compose-riscv01: add a secondary x86 compose host for riscv

This vm will hopefully allow for composing images, repos, etc

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2025-02-17 13:56:23 -08:00
parent 4dc4029ad7
commit f0663ae52f
4 changed files with 62 additions and 2 deletions

View file

@ -0,0 +1,30 @@
---
# common items for the releng-* boxes
dns: 10.3.163.33
external: false
host_group: releng_riscv
ipa_client_shell_groups:
- sysadmin-riscv
ipa_client_sudo_groups:
- sysadmin-riscv
ipa_host_group: releng-compose-riscv
ipa_host_group_desc: Hosts running composes for riscv
# for kojid config
koji_server_url: "https://riscv-koji.fedoraproject.org/kojihub"
koji_topurl: "https://riscv-kojipkgs.fedoraproject.org/"
koji_weburl: "https://riscv-koji.fedoraproject.org/koji"
kojihub_scheme: https
kojihub_url: riscv-koji.fedoraproject.org/kojihub
# For the mock config
kojipkgs_url: riscv-kojipkgs.fedoraproject.org
lvm_size: 100000
max_mem_size: "{{ mem_size }}"
mem_size: 131072
nfs_mount_opts: "rw,hard,bg,intr,noatime,nodev,nosuid,sec=sys,nfsvers=4"
nrpe_procs_crit: 1000
# With 16 cpus, theres a bunch more kernel threads
nrpe_procs_warn: 900
num_cpus: 16
primary_auth_source: ipa
virt_install_command: "{{ virt_install_command_one_nic_unsafe }}"
zabbix_templates: "{{ [] }}" # Need to do some research on what exactly we're doing on this host before enabling any templates.

View file

@ -0,0 +1,14 @@
datacenter: iad2
eth0_ipv4_gw: 10.3.172.254
eth0_ipv4_ip: 10.3.172.22
# eln is never frozen, the compose box should not be so we can make needed changes
freezes: false
koji_hub_nfs: "fedora_riscv_koji"
kojihub_scheme: https
kojihub_url: riscv-koji.fedoraproject.org/kojihub
kojipkgs_url: riscv-kojipkgs.fedoraproject.org
ks_repo: https://infrastructure.fedoraproject.org/pub/fedora/linux/releases/41/Server/x86_64/os/
ks_url: https://infrastructure.fedoraproject.org/repo/rhel/ks/kvm-fedora
virt_install_command: "{{ virt_install_command_one_nic_unsafe }}"
vmhost: bvmhost-x86-riscv01.iad2.fedoraproject.org
volgroup: /dev/vg_guests

View file

@ -17,6 +17,9 @@ compose-x86-01.iad2.fedoraproject.org
[releng_compose_eln]
compose-eln01.iad2.fedoraproject.org
[releng_compose_riscv]
compose-riscv01.iad2.fedoraproject.org
[releng_compose_stg]
compose-x86-01.stg.iad2.fedoraproject.org

View file

@ -6,10 +6,10 @@
---
- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml"
vars:
myhosts: "releng_compose:releng_compose_stg:releng_compose_eln"
myhosts: "releng_compose:releng_compose_stg:releng_compose_eln:releng_compose_riscv"
- name: Setup releng compose hosts
hosts: releng_compose:releng_compose_stg:releng_compose_eln
hosts: releng_compose:releng_compose_stg:releng_compose_eln:releng_compose_riscv
user: root
gather_facts: true
tags:
@ -48,9 +48,16 @@
service: compose
host: "koji{{env_suffix}}.fedoraproject.org"
owner_group: releng-team
when: env == "staging" or koji_instance == "primary"
- role: keytab/service
service: compose
host: "riscv-koji.fedoraproject.org"
owner_group: sysadmin-riscv
when: koji_instance == "secondary"
- role: keytab/service
service: mash
host: "koji{{env_suffix}}.fedoraproject.org"
when: env == "staging" or koji_instance == "primary"
- role: releng
tags:
- releng
@ -81,6 +88,10 @@
mnt_dir: '/pub'
nfs_src_dir: 'fedora_ftp/fedora.redhat.com/pub'
when: "'releng_compose' or 'releng_compose_eln' in group_names"
- role: nfs/client
mnt_dir: '/mnt/fedora_riscv_koji'
nfs_src_dir: "{{ koji_hub_nfs }}"
when: "'releng_compose_riscv' in group_names"
# staging composer nfs mounts
@ -148,12 +159,14 @@
- role: rabbit/user
user_name: "pungi{{ env_suffix }}"
user_sent_topics: ^org\.fedoraproject\.{{ env_short }}\.(pungi|compose|logger)\..*
when: koji_instance == "production" or env == "staging"
- {
role: "push-container-registry",
cert_dest_dir: "/etc/docker/certs.d/registry.stg.fedoraproject.org",
cert_src: "{{private}}/files/docker-registry/staging/pki/issued/containerstable.crt",
key_src: "{{private}}/files/docker-registry/staging/pki/private/containerstable.key",
when: env == "staging"
}
- {
role: "push-container-registry",