Commit graph

33451 commits

Author SHA1 Message Date
lrossett
aa73555871 changing topic name to match centos source 2020-11-18 08:42:30 +00:00
a36cb952a2 docstranslation: include mail configuration 2020-11-17 23:54:59 +00:00
Kevin Fenzi
b91a56c21f people02: re-add ipv6, not sure why it was disabled.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-11-17 15:24:22 -08:00
Stephen Smoogen
2d05b68fd4 remove the UK from the EU so that DNS for the continent works again. 2020-11-17 15:41:36 -05:00
Mark O'Brien
921b1df1ae dns: add more countries to zones 2020-11-17 19:05:46 +00:00
Will Woods
9a4201efc1 suppress 'nothing added to commit..' messages from countme-update.sh
Right now countme-update.sh tries to `git commit -a` whether or not
anything has changed, which results in this output whenever there's no
new changes to commit:

    On branch master
    Untracked files:
      (use "git add <file>..." to include in what will be committed)
            raw.db
            totals.db

    nothing added to commit but untracked files present (use "git add" to track)

This commit tweaks `countme-update.sh` so that it only attempts `git commit`
if there are changes to be committed - i.e. when `git diff` returns 1.

Signed-off-by: Will Woods <wwoods@redhat.com>
2020-11-17 13:31:52 -05:00
Pierre-Yves Chibon
eba4430b1c pagure: typo in the selinux policy ioctl != ioctrl
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-11-17 15:26:11 +01:00
Pierre-Yves Chibon
c025a442eb pagure: expand the SELinux pagure policy
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-11-17 15:24:35 +01:00
Aurélien Bompard
a2dded035a
FASJSON: fix HTTPS links
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-11-17 14:26:25 +01:00
Aurélien Bompard
ba812732c2
Disable registration in Noggin, for now
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-11-17 14:19:20 +01:00
Adrian Reber
cb4bb12298 mirrorlist: clean up unused definitions
Remove everything which is related to running the mirrorlist server
process as a container. This has not been used for the last few months.

Also remove the 3 mirrorlist process setup for IAD2 as it is no longer
necessary and removing it also simplifies the configuration.

Signed-off-by: Adrian Reber <adrian@lisas.de>
2020-11-17 07:32:01 +00:00
Adrian Reber
e55804cb2c mirrormanager: enable cron script installation
During the datacenter move the cron script installation was disabled for
IAD2. This removes this conditional to be able to update the cron script
again.

Signed-off-by: Adrian Reber <adrian@lisas.de>
2020-11-17 08:24:04 +01:00
Adrian Reber
994b025a70 mirrormanager: fix script installation
update-mirrorlist-server was added as a template but a simple copy would
have been enough.

This changes one of the existing script copy definitions to work with
multiple items and adds update-mirrorlist-server to that item list.

Signed-off-by: Adrian Reber <adrian@lisas.de>
2020-11-17 08:12:31 +01:00
Adrian Reber
67fbd00bc3 mirrormanager: use the new mirrorlist cache generation tool
The new mirrorlist cache generation requires now less than one minute.
This includes pushing the data to the proxies. It also runs now every 15
minutes instead of once an hour.

The sync_pkl_to_mirrorlists.sh script has been renamed to
sync_cache_to_mirrorlists.sh as it no longer copies a Python pickle and
it also copies the data to only proxies at the same time instead of one
proxy at a time.

Signed-off-by: Adrian Reber <adrian@lisas.de>
2020-11-17 06:53:22 +00:00
Kevin Fenzi
890e9c0f23 datagrepper: also totp only in prod
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-11-16 17:17:08 -08:00
Kevin Fenzi
a2469896a5 datagrepper/datanommer: fix old phx2 uri's in staging
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-11-16 16:42:25 -08:00
Kevin Fenzi
bcb29a60c4 datagrepper: no fas_client in stg
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-11-16 16:34:51 -08:00
Kevin Fenzi
907dc6e5d6 add db-datanommer01.stg to stg
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-11-16 16:15:12 -08:00
Kevin Fenzi
59533f2cd8 db-datanommer01.stg: set max_mem to smaller value
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-11-16 15:58:54 -08:00
Kevin Fenzi
98d9f81df6 postgresql_servers: add db-datanommer01.stg
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-11-16 15:56:38 -08:00
Kevin Fenzi
6a4eaefb0e inventory: add db-datanommer01 and datagrepper01 to stg.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-11-16 15:54:21 -08:00
Stephen Smoogen
a42ce2bf28
Nagios requires hosts files to be in major groups. For aws this is in the inventory/cloud file. 2020-11-16 16:32:12 -05:00
Pavel Raiskup
cc79e327dc dnf-automatic: disable the makecache timer, not the service
Service can be unmasked, as long as nobody triggers it.  If we do it the
other way arount, we see this every-time we log-in on F33+:

