Commit graph

38328 commits

Author SHA1 Message Date
Pavel Raiskup
8a1d3a64f6 copr-be: promote f37 images to production 2022-11-28 18:44:02 +01:00
Pavel Raiskup
f7b53ea28a copr-keygen: services enabled 2022-11-28 18:30:16 +01:00
Pavel Raiskup
2bb712b026 copr-base: ipv6.may-fail yes 2022-11-28 18:25:41 +01:00
Jakub Kadlcik
f0ba42ac38 copr: drop birthday and enable services on production frontend
This reverts commit 94178e08e5.
2022-11-28 18:17:21 +01:00
Pavel Raiskup
694554c4aa aws_cloud: temporarily work with rsa by default 2022-11-28 17:57:48 +01:00
Jakub Kadlcik
94178e08e5 Revert "copr: drop birthday and enable services on production frontend"
This reverts commit 65a06bd718.
2022-11-28 17:38:08 +01:00
Ondřej Budai
6ba8b69e3e koji_builder: fix the script for updating osbuildapi
The awk helper responsible for extracting IP addresses from the resolvectl
call could handle only 2 of them.
It turns out that api.openshift.com now has 4 A records, therefore this method
became flakey: It added only 2 addresses to the IP set, so if the osbuild
plugin used one of the 2 ignored addresses, the call failed.

This commit solves it by introducing a different method of parsing the
resolvectl output:

We now use an ugly but working sed command that erases everything from the
line except for the IPv4 address. Therefore, I had to quote the echo before
the new sed command so it can get a proper multiline input. Also, I limited
resolvectl to just use IPv4 because the new script cannot handle IPv6
properly. This doesn't cause any harm because api.openshift.com isn't
actually accessible by IPv6. Sigh...
2022-11-28 15:51:28 +00:00
Jakub Kadlcik
65a06bd718 copr: drop birthday and enable services on production frontend 2022-11-28 16:43:28 +01:00
Pavel Raiskup
9e4f3363d8 copr-keygen: new backend's private IP 2022-11-28 16:32:41 +01:00
Pavel Raiskup
9482bc377d copr-be: run playbook against the new production machine 2022-11-28 16:17:44 +01:00
Jakub Kadlcik
b683427d3a copr: production birthday=yes, disable_services=true and uncomment copr-be-temp 2022-11-28 14:50:35 +01:00
Adam Williamson
2cb4e8363a openqa: drop stg worker scratch build
there's a newer build in updates-testing, now.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2022-11-25 16:18:07 -08:00
Adam Williamson
6aa77e9423 openqa: try and fix on-disk encryption stuff
Some of the openqa workers are encrypted and some aren't (this is a bit of a
mess that's partly a result of all the redeployments we did around
https://bugzilla.redhat.com/show_bug.cgi?id=2009585 ). We should only run
the nbde_client role on workers which are encrypted. Hopefully this gets that
right.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2022-11-25 16:10:11 -08:00
Adam Williamson
e8e51b9709 openqa: make sure a64-worker01 isn't in two conflicting groups
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2022-11-25 15:27:16 -08:00
Adam Williamson
a4a262d5e7 Set openqa_tap_iface for openqa-x86-worker05
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2022-11-25 15:08:09 -08:00
Adam Williamson
f1e0e0d037 Fix openqa_tap truthiness checks
Sigh, |bool doesn't do what you might think it does:
https://medium.com/opsops/wft-bool-filter-in-ansible-e7e2fd7a148f

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2022-11-25 14:58:36 -08:00
Adam Williamson
28110d34be openqa/worker: prepare to handle multiple tap worker classes
I'm going to try splitting the tap jobs across multiple worker
hosts. We have quite a lot of tap jobs, now, and I have seen
sometimes a situation where all non-tap jobs have been run and
the non-tap worker hosts are sitting idle, but the single tap
worker host has a long queue of tap jobs to get through.

We can't just put multiple hosts per instance into the tap
class, because then we might get a case where job A from a tap
group is run on one host and job B from a tap group is run on
a different host, and they can't communicate. It's actually
possible to set this up so it works, but it needs yet more
complex networking stuff I don't want to mess with. So instead
I'm just gonna split the tap job groups across two classes,
'tap' and 'tap2'. That way we can have one 'tap' worker host
and one 'tap2' worker host per instance and arch, and they will
each get about half the tap jobs.

Unfortunately since we only have one aarch64 worker for lab it
will still have to run all the jobs, but for all other cases we
do have at least two workers, so we can split the load.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2022-11-25 14:11:58 -08:00
Pavel Raiskup
31ff414ca8 copr-fe-dev: assure there's no "zero" in threads 2022-11-24 18:43:29 +01:00
Pavel Raiskup
f7b3da54b0 copr-fe: typo in dev vs. prod 2022-11-24 18:35:55 +01:00
Pavel Raiskup
206f4bf79f copr-fe-dev: Decrease the number of wsgi processes/threads 2022-11-24 18:29:05 +01:00
Pavel Raiskup
0167e118c7 copr-fe: align the wsgi statements 2022-11-24 18:16:45 +01:00
Pavel Raiskup
20ab4ef0b1 copr-base: we need ipv6.method auto eventually
This is needed to setup gateway, etc.  After that we need to do
'nmcli con up'.
2022-11-23 22:42:54 +01:00
Pavel Raiskup
cac048ea1b Revert "copr-be-dev-temp once more"
This reverts commit b8d01fe722.
2022-11-23 21:38:42 +01:00
Jakub Kadlcik
2fabdc2749 copr: drop birthday and enable services for copr-fe-dev 2022-11-23 21:20:50 +01:00
Jakub Kadlcik
e0177640da copr: set birthday=true for copr-fe-dev 2022-11-23 20:42:19 +01:00
Kevin Fenzi
a6878760ea distgit: increase cgi body to 10G from 1G default to allow larger uploads
Fixes ticket 11001

