Commit graph

37971 commits

Author SHA1 Message Date
Kevin Fenzi
6ce19b66af osbuildapi-update: only send errors once a day
Right now if a host errors out it can send a vast pile of these.
So, lets use nag-once to avoid floods.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-09-14 18:32:50 -07:00
Kevin Fenzi
c2cab48398 All php vars need to end with a ;
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-09-14 14:26:16 -07:00
Stephen Gallagher
c04e153372 Extend inactivity time to 600s
It seems that ppc64le and aarch64 are both quite slow during the
ELN Image install. The aarch64 is now finishing most of the time,
but the ppc64le build still times out.

Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
2022-09-14 20:56:46 +00:00
Kevin Fenzi
801bdf4450 wiki: up cookie lifetime to 10hours
Right now by default users are logged out after 1 hour of inactivity on
the wiki. This is anoying for people who do a number of edits during the
day. So, lets increase this timeout to 10 hours.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-09-14 13:54:43 -07:00
Kevin Fenzi
bd7e118855 mediawiki: try disabling loginattemptthrottle entirely
Sometimes folks are unable to login to the wiki because there have been
too many login attempts from the proxy they happen to be hitting the
wiki from. Lets just disable this throttle entirely, as brute force
won't work ever anyhow.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-09-14 12:50:13 -07:00
Kevin Fenzi
7763c3c6c3 koji_builder / runroot: set nspawn args on runroot builders to get ostree_installer working
The ostree_installer job needs additional capabilities over the normal
mock systemd-spawn ones. So, add that here and since the
ostree_installer jobs are all runroot jobs we can isolate it to just the
runroot builders.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-09-14 11:27:42 -07:00
Pavel Raiskup
896e8fd296 bkernel: mock+nspawn pesign config cleanup
It is better to keep the Mock's default for `nspawn_args`, and just
append to them (mock can change that configuration option dynamically).

Complements: b6669bc5f6
2022-09-14 18:20:33 +00:00
Frank Ch. Eigler
62fc6023fe ansible-playbook-check-diff.cron: impose a 24hour timeout on check-diff jobs 2022-09-14 18:18:40 +00:00
Frank Ch. Eigler
1225279614 ansible-playbook-check-diff: rewrite as find|xargs one-liner
Taking advantage of xargs's -P option to limit concurrency
while executing all the ansible-playbook --check jobs ensures
that batcave01 is not overstressed during these checks.
2022-09-14 18:18:40 +00:00
Michal Konečný
717feea0d3 Fix yaml linting errors
Signed-off-by: Michal Konečný <mkonecny@redhat.com>
2022-09-14 09:00:57 +00:00
Michal Konečný
6f49dc8c85 [pagure] Don't use conflicting topic permissions
The pagure.{{ env_suffix }} user is currently used for both pagure and dist-git,
which makes io.pagure.* and org.fedoraproject.* topics to conflict with each
other.

This will set the permissions for both in one place.

