Commit graph

34568 commits

Author SHA1 Message Date
Stephen Smoogen
b7f6ebae86 Add --numeric-ids to rsync xinetd
It looks like lookups for ids on remote servers are not getting
cached. For our rsync of logs and such we don't need to map those for
our delivery.

Signed-off-by: Stephen Smoogen <smooge@smoogespace.com>
2021-03-31 13:11:56 -04:00
Kevin Fenzi
e82d21eefd haproxy: decrease chances of marking ipsilon down
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-03-31 09:36:13 -07:00
Kevin Fenzi
fdc0368f12 pkgs01: use sshd_keyhelper here
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-03-31 07:20:30 -07:00
Adam Williamson
06b71c46ca Update openQA lab to latest upstream scratch builds for testing
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2021-03-30 18:54:14 -07:00
Stephen Smoogen
5bad041fa5 rmeove mailman01.stg until packages are ready for it
Signed-off-by: Stephen Smoogen <smooge@smoogespace.com>
2021-03-30 18:56:18 -04:00
Kevin Fenzi
1bef43fbd9 aliases: add a packager-dashboard-bot alias
Add this alias pointed to me for now so I can create it in bugzilla and
give it the needed perms. Then can hand off to the packager dashboard
developers.
See: https://pagure.io/fedora-infrastructure/issue/9756

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-03-30 15:42:23 -07:00
Kevin Fenzi
7a53888856 inventory: add ipa01 backups to backup01
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-03-30 15:38:41 -07:00
Frank Ch. Eigler
1e89873407 debuginfod: also index modular build rpms
After consulting with Owen Taylor, this should be not much
extra effort, and may bring fedora-flatpak users joy.
2021-03-30 22:16:10 +00:00
Frank Ch. Eigler
8f6580d379 debuginfod: bump scanning concurrency to -c6
Try to suffer NFS storage latencies better.
2021-03-30 22:16:10 +00:00
Kevin Fenzi
02111da3e4 downloads: add odcs/eln rsync target
https://pagure.io/fedora-infrastructure/issue/9730
Some folks want to rsync eln composes, add this module to download
servers so they can do this if they want. If this adds too much load
we can look at some kind of alternate mirroring.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-03-30 15:03:41 -07:00
Stephen Smoogen
00bea493d8 Move vmhost-x86-cc05 to regular colo_virt so it can be maintained in that group
Signed-off-by: Stephen Smoogen <smooge@smoogespace.com>
2021-03-30 17:35:03 -04:00
Stephen Smoogen
8647884713 Change inventory/host_vars/ns13.rdu2.fedoraproject.org to have vpn: true so that ipa works
Signed-off-by: Stephen Smoogen <smooge@smoogespace.com>
2021-03-30 17:09:31 -04:00
Stephen Smoogen
f1b3cbb2b1 Change dns playbook so that ns13 can be on the vpn
Signed-off-by: Stephen Smoogen <smooge@smoogespace.com>
2021-03-30 16:49:22 -04:00
Stephen Smoogen
da105b0f3b NS13 needs a openvpn ccd file to work
Signed-off-by: Stephen Smoogen <smooge@smoogespace.com>
2021-03-30 16:42:30 -04:00
Kevin Fenzi
35c3f4a30f retrace should be vpn: true at least for now
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-03-30 09:00:43 -07:00
Kevin Fenzi
c9630db833 delete some hosts that no longer exist.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-03-30 08:46:22 -07:00
Kevin Fenzi
ff94c9d77a bvmhost-x86-04/05.stg: turns out, these are in staging and should use the staging ipa server
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-03-30 07:39:37 -07:00
Pierre-Yves Chibon
5637d91feb planet: fix the script dynamically generating the planet's config
Fixes https://pagure.io/fedora-infrastructure/issue/9799

