David Kirwan
c5cad9e168
zabbix_server: readd handlers
...
Signed-off-by: David Kirwan <dkirwan@redhat.com>
2023-06-12 11:23:06 +01:00
David Kirwan
88e544bf53
zabbix: readd base roles
...
Signed-off-by: David Kirwan <dkirwan@redhat.com>
2023-06-12 11:11:30 +01:00
David Kirwan
a8263f98e9
zabbix: add zabbix_server role
...
WIP
Signed-off-by: David Kirwan <dkirwan@redhat.com>
2023-06-12 10:50:58 +01:00
Kevin Fenzi
49c105e55a
koji_hub: allow scratch builds from scm
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-11 08:27:30 -07:00
Kevin Fenzi
a36b0101c6
koji_builder: increase sleep time a bit to see if it helps db load
...
Right now all builders ask the hub for jobs every 15s.
Bump that out a bit to see if it lowers the pressure on the db server.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-10 20:54:28 -07:00
Kevin Fenzi
f99659cea8
koji_hub: re-add scm policy for scm plugin
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-09 11:35:23 -07:00
Kevin Fenzi
95fcfe8375
koji_hub: fix matches to include allow
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-09 11:26:30 -07:00
Kevin Fenzi
aba961e27f
koji_hub: dammit, disable outage messages
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-09 09:46:04 -07:00
Kevin Fenzi
bcb281d40e
koji_hub: fix template for hub policy
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-09 09:37:13 -07:00
Tomas Kopecek
8d99c12ea4
Move SCM policies to the koji hub
...
Moving all SCM policies previously defined in each builder to
centralized hub configuration. From now on, any SCM policy change just
needs updating the hub config and reloading it. Builders need nor change
nor reload.
Related: https://pagure.io/fedora-infrastructure/issue/9728
Signed-off-by: Tomas Kopecek <tkopecek@redhat.com>
2023-06-09 16:18:12 +00:00
Kevin Fenzi
0f4026b2a1
koji_builder: test dnf5 changes in staging
...
With dnf5 becoming default in rawhide, we need to make sure to override
things to use dnf4 for making buildroots for now until dnf5 is ready to
take that on.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-08 13:30:19 -07:00
Kevin Fenzi
d0968906bf
ibiblio02: fix duplicate variable
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-08 10:04:41 -07:00
Kevin Fenzi
19830a2265
ibiblio02: add vpn ccd file
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-08 09:38:06 -07:00
Kevin Fenzi
199e58faf6
ibiblio02: do not specify ipv6 prefix twice
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-08 09:23:31 -07:00
Kevin Fenzi
b9190670cb
ibiblio02: adjust connection settings
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-08 09:20:33 -07:00
Kevin Fenzi
bfd7518efd
ibiblio: use linux-system-roles/networking on new servers
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-08 09:16:39 -07:00
Pavel Raiskup
8ce78aaca3
copr-be: Promote Fedora 38 builders to production
2023-06-08 17:30:30 +02:00
Pavel Raiskup
0fc0655e47
copr-builders: don't do gpg checks for epel-6 builds, take #2
2023-06-08 17:19:52 +02:00
Pavel Raiskup
7b1cf87845
copr-builders: don't do gpg checks for epel-6 builds
...
Our builders are on Fedora 38 which distrust SHA-1, and I don't see a
way to opt-out from this policy. Building for epel-6 is already on the
edge, so..
2023-06-08 17:07:34 +02:00
Pavel Raiskup
860f0ed488
copr-be-dev: move builder images to F38
2023-06-08 13:58:53 +02:00
Kevin Fenzi
8e50b0ebda
virthosts: increase process limit on new servers
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-07 18:44:14 -07:00
Lukas Holecek
41272fa237
resultsdb: Use upstream image for prod instance
...
Related to: https://pagure.io/fedora-infrastructure/issue/11321
2023-06-07 23:59:34 +00:00
Kevin Fenzi
cf5ca54701
ipa: exclude the ipa postgres user in favor of local one
...
We have a postgres user in ipa to prevent people from making an account
with that name, but we need/want to use a local version of this on
database servers, not the ipa one. We need the local one because the ipa
one is locked and this prevents database backups from working.
(Locked accounts can't run cron jobs).
