These directories have 32k entries and when scrapers hit them it causes
kojipkgs to slow to a crawl since it takes minutes to stat all those
files. There is no need to allow indexes here, as ostree doesn't need or
use them, so just disallow it so the scrapers don't nuke kojipkgs.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
These directories have usually around 32k objects in them.
This means when a client asks for a directory index for them
it takes kojipkgs a few minutes to actually generate it, because it has
to stat every single file in order to show timestamps and sizes.
This means it fills up all slots doing this and the proxies start
getting 503's from it on other requests.
I don't _think_ ostree needs this enabled for any reason.
If it did, it would always have been a problem.
I think it's just some clients/crawlers deciding they want the directory index.
So, lets just deny indexes on directories under there.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
Adds a script which will compress rotatelogs not being used and delete logs
after 8 days (same as logrotate).
Signed-off-by: James Antill <james@and.org>
This will unify all the handlers to use first uppercase letter for
ansible-lint to stop complaining.
I went through all `notify:` occurrences and fixed them by running
```
set TEXT "text_to_replace"; set REPLACEMENT "replacement_text"; git grep
-rlz "$TEXT" . | xargs -0 sed -i "s/$TEXT/$REPLACEMENT/g"
```
Then I went through all the changes and removed the ones that wasn't
expected to be changed.
Fixes https://pagure.io/fedora-infrastructure/issue/12391
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
fix 1900 failures of the following case issue:
`name[casing]: All names should start with an uppercase letter.`
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
Allow access to gstreamer1-plugin-openh264 package and new noopenh264
stub package that don't contain non-distributable code, while keeping
openh264* and mozilla-openh264* blocked.
See https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=2247274 for
"noopenh264" stub package review that makes it possible to build/ship
the gstreamer plugin in Fedora proper while keeping the
non-distributable openh264 package in Cisco repos.
Since we no longer have any machines in phx2, I have tried to remove
them from ansible. Note that there are still some places where we need
to remove them still: nagios, dhcp, named were not touched, and in cases
where it wasn't pretty clear what a conditional was doing I left it to
be cleaned up later.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
python-requests sets this to "gzip, deflate", and when it tries to download an aarch64 vmlinuz,
it gets (correctly) reported as Encoding: gzip.
This triggers automatic gzip decompression by urllib3, resulting in the following error:
Expected to download 6529431 bytes, downloaded 15618560
Unsetting Accept-Encoding request header tells mod_deflate it should not send the Encoding: gzip
header, avoiding the auto-decompression by urllib3.
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
dist-repos the feature formerly known as signed-repos puts all of its
work under /mnt/koji/dist-repos/ so lets expose it to the world.
Signed-off-by: Dennis Gilmore <ausil@fedoraproject.org>
