Kevin Fenzi
90c77850bf
koji_hub: container policy has a typo in it
...
We have 'containers' allowed, but the name space is 'container'
This results in containers failing the scm policy and not being allowed
to build. We were going to do some toolbox container updates for
f37/f38, so it would be good to fix this. I can't see it affecting
anything else really.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-08-25 16:51:48 +00:00
Pavel Raiskup
b992e11871
copr-builders: slightly shorter ssh ControlPath
2023-08-25 12:21:24 +02:00
Pavel Raiskup
5ea82ed591
copr-be-dev: experiment with persistent ssh control channel
2023-08-25 11:36:06 +02:00
Aurélien Bompard
b1020df978
Datagrepper now needs python 3.10+
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2023-08-25 10:35:32 +02:00
Pavel Raiskup
c45cf15658
copr-builders: don't indefinitely wait for RHSM unregister
2023-08-25 07:11:06 +02:00
5f58c41f71
maubot: tweak logging config
...
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2023-08-25 09:31:20 +10:00
Kevin Fenzi
c0ed118eaa
maintainer_test: reuse some old maintainer test vpn ips
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-08-24 14:58:09 -07:00
Kevin Fenzi
1d8e8256e1
add host_vars for new maintainer_test instances
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-08-24 14:53:43 -07:00
Kevin Fenzi
27852b6637
maintainer_test: add f38/f39 instances
...
Add some f38 and f39 maintainer test instances.
Drop old end of life el7 instance.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-08-24 14:51:39 -07:00
Kevin Fenzi
f1488602ed
koji_hub: send flatpak builds to the flatpak channel
...
Right now flatpak builds use the 'default' channel, which is most
builders. Unfortunately, they get s390x builders from time to time and
those builders are in another datacenter that cannot talk to the
candidate-registry to upload resulting containers.
So, to work around this, we will setup a 'flatpak' channel that
just has machines in iad2 and then this PR configures the hub to send
all such builds to those machines (avoiding the s390x ones).
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-08-23 12:33:10 -07:00
Kevin Fenzi
a18299df62
buildhw: login to docker registry
...
This is needed to get the new flatpak building setup working entirely.
We already added this to buildvm's, but missed adding it to buildhw
playbook at the same time. It shouldn't cause any problems for anything,
it's just a podman login call so the flatpak koji plugin can push the
completed container to the candidate registry.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-08-23 09:32:34 -07:00
Kevin Fenzi
8fb8871d1d
Start of Fedora 39 beta freeze
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-08-22 10:48:45 -07:00
Kevin Fenzi
5b1ab68627
koji01/02: move to nfsv4
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-08-22 10:48:20 -07:00
Samyak Jain
b72ccc2f04
Fedora 39 Bodhi enablement and Beta freeze
...
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2023-08-22 13:47:17 +00:00
Pavel Raiskup
7fab4cba72
copr: disable bootstrap image for epel-7-ppc64le
...
https://github.com/fedora-copr/copr/issues/2875
2023-08-22 13:40:31 +02:00
Pavel Raiskup
1e6fba350e
copr-hypervisor: typo in when condition
2023-08-22 10:23:27 +02:00
Pavel Raiskup
511b1999c2
copr-hypervisor: don't operate with main.ini
...
The commit a12c6d9396
wasn't enough, there
are other undefined variables.
2023-08-22 10:22:10 +02:00
Pavel Raiskup
a12c6d9396
copr-hypervisor: fix playbook failure
2023-08-22 09:20:49 +02:00
Pavel Raiskup
c0d3a4ec2e
copr: frontend_base_url is defined in copr_aws and copr_dev_aws
2023-08-22 09:18:40 +02:00
Pavel Raiskup
e3c695d2f7
copr-hypervisor: try reboot in pre_tasks
2023-08-22 08:56:56 +02:00
Pavel Raiskup
76ea698369
copr-hypervisor: more convenient reboot trigger, take #2
...
If we want to reboot all x86 machines, it is enough to do:
$ sudo rbac-playbook groups/copr-hypervisor.yml -l '*x86*' -k trigger_reboot
2023-08-22 08:55:00 +02:00
Pavel Raiskup
8e10725cc3
copr-hypervisor: more convenient reboot trigger
...
