Commit graph

39176 commits

Author SHA1 Message Date
Kevin Fenzi
8660a4d62f download-ib02: retire now that we have data moved
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-22 14:43:54 -07:00
Kevin Fenzi
25e06793ea download-ib01: move over to ibiblio02
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-22 14:41:18 -07:00
Adam Williamson
2657d642a4 D'oh, messed up one thing (relvalconsumer queue names)
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2023-06-22 23:32:33 +02:00
Adam Williamson
a5c322b4ee More cleanup on the openQA AMQP stuff
nirik and I went around and around a bit today and ended up back
where we started, but with a clearer understanding of where that
this. This explains it a bit better, and makes what's actually
going on in various places clearer with the use of appropriate
shared variables. This should not actually *change* anything at
all when deployed.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2023-06-22 23:21:28 +02:00
Seddik Alaoui Ismaili
b79003cfda compress merged logs under /var/log/hosts 2023-06-22 20:50:46 +00:00
Kevin Fenzi
14eb1bc04e backups: disable people02 to fix the backup sync
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-22 13:09:53 -07:00
Joseph Marrero
dfbfed61e2 fedora-coreos-pipeline.yml: Add luyang 2023-06-22 15:39:19 -04:00
Kevin Fenzi
df8b56a408 notifs: add sysadmin-noc to sudo
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-22 12:19:07 -07:00
Kevin Fenzi
b2a5d19443 directory.fedoraproject.org redirect: fix double slash
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-22 11:23:41 -07:00
Kevin Fenzi
d8580004c7 directory: redirect with url ( infra 11385 )
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-22 10:57:01 -07:00
František Zatloukal
15c8754bd2 Revert "Blockerbugs: switch stg to update_versioneer branch"
This reverts commit bfb5745b4c.
2023-06-22 15:29:52 +02:00
Adam Williamson
fc84286f93 greenwave: enable Rawhide gating on openQA update tests
As per https://pagure.io/fesco/issue/3011 and
https://lists.fedoraproject.org/archives/list/devel-announce@lists.fedoraproject.org/message/G2K2SMYN7ONOJEFQEMCDR7GK72MZQFYB/
this enables gating of Rawhide updates on the same set of tests
used to gate stable and Branched updates.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2023-06-22 11:36:54 +02:00
Kevin Fenzi
f20fef66c3 buildvm-ppc64le: rebalance ppc64le builders
Move to only 8 builders per bvmhost and move them around to make the
numbers come out to 32. Drop 34-40.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-21 15:12:14 -07:00
Kevin Fenzi
0772307af5 Revert "buildvm-ppc64le: try reenabling this nested feature"
This reverts commit 9938279f6b.

Turns out this isn't supported in virt-install, which is why I removed
it. ;)
2023-06-21 11:45:06 -07:00
Kevin Fenzi
9938279f6b buildvm-ppc64le: try reenabling this nested feature
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-21 11:40:39 -07:00
Adam Williamson
5a7591a618 openqa AMQP: mark the users as not publish-only
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2023-06-21 13:33:54 +02:00
Adam Williamson
be953e0be4 Dangit, went too far. Only the scheduler should be set that way
Sigh. Sorry, this stuff is hard to keep straight in my head.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2023-06-21 13:26:16 +02:00
Adam Williamson
b50fa6a477 openqa amqp: fix stg-on-prod queue names
so, this was working before somehow, but it was pretty clearly
wrong. We were using queues owned by openqa.stg on the prod
rabbitmq instance for the cases where the openQA "stg" consumers
need to listen to prod queues. This can only have been working
with an openqa.stg user on prod, which seems wrong. Instead,
these three consumers should do it the way the relval and
relvalami consumers do - use a queue owned by the "openqa" user,
but with a suffix so they have a different queue from the actual
prod queue. The upshot of this is that in the configs, we should
go from:

amqp_url = "amqps://openqa:@rabbitmq.fedoraproject.org/%2Fpubsub"
...
queue = "openqa.stg_scheduler"

- which is weird and I have no idea how it ever worked - to:

amqp_url = "amqps://openqa:@rabbitmq.fedoraproject.org/%2Fpubsub"
...
queue = "openqa_scheduler_stg"

- which seems much more sensible.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2023-06-21 13:15:38 +02:00
Adam Williamson
bedeaaa8f7 openqa messaging config - add back a missing leading slash
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2023-06-21 12:36:27 +02:00
Adam Williamson
e3a4908ae0 ...so close...
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2023-06-21 12:27:03 +02:00
Adam Williamson
31f4668476 openqa: tweak rabbit user creation stuff...
ugh.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2023-06-21 12:25:21 +02:00
Adam Williamson
085e6e0828 unquote sent_topics
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2023-06-21 12:07:15 +02:00
Adam Williamson
9953afa06e openqa etc: fix up and improve AMQP messaging configuration
This is triggered by
https://pagure.io/fedora-infrastructure/issue/11375 , but the
changes are rather extensive. Unfortunately, some of the
relevant files got messed up by the alphabetical sort thing that
got run on several group variable files a while ago, so that
confuses the diff a bit - I had to unwind those changes to make
the files readable again in order to make these changes.

