Commit graph

37888 commits

Author SHA1 Message Date
Kevin Fenzi
bd4ab085bd koji / mirrormanager: split staging and prod db config
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-09-19 14:53:04 -07:00
Kevin Fenzi
1c1780c931 pagure / staging: set correct env
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-09-19 14:28:17 -07:00
Kevin Fenzi
bfaf5a59bf elections: seperate prod and stg passwords
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-09-19 14:11:50 -07:00
Kevin Fenzi
db3bec9cb4 fedocal: split out prod and stg db passwords
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-09-19 13:56:07 -07:00
Kevin Fenzi
f183f5262b pagure-stg01 / ipsilon*.stg: split db passwords from stg and prod
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-09-19 13:53:15 -07:00
Kevin Fenzi
f46a6c8f2a nuancier: split out prod and stg access/passwords.
Currently both prod and stg were using the same credentials. Move to
using different for each.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-09-19 13:06:26 -07:00
Kevin Fenzi
946e51e41c virthost: install collectd on all virthosts
This conditional was intended to not try and install this on rhel9, but
collectd is now available on rhel9. In addition it accidentially didn't
install it on all fedora virthosts. :(

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-09-19 12:53:35 -07:00
Jiri Kyjovsky
5c1422a811 copr: add nikromen 2022-09-19 14:07:40 +02:00
Jiri Kyjovsky
f41baf6f21 copr: configure list of root users just on one place 2022-09-19 14:07:37 +02:00
Kevin Fenzi
22fbdca02e Revert "Extend inactivity time to 600s"
This reverts commit c04e153372.
2022-09-16 10:17:35 -07:00
Kevin Fenzi
1503d6669d notifs-backend: try removing the template number here.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-09-16 09:05:05 -07:00
Kevin Fenzi
db66979838 notifs-backend: re-enable keytab
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-09-16 09:00:21 -07:00
Kevin Fenzi
34ae10d5fc nfs_servers: fix group name. It's sysadmin-noc not sysadmin_noc
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-09-15 14:20:40 -07:00
Kevin Fenzi
8a3fd5b2df storinator01: try adding it into a host group
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-09-15 13:24:28 -07:00
Kevin Fenzi
6eb7703fa6 nfs_servers: add some ipa groups to storinator01
We are adding copr folks here so they can benchmark things and see if
the storinator will help them for their storage needs.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-09-15 10:29:39 -07:00
Kevin Fenzi
6619741cdd buildvm-ppc64le-11: move back to p09-04
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-09-15 10:28:51 -07:00
Michal Konečný
3abf0d2526 [release-monitoring] Add configurable mapping links to config
Anitya is now supporting configurable links for distribution. Let's add those we
already know.

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
2022-09-15 15:51:26 +02:00
Kevin Fenzi
6ce19b66af osbuildapi-update: only send errors once a day
Right now if a host errors out it can send a vast pile of these.
So, lets use nag-once to avoid floods.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-09-14 18:32:50 -07:00
Kevin Fenzi
c2cab48398 All php vars need to end with a ;
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-09-14 14:26:16 -07:00
Stephen Gallagher
c04e153372 Extend inactivity time to 600s
It seems that ppc64le and aarch64 are both quite slow during the
ELN Image install. The aarch64 is now finishing most of the time,
but the ppc64le build still times out.

Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
2022-09-14 20:56:46 +00:00
Kevin Fenzi
801bdf4450 wiki: up cookie lifetime to 10hours
Right now by default users are logged out after 1 hour of inactivity on
the wiki. This is anoying for people who do a number of edits during the
day. So, lets increase this timeout to 10 hours.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-09-14 13:54:43 -07:00
Kevin Fenzi
bd7e118855 mediawiki: try disabling loginattemptthrottle entirely
Sometimes folks are unable to login to the wiki because there have been
too many login attempts from the proxy they happen to be hitting the
wiki from. Lets just disable this throttle entirely, as brute force
won't work ever anyhow.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-09-14 12:50:13 -07:00
Kevin Fenzi
7763c3c6c3 koji_builder / runroot: set nspawn args on runroot builders to get ostree_installer working
The ostree_installer job needs additional capabilities over the normal
mock systemd-spawn ones. So, add that here and since the
ostree_installer jobs are all runroot jobs we can isolate it to just the
runroot builders.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-09-14 11:27:42 -07:00
Pavel Raiskup
896e8fd296 bkernel: mock+nspawn pesign config cleanup
It is better to keep the Mock's default for `nspawn_args`, and just
append to them (mock can change that configuration option dynamically).

Complements: b6669bc5f6
2022-09-14 18:20:33 +00:00
Frank Ch. Eigler
62fc6023fe ansible-playbook-check-diff.cron: impose a 24hour timeout on check-diff jobs 2022-09-14 18:18:40 +00:00
Frank Ch. Eigler
1225279614 ansible-playbook-check-diff: rewrite as find|xargs one-liner
Taking advantage of xargs's -P option to limit concurrency
while executing all the ansible-playbook --check jobs ensures
that batcave01 is not overstressed during these checks.
2022-09-14 18:18:40 +00:00
Michal Konečný
717feea0d3 Fix yaml linting errors
Signed-off-by: Michal Konečný <mkonecny@redhat.com>
2022-09-14 09:00:57 +00:00
Michal Konečný
6f49dc8c85 [pagure] Don't use conflicting topic permissions
The pagure.{{ env_suffix }} user is currently used for both pagure and dist-git,
which makes io.pagure.* and org.fedoraproject.* topics to conflict with each
other.

