With f41's elfutils-debuginfod-0.192-5, we're finally ready to start
serving per-file IMA signatures to remote debuginfo clients. This
additional flag is needed because fedora/koji stores stripped rpm-ima
signatures in a nearby file rather than in the retained RPM.
Thanks to the recently shrunken database schema (~150GB for all of
fedora 35+) and generous storage on the VM servers (~1TB available),
we can dramatically increase the cache size. Along with debuginfod
upstream improvements (brought in via a copr build), this should
drastically improve the responsiveness of the debuginfod service.
Already in effect on prod & stg, formalize these configuration tweaks
that limit overload, improve cgroup monitoring, and build tolerance to
transient fileserver problems.
Fix the debuginfod sysconfig file to not stop at f32..f35 but go at
least to eleven ^W f39 for RPM inclusion. Bump up the fdcache size
to 1024 entries so more archive pieces are retained unpacked, given
that the VMs still have pretty generous unused storage.
These changes are already hand-applied to prod and stg.
Codify a few debuginfod process parameters that appear to be working well.
Adjust incoming proxies to redirect the "/" URL to a wiki page, as
requested by FESCO.
