Commit graph

39713 commits

Author SHA1 Message Date
Kalev Lember
0064e09bff kojipkgs: slightly relax openh264 blocking/redirect rules
Allow access to gstreamer1-plugin-openh264 package and new noopenh264
stub package that don't contain non-distributable code, while keeping
openh264* and mozilla-openh264* blocked.

See https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=2247274 for
"noopenh264" stub package review that makes it possible to build/ship
the gstreamer plugin in Fedora proper while keeping the
non-distributable openh264 package in Cisco repos.
2023-11-09 21:28:13 +01:00
Kevin Fenzi
9314b70862 db-koji01: more tuning
Tweak some of the knobs to try and get things more happy with the heavy
load it's under. Note that cpus change will need a reboot before it's
active. The other changes have all been applied and it seems to be doing
a little better with this. Perhaps with some more cpus we can get it
stable (but yet not swamping i/o).

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-11-09 10:09:24 -08:00
David Kirwan
21b43ab931
zabbix: reworking apache config
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2023-11-09 15:15:48 +00:00
David Kirwan
8b0581bcad
zabbix: haproxy config reworking
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2023-11-09 14:52:30 +00:00
David Kirwan
ee3bac3470
zabbix: haproxy config zabbix production
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2023-11-09 14:04:13 +00:00
David Kirwan
9c3a24e79a
zabbix: Zabbix production configuration 2023-11-09 12:55:26 +00:00
Aurélien Bompard
94478cc88b Install IPA replicas with a larger nsslapd-maxsasliosize
Related to https://pagure.io/fedora-infrastructure/issue/10358

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2023-11-09 09:33:15 +00:00
Aurélien Bompard
f6e6921655 Factor the replication tasks in a block
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2023-11-09 09:33:15 +00:00
Dan Fandrich
2afc689d5e [release-monitoring] Add links for more distros 2023-11-09 09:28:11 +00:00
Kevin Fenzi
fdf34aab57 nagios_server / noc02: set seboolean to allow certgetter to work
noc02 needs to be able to proxy to certgetter for the acme challenge for
ssl certs. So, set this there to allow that.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-11-08 15:40:23 -08:00
Andrew Heath
ea4a9bcbb6 Create redirect for fedoraproject/cloud
Create a redirect for fedoraproject to point to new cloud image page
2023-11-08 23:31:28 +00:00
Andrew Heath
7260701e59 Remove unessary settings for Spunk Setup 2023-11-08 23:28:57 +00:00
Kevin Fenzi
ed45352045 robosignatory: sign stable iot with f39 key
Also drop 32bit arm signing info.

See https://pagure.io/releng/issue/11768

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-11-08 22:49:38 +00:00
Kevin Fenzi
21a3a4f6ff ipsilon: add SAML2 mapping for aws-openscanhub group
This adds a mapping for a aws-openscanhub group.
See https://pagure.io/fedora-infrastructure/issue/11384 for more info.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-11-08 22:16:53 +00:00
Kevin Fenzi
cbc8c70e75 koji_hub / koji_gc: fix key ids
The f36 key here was wrong and the f38 and 39 ones were swapped.
Also, fixed the cap in f40 key.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-11-08 14:13:34 -08:00
Kevin Fenzi
9e2b0cda9d openshift: validate when applying objects
Right now if there's a yml thats indented incorrectly, but parts of it
are fine, oc apply will apply those parts that are valid and just ignore
the rest. So, lets add a --validate=strict to have it reject these
entirely, so we know they have something wrong in them and we can fix
it, rather than being confused that they didn't apply anything.

Signed-off-by: Kevin Fenzi kevin@scrye.com
2023-11-08 14:11:02 -08:00
Kevin Fenzi
1f1624d5ac bodhi / backend / koji_sync: run on flatpak tags daily too
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-11-08 13:22:25 -08:00
Kevin Fenzi
e859a68d95 bodhi / backend / koji sync: minor syntax fixes
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-11-08 13:12:35 -08:00
Yaakov Selkowitz
d60d7a0e50 Append -flatpak suffix to koji package name for flatpaks
At this point, all new flatpak requests should use the new flatpak
infrastructure, which still uses flatpaks/$NAME dist-git but
$NAME-flatpak koji "package".

Resolves: https://pagure.io/releng/issue/11626
Signed-off-by: Yaakov Selkowitz <yselkowi@redhat.com>
2023-11-08 20:50:07 +00:00
Mattia Verga
eda3e9e39c toddlers: enable check-commit-rights on stg
Signed-off-by: Mattia Verga <mattia.verga@tiscali.it>
2023-11-08 20:39:08 +00:00
Kevin Fenzi
2bcd7415d5 f39 is out, we are unfrozen
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-11-08 09:34:15 -08:00
Konrad Kleine
ab878dd91d copr-be: fix project regex for LLVM Snapshots high-performance builders
LLVM Snapshots are built fresh in daily new incubator projects such as `@fedora-llvm-team/llvm-snapshots-incubator-20231107` and the regex wouldn't match them before.