This will set the permissions for both in one place.

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
2022-09-14 09:00:57 +00:00
1e5d0a07f4 Remove armhfp from modular variants
Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
2022-09-13 10:42:44 +02:00
26371877bb Remove armhfp from modular updates
Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
2022-09-13 09:58:50 +02:00
Kevin Fenzi
953dd93232 F37 beta: releng freeze is over
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-09-12 15:04:13 -07:00
306aff6f4f F37 beta
Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
2022-09-12 17:21:54 +00:00
David Kirwan
0892ba8a48 communishift: fix filesystem permissions on efs storage mount
Signed-off-by: David Kirwan <dkirwan@redhat.com>
Signed-off-by: Lenka Segura <lsegura@redhat.com>
Signed-off-by: Patrik Polakovic <ppolakov@redhat.com>
2022-09-12 13:48:10 +01:00
David Kirwan
f96fdf8fb1 communishift: fix filesystem permissions on efs storage mount
Signed-off-by: David Kirwan <dkirwan@redhat.com>
Signed-off-by: Lenka Segura <lsegura@redhat.com>
Signed-off-by: Patrik Polakovic <ppolakov@redhat.com>
2022-09-12 13:38:52 +01:00
David Kirwan
44dea690d5 communishift: fix filesystem permissions on efs storage mount
Signed-off-by: David Kirwan <dkirwan@redhat.com>
Signed-off-by: Lenka Segura <lsegura@redhat.com>
Signed-off-by: Patrik Polakovic <ppolakov@redhat.com>
2022-09-12 13:10:55 +01:00
David Kirwan
b1b7dc507f communishift: debugging filesystem permissions on storage mount
Signed-off-by: David Kirwan <dkirwan@redhat.com>
Signed-off-by: Lenka Segura <lsegura@redhat.com>
Signed-off-by: Patrik Polakovic <ppolakov@redhat.com>
2022-09-12 12:53:19 +01:00
David Kirwan
fe0c26ea9d communishift: Fixing filesystem permissions on storage mount
Signed-off-by: David Kirwan <dkirwan@redhat.com>
Signed-off-by: Lenka Segura <lsegura@redhat.com>
Signed-off-by: Patrik Polakovic <ppolakov@redhat.com>
2022-09-12 10:53:24 +01:00
Kevin Fenzi
06b7dbd352 move stg hosts from old bvmhost-x86-02.stg to bvmhost-x86-05.stg
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-09-09 12:06:41 -07:00
Kevin Fenzi
60f91468cb oraculum: define a imagestream/tag for the qa-landing build to output to
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-09-09 10:05:44 -07:00
David Kirwan
d37f87ec1a communishift: Fixing tags on the deploy operator task
Signed-off-by: David Kirwan <dkirwan@redhat.com>
Signed-off-by: Lenka Segura <lsegura@redhat.com>
Signed-off-by: Patrik Polakovic <ppolakov@redhat.com>
2022-09-08 11:55:06 +01:00
David Kirwan
78e58efee1 communishift: Create k8s secret for the communishiftauthorization
operator

Signed-off-by: David Kirwan <dkirwan@redhat.com>
Signed-off-by: Lenka Segura <lsegura@redhat.com>
Signed-off-by: Patrik Polakovic <ppolakov@redhat.com>
2022-09-08 11:47:43 +01:00
2d90d4f673 Update roles/pkgdb-proxy/files/pkgdb-gnome-software-collections.json
fixes: fedora-infrastructure#10879
2022-09-07 18:24:39 +00:00
Kevin Fenzi
f02e9dd527 update eln signing.
This should have changed at branching, but didn't. ;(

We also need to add in a entry for eln tagged builds to be signed and
put back/kept in the eln tag. This will allow robosignatory to resign
everything with the f38 keys. It can be removed after this.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-09-06 08:32:46 -07:00
Matěj Grabovský
a4040b0af2 retrace: Add Fedora 37 development repos 2022-09-06 16:44:29 +02:00
Matěj Grabovský
7623cdab62 retrace: Add Fedora 37 relase + EOL 34 2022-09-06 11:50:03 +02:00
Michal Konečný
7a56c80377 [toddlers] Fix the syntax errors in TOML
Signed-off-by: Michal Konečný <mkonecny@redhat.com>
2022-09-05 14:13:19 +02:00
Michal Konečný
e22e3f962c [toddlers] Add missing SLA
Add missing SLAs to scm_request_processor toddler configuration.

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
2022-09-05 13:59:08 +02:00
Pavel Raiskup
0faa024ad9 backend: less error-prone libvirt-list'ing 2022-09-05 10:41:07 +02:00
Kevin Fenzi
b6669bc5f6 bkernel: add config for nspawn bind mount
We want to keep the old mock bind mount for non rawhide branches, but
rawhide is using nspawn, so we want to add a directive there to pass
'--bind' to it to correctly mount the pesign socket directory so kernels
can be signed for secure boot.

See https://github.com/rpm-software-management/mock/issues/140

Moving forward this could be fixed in mock, in which case we remove the
nspawn args. Or it could be fixed by pesign moving the socket directory,
in which case we remove nspawn args and adjust the old mock bind mount
to the new location. For now, this works around the current crop of
issues.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-09-01 12:58:18 -07:00
Michael Scherer
c6659c5a0f Remove whitespace at the end of the header
This fail on HTTP/2 with newer libnghttp2, as reported by aminvakil on
irc. See https://github.com/nghttp2/nghttp2/issues/1786
2022-09-01 18:58:14 +00:00