infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions
33596 commits 9 branches 0 tags 110 MiB
Commit graph

33596 commits

This branch
This branch
All branches
Author SHA1 Message Date
Pavel Raiskup
df6a0ecf7f copr-be-dev: disable letsencrypt temporarily 
Before we can move the elastic IP to the new VM.
 2020-11-11 14:57:46 +01:00
Jakub Kadlcik
5f38224ccf Revert "copr: we are going to provision copr-distgit-dev and copr-fe-dev from scratch" 
We don't need the `birthday` defined anymore.
 2020-11-11 14:48:03 +01:00
Jakub Kadlcik
2c66bb8868 reprovisioning copr-distgit-dev from a new instance 2020-11-11 14:12:15 +01:00
Jakub Kadlcik
e043b62c5a reprovisioning copr-fe-dev from a new instance 2020-11-11 14:12:15 +01:00
Pavel Raiskup
04343eee01 copr/base: install cronie-anacrontab 
... right before we try to configure it.
 2020-11-11 13:53:02 +01:00
Jakub Kadlcik
c4fdc906e2 copr: we are going to provision copr-distgit-dev and copr-fe-dev from scratch 2020-11-11 13:29:55 +01:00
Pavel Raiskup
231b34885a copr-be-dev: disable birthday 
Playbook needs fixes, but the initial steps succeeded.
 2020-11-11 13:14:06 +01:00
Pavel Raiskup
4ccc0c053e copr: don't use IPs in inventory 
But to avoid the long outage on copr-backend (all the hosted
repositories), provide another alternative DNS entry that will be used
during transition period when running the playbook.
 2020-11-11 12:59:06 +01:00
Mark O'Brien
75f42908a1 osbs: create network file for eth0 stage 2020-11-11 11:43:41 +00:00
Mark O'Brien
e7bbf8ff29 osbs: update python package to py3 stage 2020-11-11 11:34:38 +00:00
Pavel Raiskup
f351fe2d32 aws_cloud: pre-setup hostname early 
To allow the initial postfix start:
Nov 11 10:38:33 107.20.83.139 postfix/sendmail[26023]: warning: valid_hostname: numeric hostname: 107.20.83.139
Nov 11 10:38:33 107.20.83.139 postfix/sendmail[26023]: fatal: unable to use my own hostname
Nov 11 10:38:33 107.20.83.139 postfix[26025]: warning: valid_hostname: numeric hostname: 107.20.83.139
Nov 11 10:38:33 107.20.83.139 postfix[26025]: fatal: unable to use my own hostname
 2020-11-11 11:45:55 +01:00
Pavel Raiskup
b087f9ea72 copr: temporarily drop postfix_group 
As the initial playbook run fails with that.
 2020-11-11 11:36:03 +01:00
Pavel Raiskup
a1df2a519c copr-be-dev, copr-keygen-dev: define birthday on IPs 2020-11-11 11:19:40 +01:00
Pavel Raiskup
04aa62f691 copr: comment-out persistent_clout.yml 
At this moment we don't have any OpenStack for that, and the recursive
include of basessh role breaks the playbook execution.
 2020-11-11 11:17:07 +01:00
siddharthvipul
8e9de94b15
osbs: decrease lv size for stg vms 
Signed-off-by: siddharthvipul <siddharthvipul1@gmail.com>
 2020-11-11 15:11:37 +05:30
Mark O'Brien
924aef6f79 osbs: dont install fas in staging 2020-11-11 09:16:49 +00:00
Pavel Raiskup
2013b14099 copr-be-dev, copr-keygen-dev: allow initial run against IPs 2020-11-11 09:42:06 +01:00
Pavel Raiskup
f6fe521591 copr: enable @copr/copr on devel instances 2020-11-11 09:32:06 +01:00
Pavel Raiskup
ff896361d8 copr-be-dev, copr-keygen-dev: new VMs with temp IPs 2020-11-11 09:22:09 +01:00
Adrian Reber
3509e0c04f mirrormanager: fix up typo in directory name 
Signed-off-by: Adrian Reber <adrian@lisas.de>
 2020-11-11 08:15:14 +01:00
Adrian Reber
8a89e5977b mirrormanager: install generate-mirrorlist-cache 
This installs the new rust-based generate-mirrorlist-cache tool which
can create the mirrorlist cache files much faster.

