Commit graph

4642 commits

Author SHA1 Message Date
Valentin Gologuzov
c455a4a39c [copr] new config options for backend and frontend 2014-10-30 11:56:20 +01:00
Aurélien Bompard
2e23119a63 HyperKitty: add a cronjob to clean expired sessions 2014-10-30 10:16:34 +00:00
Stephen Smoogen
afa0481fc1 and we try to convert fed-cloud11 to a box for kushal 2014-10-29 18:53:36 +00:00
Stephen Smoogen
8814bff83c hack, slash, repeat 2014-10-29 18:17:09 +00:00
Stephen Smoogen
deaee439ed trying to install fed21 with fed20 initrd.img.. no workee for some reason 2014-10-29 17:49:13 +00:00
Stephen Smoogen
7b8c9028ad make some tftp changes 2014-10-29 17:29:44 +00:00
Mathieu Bridon
1b2337558f lookaside: Add the hash type to the folder structure
This makes it more explicit which hash was used for a given tarball.

https://fedorahosted.org/rel-eng/ticket/5846
2014-10-28 10:59:01 +01:00
Mathieu Bridon
a92efe252a lookaside: Add support for sha512 file hashes
With this change, the upload CGI script will start preferring uploads
hashed as sha512, but still accept md5 as a fallback.

The message emitted on fedmsg is unchanged, because doing so would break
it. We're going to fix that later though.

https://fedorahosted.org/rel-eng/ticket/5846
2014-10-28 10:59:01 +01:00
Mathieu Bridon
608810be28 lookaside: De-hardcode md5 assumptions...
... as much as possible.

The point of this patch is to make it easier to move away from md5 in a
subsequent patch, without having one monster change which would be
impossible to review.

Some md5 stuff remains hardcoded, because changing it at this point
would break compatibility.

https://fedorahosted.org/rel-eng/ticket/5846
2014-10-28 10:59:01 +01:00
Mathieu Bridon
b842616187 lookaside: Drop EL < 6 support
This will make it easier to move away from md5 for the source tarballs.

It shouldn't cause any problem anyway, as Fedora runs this on EL 6 in
production, and EL 7 in staging.
2014-10-28 10:16:30 +01:00
Mathieu Bridon
76d83b13a0 lookaside: Remove tempfile when hash verification fails
Without this, tempfiles just accumulate.
2014-10-28 10:16:30 +01:00
Ralph Bean
dc0ddb5392 Include our new friend. 2014-10-27 19:59:39 +00:00
Ralph Bean
d8b665f30c Mount with read and write so we can mash there (staging). 2014-10-27 19:52:51 +00:00
Ralph Bean
ebd08524e8 Of course, it needs sudo too. 2014-10-27 19:40:18 +00:00
Ralph Bean
bc19edf0a6 Put 2fa client stuff on composer.stg. 2014-10-27 19:24:12 +00:00
Ralph Bean
365fb55025 Publish fedoratagger db dump. 2014-10-27 17:17:06 +00:00
Ralph Bean
9d54a117e2 Disable nagios restarts of fedora-tagger. 2014-10-27 17:17:06 +00:00
Ralph Bean
53e619cf6c Put fas_client on composer.stg. 2014-10-27 17:17:06 +00:00
Kevin Fenzi
58278f111c Enable backups for taskotron01.qa 2014-10-27 16:53:45 +00:00
9bad15971c distgit: Schedule a weekly check of the update hooks
This allows ensuring over time that all repositories have the right
update hooks set up.
2014-10-27 10:48:12 +01:00
3681259c21 git/checks: Check for the update hooks
We are now setting up distgit (and possibily other things like
Fedora Hosted) to use a more elaborate system of update hooks.

This updates the checking script so it is capable of ensuring this set
up.
2014-10-27 10:48:12 +01:00
16ffb744be Rearrange some tasks
We have a gitolite/check_fedmsg_hooks role, which installs a script and
schedules it.

Turns out, this script does more than just checking the fedmsg hooks,
depending on the command-line arguments used when running it.

As such, it makes sense to separate it out into its own role, and make
the gitolite/check_fedmsg_hooks role (and any other one using the
script) depend on it.