Ultimately the goal here is to make the config more consistent
and more functional - the variables used and their names should
be more consistently related to what they're actually *for*,
which I didn't entirely understand when setting this up. So
we have variables for the username being used in each case and
we use that variable where we're referring to the username, for
instance. This should also make the whole thing about the cases
where listeners on the openQA stg/lab instance need to listen
to prod messages clearer, too. It also makes the user creation
clearer by doing it explicitly, just once per user, instead of
haphazardly doing it implicitly through the queue definitions.

And finally it should also actually fix 11375, by giving the
appropriate write permissions to each user.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2023-06-21 12:04:55 +02:00
František Zatloukal
bfb5745b4c Blockerbugs: switch stg to update_versioneer branch 2023-06-20 16:09:10 +02:00
František Zatloukal
f477927139 Revert "Revert "Blockerbugs: switch to ubi9""
This reverts commit d8c9093ca8.
2023-06-20 14:44:56 +02:00
František Zatloukal
d8c9093ca8 Revert "Blockerbugs: switch to ubi9"
This reverts commit 44b562c155.
2023-06-20 14:36:56 +02:00
František Zatloukal
44b562c155 Blockerbugs: switch to ubi9 2023-06-20 14:21:52 +02:00
amedvede
175f4ed82a feat: moved the section with fas username that is used for comment on issues to be used for all toddlers 2023-06-20 09:43:30 +02:00
Adam Williamson
c40ecfef1d openqa: also listen for ODCS state change messages
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2023-06-19 18:12:56 +02:00
Pavel Raiskup
21be6fd294 copr: use smtp-auth-relay for all hosts 2023-06-19 11:08:23 +02:00
Pavel Raiskup
bee7b64fe5 main.cf files need to be moved before we claim they are templates
Revert "postfix: install main.cf as template"

This reverts commit 57f75cbcab.
2023-06-19 10:39:39 +02:00
Pavel Raiskup
57f75cbcab postfix: install main.cf as template
There is no jinja in the current main.cf files, except for the Copr
main.cf that uses STARTTLS for SMTP relayhost.
2023-06-19 10:33:33 +02:00
Pavel Raiskup
8d891f9b32 smtp-auth-relay: reset main.cf
The postfix_group is used on multiple places.
2023-06-19 10:26:46 +02:00
Pavel Raiskup
19bfd92e3b copr: fill smtp_auth_relay password correctly 2023-06-19 10:13:53 +02:00
Pavel Raiskup
82205131b7 smtp_auth_relay: new role, use by copr-dist-git-dev for now 2023-06-19 10:10:43 +02:00
Kevin Fenzi
2be84b22aa db-koji01: adjust to afffect current performance tuning
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-16 12:03:24 -07:00
Timothée Ravier
9240690c3a openshift: Remove Silverblue website
The website is now available at https://fedoraproject.org/silverblue/
The repo for the previous website has been archived:
https://github.com/fedora-silverblue/silverblue-site
2023-06-16 16:50:07 +00:00
Pavel Raiskup
be81e532c0 copr: revert back to the default Mageia configs
The problems are fixed by:
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-4b79d42761
2023-06-16 11:16:57 +02:00
Kevin Fenzi
3daedbd42f smtp-mm-osuosl01: add more memory here to see if that gets it to install
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-15 19:37:53 -07:00
05eedc3f44 Add new mapping for opnh264 epel9 repositories to mirromanager
Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
2023-06-15 21:14:44 +00:00
627b39112f Add signing for f39-perl sidetag
Fix the key

Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
2023-06-15 20:53:58 +00:00
Pavel Raiskup
047e6f3c6c copr: Mageia Cauldron Mock build is broken with --use-bootstrap-image
So revert back to the mock-core-configs default configuration; and wait
till https://github.com/xsuchy/distribution-gpg-keys/pull/99 is
resolved.
2023-06-15 20:25:59 +02:00
Pavel Raiskup
e36f5cc939 copr: use_bootstrap_image for Mageia chroots
Solving similar problems with keys as with openSUSE
before in cd7df06b87
2023-06-15 08:24:43 +02:00
Kevin Fenzi
2cc5d18042 smtp-mm-osuosl01: move to rhel9
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-14 16:38:00 -07:00
Kevin Fenzi
7d2247369f dns: more tweaking for ddos handling
Increase the window so we keep track of more queries
Set the max number of nxdomains to try and drop those.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-14 15:28:46 -07:00
Kevin Fenzi
e6d08451ca dns: adjust named config for DDoS
Increase a number of values, add some limits.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-14 15:20:44 -07:00
Kevin Fenzi
adef5b55fd proxies: fix duplicate cert here, only use the wildcard one.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-14 11:58:16 -07:00
Kevin Fenzi
1c187bf308 download: update mirror acls for tier2 mirror
Received on the mirror-admin list.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-14 10:16:47 -07:00
Dusty Mabe
466f7f1fd7
coreos-cincinnati: deploy current git (086c9f1) 2023-06-14 11:09:58 -04:00
Kevin Fenzi
b6d8e745d1 flatpak-indexer: add kalev to appowners
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-14 07:32:23 -07:00