Commit graph

40815 commits

Author SHA1 Message Date
856284ac4a maubot: add some deps needed to build the image
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2024-05-02 13:14:30 +10:00
4c84465f08 maubot: really change to f40
i hope

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2024-05-02 13:10:10 +10:00
d4bf0f4e27 maubot: actually change the sourse image to 40
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2024-05-02 13:07:18 +10:00
306b6056eb bump maubot image to Fedora 40
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2024-05-02 13:00:56 +10:00
Kevin Fenzi
36c08085b4 Move a bunch of hosts to f40 now that it's out and f38 is going eol soon
Moved all these over manually, or they already were updated.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-05-01 15:50:13 -07:00
Adam Williamson
771db33ea4 Bodhi compose config: fix templating in 'repos' definition
You can't nest jinja's templating markers like this, it turns
out, they just wind up as literal strings. You also can't use
f-strings, sadly (tried it locally, it errors out). We have to
use older-style `.format()`, that works. I went with a fairly
explicit syntax to make it clear what's going on.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2024-05-01 19:48:17 +00:00
Kevin Fenzi
4a3da58a9e pagure: drop Bytespider crawler
This crawler is hitting pagure.io really hard.
Sent it a 403 and block in robots.txt

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-05-01 12:19:43 -07:00
Adam Williamson
5f2d78a83c Bodhi compose config: build ostrees and containers in variants
Our compose attempt with the containers being built under
Everything didn't go as planned because the filenames of the
container images turn out to be determined by the variant, so
they conflicted and only the last one built survived. So, we
really need to build them under unique variants for now. A
previous commit added the variant definitions.

We don't *need* to build the ostrees under the variants, but it
feels more consistent this way, both with the containers and
with how it works in the Rawhide/Branched composes.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2024-05-01 18:00:19 +00:00
Kevin Fenzi
4aed740463 db01.stg is on vmhost-x86-09.stg now
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-05-01 10:27:28 -07:00
Kevin Fenzi
03501a770e db02.stg becomes db01.stg
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-05-01 10:13:06 -07:00
Kevin Fenzi
9319e2c3b9 Add variants for atomic composes in bodhi
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-05-01 16:35:56 +00:00
Adam Williamson
475c3a54d6 Bodhi compose config: factor out a repeated conditional
This just makes things a bit more readable, I think.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2024-04-30 23:07:34 -07:00
Adam Williamson
8e05d07ca6 Bodhi compose config: drop sigkeys for ancient releases
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2024-04-30 23:07:34 -07:00
Adam Williamson
b9ccb3c54a Bodhi compose config: factor out repo definitions
We repeat this exact same repo definition block eight times,
let's just make it a variable (at the ansible template level).

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2024-04-30 23:07:34 -07:00
Kevin Fenzi
4987fc7c59 bodhi: set primary arches for current stable releases
bodhi is failing to finish a f40-updates-testing push because it's
looking for the ppc64le repomd on the primary location instead of the
secondary one.

This should fix it, but I don't understand how it worked before.
Did we just get lucky and always check aarch64 before anything else?
I can't see anything that changed in config around this off hand. ;(

Will try this and see if it fixes it for now...

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-04-30 14:55:25 -07:00
Kevin Fenzi
6982e0e083 kernel01: retire this hardware
This box has been replaced by kernel02 and is no longer needed.
We will power it off and pull it next time someone is at the DC.

Thanks for your service kernel01!

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-04-30 13:59:19 -07:00
Adam Williamson
bb84140443 Bodhi compose: move ostree containers under Everything variant
As is currently the case for the ostrees themselves. The variants
don't exist in this compose config.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2024-04-30 17:50:42 +00:00
Michal Konecny
04cbc610ca Add sundries02.stg host
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-04-30 11:48:07 +02:00
Michal Konecny
653ec8ce21 [mailman3] Migrate prod-to-stg script for new mailman
The script was created for python2, so let's move it to python3 and fix anything
that is different from previous mailman version.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-04-30 09:37:02 +02:00
Adam Williamson
0bde466014 Have Bodhi composes include atomic desktop containers on f40+
Since Fedora 40, we've built native OCI containers for the atomic
desktops in the pre-release nightly and release composes. We
should also build native containers in the post-release nightly
composes that Bodhi runs. This should allow us to get rid of the
on-the-fly OCI image generation in the sync-ostree-base-containers
script.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2024-04-29 13:41:34 -07:00
Kevin Fenzi
651ba91ae0 certgetter01 and releng-compose: move to f40
Now that f40 is out we need to move composers to it and certgetter01 was
on f38, so move it up now also.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-04-29 11:34:39 -07:00
James Antill
d971dca377 countme: Merge the update scripts code for CentOS/Fedora countme.
Signed-off-by: James Antill <jantill@redhat.com>
2024-04-29 18:01:37 +00:00
Kevin Fenzi
abefd06101 db-datanommer02: Try adding some parallel workers
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-04-29 10:05:56 -07:00
Aurélien Bompard
3036eaae26
Badges: make the cache lock timeout longer
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-04-29 16:44:34 +02:00
Aurélien Bompard
87101fc5da
Badges: add missing secrets
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-04-29 14:00:02 +02:00
Aurélien Bompard
14f399e536
Badges: add Redis for caching
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-04-29 13:49:24 +02:00
David Kirwan
321edb65cc
zabbix: external hosts http check updating config
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2024-04-29 12:05:12 +01:00
Aurélien Bompard
0fd825d414
Badges: increase the cache expiration time
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-04-28 23:07:29 +02:00
Kevin Fenzi
01a4cc7bcc Revert "signing: move to mtu 9000"
This reverts commit e9dcb46226.

