Commit graph

39721 commits

Author SHA1 Message Date
Kevin Fenzi
4d76ccac6b autosign: setup to resign f39 packages with f40 key before branching
Branching of f39 is next week, so we need to resign most of everything
with the f40 key so rawhide can be signed after branching.
we will need to make another pass after this one is done.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-08-03 01:20:45 -07:00
Mattia Verga
230e62e051 bodhi: upgrade to 7.2.1 and prod base image to F38
Signed-off-by: Mattia Verga <mattia.verga@tiscali.it>
2023-08-02 06:58:28 +00:00
bceeda2050
remove contributor survey from Noggin & Mailman 2023-07-31 19:12:38 +02:00
Kevin Fenzi
3a3cbfbfe6 kojipkgs: set lookupcache=positive on nfs mounts
We are hitting a NFS caching issue with openqa (at least, possibly
others) where a fetch of repomd.xml will hit one of the kojipkgs servers
and then fetching the rest of the repodata will hit the other that still
has the previous koji buildroot repodata, resulting in 404's.

So, setting this should make nfs only cache postive lookups (ie, file
exists in dir), not negative ones (file does not exist). It will recheck
before returing a 404, which should prevent this issue.

Hopefully this theory is correct. We will see. :)

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-28 10:44:21 -07:00
Dusty Mabe
26f4b45e98
openshift-apps: remove people from appowners from some coreos projects
Remove people who have moved on or haven't been active in a while.
2023-07-28 09:50:03 -04:00
Michal Konecny
d737ecb396 [Pagure] Disable OIDC for staging pagure
The OIDC is not working yet on staging pagure and the work is being done in
https://pagure.io/fedora-infra/ansible/pull-request/1514

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2023-07-28 14:14:52 +02:00
Tomáš Hozza
a7d5262a2f
Add nagios_client role to buildvm-osbuild.yml playbook
Add the nagios_client role to the buildvm-osbuild.yml playbook to allow
monitoring of osbuild workers. E.g. when they are down or have a full
disk.

Signed-off-by: Tomáš Hozza <thozza@redhat.com>
2023-07-28 09:53:50 +02:00
e3ac8cebb1
awx: fix saml2 urls 2023-07-27 22:30:05 +02:00
Matěj Grabovský
57cdaf8599 Remove mgrabovs from retrace contacts
Leaving ABRT for good.
2023-07-27 17:49:45 +02:00
Tomáš Hozza
5d5f73b2d0
Import restart_services.yml in buildvm-osbuild.yml playbook
The buildvm-osbuild.yml playbook fails when running the base role,
specifically when configuring chronyd and restarting it. The reason is
that the role is notifying a handler, which is not defined in the role,
but it is defined in the main handlers file restart_services.yml.

Import handlers from restart_services.yml in the buildvm-osbuild.yml
playbook to ensure that all common handlers are available.

Signed-off-by: Tomáš Hozza <thozza@redhat.com>
2023-07-27 08:51:15 +02:00
Kevin Fenzi
f77d05ce5a too many -s
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-26 17:52:39 -07:00
Kevin Fenzi
7c92b78f2c f36 is eol, remove f36-test
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-26 17:21:42 -07:00
Kevin Fenzi
6013c68312 tang01: move to rhel9
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-26 17:04:36 -07:00
Kevin Fenzi
f31c6ce417 tang02: move to rhel9
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-26 16:20:56 -07:00
Kevin Fenzi
cff10c3c89 kojipkgs: move to nfsv4
Move kojipkgs to nfsv4 from v3. This might help us with some caching
issues. Or it might not! we will see.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-26 14:37:31 -07:00
Tomáš Hozza
b74b3a2da8 Add ppc64le osbuild-workers
Add playbooks, var files and role for setting up osbuild-composer
ppc64le workers. These are needed in order to build Fedora Workstation
ISO on ppc64le.

Related to:
 - https://pagure.io/fedora-infrastructure/issue/11243
 - https://fedoraproject.org/wiki/Changes/FedoraWorkstationImageBuilder

Signed-off-by: Tomáš Hozza <thozza@redhat.com>
2023-07-26 16:40:09 +00:00
d86babdfe9
AWX: Initial configuration 2023-07-26 13:34:08 +02:00
Adam Williamson
374956365e openqa: drop the results_min_free_disk_space_percentage cleanup
It is extremely slow to run, and we figured out that the problem
on openqa01 was excessive space being used by Netapp snapshots,
so we don't need this any more. It was actually deleting old
jobs before their time, because it had already wiped every
video file and didn't know what else to do...

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2023-07-25 15:13:07 -07:00
Adam Williamson
35260ce9d8 Revert "openQA: trim asset size limits a bit"
This reverts commit cef30714a2.
Turns out the problem was just that asset cleanup wasn't running
because the testresults/images minimization job was blocking it.
2023-07-25 14:20:03 -07:00
Adam Williamson
cef30714a2 openQA: trim asset size limits a bit
prod is running out of disk space. Not sure why this has only
just started to happen, but...the numbers do seem to more or
less add up...

