Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
29576 commits 9 branches 0 tags 111 MiB
Commit graph

29576 commits

This branch
This branch
All branches
Author SHA1 Message Date
Tim Flink
8c96b12e65 resultsdb: set sebool httpd_execmem=true for fedora-messaging 
After the upgrade to fedora-messaging-2.0.1, we started seeing a bunch of 500s
coming out of resultsdb. Turns out that selinux was blocking part of the code
that was emitting messages on rabbitmq. This is apparently a known issue in
python-cryptography [1] and their docs say that the sebool deny_execmem needs
to be off.

Since this is executed by apache, this leads to httpd_execmem needing to be true.
I still don't understand why this started suddenly - the underlying issue in
python-cryptography has been there for a while. Either way, I'm changing the
sebool for resultsdb machines to make sure it doesn't continue to cause problems
for things that are submitting results to resultsdb.
 2020-04-24 21:34:21 +02:00
Kevin Fenzi
a25daf8d0a koji_hub: add modularity key alias for koji-gc 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:21 +02:00
Pavel Raiskup
a5eeddab05 copr: aws-builders: swap images in x86_64/aarch64 
(typofix)
 2020-04-24 21:34:21 +02:00
Stephen Smoogen
1961cb9cb7 turns out nixnagios is not what I wanted 2020-04-24 21:34:21 +02:00
Stephen Smoogen
75090c9850 to person who added nixnagios a while ago. thank you 2020-04-24 21:34:21 +02:00
Tim Flink
fa73cd4d47 resultsdb: F31+ needs logrotate explicitly installed 2020-04-24 21:34:21 +02:00
Stephen Smoogen
cad98c012e tell nagios to not care 2020-04-24 21:34:21 +02:00
Adam Williamson
bd0a280c74 openqa/dispatcher: have consumers log fedora_openqa messages 
Seems you need explicit config for each module you want log
messages from (or you need to set the root logger level to INFO
which maybe I'll do instead later). This includes INFO messages
from fedora_openqa.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-04-24 21:34:21 +02:00
Kevin Fenzi
e1c0ad3bf4 Revert "remove dbgserver from inventory/inventory for nagios and remove sysadmin-dbgserver from bastions" 
This reverts commit 299e71b9c587953ddb38558f3361928b00ffb664.
 2020-04-24 21:34:21 +02:00
Kevin Fenzi
1886408698 adjust s390x ips for sshfs mount 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:21 +02:00
Stephen Smoogen
5f2384713a remove dbgserver from inventory/inventory for nagios and remove sysadmin-dbgserver from bastions 2020-04-24 21:34:21 +02:00
Clement Verna
a4f9bcacc6 login-registry: use the docker config.json as authfile for backward compatibility 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2020-04-24 21:34:21 +02:00
Clement Verna
1cf6bb0692 login-registry: use the correct ansible module to run commands 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2020-04-24 21:34:21 +02:00
Pavel Raiskup
78ed1bd16d copr: frontend: separate route for packages 2020-04-24 21:34:21 +02:00
Clement Verna
85be95fb79 Replace the push-docker role by login-registry and use podman. 
This commit replaces the push-docker role which depends on docker
by a new role login-registry which is using podman instead.

Fixes https://pagure.io/fedora-infrastructure/issue/8393

Signed-off-by: Clement Verna <cverna@tutanota.com>
 2020-04-24 21:34:21 +02:00
Clement Verna
d5abe969e1 Docsbuilding: add dusty mabe in the appowners 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2020-04-24 21:34:21 +02:00
Clement Verna
a1cab8fc7c Nagios: fix the koji_wellness command definition 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2020-04-24 21:34:21 +02:00
Adrian Reber
a8bad3cf10 mm-backend: adapt statistics script 
This adapts the create_statistics.sh script to correctly handle the new
systemd timer based logrotate on the proxies. This also filters out
accesses from 127.0.0.1 as that is haproxy doing its checks.

Signed-off-by: Adrian Reber <adrian@lisas.de>
 2020-04-24 21:34:21 +02:00
Clement Verna
1943a7fc51 Nagios: fix the name of the koji wellness command 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2020-04-24 21:34:21 +02:00
Clement Verna
96662a3ac4 Nagios: change the hostname in the koji wellness service. 
Fixes https://pagure.io/fedora-infrastructure/issue/6505