Now the regex works good with grep in the following scenarios:

```
$ echo "@fedora-llvm-team/llvm-snapshots/fedora-rawhide-x86_64/llvm" | grep -ioP '@fedora-llvm-team/llvm-snapshots[^/]*/.*x86_64/(llvm|clang)'
$ echo "@fedora-llvm-team/llvm-snapshots-incubator-20231107/fedora-rawhide-x86_64/llvm" | grep -ioP '@fedora-llvm-team/llvm-snapshots[^/]*/.*x86_64/(llvm|clang)'
```
2023-11-07 21:38:35 +00:00
Kevin Fenzi
1be44be6fd gnome-software: f39 is out, update gnome-software
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-11-07 06:18:39 -08:00
Kevin Fenzi
50c61979f0 Revert "zabbix: Add configuration for zabbix prod to haproxy"
This reverts commit d7b20fa114.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-11-07 06:16:29 -08:00
David Kirwan
89485e5a43
zabbix: add zabbix production configugration to apache
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2023-11-07 08:50:20 +00:00
David Kirwan
2692078d80
zabbix: apache configuration for production zabbix
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2023-11-07 08:40:16 +00:00
David Kirwan
d7b20fa114
zabbix: Add configuration for zabbix prod to haproxy
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2023-11-07 07:49:31 +00:00
Kevin Fenzi
c455c1b635 bodhi-backend01: add note about not upgrading to f39+ until epel7 is gone
See https://pagure.io/releng/issue/11664 for more info.
Basically createrepo_c in f39+ will not work for making epel7 updates,
so we need to wait until it goes EOL before upgrading here.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-11-06 11:54:41 -08:00
Kevin Fenzi
aeea2c1d06 proxies / koji.fedoraproject.org: disallow robots on koji.fedoraproject.org
Turns out back in 2015 (in 623be6ff73) I added a robots.txt on the koji
hubs to disallow crawling, but since it's behind the proxies, no one
ever saw that robots.txt. Instead they got the default one that just had
a 'crawl-delay 1' in it.

So, lets tell robots to go away for real now, as they are causing load
problems on the koji database and I don't think it's particularly useful
for koji to be indexed. It's a lot of dynamic content anyhow.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-11-06 15:48:09 +00:00
Pavel Raiskup
b0ddd09187 copr-be: allow starting powerful builders in parallel
This is OK with Resalloc 5.1+:
https://github.com/praiskup/resalloc/releases/tag/v5.1
2023-11-06 16:07:10 +01:00
Nikita Dubrovskii
83ead7c929 fedora-coreos-pipeline: add Nikita Dubrovskii to appowners 2023-11-06 15:34:35 +01:00
Pavel Raiskup
eb7fe4b5ba copr-be: use powerful builders for 3 projects
Per requests:
https://github.com/fedora-copr/copr/issues/2985
https://github.com/fedora-copr/copr/issues/2986
https://github.com/fedora-copr/copr/issues/2987
2023-11-06 15:08:19 +01:00
Miroslav Suchý
8028e00aaf copr: drop numbers for ondemand builders in aws because we increased reserved ones 2023-11-06 15:02:20 +01:00
Miroslav Suchý
593cf6fba7 copr: allow to build src.rpm on aarch64 in aws too 2023-11-06 09:26:35 +01:00
Pavel Raiskup
8c55a92abd copr-be: don't start reserved instances on stage
While it is OK to start powerful on-demand instances on stage (upon
an explicit request), reserved instances are meant to be used by
production only.
2023-11-06 09:10:48 +01:00
Pavel Raiskup
a0746f6663 copr-be: pools.yaml typo 2023-11-06 08:59:31 +01:00
Pavel Raiskup
f5645f1ad3 copr-be: cleanup leftover EC2 machines 2023-11-06 08:52:59 +01:00
d6dcf2d621
websites: set build policy to LatestOnly 2023-11-04 12:45:04 +01:00
4d1631fd84
websites: use generic webhook 2023-11-04 12:09:41 +01:00
Kevin Fenzi
c6d175f414 koji_builder: try and allow coredumps on buildhw-a64 builders
We want to get core dumps from these builders in order to try and track
down livemedia failures in python with SIGILL.
https://bugzilla.redhat.com/show_bug.cgi?id=2247319
We just enable this on those builders for now and we set it so it is the
limit for the systemd-nspawn containers that mock uses.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-11-03 16:41:59 +00:00
Miroslav Suchý
1a53796c45 copr: flip the default for reserved 2023-11-03 17:27:30 +01:00
Miroslav Suchý
15ddec5a36 copr: do not generate duplicate names in pools.yaml 2023-11-03 17:14:19 +01:00
Miroslav Suchý
1970c50af5 copr: correctly handle defaults in lookup
the previous code returned \n and Ansible did not executed default()
Fixes https://github.com/fedora-copr/copr/issues/2982
2023-11-03 16:51:31 +01:00
Miroslav Suchý
67047e884f copr: remove outdated part 2023-11-03 16:51:31 +01:00
Miroslav Suchý
3eaa0b4756 copr: update copr_builder_fedora_version variable 2023-11-03 16:51:31 +01:00
Samyak Jain
6e36c22ad5 Update pungi.rpm config with 40 for all artifacts
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2023-11-03 15:15:31 +00:00
Samyak Jain
fabb4f492b Fedora 39 is GO
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2023-11-03 15:15:31 +00:00
Miroslav Suchý
270047bb6b copr: note that restart of resalloc is not needed 2023-11-03 13:27:20 +01:00
Miroslav Suchý
2e74e39de2 Revert "copr: restart resalloc when config change"
This reverts commit b11b6ecc5a.
2023-11-03 13:25:50 +01:00
Miroslav Suchý
038181bba4 copr: remove outdated part 2023-11-03 13:23:16 +01:00