Commit graph

39260 commits

Author SHA1 Message Date
Kevin Fenzi
7c92b78f2c f36 is eol, remove f36-test
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-26 17:21:42 -07:00
Kevin Fenzi
6013c68312 tang01: move to rhel9
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-26 17:04:36 -07:00
Kevin Fenzi
f31c6ce417 tang02: move to rhel9
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-26 16:20:56 -07:00
Kevin Fenzi
cff10c3c89 kojipkgs: move to nfsv4
Move kojipkgs to nfsv4 from v3. This might help us with some caching
issues. Or it might not! we will see.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-26 14:37:31 -07:00
Tomáš Hozza
b74b3a2da8 Add ppc64le osbuild-workers
Add playbooks, var files and role for setting up osbuild-composer
ppc64le workers. These are needed in order to build Fedora Workstation
ISO on ppc64le.

Related to:
 - https://pagure.io/fedora-infrastructure/issue/11243
 - https://fedoraproject.org/wiki/Changes/FedoraWorkstationImageBuilder

Signed-off-by: Tomáš Hozza <thozza@redhat.com>
2023-07-26 16:40:09 +00:00
d86babdfe9
AWX: Initial configuration 2023-07-26 13:34:08 +02:00
Adam Williamson
374956365e openqa: drop the results_min_free_disk_space_percentage cleanup
It is extremely slow to run, and we figured out that the problem
on openqa01 was excessive space being used by Netapp snapshots,
so we don't need this any more. It was actually deleting old
jobs before their time, because it had already wiped every
video file and didn't know what else to do...

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2023-07-25 15:13:07 -07:00
Adam Williamson
35260ce9d8 Revert "openQA: trim asset size limits a bit"
This reverts commit cef30714a2.
Turns out the problem was just that asset cleanup wasn't running
because the testresults/images minimization job was blocking it.
2023-07-25 14:20:03 -07:00
Adam Williamson
cef30714a2 openQA: trim asset size limits a bit
prod is running out of disk space. Not sure why this has only
just started to happen, but...the numbers do seem to more or
less add up...

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2023-07-25 11:34:08 -07:00
Kevin Fenzi
e50aa4a928 releng / sig_policy: fix mktemp call
mktemp needs X's in the name passed to it to apply it's random template
to. Without that it just fails with:

mktemp: too few X's in template ‘/tmp/sig_policy’

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-25 09:42:59 -07:00
Kevin Fenzi
07da1e573c proxies: redirect fas.fedoraproject.org and admin.fedoraproject.org/accounts to the new account system
fas was redirecting to the old https://admin.fedoraproject.org/accounts
and that in turn was still trying to proxy to the old fas2 app on the
ocp3 cluster. That app is retired and that cluster is long gone too, so
we should just redirect it to the current account system.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-24 14:58:23 -07:00
Kevin Fenzi
22dde8163b unbound: remove and retire unbound servers
These instances served long and well as fallback resolvers for
dnssec-trigger. This is no longer needed or used, so lets remove them.
See https://pagure.io/fedora-infrastructure/issue/11415

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-24 14:40:43 -07:00
Kevin Fenzi
377edfb74a rabbitmq / distrobuildsync-cs: remove queue for now until ELN folks are ready to consume it
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-24 12:57:45 -07:00
Pavel Raiskup
0944ac4ef3 copr-dist-git: decrease storage warning quota
With 5T storage, it is enough to warn on remaining 12%, and error on 6%.
2023-07-24 07:14:16 +02:00
Kevin Fenzi
07f9caa49f pagure: drop this websites block
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-21 12:58:11 -07:00
Kevin Fenzi
fcd9c449ad pagure: set dns2, otherwise the default is a internal iad2 one
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-21 11:31:01 -07:00
Adam Williamson
1e26a28c2c openqa/server: try setting a limit on test result disk usage
We're having issues with test results eating up all the disk
space we can throw at them (prod is over 4T, stg is over 2T -
I don't know why prod is bigger, that's odd, but it may be an
odd effect of having more arches on stg, maybe aarch64 and
ppc64le tests generally have smaller videos, or something).
This config setting should make openQA keep the space usage
on the partition at a max of 85%, by deleting videos from older
tests as required.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2023-07-21 10:19:54 -07:00
Kevin Fenzi
9e98f4c0de koji_builder / runroot: Also add bind mount to nspwan args
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-21 09:57:43 -07:00
Kevin Fenzi
7c10f88b02 koji_builder / runroot: set this mount at the mock level on compose channel hosts only
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-21 09:46:08 -07:00
Kevin Fenzi
8735931424 kojibuilder / runroot: revert fuse attempts
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-21 09:42:33 -07:00
Kevin Fenzi
f94a4d1a8f koji_builder / runroot: try no options here
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-21 09:34:47 -07:00
Kevin Fenzi
f4e8a921a6 koji_builder: add /dev/fuse mount to runroots
ostree unified composes need /dev/fuse, so allow/add it to runroot
defaults. See https://pagure.io/fedora-infrastructure/issue/11420

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-21 09:05:14 -07:00
Kevin Fenzi
06d4c39372 flocktofedora: add tag
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-21 08:02:59 -07:00
Stephen Smoogen
a1e9d8364c Temporary fix website by restoring multiview
It was thought that MultiViews was not needed for various websites to work and so was removed. It turns out that was wrong, and it was very much relied on for permissions of pages to work on the proxies and such. Mea-culpa mea-culpa

This fix restores the item until we are able to come up with a better fix.

