Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Turn on nftables for all of staging. #2532

Merged
ryanlerch merged 1 commit from nft-swap into main 2025-03-24 20:21:08 +00:00
Conversation 5 Commits 1 Files changed 5 -6
5 changed files with 0 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

2
inventory/group_vars/buildvm_stg
View file

@ -24,8 +24,6 @@ lvm_size: 150000
max_mem_size: "{{ mem_size }}" max_mem_size: "{{ mem_size }}"
mem_size: 10240 mem_size: 10240
nfs_mount_opts: "rw,hard,bg,intr,noatime,nodev,nosuid,sec=sys,nfsvers=4" nfs_mount_opts: "rw,hard,bg,intr,noatime,nodev,nosuid,sec=sys,nfsvers=4"
# Do we want to use nftables instead of iptables
nftables: true
num_cpus: 4 num_cpus: 4
resolvconf: "resolv.conf/iad2" resolvconf: "resolv.conf/iad2"
source_registry: "registry.fedoraproject.org" source_registry: "registry.fedoraproject.org"

1
inventory/group_vars/koji_stg
View file

@ -19,7 +19,6 @@ lvm_size: 250000
mem_size: 32768 mem_size: 32768
# NOTE -- staging mounts read-only # NOTE -- staging mounts read-only
nfs_mount_opts: "ro,hard,bg,intr,noatime,nodev,nosuid,nfsvers=3" nfs_mount_opts: "ro,hard,bg,intr,noatime,nodev,nosuid,nfsvers=3"
nftables: true
num_cpus: 8 num_cpus: 8
source_registry: "registry.stg.fedoraproject.org" source_registry: "registry.stg.fedoraproject.org"
# for systems that do not match the above - specify the same parameter in # for systems that do not match the above - specify the same parameter in

1
inventory/group_vars/pkgs_stg
View file

@ -33,7 +33,6 @@ ipa_host_group: pkgs
lvm_size: 500000 lvm_size: 500000
max_mem_size: 32768 max_mem_size: 32768
mem_size: 16384 mem_size: 16384
nftables: true
num_cpus: 8 num_cpus: 8
pagure_static_uid: 600 pagure_static_uid: 600
# Configures ssh for git@ user # Configures ssh for git@ user

1
inventory/group_vars/proxies_stg
View file

@ -29,7 +29,6 @@ nft_custom_rules:
- 'add rule ip filter INPUT ip saddr 10.3.166.121 tcp dport 22623 counter accept' - 'add rule ip filter INPUT ip saddr 10.3.166.121 tcp dport 22623 counter accept'
- 'add rule ip filter INPUT ip saddr 10.3.166.122 tcp dport 22623 counter accept' - 'add rule ip filter INPUT ip saddr 10.3.166.122 tcp dport 22623 counter accept'
- 'add rule ip filter INPUT ip saddr 10.3.166.123 tcp dport 22623 counter accept' - 'add rule ip filter INPUT ip saddr 10.3.166.123 tcp dport 22623 counter accept'
nftables: true
external: true external: true
ipa_client_shell_groups: ipa_client_shell_groups:
- fi-apprentice - fi-apprentice

1
inventory/group_vars/wiki_stg
View file

@ -13,7 +13,6 @@ ipa_host_group_desc: Fedora Wiki
lvm_size: 30000 lvm_size: 30000
mem_size: 4096 mem_size: 4096
nfs_mount_opts: "rw,hard,bg,intr,noatime,nodev,nosuid,sec=sys,nfsvers=3" nfs_mount_opts: "rw,hard,bg,intr,noatime,nodev,nosuid,sec=sys,nfsvers=3"
nftables: true
num_cpus: 2 num_cpus: 2
tcp_ports: [80] tcp_ports: [80]
# mediawiki variables # mediawiki variables