If we want to reboot all x86 machines, it is enough to do:
$ sudo rbac-playbook groups/copr-hypervisor.yml -l '*x86*' -k reboot_copr_hypervisor
2023-08-22 08:46:17 +02:00
Andrew Heath
02046fdc0c
Enable Splunk log fowarding
2023-08-21 17:36:17 -04:00
71c79dc48b
proxies: load nf_conntrack on boot
...
So we can tune nf_conntrack_max before iptables is started.
2023-08-20 23:19:00 +02:00
Kevin Fenzi
062913f1f3
iad2 proxies need to use 9000 mtu
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-08-20 13:06:19 -07:00
Jakub Kadlcik
bcb6206818
copr-pulp: temporarily dump keys so we can add them to bitwarden
2023-08-20 22:02:41 +02:00
Jakub Kadlcik
bbf5e7844f
copr-pulp: use var files
2023-08-20 20:56:45 +02:00
Jakub Kadlcik
4889f42f5e
copr/base: do all the networking magic only on Fedora
...
On copr-pulp-dev the connection is named `System eth0`. I don't have
time to debug it right now and we IMHO don't need the networking magic
right from the start.
2023-08-20 19:40:39 +02:00
Jakub Kadlcik
dd31fcceea
copr/base: use rsyslog-logrotate only on Fedora
...
It isn't available in EPEL8
2023-08-20 19:31:22 +02:00
Jakub Kadlcik
60d5faf5d6
copr: mask systemd-oomd only on Fedora hosts
...
The copr-pulp instance will run on RHEL8 and systemd-oomd is not
installed there.
2023-08-20 19:22:44 +02:00
Jakub Kadlcik
c6073d2277
copr-pulp: install postfix
2023-08-20 19:22:32 +02:00
Jakub Kadlcik
422b416bdb
copr-pulp: install iptables-services
2023-08-20 19:00:32 +02:00
Jakub Kadlcik
57717eeaca
copr-pulp: specify become true when needed, pt.2
2023-08-20 18:41:38 +02:00
Jakub Kadlcik
7f987e99f0
copr-pulp: specify become true when needed
2023-08-20 18:37:34 +02:00
Jakub Kadlcik
e87dafc1b0
copr-pulp: symlink /usr/bin/python to /usr/bin/python3
2023-08-20 18:35:04 +02:00
Jakub Kadlcik
aac1379587
copr-pulp: using centos again
2023-08-20 15:47:39 +02:00
Jakub Kadlcik
038a0591c9
copr: install python when birthday, regardless of gathering facts
2023-08-20 15:44:55 +02:00
Jakub Kadlcik
29669a1698
copr-pulp: install python3
2023-08-20 15:25:53 +02:00
Jakub Kadlcik
ef3e559479
copr-pulp: remove gather facts and fallback python install
...
It is done in aws_cloud.yml
2023-08-20 15:18:06 +02:00
Jakub Kadlcik
92cf6629f0
Revert "copr-pulp: run aws_cloud.yml in pre_tasks"
...
This reverts commit 82892605f4
.
2023-08-20 15:17:02 +02:00
Jakub Kadlcik
82892605f4
copr-pulp: run aws_cloud.yml in pre_tasks
2023-08-20 15:05:48 +02:00
Jakub Kadlcik
f575e55d3f
copr-pulp: try ec2-user
2023-08-20 14:18:12 +02:00
Jakub Kadlcik
629b70f29a
copr-pulp: trying RHEL now
2023-08-20 14:09:13 +02:00
Jakub Kadlcik
cdaf8fd8aa
copr-pulp: move pulp_installer usage to the playbook
2023-08-20 13:44:06 +02:00
Jakub Kadlcik
4c408d55e3
copr-pulp: use pulp_installer collection
2023-08-20 13:36:38 +02:00
Jakub Kadlcik
17fc31ba63
copr-pulp: I think I need to set ansible_ssh_user instead of remote_user
2023-08-20 13:33:58 +02:00
Jakub Kadlcik
b4a3932fa2
copr-pulp: specify remote user
2023-08-20 13:27:35 +02:00
Jakub Kadlcik
a44b8d14bf
copr-pulp-dev: add birthday
2023-08-20 13:23:59 +02:00
Jakub Kadlcik
33007228c1
ansible-server: use ansible-collection-community-postgresql package
2023-08-19 21:26:58 +00:00
Jakub Kadlcik
07aab73f52
ansible-server: add requirements for copr-pulp playbooks
...
Fix https://pagure.io/fedora-infrastructure/issue/11396
2023-08-19 21:26:58 +00:00