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-07 16:52:25 -07:00
Kevin Fenzi
1a9d6577be
ibiblio02: reindent network_connections and sort more readably
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-07 16:16:48 -07:00
Kevin Fenzi
793a658d92
ibiblio02: adjust connection settings
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-07 16:11:36 -07:00
Kevin Fenzi
4f63381843
ibiblio02: add new virthost at ibiblio
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-07 15:46:00 -07:00
Kevin Fenzi
10a6a0a18b
download-cc-rdu03: how about rhel9?
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-06 14:45:37 -07:00
Kevin Fenzi
521606e11e
download-cc-rdu01: readd on new virthost
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-06 13:30:38 -07:00
Kevin Fenzi
34ea0dfcb3
autosign: add quotes
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-06 10:29:45 -07:00
Kevin Fenzi
4f0fe17dc1
autosign: fix up import for newer ansible
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-06 10:27:04 -07:00
Tomáš Hrčka
d601017cad
Update roles/robosignatory/templates/robosignatory.toml.j2
2023-06-06 16:50:12 +00:00
Tomas Hrcka
cc3715271d
Enable signing for f39-python sidetag
...
Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
2023-06-06 16:45:34 +00:00
Aurélien Bompard
228d284a88
Collectd: add the FMN users source
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2023-06-06 18:09:27 +02:00
Kevin Fenzi
3b3f720557
vmhost-x86-cc03: revive with new name and hw.
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-06 08:51:03 -07:00
Aurélien Bompard
b8e6fc6146
Fixup last commit
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2023-06-06 12:46:51 +02:00
Aurélien Bompard
47fe3157bc
FASJSON: include build scripts in the source code
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2023-06-06 12:45:22 +02:00
Kevin Fenzi
7e20e39474
wiki: re-enable fedmsg
...
Turns out we never completed it's migration to fedora-messaging, so we
need to re-enable fedmsg for now until we do.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-05 12:27:28 -07:00
Kevin Fenzi
4a99b7b62a
wiki: try and re-enable passwordattemptthrottle
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-04 08:28:16 -07:00
Kevin Fenzi
19f22845b2
db-koji01: some more tweaking to get better perf and stability
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-03 08:14:30 -07:00
Kevin Fenzi
ae69299c20
db-koji01: back off on config to get things working again
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-02 18:26:11 -07:00
Kevin Fenzi
eb3801edc7
postgresql_server: split out postgres15 config and tweak
...
db-koji01 is our only postgresql 15 install so far, but split out the
config from the 12 one we are using on RHEL8 to avoid making changes
there.
Also, lets try tweaking things:
- I am bumping cpus up to 88
- Tweak max workers/etc
- Try a higher i/o level since this db server is running on a virthost
with ssds.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-02 17:59:12 -07:00
Kevin Fenzi
0c81957b2d
pkgs / make-git-checkout-seed: do not try and remove already removed file
...
We already removed the old previous days version here, so trying to
remove it again results in a cron email with:
rm: cannot remove '/srv/cache/lookaside//rpm-specs-epel7*.tar.xz': No such file or directory
rm: cannot remove '/srv/cache/lookaside//rpm-specs-epel8*.tar.xz': No such file or directory
rm: cannot remove '/srv/cache/lookaside//rpm-specs-epel9*.tar.xz': No such file or directory
So, drop that here so we don't get these daily emails.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-02 12:23:38 -07:00
Kevin Fenzi
a6cafe28ea
data-analysis: don't try and get blockerbugs logs since it's in openshift now.
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-02 12:18:30 -07:00
Kevin Fenzi
2367f1f8ba
Revert "postgresql / db-koji: re-add this connection cleanup"
...
This reverts commit 9a4a973b05
.
Turns out this is broken and hasn't worked for a long time. ;(
2023-06-02 10:16:05 -07:00
Kevin Fenzi
9a4a973b05
postgresql / db-koji: re-add this connection cleanup
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-02 10:03:24 -07:00
Kevin Fenzi
16576acfe1
proxies: use wildcard cert for directory
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-02 09:37:03 -07:00
Kevin Fenzi
49a625697b
proxies: add a directory.fedoraproject.org redirect to www.port389.org ticket 11355
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-02 09:25:16 -07:00
Nick Bebout
b9a3928f5c
Add IPv6 for mirror.usi.edu, remove old IPv4 address no longer needed
2023-06-02 09:43:45 -05:00
Aurélien Bompard
d7fdbe58b9
Add one more perm for collecd's selinux package
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2023-06-02 08:30:16 +02:00
Aurélien Bompard
a44dadd0c7
Syntax error
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2023-06-02 08:23:10 +02:00