib
+import socket
+from hashlib import md5
+import getpass
+import pprint
+
+from tahrir_api.dbapi import TahrirDatabase
+import transaction
+
+
+_fas_cache = {}
+
+import logging
+log = logging.getLogger()
+logging.basicConfig()
+import fedora.client.fas2
+
+
+import fedmsg
+import fedmsg.config
+
+fm_config = fedmsg.config.load_config()
+fm_config['cert_prefix'] = 'fedbadges'
+fm_config['name'] = 'relay_inbound'
+fm_config['active'] = True
+fedmsg.init(**fm_config)
+
+
+def get_cla_signers(**config):
+    creds = config['fas_credentials']
+
+    fasclient = fedora.client.fas2.AccountSystem(
+        username=creds['username'],
+        password=creds['password'],
+    )
+
+    timeout = socket.getdefaulttimeout()
+    socket.setdefaulttimeout(600)
+    try:
+        log.info("Downloading FAS cache")
+        request = fasclient.send_request('/user/list',
+                                         req_params={'search': '*'},
+                                         auth=True)
+    finally:
+        socket.setdefaulttimeout(timeout)
+
+    mega_list = request['people'] + request['unapproved_people']
+    print len(mega_list), "people in total"
+    print len(request['people']), "'people'"
+    print len(request['unapproved_people']), "'unapproved'"
+
+    clas, sponsors, provenpackagers, proventesters = [], [], [], []
+    for user in mega_list:
+        if any([group.name == 'cla_done' for group in user.memberships]):
+            clas.append(user)
+        if any([group.name == 'provenpackager' for group in user.memberships]):
+            provenpackagers.append(user)
+        if any([group.name == 'proventesters' for group in user.memberships]):
+            proventesters.append(user)
+
+    return clas, sponsors, provenpackagers, proventesters
+
+
+def main():
+    d = {}
+    print "fascache.db code is commented out --  querying fas."
+    clas, sponsors, provenpackagers, proventesters = \
+        get_cla_signers(fas_credentials=fm_config['fas_credentials'])
+    d['clas'] = clas
+    d['sponsors'] = sponsors
+    d['provenpackagers'] = provenpackagers
+    d['proventesters'] = proventesters
+
+    # When running by hand, its often nice to use the code below instead of the code above.
+    #import shelve
+    #d = shelve.open("fascache.db")
+    #if not d:
+    #    print "fascache.db not found.. querying fas."
+    #    clas, sponsors, provenpackagers, proventesters = \
+    #        get_cla_signers(fas_credentials=dict(
+    #            username="ralph",
+    #            password=getpass.getpass(),
+    #        ))
+    #    d['clas'] = clas
+    #    d['sponsors'] = sponsors
+    #    d['provenpackagers'] = provenpackagers
+    #    d['proventesters'] = proventesters
+    #    d.sync()
+    #else:
+    #    print "** using cached fas data **"
+
+    clas, sponsors, provenpackagers, proventesters = \
+        d['clas'], d['sponsors'], \
+        d['provenpackagers'], d['proventesters']    
+
+    print len(list(clas)), "clas in the end"
+    print len(list(sponsors)), "sponsors in the end"
+    print len(list(provenpackagers)), "provenpackagers in the end"
+    print len(list(proventesters)), "proventesters in the end"
+
+
+    print "Awarding for involvement."
+    badge = tahrir.get_badge(badge_id='involvement')    
+    hit_em_up(badge, clas)
+
+    badge = tahrir.get_badge(badge_id='proven-packager')
+    hit_em_up(badge, provenpackagers)
+
+    badge = tahrir.get_badge(badge_id='proven-tester')
+    hit_em_up(badge, proventesters)
+
+def hit_em_up(badge, group):
+    for fas_user in group:
+        email = fas_user.username + "@fedoraproject.org"
+        user = tahrir.get_person(email)
+
+        if not user:
+            continue
+
+        if tahrir.assertion_exists(badge.id, email):
+            print email, "already has", badge.id, "skipping."
+            continue
+
+        time.sleep(1)
+        print "awarding", badge.id, "to", email
+        try:
+            transaction.begin()
+            tahrir.add_assertion(badge.id, email, None)
+            transaction.commit()
+            fedmsg.publish(topic="badge.award",
+                modname="fedbadges",
+                msg=dict(
+                    badge=dict(
+                        name=badge.name,
+                        description=badge.description,
+                        image_url=badge.image,
+                    ),
+                    user=dict(
+                        username=user.nickname,
+                        badges_user_id=user.id,
+                    ),
+            ))
+        except Exception as e:
+            transaction.abort()
+            print "Failure:", e
+
+uri = fm_config['badges_global']['database_uri']
+tahrir = TahrirDatabase(uri)
+main()
diff --git a/roles/badges-backend/files/cron/award-oldschool-badges.cron b/roles/badges-backend/files/cron/award-oldschool-badges.cron
new file mode 100644
index 0000000000..fd7b3ce7b4
--- /dev/null
+++ b/roles/badges-backend/files/cron/award-oldschool-badges.cron
@@ -0,0 +1 @@
+*/25 * * * * fedmsg /usr/share/badges/cronjobs/award-oldschool-badges
diff --git a/roles/badges-backend/tasks/main.yml b/roles/badges-backend/tasks/main.yml
index 14cf0a861c..5e6df6bde9 100644
--- a/roles/badges-backend/tasks/main.yml
+++ b/roles/badges-backend/tasks/main.yml
@@ -54,3 +54,41 @@
   - badges
   notify:
   - restart fedmsg-hub
+
+
+- name: ensure badges cron directories exist
+  file: >
+    state=directory
+    path=$item
+    mode=755
+    owner=root
+  with_items:
+  - /usr/share/badges/cronjobs/
+  - /etc/cron.d/
+  tags:
+  - config
+  - cron
+
+- name: oldschool badge award scripts
+  copy: >
+    src=$item
+    dest=/usr/share/badges/cronjobs/$item
+    owner=root
+    mode=644
+  with_items:
+  - award-oldschool-badges
+  tags:
+  - config
+  - cron
+
+- name: oldschool badge award cronjobs
+  copy: >
+    src=$item
+    dest=/etc/cron.d/$item
+    owner=root
+    mode=644
+  with_items:
+  - award-oldschool-badges
+  tags:
+  - config
+  - cron