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2023-07-25 11:34:08 -07:00
Kevin Fenzi
e50aa4a928 releng / sig_policy: fix mktemp call
mktemp needs X's in the name passed to it to apply it's random template
to. Without that it just fails with:

mktemp: too few X's in template ‘/tmp/sig_policy’

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-25 09:42:59 -07:00
Kevin Fenzi
07da1e573c proxies: redirect fas.fedoraproject.org and admin.fedoraproject.org/accounts to the new account system
fas was redirecting to the old https://admin.fedoraproject.org/accounts
and that in turn was still trying to proxy to the old fas2 app on the
ocp3 cluster. That app is retired and that cluster is long gone too, so
we should just redirect it to the current account system.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-24 14:58:23 -07:00
Kevin Fenzi
22dde8163b unbound: remove and retire unbound servers
These instances served long and well as fallback resolvers for
dnssec-trigger. This is no longer needed or used, so lets remove them.
See https://pagure.io/fedora-infrastructure/issue/11415

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-24 14:40:43 -07:00
Kevin Fenzi
377edfb74a rabbitmq / distrobuildsync-cs: remove queue for now until ELN folks are ready to consume it
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-24 12:57:45 -07:00
Pavel Raiskup
0944ac4ef3 copr-dist-git: decrease storage warning quota
With 5T storage, it is enough to warn on remaining 12%, and error on 6%.
2023-07-24 07:14:16 +02:00
Kevin Fenzi
07f9caa49f pagure: drop this websites block
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-21 12:58:11 -07:00
Kevin Fenzi
fcd9c449ad pagure: set dns2, otherwise the default is a internal iad2 one
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-21 11:31:01 -07:00
Adam Williamson
1e26a28c2c openqa/server: try setting a limit on test result disk usage
We're having issues with test results eating up all the disk
space we can throw at them (prod is over 4T, stg is over 2T -
I don't know why prod is bigger, that's odd, but it may be an
odd effect of having more arches on stg, maybe aarch64 and
ppc64le tests generally have smaller videos, or something).
This config setting should make openQA keep the space usage
on the partition at a max of 85%, by deleting videos from older
tests as required.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2023-07-21 10:19:54 -07:00
Kevin Fenzi
9e98f4c0de koji_builder / runroot: Also add bind mount to nspwan args
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-21 09:57:43 -07:00
Kevin Fenzi
7c10f88b02 koji_builder / runroot: set this mount at the mock level on compose channel hosts only
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-21 09:46:08 -07:00
Kevin Fenzi
8735931424 kojibuilder / runroot: revert fuse attempts
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-21 09:42:33 -07:00
Kevin Fenzi
f94a4d1a8f koji_builder / runroot: try no options here
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-21 09:34:47 -07:00
Kevin Fenzi
f4e8a921a6 koji_builder: add /dev/fuse mount to runroots
ostree unified composes need /dev/fuse, so allow/add it to runroot
defaults. See https://pagure.io/fedora-infrastructure/issue/11420

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-21 09:05:14 -07:00
Kevin Fenzi
06d4c39372 flocktofedora: add tag
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-21 08:02:59 -07:00
Stephen Smoogen
a1e9d8364c Temporary fix website by restoring multiview
It was thought that MultiViews was not needed for various websites to work and so was removed. It turns out that was wrong, and it was very much relied on for permissions of pages to work on the proxies and such. Mea-culpa mea-culpa

This fix restores the item until we are able to come up with a better fix.

Signed-off-by: Stephen Smoogen <ssmoogen@redhat.com>
2023-07-21 08:36:23 -04:00
Kevin Fenzi
4c4723e928 start: add a tag to quickly re-run it
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-20 20:27:43 -07:00
Kevin Fenzi
50b0ac71d7 start: put multiviews back here for now until we can fix it correctly to not use it
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-20 17:43:23 -07:00
Patrick Creech
ee4df11e44 Remove MultiViews from web configs
Signed-off-by: Patrick Creech <pcreech@redhat.com>
2023-07-20 17:23:40 -04:00
5e95d86756 retire spins.fedoraproject.org 2023-07-20 21:13:19 +00:00
a52d44e77b proxies: redirect spins to new website 2023-07-20 21:13:19 +00:00
Kevin Fenzi
18e45433df data-reports01: disable for now, we will re-add later
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-20 12:58:37 -07:00
David Kirwan
6475c71205 mdapi: update api on mdapi deployment config
Signed-off-by: David Kirwan <dkirwan@redhat.com>
2023-07-20 11:07:47 +01:00
David Kirwan
34bc1a5e5f mdapi: reduce replicas to 1
Signed-off-by: David Kirwan <dkirwan@redhat.com>
2023-07-20 11:03:52 +01:00
Justin W. Flory (he/him)
94018157ef aliases: Add spotz to flock-staff alias
Amy Marrich, aka @spotz, is helping significantly with Flock organizing.
She should be added to the email alias list so she can stay informed
about important communications related to this year's Fedora Flock.

Signed-off-by: Justin W. Flory (he/him) <jwf@redhat.com>
2023-07-19 19:57:42 +00:00
Kevin Fenzi
9fd21ff5d1 robosignatory: fix to use right key for rebuild
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-19 08:02:26 -07:00
Kevin Fenzi
00490e9426 autosign: all not external
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-18 17:53:05 -07:00
Kevin Fenzi
e525521345 robosignatory: signing for f39-rebuild tag
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-18 17:49:11 -07:00
Kevin Fenzi
609df42eff communishift: add openscanhub ( infra 11414 )
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-18 15:08:52 -07:00
Michal Konečný
5238a92325 [Pagure] Add flask OIDC package to dependencies
Signed-off-by: Michal Konečný <mkonecny@redhat.com>
2023-07-18 16:12:05 +02:00
Michal Konečný
e54dae6574 [Pagure] Use correct staging env variable
Also change the client_secrets.json permissions to match pagure.cfg.

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
2023-07-18 14:53:16 +02:00