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-11-23 10:13:00 -08:00
Pavel Raiskup
b8d01fe722 copr-be-dev-temp once more 2022-11-23 18:44:02 +01:00
Aurélien Bompard
712d991fc8
Fix env var
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2022-11-23 16:30:58 +01:00
Aurélien Bompard
f2cb2df066
Syntax error
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2022-11-23 16:05:31 +01:00
Aurélien Bompard
719a58388e
FMN: add redis for caching
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2022-11-23 15:55:46 +01:00
Pavel Raiskup
5023fd5142 copr-be-dev: test c7g instance
https://lists.fedoraproject.org/archives/list/buildsys@lists.fedoraproject.org/thread/VUAOXQ3BNXDZMVFR2PJCBQYWGWOIYMPD/
2022-11-23 15:33:35 +01:00
Pavel Raiskup
e804c8ff01 ipa/service: add missing tags for the "fail" task 2022-11-23 15:07:46 +01:00
Pavel Raiskup
dc860c9e9d copr-fe: flag the keytab/service call with krb5 tag 2022-11-23 15:06:17 +01:00
Pavel Raiskup
c59e68a986 ipa/service: don't fail if service already exists
Relates: https://pagure.io/fedora-infra/ansible/pull-request/1259
2022-11-23 15:03:41 +01:00
Pavel Raiskup
8d3cbc375e ipa/service: drop the PR I merged
The 'stat' can't work because "{{ service }}/{{ host }}" isn't a real
path name.

Revert "check if ipa service entry exists"

This reverts commit 98475f6ae4.
2022-11-23 14:50:50 +01:00
Seddik Alaoui Ismaili
98475f6ae4 check if ipa service entry exists 2022-11-23 13:31:10 +00:00
Jakub Kadlcik
648f128f80 copr: drop birhday for copr-fe-dev 2022-11-23 14:30:22 +01:00
Pavel Raiskup
161545b81c copr-be-dev: no birthday again 2022-11-23 13:21:41 +01:00
Pavel Raiskup
7f832fdf20 copr: typo in variable definition 2022-11-23 13:14:40 +01:00
Pavel Raiskup
50a7bd5e58 basessh: invent no_ed25519_key option
And re-configure copr-be-dev.
2022-11-23 13:10:13 +01:00
Pavel Raiskup
e18fb4f5f3 copr-be: don't restart node exporter over again 2022-11-23 12:49:15 +01:00
Pavel Raiskup
96b00cbd33 copr-base: don't reconfigure ipv6 over again 2022-11-23 12:42:10 +01:00
Pavel Raiskup
a1b7c1102a copr/base, copr-fe: don't restart prometheus exporter all the time 2022-11-23 12:17:34 +01:00
Pavel Raiskup
094242ecc6 copr/base: drop an unused resolv.conf hack
This was long time ago used with the Fedora Infra OpenStack.
2022-11-23 12:12:13 +01:00
Pavel Raiskup
364ec6efbc copr-be: pre-create resalloc_provision directory
Fixes a "rsync" breakage after 4fd58b6c40.
2022-11-23 12:07:31 +01:00
Pavel Raiskup
a66661070e Revert "copr-be-dev: birthday again?"
This reverts commit c3c693df00.
2022-11-23 11:56:23 +01:00
Pavel Raiskup
c3c693df00 copr-be-dev: birthday again?
Getting:

TASK [gather facts] ***********************************************************
Wednesday 23 November 2022  10:30:57 +0000 (0:00:00.098)       0:00:00.997 ****
Wednesday 23 November 2022  10:30:57 +0000 (0:00:00.098)       0:00:00.996 ****
The authenticity of host 'copr-be-dev.aws.fedoraproject.org (18.208.10.131)' can't be established.
ED25519 key fingerprint is SHA256:0FAk4qNLXN6uCdH34Ki+EmBwu6ZI4PzpWbAMKJf7lvM.
Are you sure you want to continue connecting (yes/no/[fingerprint])?
2022-11-23 11:32:57 +01:00
Pavel Raiskup
093a5aceb7 backend: fix Python 3.12 warning on F37
/var/lib/resallocserver/provision/libvirt-new:17: DeprecationWarning: 'pipes' is deprecated and slated for removal in Python 3.13
  import pipes
2022-11-23 11:28:55 +01:00
Pavel Raiskup
4fd58b6c40 copr-be: use resalloc-aws-wait-for-ssh from resalloc-aws
Instead of copy-pasted wait-for-ssh one in this repo.  Long term it
would be better if we moved the script into 'resalloc-server' or
'resalloc-server-helpers' (or alike).
2022-11-23 11:27:03 +01:00
Lukas Holecek
c3942af631 waiverdb: Update command for the new container image 2022-11-23 09:51:26 +00:00