infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions
39232 commits 9 branches 0 tags 110 MiB
Commit graph

55 commits

Author SHA1 Message Date
Kevin Fenzi
e0cb1c5188 download: move centos items out of /srv/pub 
We had centos stream and altarches and centos linux under /srv/pub on
external download servers. However, this breaks people who sync buffet
or the like from them because they suddenly get centos content that they
want to just get directly elsewhere. So, just move these up a leave so
they are out of the buffet target and people who want them can get them
elsewhere.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-07-12 15:53:43 -07:00
Stephen Smoogen
95c6eea54a Add octet-stream for qcow2 on dl.fedoraproject.org 2022-06-14 12:19:48 -04:00
Kevin Fenzi
e0662c5f2d rsyncd / download: adjust odcs to allow package rsyncs 
odcs just links to the packages in a compose on the /mnt/koji volume
with relative symlinks. ie (
../../../../../../../../mnt/koji/packages/zip/3.0/28.eln109/data/signed/9867c58f/x86_64/zip-3.0-28.eln109.x86_64.rpm
)
Change odcs on download servers to mount on /mnt like koji and then tell
rsync to chroot at /mnt, so it can follow those links and copy the file
from koji volume.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-17 13:46:36 -07:00
Kevin Fenzi
1b3258ef49 download: mount fedora_odcs on download servers for easier internal sync 
The fedora_odcs volume is available on odcs-frontend01, but it's easier
for internal people to get it via dl servers since they already get some
content there. So, we just mount it (ro) there so they can do so.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-07-07 13:41:04 -07:00
Sinny Kumari
419fac6c17 Necessary changes to accommodate ostree repo move from atomic/ to ostree/ 
Use metalink url for AH ISO creation