    Last login: Fri Nov 13 09:15:56 2020 from 193.165.237.101
    [systemd]
    Failed Units: 1
      dnf-makecache.timer

Which is:

    systemctl status dnf-makecache.timer
    ...
    ...: dnf-makecache.timer: Failed to queue unit startup job: Unit dnf-makecache.service is masked.
    ...: dnf-makecache.timer: Failed with result 'resources'.
2020-11-16 16:02:20 +01:00
Silvie Chlupova
9a98e75674 copr: remove default and max build timeout 2020-11-16 14:29:03 +00:00
Mark O'Brien
9d27917ee1 osbs: aarch64 change kickstart url 2020-11-16 13:31:02 +00:00
Mark O'Brien
3a1a853003 osbs: aarch64 change kickstart url 2020-11-16 13:17:22 +00:00
Mark O'Brien
acb8d68052 osbs: aarch64 change kickstart url 2020-11-16 12:59:18 +00:00
Pavel Raiskup
d031058fbe copr-fe: re-enable the EOL chroot garbage collector 2020-11-13 17:49:27 +01:00
Mark O'Brien
ac39a1bf35 add iptables as desired package 2020-11-13 16:29:48 +00:00
Stephen Smoogen
447c244eed This statictics command break opendkim 2020-11-13 11:25:21 -05:00
Stephen Smoogen
1f1f75b198 ipa_initial needs to be false or we reset the environment to scratch every ansible run 2020-11-13 10:41:40 -05:00
Pavel Raiskup
eb3f3a3f16 copr: enable services again
We seem to have new set of VMs that work fine now.
2020-11-13 11:01:34 +01:00
Jakub Kadlcik
bbdc4da69d copr: remove birthday from frontend and distgit 2020-11-13 10:46:39 +01:00
Pavel Raiskup
77b456566f copr-keygen: drop birthday 2020-11-13 10:18:26 +01:00
Jakub Kadlcik
859cc4a2f5 copr: set birthday for production instances 2020-11-13 10:10:29 +01:00
Pavel Raiskup
f14b897b1f copr: point playbooks to new set of (elastic) IPs 2020-11-13 10:05:21 +01:00
Pavel Raiskup
251f351192 copr-be: birthday 2020-11-13 08:21:40 +01:00
Pavel Raiskup
a563266e0d copr: services_disabled=true temporarily
... till we have flipped the elastic IPs to new instances.
2020-11-13 08:02:58 +01:00
Pavel Raiskup
51f122621f Revert "copr: temporarily drop postfix_group"
This reverts commit b087f9ea72.
2020-11-13 07:33:00 +01:00
Stephen Smoogen
559c14b373 splitting into multiple inventory files causes problems when you need to have a host in multiple groups for nagios and other items. Need to find a way to make this automatic 2020-11-12 16:39:35 -05:00
d6678d05fc docstranslation: drop ssh key generation 2020-11-12 21:29:57 +00:00
2e8857c681 docstranslation: git ssh key moved to /srv/private on batcave 2020-11-12 21:29:57 +00:00
Kevin Fenzi
22ef05d3f2 proxies: stg.release-monitoring.org make this it's own site
Normally we can just define the site once with it's prod name and use
that in stg with an alias. This works because we have a wildcard ssl
cert for *.fedoraproject.org. So, stg.fedoraproject.org and
fedoraproject.org both work fine. We can't do this for
release-monitoring tho as we use letsencrypt certs and don't have a
wildcard. We could expand out letsencrypt role to get altnames, but just
making these seperate sites should fix it.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-11-12 11:13:23 -08:00
Kevin Fenzi
177465221c proxies / websites: we want release-monitoring.org in stg too.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-11-12 10:21:24 -08:00
Adrian Reber
87d4e49174
mirrormanager: updated mirrorlist-server to 3.0.2
The testing of generate-mirrorlist-cache showed that private mirrors
where not part of the mirrorlist cache any more. Only private Internet2
mirrors where included in the cache.

This is fixed upstream in 3.0.2.

Signed-off-by: Adrian Reber <adrian@lisas.de>
2020-11-12 08:34:32 +01:00
Kevin Fenzi
030a0ddc40 proxies / websites: revert disabling some sites in stg now that it's back
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-11-11 19:36:32 -08:00
Kevin Fenzi
385acb276e proxies /redirects: don't use env here
The site is the prod name, with an alias for the stg host.
No need to try and install into a stg site when it doesn't exist.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-11-11 18:30:34 -08:00
Kevin Fenzi
bbfc222d25 proxies / websites: re-enable some hosts in stg
we disabled these when we didn't have stg in iad2 yet.
Now that we do, we can re-add them.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-11-11 16:34:00 -08:00
Kevin Fenzi
f7bf329dad copr-be-dev-temp: don't check nagios on this instance either.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-11-11 10:05:18 -08:00
Kevin Fenzi
e901377054 mailman02: we never ended up using mailman02, lets retire it.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-11-11 09:09:43 -08:00