Signed-off-by: Clement Verna <cverna@tutanota.com>
 2020-04-24 21:34:21 +02:00
Leonardo Rossetti
be5ecd4f16 koji_wellness plugin 
Signed-off-by: Leonardo Rossetti <me@lrossetti.com>
 2020-04-24 21:34:21 +02:00
Pavel Raiskup
d9e9cc5b16 copr: aws-builders: one more update of images for broken swap 2020-04-24 21:34:21 +02:00
Pavel Raiskup
43ace7a079 copr: aws-builder: typo in device name 2020-04-24 21:34:21 +02:00
Pavel Raiskup
a02e420214 copr: builder: update AWS/OpenStack images 2020-04-24 21:34:20 +02:00
Pavel Raiskup
1d02ae141b copr: aws-builder: increase aarch64 additional volume 
This is because we'll use that one also for /var/lib/copr-rpmbuild.
 2020-04-24 21:34:20 +02:00
Pavel Raiskup
a5d8a6233a copr: aws-builder: provide more space for builds 
We don't have large root partition enough, and both /tmp and
/var/lib/copr-rpmbuild eat the remaing ~3.7G.  The swap disk though is
large enough, so we can use part of it to mimic the boxes we have in
openstack.
 2020-04-24 21:34:20 +02:00
Kevin Fenzi
982af092ad f29-test: drop eol maintainer-test machine 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:20 +02:00
Stephen Smoogen
7aedb805bb Revert "[vhost_reboot] Try to get the os code to work" 
This reverts commit 899a127f7ae1ffbbe935d45f640b9ac50e8d499c.
 2020-04-24 21:34:20 +02:00
Stephen Smoogen
2b4c012300 [vhost_reboot] Try to get the os code to work 2020-04-24 21:34:20 +02:00
Stephen Smoogen
d05626d43c [pagure] put back changes into configs I whacked earlier 2020-04-24 21:34:20 +02:00
Stephen Smoogen
2c05b41e5f [pagure.io] Put back in fedmsg command. Put back in SSH_COMMMAND_NON_REPOSPANNER 2020-04-24 21:34:20 +02:00
Clement Verna
e03b5d7ee4 Bodhi: use the celery task name not the name of the task method in the config 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2020-04-24 21:34:20 +02:00
Clement Verna
5f429a0d1b Bodhi: use workingDir instead of the HOME env variable for celery 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2020-04-24 21:34:20 +02:00
Clement Verna
4cd79744f5 Bodhi: define /home/cverna to /tmp so that celery have permission to write file there 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2020-04-24 21:34:20 +02:00
Clement Verna
a5cb85b46e Bodhi: remove the queue flag when calling celery 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2020-04-24 21:34:20 +02:00
Clement Verna
6e74251812 Bodhi: celery-beat does not need a queue name 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2020-04-24 21:34:20 +02:00
Clement Verna
96ea5d1a8f Bodhi: fix the celery command path in the celery-beat deployment config 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2020-04-24 21:34:20 +02:00
Stephen Smoogen
c9f3d2d8be [pkgs] A ternary needs 2 arguments. I removed one in the previous commit and should have changed the code completely instead. 2020-04-24 21:34:20 +02:00
Clement Verna
f242d032cd Bodhi: change the name of the tasks in the celery-beat config 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2020-04-24 21:34:20 +02:00
Stephen Smoogen
688a2cf7ce and get its timer also. 2020-04-24 21:34:20 +02:00
Stephen Smoogen
70c9a1816d this should turn on logrotate for fedora hosts 2020-04-24 21:34:20 +02:00
Stephen Smoogen
0028f5f9e4 [pkgs] add tag for user 2020-04-24 21:34:20 +02:00
Stephen Smoogen
eccd948801 [pkgs] try to get syntax right while waiting for 3rd pot of coffee 2020-04-24 21:34:20 +02:00
Stephen Smoogen
5f9818d50b [pkgs] add in comment to code to when change needs to go 2020-04-24 21:34:20 +02:00
Stephen Smoogen
87ce71a5a9 [pkgs] make it so pkgs has pagure user 2020-04-24 21:34:20 +02:00
Stephen Smoogen
ccaa519dd3 [pkgs]: remove mentions of repospanner so that playbooks will set up things without it 2020-04-24 21:34:20 +02:00
Stephen Smoogen
dbdc75e762 remove repospanner from pkgs playbook. thankyou for your work. 2020-04-24 21:34:20 +02:00
Pavel Raiskup
6d32ca5431 copr: backend: assure createrepo_c >= 0.15.5 2020-04-24 21:34:20 +02:00
Pavel Raiskup
f280cabfe8 copr: drop soon-to-be-released hot-fix patches 2020-04-24 21:34:20 +02:00
Pavel Raiskup
17961dc5ce copr: upgrades: add missing packages for upgrade, update dnf-plugins-core 2020-04-24 21:34:20 +02:00