This is the fun firefox h2 connection reuse bug. blockerbugs is only in
iad2, so if firefox tries to reuse a connection to another proxy for it,
just send it a 421 so it knows thats bad on it.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
The wsgi has changed from /usr/libexec/ipsilon/ipsilon.py to
/usr/libexec/ipsilon, so adjust wsgi and directory perms to handle that.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
We were hiding these because in the past the only ISO assets
were those from the compose under test, and we wanted to avoid
people downloading them from openQA when we'd rather they get
them from dl.fp.o or the mirror system. But these days we have
tests that generate ISOs (update netinst and live image build
tests) and we often want to download the generated images to
test them locally.
Signed-off-by: Adam Williamson <awilliam@redhat.com>
Something is broken with smtp_tls_connection_reuse = yes, so disable it
for now. Also, setup a tls_policy map file and tell it to not use tls
for mx2.redhat.com. The normal smtp connection reuse works just fine, so
this will keep mail flowing until we can one day figure out why tls
connection reuse is busted.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
We fixed the config in a PR from aheath1992 for most of the machines,
but we need to fix vpn (proxies in particular) and releng boxes now.
Also, while we are here, lets drop the phx2 file since it's not used
anymore.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
Without this it wasn't caching tls connections and was going over the
small limit redhat.com mx had. Hopefully this gets mail flowing again.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
Yesterdays fix: a script that restarted networking to bring back a ipv6
route on proxy11, causes:
Todays bug: restarting the interface every minute causes the nameserver
to burp and not find sundries01, so all the rsyncs fail. It seems to
handle this just fine now, so lets retire this glorious hack.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This is needed because I want to override just the mtu setting from
group_vars/all, but I don't want to copy the network_connections block
to every host in iad2 to override it. Hopefully this will allow us to
override it on just iad2_production (staging is already actually set in
group_vars/staging, but for completeness we may want a staging group
someday here, so I went and added it.).
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