From 2359f4cdbb0c70f4315d8de25ed0508dab2d3b13 Mon Sep 17 00:00:00 2001
From: Ralph Bean <rbean@redhat.com>
Date: Mon, 19 Aug 2013 19:21:07 +0000
Subject: [PATCH 13/15] Fix paths.

---
 roles/badges-backend/tasks/main.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/roles/badges-backend/tasks/main.yml b/roles/badges-backend/tasks/main.yml
index 5e6df6bde9..5161d15289 100644
--- a/roles/badges-backend/tasks/main.yml
+++ b/roles/badges-backend/tasks/main.yml
@@ -71,7 +71,7 @@
 
 - name: oldschool badge award scripts
   copy: >
-    src=$item
+    src=cron/$item
     dest=/usr/share/badges/cronjobs/$item
     owner=root
     mode=644
@@ -83,7 +83,7 @@
 
 - name: oldschool badge award cronjobs
   copy: >
-    src=$item
+    src=cron/$item
     dest=/etc/cron.d/$item
     owner=root
     mode=644

From 5dd3b837ba1032b3d06a148d89ab9383efca62b7 Mon Sep 17 00:00:00 2001
From: Ralph Bean <rbean@redhat.com>
Date: Mon, 19 Aug 2013 19:23:13 +0000
Subject: [PATCH 14/15] Change owner and perms of that cron script.

---
 roles/badges-backend/tasks/main.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/roles/badges-backend/tasks/main.yml b/roles/badges-backend/tasks/main.yml
index 5161d15289..5fa0624ded 100644
--- a/roles/badges-backend/tasks/main.yml
+++ b/roles/badges-backend/tasks/main.yml
@@ -73,8 +73,8 @@
   copy: >
     src=cron/$item
     dest=/usr/share/badges/cronjobs/$item
-    owner=root
-    mode=644
+    owner=fedmsg
+    mode=744
   with_items:
   - award-oldschool-badges
   tags:

From 03cbac1320a29ae887491d10446a157df632bf78 Mon Sep 17 00:00:00 2001
From: Ralph Bean <rbean@redhat.com>
Date: Mon, 19 Aug 2013 19:24:00 +0000
Subject: [PATCH 15/15] Shebang.

---
 roles/badges-backend/files/cron/award-oldschool-badges | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/roles/badges-backend/files/cron/award-oldschool-badges b/roles/badges-backend/files/cron/award-oldschool-badges
index 7fa6ebda47..f4569a5388 100644
--- a/roles/badges-backend/files/cron/award-oldschool-badges
+++ b/roles/badges-backend/files/cron/award-oldschool-badges
@@ -1,3 +1,5 @@
+#!/usr/bin/env python
+
 import __main__
 # This is going to require sqlalchemy 0.8 sooner than later.
 __main__.__requires__ = __requires__ = ["tahrir-api", "sqlalchemy>=0.7"];