Commit graph

37040 commits

Author SHA1 Message Date
Pavel Raiskup
41c3c869aa certbot: document why Lighty needs the access to certbot's dirs 2021-12-07 14:22:41 +01:00
Pavel Raiskup
523be3de09 certbot: allow lighttpd to step into certbot dirs 2021-12-07 14:15:23 +01:00
Silvie Chlupova
7173e269bc copr: support for generating metrics on copr keygen 2021-12-07 12:15:24 +01:00
Adam Williamson
38888162ea openQA: remove swtpm-teardown now the work is done
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2021-12-06 14:18:46 -08:00
Adam Williamson
7a5d7f59fb openQA: Drop already-done step from swtpm-teardown
This is just cleaning up the mess of the bad parameter from
earlier, run of this play broke halfway through, need to do the
remaining half without choking on this part.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2021-12-06 14:12:43 -08:00
Adam Williamson
ca2684c711 openQA: fix stupid semodule argument
gah.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2021-12-06 14:05:14 -08:00
Kevin Fenzi
4ba0ee487c internetx01: fix br0_ipv6_nm missing
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-12-06 12:46:30 -08:00
Kevin Fenzi
6d3ef70845 internetx01: fix gateway
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-12-06 12:35:47 -08:00
Kevin Fenzi
74f3f9f937 ibiblio disable network linux-system-roles on ibiblio hosts for now
ibiblio hosts use bonded pairs of etherent.
We need to adjust config to handle this before we enable it.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-12-06 11:56:47 -08:00
Kevin Fenzi
cf2ce21c1e buildvmhost-s390x-01: ok, leave off mac on bridge
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-12-06 11:19:43 -08:00
Kevin Fenzi
6227917f8e buildvmhost-s390x-01: bridge has a different mac address from the interface
For some reason here the bridge has a different mac address than the
interface that it's using to talk to the network.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-12-06 11:14:14 -08:00
Kevin Fenzi
6ab971985d Drop auto6: false from hostvars
See 7cb3fddb79 for more info

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-12-06 10:52:29 -08:00
Adam Williamson
224e28131d openQA: prepare for prod deployment of latest releases
This unifies prod and stg onto the ways of doing things for the
latest packages, and rejigs the swtpm stuff a bit to tear down
more (we shouldn't need the custom SELinux policy any more).

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2021-12-06 10:40:33 -08:00
Peter Buffon
a21106f88b Last batch update of Ansible host_vars files for linux-system-roles/network conversion. 2021-12-06 18:26:35 +00:00
Kevin Fenzi
579e646af0 osbs: exclude docker* from upgrades
Right now we are running a special docker on osbs nodes that allows it
to actually work with f35+ containers. Without this glibc does a syscall
that docker doesn't understand and just blocks, breaking (at least) dns
resolution in the container. So, until we move these nodes from rhel7,
we are going to have to deal with this.

In addtion to excluding this, if it ever gets mistakenly upgraded, you
need to downgrade and then: remove
'--seccomp-profile=/etc/docker/seccomp.json \' from
/usr/lib/systemd/system/docker.service
do 'systemctl daemon-reload'
do 'systemctl restart docker'

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-12-06 09:38:30 -08:00
Silvie Chlupova
22bf73ae9e copr: move installation of node_exporter to copr base role 2021-12-06 11:18:34 +01:00
Silvie Chlupova
356dca4cc7 copr: support for generating metrics on copr dist-git servers 2021-12-06 10:09:46 +01:00
Pavel Raiskup
a10a07f0ef copr-be: work-around lighty+cronolog+logrotate
Relates: https://pagure.io/copr/copr/issue/2001
2021-12-06 08:42:00 +01:00
Pavel Raiskup
f4e09eac78 copr-be: disable logrotate for lighttpd for now
https://pagure.io/copr/copr/issue/2001
2021-12-05 19:42:52 +00:00
Kevin Fenzi
5b30ab6900 builders stg: its a dash not a underscore
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-12-03 11:02:40 -08:00
Kevin Fenzi
49d9efaeca builders stg: also adjust netmask
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-12-03 10:55:27 -08:00
Kevin Fenzi
91d76d85e2 buildvm stg: adjust gw and dns to install
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-12-03 10:53:55 -08:00
Kevin Fenzi
73c3ef86c5 build-x86 stg: use eth0_ipv4
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-12-03 10:50:59 -08:00
Kevin Fenzi
af94db8ab8 builders_stg: adjust vars for f35 installs in staging
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-12-03 09:44:36 -08:00
Pavel Raiskup
19b8f82f5b copr-be: we shouldn't use both cronolog and logrotate
These implications constraint us:

    max-workers is used => cronolog needs to be used
    log counter enabled => we need logrotate

But:
    when logrotate is used => cronlog doesn't detect rotation

So the '4c4b63516d' is IMO explained.
Cronolog kept writing the log to the old descriptor, and the new
access.log link was just empty (before 4c4b63516d when we just
reloaded, not restarted).  So I hope now that there isn't any other
problem that would require us to restart Lighty regularly.

