infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions
Fedora Infrastructure Ansible Repository
29576 commits 9 branches 0 tags 110 MiB
Find a file
Tim Flink 8c96b12e65 resultsdb: set sebool httpd_execmem=true for fedora-messaging 
After the upgrade to fedora-messaging-2.0.1, we started seeing a bunch of 500s
coming out of resultsdb. Turns out that selinux was blocking part of the code
that was emitting messages on rabbitmq. This is apparently a known issue in
python-cryptography [1] and their docs say that the sebool deny_execmem needs
to be off.

Since this is executed by apache, this leads to httpd_execmem needing to be true.
I still don't understand why this started suddenly - the underlying issue in
python-cryptography has been there for a while. Either way, I'm changing the
sebool for resultsdb machines to make sure it doesn't continue to cause problems
for things that are submitting results to resultsdb.
2020-04-24 21:34:21 +02:00
cache_plugins try a custom cache plugin, then. 2020-04-24 21:34:15 +02:00
callback_plugins fedora_messaging_callback: This should be a } not a ) 2020-04-24 21:34:16 +02:00
files autocloud: fare well autocloud, you served long and well... 2020-04-24 21:34:17 +02:00
filter_plugins Drop another place where openshift_pseudohosts_stg is. 2020-04-24 21:34:15 +02:00
handlers autocloud: fare well autocloud, you served long and well... 2020-04-24 21:34:17 +02:00
inventory copr: aws-builders: swap images in x86_64/aarch64 2020-04-24 21:34:21 +02:00
library Revert "armv7 create: move back to python2 and hope it works again." 2020-04-24 21:34:15 +02:00
playbooks adjust s390x ips for sshfs mount 2020-04-24 21:34:21 +02:00
roles resultsdb: set sebool httpd_execmem=true for fedora-messaging 2020-04-24 21:34:21 +02:00
scripts koji db: set things to copy backup from 02 and not 01 now. 2020-04-24 21:34:14 +02:00
tasks virt_instance_create: drop duplicate facts dropping and add a new task to gather at the end. 2020-04-24 21:34:20 +02:00
vars and get its timer also. 2020-04-24 21:34:20 +02:00
.gitignore [release-monitoring] Add librariesio consumer 2020-04-24 21:34:09 +02:00
.mailmap Add a .mailmap to map all my commits to one author in git shortlog. This is purely for my sanity, but also demonstrates how someone else could do similarly if needed. 2018-08-27 22:56:55 +00:00
CONVENTIONS Fix typo in doc 2016-04-04 14:33:21 +00:00
master.yml Drop the ci playbook from the master one 2020-04-24 21:34:18 +02:00
README A whitespace change. Is it committing right? 2020-04-24 21:34:16 +02:00
README.cloud remove some jenkins lines 2018-04-26 15:40:14 +00:00
README.md Add readme 2018-11-22 21:52:38 +01:00
STYLEGUIDE style: add initial style guide 2019-06-21 20:53:30 +00:00
TODO test 2018-05-09 02:55:42 +00:00

README.md

Fedora Infrastructure

Welcome! This is the Fedora Infrastructure Pagure project.

issues against this project are for issues in Fedora Infrastructure.

git repo of this project is misc scripts and tools for Fedora

If you are looking for the Fedora Infrastructure ansible repo, that is not here, look at:

https://infrastructure.fedoraproject.org/cgit/ansible.git/

If you would like to help out with Fedora Infrastructure, see:

https://fedoraproject.org/wiki/Infrastructure/GettingStarted and https://fedoraproject.org/wiki/Infrastructure_Apprentice