From 916e6b2634500cc17ce5737d19937f671c961522 Mon Sep 17 00:00:00 2001 From: Diego Herrera Date: Mon, 10 Mar 2025 14:21:08 -0300 Subject: [PATCH] Remove iptable instructions Signed-off-by: Diego Herrera --- .../pages/sop_epel_minor_mass_branching.adoc | 27 ++++--------------- 1 file changed, 5 insertions(+), 22 deletions(-) diff --git a/modules/release_guide/pages/sop_epel_minor_mass_branching.adoc b/modules/release_guide/pages/sop_epel_minor_mass_branching.adoc index 8ab8f55..19ca17b 100644 --- a/modules/release_guide/pages/sop_epel_minor_mass_branching.adoc +++ b/modules/release_guide/pages/sop_epel_minor_mass_branching.adoc @@ -11,28 +11,11 @@ Originally, the EPEL repository had packages that built against the latest RHEL One day before the mass branching, we send out announcemt because during mass branching, new koji builds for EPEL are disabled. This will imply a koji outage in Fedora too. -== Disable EPEL10 builds in koji - -The recommended method to achieve this is by adding firewall rules to both koji01 and koji02 servers, effectively blocking connections from proxy01 and proxy10. This can be achieved with the following iptables commands: - -[source,bash,subs="attributes"] ----- -iptables -I INPUT -m tcp -p tcp --dport 80 -s proxy01.iad2.fedoraproject.org -j REJECT -iptables -I INPUT -m tcp -p tcp --dport 80 -s proxy10.iad2.fedoraproject.org -j REJECT ----- - -These commands reject incoming traffic on port 80 from the specified proxies, preventing external submissions. Internal connections routed via proxy101 and proxy110 will continue to function as expected. - -To reverse the firewall changes and allow external submissions again, use: - -[source,bash,subs="attributes"] ----- -iptables -D INPUT -m tcp -p tcp --dport 80 -s proxy01.iad2.fedoraproject.org -j REJECT -iptables -D INPUT -m tcp -p tcp --dport 80 -s proxy10.iad2.fedoraproject.org -j REJECT - ----- - -This change should be implemented on both koji01 and koji02 machine. +[NOTE] +==== +In Fedora it is recommended to https://docs.fedoraproject.org/en-US/infra/release_guide/sop_mass_branching/#_disable_rawhide_builds_in_koji[stop connections to koji through firewall]. +But it was https://pagure.io/infra-docs-fpo/pull-request/357[decided not to require it] for this process. +==== === Cancel all running build for EPEL10