Infrastructure/infra-docs-fpo
3
0
Fork 0
Code Issues 100 Pull requests 6 Projects Releases Packages Wiki Activity Actions

Remove iptable instructions

Browse source 
Signed-off-by: Diego Herrera <dherrera@redhat.com>
This commit is contained in:
Diego Herrera 2025-03-10 14:21:08 -03:00
parent 8ccfa23756
commit 916e6b2634
1 changed files with 5 additions and 22 deletions
Download patch file Download diff file Expand all files Collapse all files

27
modules/release_guide/pages/sop_epel_minor_mass_branching.adoc
View file

@ -11,28 +11,11 @@ Originally, the EPEL repository had packages that built against the latest RHEL
One day before the mass branching, we send out announcemt because during mass branching,
new koji builds for EPEL are disabled. This will imply a koji outage in Fedora too.
== Disable EPEL10 builds in koji
The recommended method to achieve this is by adding firewall rules to both koji01 and koji02 servers, effectively blocking connections from proxy01 and proxy10. This can be achieved with the following iptables commands:
[source,bash,subs="attributes"]
----
iptables -I INPUT -m tcp -p tcp --dport 80 -s proxy01.iad2.fedoraproject.org -j REJECT
iptables -I INPUT -m tcp -p tcp --dport 80 -s proxy10.iad2.fedoraproject.org -j REJECT
----
These commands reject incoming traffic on port 80 from the specified proxies, preventing external submissions. Internal connections routed via proxy101 and proxy110 will continue to function as expected.
To reverse the firewall changes and allow external submissions again, use:
[source,bash,subs="attributes"]
----
iptables -D INPUT -m tcp -p tcp --dport 80 -s proxy01.iad2.fedoraproject.org -j REJECT
iptables -D INPUT -m tcp -p tcp --dport 80 -s proxy10.iad2.fedoraproject.org -j REJECT
----
This change should be implemented on both koji01 and koji02 machine.
[NOTE]
====
In Fedora it is recommended to https://docs.fedoraproject.org/en-US/infra/release_guide/sop_mass_branching/#_disable_rawhide_builds_in_koji[stop connections to koji through firewall].
But it was https://pagure.io/infra-docs-fpo/pull-request/357[decided not to require it] for this process.
====
=== Cancel all running build for EPEL10