Signed-off-by: Adrian Reber <adrian@lisas.de>
 2020-11-11 06:31:47 +00:00
Will Woods
3dadedeb26 web-data-analysis: fix countme-update 
So it turns out that pip3 installs scripts to /usr/local/bin and cron
jobs don't have /usr/local/bin in the path.

This commit adds /usr/local/bin to PATH in countme-update.sh.

For Maximum Correctness we should probably get pip to tell us where it
installed countme-update-{rawdb,totals}.sh but this'll work just fine
as long as pip keeps installing scripts to /usr/bin or /usr/local/bin.

Signed-off-by: Will Woods <wwoods@redhat.com>
 2020-11-10 17:57:56 -05:00
Kevin Fenzi
5ac17bc51a varnish: adjust for f33 changes 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-11-10 12:20:50 -08:00
lrossett
806b6bfbdc adding gitlab-centos queue and user 2020-11-10 17:26:05 +00:00
Pierre-Yves Chibon
998c84baaa dist-git: add missing type 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 17:26:26 +01:00
Pierre-Yves Chibon
872090ee54 dist-git: some more selinux policy changes 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 17:24:55 +01:00
Pierre-Yves Chibon
f4cb375000 selinux/module: Remove debugging statement now that things work 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 16:56:13 +01:00
Pierre-Yves Chibon
d503f374db distgit: some more selinux policy update 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 16:51:51 +01:00
Pierre-Yves Chibon
3351fbd3b4 drop run_once when install selinux policies 
Otherwise the policy doesn't get installed everywhere...

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 16:48:42 +01:00
Pierre-Yves Chibon
74890814a1 distgit: adjust the selinux policy a little more 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 16:48:30 +01:00
Pierre-Yves Chibon
1e27282806 selinux: Add some debugging 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 16:37:16 +01:00
Pierre-Yves Chibon
50ad0a15ee selinux/module: try saying which module is being installed 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 16:30:13 +01:00
Pierre-Yves Chibon
cb2a947479 pagure: fix path to the selinux policy file 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 15:59:32 +01:00
Pierre-Yves Chibon
be1c8bcb45 distgit: keep working on the http_policy 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 15:56:37 +01:00
Pierre-Yves Chibon
033c798d6e pagure: make use of the new selinux/module role to install/compile selinux policies 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 15:55:10 +01:00
Pierre-Yves Chibon
f3a1c52522 distgit: ad missing instruction in the http_policy 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 15:53:18 +01:00
Pierre-Yves Chibon
f580d72f24 distgit: add the missing headers in the http_policy policy 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 15:49:30 +01:00
Pierre-Yves Chibon
1df7a7c0d3 distgit: add a selinux tag 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 15:38:09 +01:00
Pierre-Yves Chibon
1ef758c408 distgit: install another custom selinux policy 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 15:35:33 +01:00
Pierre-Yves Chibon
a6a5686038 Add a role to compile, build and install custom selinux policies 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 15:33:54 +01:00
Aurélien Bompard
d58d1bd208
IPA: don't add the mod_wsgi role, let the installed set the options it wants 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-11-10 12:07:49 +01:00
Aurélien Bompard
6185f038b6
IPA: don't start httpd with systemd 
The httpd service should not be started with systemd, the ipa service will
start it. If systemd starts it, it will run before IPA is available and
KdcProxy will be disabled because it can't reach LDAP.

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-11-10 11:40:54 +01:00
Pavel Raiskup
e0378b95ad copr-be-dev: new (elastic) IP 2020-11-10 10:53:42 +01:00
Pierre-Yves Chibon
cb018f088b distgit/pagure: fix debug calls, msg is not for variables 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-09 16:22:24 +01:00
Mark O'Brien
05354e763c osbs: update kickstart for stage aarch64 to f33 2020-11-09 10:21:19 +00:00
Pierre-Yves Chibon
e63f2d99ad pagure: use staging ipsilon in staging pagure 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-09 10:30:32 +01:00
Kevin Fenzi
2cfb7fb450 compose-rawhide: reinstall with f32 for now 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-11-07 09:56:57 -08:00
Kevin Fenzi
e971b75843 Fix ip for vmhost-x86-cc-rdu05.rdu-cc.fedoraproject.org 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-11-06 16:33:28 -08:00
Stephen Smoogen
8d7d4f5389 when trying to find out why something is failing.. remove the /dev/null so that you can see why it is failing. Also add wwoods so he can delight in this. 2020-11-06 10:15:17 -05:00
Stephen Smoogen
1096f9b35f try to get the cron output to see why this is failing. 2020-11-06 10:07:15 -05:00