The old key we were using for old releases had some sha1 in it
somewhere, so rhel10 rejects it (great!). So, lets use a newly generated
key that is acceptable to rhel10 and much nicer.
This adds the public key file, the repos that use that file, the rhel10
post kickstart that sets up the repo, robosignatory to sign epel10-infra
stuff with this new key and finally on rhel10 hosts put the new repo in
place.
Note that this only changes the rhel10 setup, all rhel8/9 machines are
still using the old key. We may want to move them over, or just not care
as we retire all of them.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
The epel/10 symlink tracks the latest EPEL 10 minor version, which
targets CentOS 10. The epel/10z symlink tracks the EPEL 10 minor
version corresponding to RHEL 10. Since we're using RHEL 10 in the
infrastructure, we need to use epel/10z to ensure compatibility.
Follow up to 1963b068d3.
Signed-off-by: Carl George <carlwgeorge@gmail.com>
There's no super right answer here, but if we point to a specific minor
release here it means we have to move all machines to it when we change
it, and we have to remember to do so.
If we just use '10' and depend on the link that points to the latest
minor:
lrwxrwxrwx. 1 root root 4 May 19 17:12 /srv/web/repo/rhel/rhel10/10 -> 10.2/
then we don't have to keep changing this all the time, it will just
update when that link changes.
This doesn't leave us an easy way to keep some hosts back to the old
minor, but in practice we pretty much never do this anyhow.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
Using `git grep el6` and `git grep el7` and variants like EL-7 or
el-7, I found various entries and files which were no longer needed
with the current ansible. I updated text or tests to later versions of
RHEL as needed.
found entries for the fedora ami's for the original cloud and removed
those entries also.
Signed-off-by: Stephen Smoogen <ssmoogen@redhat.com>
There's no reason any of these should be http.
https://infrastructure.fedoraproject.org should be valid and work
everywhere.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
Currently, I (Stephen Smoogen) do not have the time to work on Fedora
system administration items. However, I get a lot of email and people
see my email address in various places to ping me for working on
things. I feel it would be better to remove myself from those places
and let Fedora Infrastructure add someone else to replace me when it
is possible to do so.
Signed-off-by: Stephen Smoogen <ssmoogen@redhat.com>
Additionally, newer fedora complains about it being invalid.
It was used back in the yum days and never ported to dnf.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
We have some hosts that run on archived/EOL Fedora releases, their
repository URLs need to reflect that.
Signed-off-by: Nils Philippsen <nils@redhat.com>