The **UGLY** work-around is to terminate the cronlog process.  As I've
found out, cronlog is automatically restarted by mod_accesslog - though
this is somewhat gray zone and we should long-term do one of those:

    - stop using logrotate && rework log counter
    - stop using max-workers && cronlog
    - stop using Lighty

Resolves: https://pagure.io/copr/copr/issue/2001
Resolves: https://pagure.io/fedora-infrastructure/issue/10391
2021-12-03 17:17:19 +01:00
Silvie Chlupova
b005356b10 copr: support for node_exporter on frontend (dev and prod) 2021-12-03 15:23:07 +01:00
Pavel Raiskup
d05a9558f8 copr-be: fix logrotate
Let's not reload-and-restart lighttpd (two actions for two scripts), and
use the sharedscripts option.

While on it, this reverts an old hack 4c4b63516d that
might not be needed nowadays.

Fixes: https://pagure.io/copr/copr/issue/2001
Relates: https://pagure.io/fedora-infrastructure/issue/10391
2021-12-03 14:59:24 +01:00
Kevin Fenzi
ddfac2e066 proxies: work around reg path issue
reg is putting a /static/ into asset path since it's upgrade.
Just alias it to / here to avoid the problem for now.
Hopefully we are going to be moving to quay.io and can stop caring about
it.

Fixes infra 10673

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-12-02 15:42:37 -08:00
Kevin Fenzi
dd31639a9a torrent02: drop btseed, we just use rtorrent now
We used to use btseed, but it stopped working and we couldn't sort out
why, so we switched to running rtorrent in a tmux instead. Its not
great, but it does work for a seeder.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-12-02 14:45:44 -08:00
Kevin Fenzi
1bdc807b74 pkgs01: bump cpus to 16
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-12-02 14:40:43 -08:00
Carl George
be20923583 roles/robosignatory: Add epel9 side tag signing
Signed-off-by: Carl George <carl@george.computer>
2021-12-02 13:37:49 -06:00
Carl George
30f3aa66f9 bodhi2/backend: Add epel9 to releases in new-updates-sync
Signed-off-by: Carl George <carl@george.computer>
2021-12-02 12:31:40 -06:00
Pierre-Yves Chibon
227913d1e9 people: give pingou a little more space
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2021-12-02 17:17:10 +01:00
Pavel Raiskup
a333ba03dc copr-be: enable httpd monitoring 2021-12-02 06:49:57 +01:00
Kevin Fenzi
d849e16442 virthost: enable advanced virt module on rhel 8 virthosts
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-12-01 15:06:48 -08:00
Kevin Fenzi
bcd4365fec rhel sync: add advanced virt repo to sync and rhel8.repo files
We want to use advanced virt as it has a more tested/tweaked/patched set
of virt tools for our virthosts.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-12-01 14:37:29 -08:00
Mohan Boddu
a86185c7bb Update compose-tracker to use fedora:34
fedora 35 is throwing

Errors during downloading metadata for repository 'fedora':
  - Curl error (6): Couldn't resolve host name for https://mirrors.fedoraproject.org/metalink?repo=fedora-35&arch=x86_64  [getaddrinfo() thread failed to start]
Error: Failed to download metadata for repo 'fedora': Cannot prepare internal mirrorlist: Curl error (6): Couldn't resolve host name for https://mirrors.fedoraproject.org/metalink?repo=fedora-35&arch=x86_64  [getaddrinfo() thread failed to start]

Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
2021-12-01 17:08:35 -05:00
Kevin Fenzi
182a4e507c buildvm-s390x-01.stg: fix dns
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-12-01 10:05:39 -08:00
Kevin Fenzi
5c5bc71a2a cloud inventory: drop more copr temp hosts
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-12-01 08:43:08 -08:00
Silvie Chlupova
6eb77648a4 copr: adding missing package for kerberos auth on frontend 2021-12-01 14:05:07 +01:00
Silvie Chlupova
3b32723424 copr: enable creating keytab again 2021-12-01 13:31:59 +01:00
Pavel Raiskup
9854f54054 copr: already migrated to F35, the -temp is not needed now 2021-12-01 09:42:21 +01:00
Mohan Boddu
531cbaf6e9 Fix the dir location in updates sync
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
2021-11-30 20:50:08 -05:00
Pedro Moura
2e7473fdbd updated update_epel_release_latest function to create or update symbolic links for epel-release, latest and next, packages 2021-11-30 21:10:17 +00:00
6231d8fd25 websites: remove obsolete sites from build script & use main branch 2021-11-30 21:08:42 +00:00
f3a5f11019 websites: add darknao to appowners 2021-11-30 20:46:52 +00:00
1a24f15eb0 websites: add cronjob to update translation template 2021-11-30 20:46:52 +00:00
Adam Williamson
55be7c05f6 openQA: update AMQP config settings for lab
These need to change with the newer version of openQA.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2021-11-30 10:30:20 -08:00
Adam Williamson
6dbdd858e3 openQA lab: update scratch builds
os-autoinst is actually an official build now, and this is a
newer (and somewhat fixed) openQA scratch.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2021-11-30 10:13:30 -08:00
Kevin Fenzi
9bb24871c3 ipsilon: add saml2 for gitlab.com
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-11-30 15:37:33 +00:00