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2021-03-30 16:29:16 +02:00
Pierre-Yves Chibon
18ad21119b iddev: have the playbook call certbot directly
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2021-03-30 15:24:36 +02:00
Pierre-Yves Chibon
8708d57804 iddev: try proxying to cergetter01 over https
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2021-03-30 15:15:39 +02:00
Pierre-Yves Chibon
54c65489ae iddev: try fixing the indentation
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2021-03-30 15:02:06 +02:00
Pierre-Yves Chibon
63863e6248 iddev: more fixes for the echo command
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2021-03-30 15:00:40 +02:00
Pierre-Yves Chibon
b46fed01b8 iddev: fix the echo line
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2021-03-30 14:58:26 +02:00
Pierre-Yves Chibon
0b7cae97a9 iddev: another attempt to get the playbook to handle the certs automatically
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2021-03-30 14:54:29 +02:00
Pierre-Yves Chibon
472b59038f iddev: try to get letsencrypt to renew the certs for us in the playbook
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2021-03-30 14:43:26 +02:00
Pierre-Yves Chibon
daf7776a9d yumrepos: be RHEL7/CentOS7 compatible
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2021-03-30 14:36:04 +02:00
Pierre-Yves Chibon
eefdc6f33b yumrepos: import the EPEL7 public key
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2021-03-30 14:34:01 +02:00
Pierre-Yves Chibon
aa3769d3bf yumrepos: Add an original-epel7.repo file for RHEL7/CentOS7 in aws
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2021-03-30 14:31:29 +02:00
František Zatloukal
48af0e1675 oraculum: Use a different branch on stg for test 2021-03-30 11:16:41 +02:00
Kevin Fenzi
ddbda78af2 basessh: should be an else here
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-03-29 21:13:48 -07:00
Kevin Fenzi
a1121be991 basessh / pagure: undo change to everyone using git user, as we are not doing this now
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-03-29 20:57:58 -07:00
Frank Ch. Eigler
16c2d3676d debuginfod: correct sqlite3->sqlite rpm package name 2021-03-29 19:26:11 -04:00
Frank Ch. Eigler
8d40bc0b51 debuginfod: reduce verbosity, improve debuggability
Have Dockerfile add a few rpms needed for "oc rsync" and "oc rsh" diagnostics.
Reduce default verbosity to -vv to avoid flooding logs with traversal msgs.
Reduce scanner concurrency to 3, considering limited cpu resources on .stg.
2021-03-29 22:59:12 +00:00
110084afb1 cleanup: remove phx2 hosts files 2021-03-29 22:49:35 +00:00
f8c683ffa8 cleanup: use iad2 composer 2021-03-29 22:48:10 +00:00
2f5f939a83 cleanup: change group_var datacenter from phx2 to iad2 2021-03-29 22:45:02 +00:00
35a43317d4 cleanup: remove unused PHX2 related host_vars/group_vars 2021-03-29 22:45:02 +00:00
Kevin Fenzi
fc2db16120 iptables / kojibuilder: add some more ports needed by ipa-clients
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-03-29 15:20:00 -07:00
Owen W. Taylor
801f96c950 Rebase flatpak-indexer to include robustness improving upstream commits
git shortlog 665c80047a7c15145faa8d77b60fadd2feebb1e1..be75c716bae720c45e720f8e1cecab01f4355bd3
Owen W. Taylor (4):
      Make code to handle disconnections shared between DeltaGenerator and Differ
      Indexer: Remove unchanged-registry-data short-circuit
      Cleaner: check for and remove dangling tardiff:result objects
      Differ: Handle the case where a queued task references a missing spec
2021-03-29 21:27:02 +00:00
Frank Ch. Eigler
d402df0fbe debuginfod: fix route->service port: 8002 2021-03-29 17:15:20 -04:00
Frank Ch. Eigler
e5fcf29be1 debuginfod: reduce initial container resource reqs to 12GB RAM and 1 CPU 2021-03-29 16:56:23 -04:00
Frank Ch. Eigler
7114616688 debuginfod: standardize on debuginfod-storage[-stg] as PVC etc. name 2021-03-29 16:45:17 -04:00
Frank Ch. Eigler
b5dc1fa04c debuginfod: PVC s/koji-volume/fedora-koji/ 2021-03-29 16:31:24 -04:00
Frank Ch. Eigler
0732c6c72b debuginfod: limit to f32 and up, fix PV storage accessMode 2021-03-29 20:27:30 +00:00
Owen W. Taylor
94ad45c15d flatpak-indexer: Fix the mount path for the redis data volume
Redis is configured to store its data in /data, so mount the persistent
volume there rather than on /var/lib/redis/data.

Signed-off-by: Owen W. Taylor <otaylor@fishsoup.net>
2021-03-29 13:38:10 -04:00
Owen W. Taylor
30c5662b93 Update flatpak-indexer to add F34 release information
$ git shortlog 999b10d..665c800
Owen W. Taylor (1):
      release_info.py: Update for F34 => branched
2021-03-29 16:09:30 +00:00
Kevin Fenzi
04e67d381e inventory: add dl01-05 to staging_friendly
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-03-29 08:54:49 -07:00
Pierre-Yves Chibon
86113c8c7c mirrormanager: get MM to always ask for the signed_fpca group
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2021-03-29 15:45:59 +02:00
Pierre-Yves Chibon
3be8f2c71b fedocal: Don't let stg send reminder emails
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2021-03-29 15:03:14 +02:00
Stephen Smoogen
917d633e8d Add mirror.dst.ca to mirrors 2021-03-29 09:02:14 -04:00