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
2022-09-14 09:00:57 +00:00
1e5d0a07f4 Remove armhfp from modular variants
Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
2022-09-13 10:42:44 +02:00
26371877bb Remove armhfp from modular updates
Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
2022-09-13 09:58:50 +02:00
Kevin Fenzi
953dd93232 F37 beta: releng freeze is over
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-09-12 15:04:13 -07:00
306aff6f4f F37 beta
Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
2022-09-12 17:21:54 +00:00
David Kirwan
0892ba8a48 communishift: fix filesystem permissions on efs storage mount
Signed-off-by: David Kirwan <dkirwan@redhat.com>
Signed-off-by: Lenka Segura <lsegura@redhat.com>
Signed-off-by: Patrik Polakovic <ppolakov@redhat.com>
2022-09-12 13:48:10 +01:00
David Kirwan
f96fdf8fb1 communishift: fix filesystem permissions on efs storage mount
Signed-off-by: David Kirwan <dkirwan@redhat.com>
Signed-off-by: Lenka Segura <lsegura@redhat.com>
Signed-off-by: Patrik Polakovic <ppolakov@redhat.com>
2022-09-12 13:38:52 +01:00
David Kirwan
44dea690d5 communishift: fix filesystem permissions on efs storage mount
Signed-off-by: David Kirwan <dkirwan@redhat.com>
Signed-off-by: Lenka Segura <lsegura@redhat.com>
Signed-off-by: Patrik Polakovic <ppolakov@redhat.com>
2022-09-12 13:10:55 +01:00
David Kirwan
b1b7dc507f communishift: debugging filesystem permissions on storage mount
Signed-off-by: David Kirwan <dkirwan@redhat.com>
Signed-off-by: Lenka Segura <lsegura@redhat.com>
Signed-off-by: Patrik Polakovic <ppolakov@redhat.com>
2022-09-12 12:53:19 +01:00
David Kirwan
fe0c26ea9d communishift: Fixing filesystem permissions on storage mount
Signed-off-by: David Kirwan <dkirwan@redhat.com>
Signed-off-by: Lenka Segura <lsegura@redhat.com>
Signed-off-by: Patrik Polakovic <ppolakov@redhat.com>
2022-09-12 10:53:24 +01:00
Kevin Fenzi
06b7dbd352 move stg hosts from old bvmhost-x86-02.stg to bvmhost-x86-05.stg
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-09-09 12:06:41 -07:00
Kevin Fenzi
60f91468cb oraculum: define a imagestream/tag for the qa-landing build to output to
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-09-09 10:05:44 -07:00
David Kirwan
d37f87ec1a communishift: Fixing tags on the deploy operator task
Signed-off-by: David Kirwan <dkirwan@redhat.com>
Signed-off-by: Lenka Segura <lsegura@redhat.com>
Signed-off-by: Patrik Polakovic <ppolakov@redhat.com>
2022-09-08 11:55:06 +01:00
David Kirwan
78e58efee1 communishift: Create k8s secret for the communishiftauthorization
operator

Signed-off-by: David Kirwan <dkirwan@redhat.com>
Signed-off-by: Lenka Segura <lsegura@redhat.com>
Signed-off-by: Patrik Polakovic <ppolakov@redhat.com>
2022-09-08 11:47:43 +01:00
2d90d4f673 Update roles/pkgdb-proxy/files/pkgdb-gnome-software-collections.json
fixes: fedora-infrastructure#10879
2022-09-07 18:24:39 +00:00
Kevin Fenzi
f02e9dd527 update eln signing.
This should have changed at branching, but didn't. ;(

We also need to add in a entry for eln tagged builds to be signed and
put back/kept in the eln tag. This will allow robosignatory to resign
everything with the f38 keys. It can be removed after this.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-09-06 08:32:46 -07:00
Matěj Grabovský
a4040b0af2 retrace: Add Fedora 37 development repos 2022-09-06 16:44:29 +02:00
Matěj Grabovský
7623cdab62 retrace: Add Fedora 37 relase + EOL 34 2022-09-06 11:50:03 +02:00
Michal Konečný
7a56c80377 [toddlers] Fix the syntax errors in TOML
Signed-off-by: Michal Konečný <mkonecny@redhat.com>
2022-09-05 14:13:19 +02:00
Michal Konečný
e22e3f962c [toddlers] Add missing SLA
Add missing SLAs to scm_request_processor toddler configuration.

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
2022-09-05 13:59:08 +02:00
Pavel Raiskup
0faa024ad9 backend: less error-prone libvirt-list'ing 2022-09-05 10:41:07 +02:00
Kevin Fenzi
b6669bc5f6 bkernel: add config for nspawn bind mount
We want to keep the old mock bind mount for non rawhide branches, but
rawhide is using nspawn, so we want to add a directive there to pass
'--bind' to it to correctly mount the pesign socket directory so kernels
can be signed for secure boot.

See https://github.com/rpm-software-management/mock/issues/140

Moving forward this could be fixed in mock, in which case we remove the
nspawn args. Or it could be fixed by pesign moving the socket directory,
in which case we remove nspawn args and adjust the old mock bind mount
to the new location. For now, this works around the current crop of
issues.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-09-01 12:58:18 -07:00
Michael Scherer
c6659c5a0f Remove whitespace at the end of the header
This fail on HTTP/2 with newer libnghttp2, as reported by aminvakil on
irc. See https://github.com/nghttp2/nghttp2/issues/1786
2022-09-01 18:58:14 +00:00
Stephen Smoogen
cb7aab797f Non-FBR: Update mailman01 definition to 8 cpus
This is a non-Freeze Break request as it would only affect a new
rolled out system versus the existing one.