For example, this script is used for Fedora Hosted (still in Puppet),
and will soon be used for a new distgit hook check.
2014-10-27 10:48:12 +01:00
7ab3ff2817 distgit: Block push of branches named 'origin/*'
We already use the update hook for gitolite.

This introduces a new update hook, which merely chains the gitolite one,
and a new one to block pushes to badly named branches.

The new hook was written originally by Till Maas.

https://fedorahosted.org/rel-eng/ticket/4071
2014-10-27 10:48:12 +01:00
Till Maas
57e3254f1a autosigner: add endpoints.py 2014-10-23 23:19:13 +02:00
Ralph Bean
3512068af2 Let some fas groups into composer.stg. 2014-10-23 19:52:48 +00:00
Pierre-Yves Chibon
b3db790bce Install/point to release-monitoring.org.intermediate.cert in apache 2014-10-23 15:47:57 +02:00
Pierre-Yves Chibon
12eb6331e4 Disable sslv3 on anitya 2014-10-23 15:46:22 +02:00
Pierre-Yves Chibon
aa15e5ab38 Import some security things from copr-be 2014-10-23 15:33:54 +02:00
Pierre-Yves Chibon
332795f612 Remove entries that are no longer needed 2014-10-23 15:31:25 +02:00
Pierre-Yves Chibon
8fa0a12553 Install the missing requirement: mod_ssl 2014-10-23 15:26:17 +02:00
Pierre-Yves Chibon
ef968fe45e Remove redundancy by putting path in src 2014-10-23 15:24:02 +02:00
Pierre-Yves Chibon
ed247e5279 Adjust path and add missing quotes 2014-10-23 15:22:27 +02:00
Pierre-Yves Chibon
c39489fb69 Fix indentation 2014-10-23 15:21:12 +02:00
Pierre-Yves Chibon
26b5d13f1e Add a permanent redirection from http to https 2014-10-23 15:17:31 +02:00
Pierre-Yves Chibon
b84a23fab0 Install the apache configuration file for anitya https 2014-10-23 15:16:42 +02:00
Pierre-Yves Chibon
10d75e12ac Add the apache configuration file to activate https on anitya 2014-10-23 15:16:29 +02:00
Pierre-Yves Chibon
49c90be742 Start working on making anitya work with https 2014-10-23 15:07:50 +02:00
Pierre-Yves Chibon
4dd88f3ddc Fix the call to lock-wrapper in the anitya cron 2014-10-22 23:16:04 +02:00
b4ca46ae4d Make resolv.conf get set before packages are installed
Signed-off-by: Ricky Elrod <codeblock@fedoraproject.org>
2014-10-22 00:30:46 +00:00
c471482f3c Add resolv.conf for host1plus01
Signed-off-by: Ricky Elrod <codeblock@fedoraproject.org>
2014-10-22 00:15:39 +00:00
723c006918 Merge branch 'master' of /git/ansible 2014-10-21 22:09:45 +00:00
6f5a88c597 Add host1plus to inventory and vhost playbook
Signed-off-by: Ricky Elrod <codeblock@fedoraproject.org>
2014-10-21 22:09:38 +00:00
Valentin Gologuzov
b610e29a23 [copr] polishing frontend role-base playbooks 2014-10-21 19:39:20 +02:00
Valentin Gologuzov
d9568029c3 [copr] bugfix for copr-be-dev config 2014-10-21 18:29:37 +02:00
Pierre-Yves Chibon
09a4d956b7 Tag installing the cron job as: cron 2014-10-21 18:07:41 +02:00
Pierre-Yves Chibon
e3f1abadf1 Wrap the anitya_cron job into lock-wrapper 2014-10-21 18:04:42 +02:00
Valentin Gologuzov
1e6db06f90 [copr] fix configs location for backend 2014-10-21 12:13:32 +02:00
Nick Bebout
499ab100c9 Finish SSL changes for sks 2014-10-21 00:07:37 +00:00
Nick Bebout
585752e8cb Merge branch 'master' of /git/ansible 2014-10-21 00:00:54 +00:00
Nick Bebout
b44af2e6ce Try disabling SSLv3 in the individual SKS virtualhost bloks 2014-10-21 00:00:38 +00:00