ansible/inventory/host_vars/bodhi-backend01.iad2.fedoraproject.org
2020-05-25 16:38:58 -07:00

3 KiB

— nm: 255.255.255.0 gw: 10.3.169.254 dns: 10.3.163.33 ks_url: http://10.3.163.35/repo/rhel/ks/kvm-fedora-32-iad2 ks_repo: http://10.3.163.35/pub/fedora/linux/releases/32/Server/x86_64/os/ volgroup: /dev/vg_guests eth0_ip: 10.3.169.101 vmhost: bvmhost-x86-04.iad2.fedoraproject.org mem_size: 98304 max_mem_size: 98304 num_cpus: 30

virt_install_command: "{{ virt_install_command_one_nic }}"

datacenter: iad2

bodhi_masher_enabled: True bodhi_updates_handler_enabled: False bodhi_signed_handler_enabled: False

sar_script: /usr/bin/bodhi-sar sar_script_user: apache sar_output_file: bodhi.json

fedmsg_certs:

  • service: releng owner: apache group: sysadmin-releng can_send:

    • pungi.compose.phase.start
    • pungi.compose.phase.stop
    • pungi.compose.status.change
    • pungi.compose.createiso.targets
    • pungi.compose.ostree
    • releng.atomic.twoweek.begin
    • releng.atomic.twoweek.complete
  • service: bodhi owner: root group: apache can_send:

    • bodhi.mashtask.complete
    • bodhi.mashtask.mashing
    • bodhi.mashtask.start
    • bodhi.mashtask.sync.done
    • bodhi.mashtask.sync.wait
    • bodhi.ostree.compose.start
    • bodhi.ostree.compose.fail
    • bodhi.ostree.compose.finish
    • bodhi.errata.publish
    • bodhi.update.eject
    • bodhi.update.complete.testing
    • bodhi.update.complete.stable
    • bodhi.update.request.testing
    • bodhi.update.request.stable
    • bodhi.update.request.batched
    • bodhi.update.karma.threshold.reach
    • bodhi.buildroot_override.untag
    • bodhi.update.comment
    • bodhi.update.requirements_met.stable
  • service: ftpsync owner: root group: ftpsync can_send:

    • bodhi.updates.epel.sync
    • bodhi.updates.fedora.sync

csi_security_category: Medium csi_primary_contact: Releng Admins sysadmin-releng-members@fedoraproject.org csi_purpose: Run the Bodhi masher. csi_relationship: | The mashing of repos here happens as part of the 'fedmsg-hub' daemon. Check logs with 'journalctl -u fedmsg-hub'. Check the bodhi masher docs/code for more detail on what it does: https://github.com/fedora-infra/bodhi/blob/develop/bodhi/consumers/masher.py

  • This host relies on:

    • db01 for its database, which is shares with the bodhi2 frontend nodes.
    • An NFS mount of koji data in mnt/koji
    • The fedmsg bus for triggering mashes.
    • XMLRPC calls to koji for tagging and untagging updates.
    • bugzilla for posting comments about status changes
    • the wiki for getting information about QA "Test Cases"
    • taksotron (resultsdb) for getting status-check results (gating updates).
  • No other systems rely directly on this host. Everything depends on it indirectly for the creation of new updates repos (which get synced out to the master mirror for distribution.