Signed-off-by: Sinny Kumari <sinny@redhat.com>
 2019-02-07 10:46:40 +01:00
Patrick Uiterwijk
db0375b8b6 Move kojipkgs/atomic to kojipkgs/ostree 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-02-06 16:00:28 +01:00
Patrick Uiterwijk
cd9adb1c40 Remove the split cloudfront instances, and switch to the combined one 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-01-30 20:34:53 +01:00
Patrick Uiterwijk
acf6f6587b Remove workaround for very old ostree 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-01-30 20:27:44 +01:00
Sinny Kumari
af761fda7d Add CDN testing cloudfront redirect for atomic repo 
Signed-off-by: Sinny Kumari <sinny@redhat.com>
Signed-off-by: Mikolaj Izdebski <mizdebsk@redhat.com>
 2019-01-04 15:35:56 +00:00
Kevin Fenzi
90b34f3440 pong 2018-06-15 20:06:48 +00:00
Kevin Fenzi
e77fa25416 still not working 2018-06-15 19:38:34 +00:00
Kevin Fenzi
77760e0f56 see if cf is ready now 2018-06-15 19:34:18 +00:00
Kevin Fenzi
0b85849d67 disable until cloudfront is ready 2018-06-15 19:11:44 +00:00
Kevin Fenzi
9ab5fff955 ok, try a different distribution 2018-06-15 19:06:24 +00:00
Kevin Fenzi
6b7394c856 redirect deltas to cloudfront too 2018-06-15 18:09:11 +00:00
Patrick Uiterwijk
f85da25490 Add dl.fp.o/iot/repo 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-05-04 17:26:48 +00:00
Patrick Uiterwijk
14bd7fdd7a dl.fp.o has images 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-05-04 12:12:17 +02:00
Patrick Uiterwijk
005d6913f5 Secure dl.fp.o 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-05-04 02:46:31 +02:00
Patrick Uiterwijk
2d8917470a Set security headers for dl.fp.o 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-05-04 02:42:36 +02:00
Patrick Uiterwijk
47d5891ea1 Use correct repo url 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-04-17 21:45:32 +00:00
Patrick Uiterwijk
c6ce3621b8 Move the ostree redirect to dl.fp.o 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-04-17 22:43:33 +02:00
Patrick Uiterwijk
7dc3db3141 Redirect with 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-04-11 15:04:29 -04:00
Patrick Uiterwijk
63b3d2b45b Only use RedirecftMatch 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-04-11 12:50:36 -04:00
Patrick Uiterwijk
0fae543a84 Reorder these 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-04-11 12:42:01 -04:00
Patrick Uiterwijk
0947c0f3a5 Move the redirect to dl.fp.o 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-04-11 12:30:20 -04:00
Dusty Mabe
8e7dfe7e20
change FAW redirects to point to new unified repo 2018-03-08 11:58:32 -05:00
Patrick Uiterwijk
22e80e947c Remove extra slash 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-11-18 13:06:32 +00:00
Patrick Uiterwijk
ffdbb5b990 This is not a regex anymore 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-11-18 13:05:39 +00:00
Patrick Uiterwijk
c0de69b340 Redirect with path retained 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-11-18 13:04:22 +00:00
Patrick Uiterwijk
cfa9756284 Try to fix redirect 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-11-18 12:59:03 +00:00
Patrick Uiterwijk
6fc4ba64fd Also redirect /ostree 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-11-18 12:53:17 +00:00
Patrick Uiterwijk
e919efcf98 Redirect /ostree/27/ to kojipkgs 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-11-18 12:49:39 +00:00
Patrick Uiterwijk
46bd467ef9 Redirect lftp users to a page with tools to avoid 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-06-13 16:41:07 +00:00
Patrick Uiterwijk
d643854458 Block lftp from download servers today 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-06-13 15:48:33 +00:00
Kevin Fenzi
e9d03d0529 pimp quick-fedora-mirror 2017-03-09 21:23:26 +00:00
Kevin Fenzi
872376e840 carve off download04/05 for tier1 mirrors only 2017-03-09 18:54:35 +00:00
Patrick Uiterwijk
f1dd7a7432 Unify all ssl cipher suite configurations 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-08-31 19:28:26 +00:00
Dennis Gilmore
51c32451d9 start path with / 
Signed-off-by: Dennis Gilmore <ausil@fedoraproject.org>
 2016-05-16 19:26:48 +00:00
Dennis Gilmore
cce0f7424f redirect atomic to kojipkgs from dl.fp.o 
Signed-off-by: Dennis Gilmore <ausil@fedoraproject.org>
 2016-05-16 16:17:30 +00:00
Kevin Fenzi
707842ea26 Add a autoindex.conf file. This allows us to override the apache one and allow README in index listings 2015-06-15 22:14:23 +00:00
Kevin Fenzi
af53330003 Try adding this IndexIgnore for pub/alt/ content 2015-06-15 21:59:49 +00:00
Kevin Fenzi
5333ebcb52 Try and specify readme and header for alt space 2015-06-15 21:48:40 +00:00
Kevin Fenzi
23ef474ba2 Drop system_identification from download role, done in base 2014-12-19 16:57:16 +00:00
Patrick Uiterwijk
1833afa7dd Now really enable the correct cipher. 
OpenSSL AES256-SHA = TLS_RSA_WITH_AES_256_CBC_SHA
 2014-11-21 04:05:54 +00:00
Patrick Uiterwijk
4025a327bf Revert "Enable RSA_WITH_AES_256_CBC_SHA256 for bfo" 
This reverts commit c4e72c37ce.
 2014-11-21 04:02:51 +00:00
Patrick Uiterwijk
c4e72c37ce Enable RSA_WITH_AES_256_CBC_SHA256 for bfo 2014-11-20 21:12:21 +00:00
Kevin Fenzi
5407b962f3 Set download servers to not use SSLv3 2014-10-15 04:00:19 +00:00
Kevin Fenzi
d574410f96 Fix indexing to show full filename. Ticket 4446 2014-07-10 20:28:12 +00:00
Kevin Fenzi
7bbe3e048c Also allow /srv/web/ 2014-06-23 19:25:51 +00:00
Kevin Fenzi
e5862ccf2e Adjust download apache conf to work with 2.2 or 2.4 2014-06-23 19:08:46 +00:00