Signed-off-by: Stephen Smoogen <ssmoogen@redhat.com>
2023-07-21 08:36:23 -04:00
Kevin Fenzi
4c4723e928 start: add a tag to quickly re-run it
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-20 20:27:43 -07:00
Kevin Fenzi
50b0ac71d7 start: put multiviews back here for now until we can fix it correctly to not use it
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-20 17:43:23 -07:00
Patrick Creech
ee4df11e44 Remove MultiViews from web configs
Signed-off-by: Patrick Creech <pcreech@redhat.com>
2023-07-20 17:23:40 -04:00
5e95d86756 retire spins.fedoraproject.org 2023-07-20 21:13:19 +00:00
a52d44e77b proxies: redirect spins to new website 2023-07-20 21:13:19 +00:00
Kevin Fenzi
18e45433df data-reports01: disable for now, we will re-add later
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-20 12:58:37 -07:00
David Kirwan
6475c71205 mdapi: update api on mdapi deployment config
Signed-off-by: David Kirwan <dkirwan@redhat.com>
2023-07-20 11:07:47 +01:00
David Kirwan
34bc1a5e5f mdapi: reduce replicas to 1
Signed-off-by: David Kirwan <dkirwan@redhat.com>
2023-07-20 11:03:52 +01:00
Justin W. Flory (he/him)
94018157ef aliases: Add spotz to flock-staff alias
Amy Marrich, aka @spotz, is helping significantly with Flock organizing.
She should be added to the email alias list so she can stay informed
about important communications related to this year's Fedora Flock.

Signed-off-by: Justin W. Flory (he/him) <jwf@redhat.com>
2023-07-19 19:57:42 +00:00
Kevin Fenzi
9fd21ff5d1 robosignatory: fix to use right key for rebuild
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-19 08:02:26 -07:00
Kevin Fenzi
00490e9426 autosign: all not external
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-18 17:53:05 -07:00
Kevin Fenzi
e525521345 robosignatory: signing for f39-rebuild tag
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-18 17:49:11 -07:00
Kevin Fenzi
609df42eff communishift: add openscanhub ( infra 11414 )
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-18 15:08:52 -07:00
Michal Konečný
5238a92325 [Pagure] Add flask OIDC package to dependencies
Signed-off-by: Michal Konečný <mkonecny@redhat.com>
2023-07-18 16:12:05 +02:00
Michal Konečný
e54dae6574 [Pagure] Use correct staging env variable
Also change the client_secrets.json permissions to match pagure.cfg.

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
2023-07-18 14:53:16 +02:00
Pedro Moura
ec843a62c1 Reformatted main.yml
Signed-off-by: Pedro Moura <pmoura@redhat.com>
2023-07-17 23:36:22 +00:00
Pedro Moura
bae7c13024 Added quotes to avoid errors due to version of find
Signed-off-by: Pedro Moura <pmoura@redhat.com>
2023-07-17 23:36:22 +00:00
Pedro Moura
b0bfe39e7d Add a randomized start time before running compress_logs.sh
Signed-off-by: Pedro Moura <pmoura@redhat.com>
2023-07-17 23:36:22 +00:00
Pedro Moura
00141350c9 Replaced xz with pxz
Signed-off-by: Pedro Moura <pmoura@redhat.com>
2023-07-17 23:36:22 +00:00
Pedro Moura
1b05dd52ba Add script to compress log files every month to reduce storage
Signed-off-by: Pedro Moura <pmoura@redhat.com>
2023-07-17 23:36:22 +00:00
Stephen Smoogen
7d7d0bf0a8 Remove smooge from various aliases
Currently, I (Stephen Smoogen) do not have the time to work on Fedora
system administration items. However, I get a lot of email and people
see my email address in various places to ping me for working on
things. I feel it would be better to remove myself from those places
and let Fedora Infrastructure add someone else to replace me when it
is possible to do so.

Signed-off-by: Stephen Smoogen <ssmoogen@redhat.com>
2023-07-17 23:34:18 +00:00
Kevin Fenzi
4527510448 log01: compress job: try escaping the %s for cron
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-17 16:31:12 -07:00
Kevin Fenzi
3c06415a17 batcave01: install moreutils for dns hook
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-17 15:33:02 -07:00
Kevin Fenzi
b7cecd3deb gateway: do not try and specify a local_recipient_maps
This map wasn't there, causing bastion02 to basically reject emails.
So, instead just comment it out because we aren't using it anyhow.
We are luckly bastion01's postfix hasn't been restarted and breaking it
there.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-17 11:19:28 -07:00
Michal Konečný
b34e3e08e6 [Pagure] Use the correct name of variable
Signed-off-by: Michal Konečný <mkonecny@redhat.com>
2023-07-17 18:45:31 +02:00
Michal Konečný
82cc3661a7 [Pagure] Remove undefined variable
We are enabling OIDC just for staging now, so no need to have production
variable in place.

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
2023-07-17 18:37:21 +02:00