Turns out autosign02 and sign-vault02 are both on 1G links, not 10G
as I thought. So, just keep them all on 1500 for now.
2024-04-28 09:39:46 -07:00
Kevin Fenzi
e9dcb46226 signing: move to mtu 9000
All our iad2 stuff is using jumbo frames, so move these also to that.
This might hopefully prevent weird connection lockups I am now seeing
with the new sigul.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-04-28 08:50:16 -07:00
Kevin Fenzi
519a1b5d54 sign-bridge01: move to rhel9
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-04-26 13:03:26 -07:00
Michal Konecny
76c5454fc4 [mailman3] Enable compression of static files
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-04-26 15:37:19 +02:00
Michal Konecny
16f8d40075 [mailman3] Process static files every time
Waiting for static_root_dir change could skip files that were added to static
after the initial deployment. This should prevent that.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-04-26 15:33:50 +02:00
Michal Konecny
89c45beb9f [mailman3] Fix the remaining SELinux issues
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-04-26 15:27:53 +02:00
Michal Konecny
4e221cf347 [mailman3] Fix the ownership of log file
Both become and become_user needs to be set to work. So the script was executed
as root which caused the hyperkitty log file to be created with root owner.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-04-26 14:04:31 +02:00
Michal Konecny
603633eb34 [mailman3] Enable mod_wsgi role again
I'm not sure what it is used for, but the httpd service is failing when the
mod_wsgi isn't installed.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-04-26 13:01:20 +02:00
Michal Konecny
4b54cadbdc [mailman3] Use the correct handler
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-04-26 12:48:07 +02:00
Michal Konecny
29f574fdc5 [mailman3] Fix jinja syntax issue
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-04-26 12:19:15 +02:00
Michal Konecny
0adc5a0749 [mailman3] Remove mod_wsgi role from new deployment
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-04-26 12:08:41 +02:00
Michal Konecny
6416dd6249 [mod_wsgi] Install the mod_wsgi correctly on RHEL9
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-04-26 12:07:12 +02:00
Michal Konecny
8e19bddb1c [mailman3] Fix syntax issue
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-04-26 11:27:58 +02:00
Michal Konecny
88c28e2b09 [mailman3] Fix yamllint errors
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-04-26 11:02:47 +02:00
Michal Konecny
1c37ff096c [mailman3] Fix the OIDC server url
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-04-26 10:50:19 +02:00
Michal Konecny
ee55811b8b [mailman3] Remove the unused variables
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-04-26 10:43:52 +02:00
Michal Konecny
261ec360fa [mailman3] Remove the superuser creation
We don't need the superuser if we knew how to add the permissions to any user.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-04-26 10:43:52 +02:00
Michal Konecny
9b1e4bca00 [mailman3] Enable Debug mode for staging
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-04-26 10:43:52 +02:00
Michal Konecny
a8cd5dfff3 [mailman3] Add migration script for Fedora auth provider
This will add migration script for Fedora auth provider. This is only needed
when updating to Fedora auth provider using OpenID Connect.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-04-26 10:43:52 +02:00
Michal Konecny
9d3fb794e1 [mailman3] Add django fedora auth provider
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-04-26 10:43:52 +02:00
Michal Konecny
4c7885c89d [mailman3] Add django superuser creation task
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-04-26 10:43:52 +02:00
Michal Konecny
d4fba9fd55 [mailman3] Update host file
* Increase the memory (to prevent swapping)
* Add sar variables

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-04-26 10:43:52 +02:00