Signed-off-by: Stephen Smoogen <ssmoogen@redhat.com>
2022-09-01 14:16:58 -04:00
David Kirwan
27a514218c communishift: Minor formatting documentation in communishift efs custom module
Signed-off-by: David Kirwan <dkirwan@redhat.com>
Signed-off-by: Lenka Segura <lsegura@redhat.com>
Signed-off-by: Patrik Polakovic <ppolakov@redhat.com>
2022-09-01 16:41:50 +01:00
Kevin Fenzi
423eb61c14 zabbix / staging: change zabbix server to use sysadmin-noc and add client to wiki and proxies in staging
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-08-31 11:59:01 -07:00
Michal Konečný
88e9c37990 [release-monitoring] Fix typo
Use == instead =.

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
2022-08-29 18:51:22 +02:00
Michal Konečný
11a1566b29 [release-monitoring] Install newer Flask-Login package
The Flask-Login package currently available in F36 has issue with werkzeug
package. This commit will use newer version of Flask-Login from PyPI to
work around the issue.

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
2022-08-29 18:34:27 +02:00
Michal Konečný
465c428667 [release-monitoring] Specify the exact version of sphinx package
With the sphinx 4.4.0 already installed in the container we need to specify
exact version of sphinx we want to install by pip.

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
2022-08-29 18:18:38 +02:00
Michal Konečný
626441f146 [release-monitoring] Use sphinx version from pip during build
The current version of sphinx available in Fedora 36 doesn't work with the new
version of Anitya. Let's use the newest from pip.

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
2022-08-29 18:06:10 +02:00
David Kirwan
2b4b5fefd0 communishift: Create directory for operator keytab
Signed-off-by: David Kirwan <dkirwan@redhat.com>
Signed-off-by: Lenka Segura <lsegura@redhat.com>
Signed-off-by: Patrik Polakovic <ppolakov@redhat.com>
2022-08-29 11:31:33 +01:00
David Kirwan
ed3f658523 communishift: Update variable cluster hostname
Signed-off-by: David Kirwan <dkirwan@redhat.com>
Signed-off-by: Lenka Segura <lsegura@redhat.com>
Signed-off-by: Patrik Polakovic <ppolakov@redhat.com>
2022-08-29 11:09:10 +01:00
David Kirwan
d9fa6611ae communishift: Add task to create namespace for communishift authorization operator
Create IPA keytab for communishift authorization operator

Signed-off-by: David Kirwan <dkirwan@redhat.com>
Signed-off-by: Lenka Segura <lsegura@redhat.com>
Signed-off-by: Patrik Polakovic <ppolakov@redhat.com>
2022-08-29 10:50:50 +01:00
Jakub Kadlcik
a60f3caa8a copr: remove only volumes that are either available or failed 2022-08-26 04:17:07 +02:00
Jakub Kadlcik
c77da1641e copr: actually, the highest possible limit is 100
ibm_cloud_sdk_core.api_exception.ApiException:
    Error: The `limit` parameter is invalid, it must be an integer
    between 1 and 100., Code: 400
2022-08-26 03:58:09 +02:00
Jakub Kadlcik
a8ec3232b5 copr: change limit value so it is clear that we are using higher than default 2022-08-26 03:48:24 +02:00
Jakub Kadlcik
ea46351f09 copr: try to remove also volumes 2022-08-26 03:46:22 +02:00
Jakub Kadlcik
0562aa35e9 copr: list also IBM Cloud volumes
Unused and forgotten volumes are starting to pile up in the IBM
Cloud. We need to list them in this script the same way we do it in
`libvirt-list'.
2022-08-26 02:47:52 +02:00
Kevin Fenzi
81dcf5ac0a odcs: add kevin to list of users who can do private composes from tags ( to allow remaking broken h264 repo data )
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-08-25 12:47:16 -07:00
Jiri Kyjovsky
f3da725a8a copr-fe: add link to stg FAS when copr doesnt run in production 2022-08-25 12:32:17 +02:00