infra/ansible
24
5
Fork 48
Code Pull requests 12 Activity Actions
46,368 commits 10 branches 0 tags 157 MiB
Commit graph

205 commits

Author SHA1 Message Date
Miro Hrončok
a9adce6136 robosignatory: enable signing on f45-python 2026-06-01 21:09:43 +00:00
Patrik Polakovič
a1c7d0828a Fedora 42 is now End Of Life
Some checks failed
Linter / yamllint (pull_request) Successful in 26s
Details
Linter / ansible-lint (pull_request) Failing after 1m0s
Details
AI Code Review / ai-review (pull_request_target) Successful in 11s
Details 
Signed-off-by: Patrik Polakovič <patrik@alphamail.org>
 2026-05-28 20:33:06 +02:00
Paul Whalen
d9e17ab93c IoT: sign stable with f44 key 
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
 2026-04-27 14:29:43 +00:00
Patrik Polakovič
46fbcc5567 Branch Fedora 44 from Rawhide 
Signed-off-by: Patrik Polakovič <patrik@alphamail.org>
 2026-02-05 19:10:58 +00:00
Kevin Fenzi
1bf508dc18 Revert "[robosignatory] Increase the prefetch value" 
This reverts commit 4fdd0c9fca.

This causes robosignatory's priorities to not work.
We want to handle some requests before others, but if we prefetch 25 of
them, there could any mix of requests and we wouldn't process the most
important ones first.
 2026-01-30 09:39:58 -08:00
Kevin Fenzi
da680d4ee9 robosignatory: sign f44 also with the f45 ima key 
We are resigning in prep for branching next week, we need to also make
sure to sign things with the f45 ima key.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2026-01-29 09:19:51 -08:00
Samyak Jain
c71e1f8bab robosignatory: also allow resigning f44 tagged packages with f45 key 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2026-01-28 15:38:55 +00:00
Anton Medvedev
dcd31e878e feat(robosignatory): f44-rebuild autosigning mass rebuild tag 
Signed-off-by: Anton Medvedev <amedvede@redhat.com>
 2026-01-14 13:54:50 +00:00
Samyak Jain
259264b36e Fedora 41 is now EOL 
Signed-off-by: Patrik Polakovič <patrik@alphamail.org>
 2025-12-15 19:14:06 +01:00
Samyak Jain
4f2bf475b5 Revert "Fedora 41 is now EOL" 
EOL is shifted to december 10.

This reverts commit 717323a450.

Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2025-11-28 15:50:14 +05:30
Michal Konecny
4fdd0c9fca [robosignatory] Increase the prefetch value 
The robosignatory is currently stuck on one failing message, this should
allow it to process other messages in queue as well even when there is
one bad message.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2025-11-28 10:55:48 +01:00
Samyak Jain
717323a450 Fedora 41 is now EOL 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2025-11-27 19:43:32 +05:30
Paul Whalen
f305bdc57a IoT: sign stable with f43 key 
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
 2025-10-23 17:23:20 -04:00
Carl George
79259c6911 Implement variables for EPEL minor version management 
This introduces a set of variables for managing infrastructure changes
as EPEL minor versions change over time.  This should drastically
simplify our changes during EPEL mass branching.  This also drops the
earlier attempt of EPELCycleNumber and EPELBootstrapNumber variables,
which are no longer used.

Signed-off-by: Carl George <carlwgeorge@gmail.com>
 2025-08-24 22:01:26 -05:00
Samyak Jain
a0d0e67578 robosignatory: switch eln to fedora-44 key 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2025-08-12 14:35:47 +00:00
Samyak Jain
bdbe1b4120 robosignatory: also allow resigning f44 tagged packages 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2025-08-12 14:35:47 +00:00
Samyak Jain
4418d1d001 Branch Fedora 43 from Rawhide 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2025-08-12 14:35:47 +00:00
Kevin Fenzi
c0d8d62a64 autosign: allow resigning eln packages with fedora-44 key 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-08-11 12:24:23 -07:00
Samyak Jain
8b7b4a8368 robosignatory: also allow resigning f43 tagged packages with f44 key 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2025-08-05 16:43:49 +00:00
Kevin Fenzi
0f1a3e91d3 robosignatory: disable f43->f43 signing to process mass rebuild faster 
Also, comment section we will need in a few weeks to resign all of f43
with f44 key for branching.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-27 08:47:31 -07:00
Samyak Jain
ddfe9e6a5d robosignatory: f43-rebuild auto signing mass rebuild tag as builds happen 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2025-07-23 03:55:25 +00:00
Samyak Jain
3915d964dd robosignatory: enable signing on f43-perl 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2025-06-27 08:55:05 +00:00
Samyak Jain
abcf1c8e76 robosignatory: enable signing on f43-python 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2025-05-22 05:05:52 +00:00
Samyak Jain
f8d06a6812 F40 is now EOL 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2025-05-13 14:58:24 +00:00
Kevin Fenzi
c581b79099 robosignatory: fix stable f42 cosmic-atomic signing, which was missing 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-04-19 20:53:30 -07:00
Paul Whalen
f967081b3a IoT: sign stable with f42 key 
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
 2025-04-11 11:58:49 -04:00
Kevin Fenzi
c2e61b09ab robosignatory: add f42 cosmic-atomic to signing 
We added this atomic desktop, we need to sign it now. :)

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-03-23 08:51:51 -07:00
Kevin Fenzi
a235e2f53c robosignatory: add cosmic-atomic to f43/rawhide signing 
We added this in pungi-fedora, so its sitting there trying over and over
to sign it. We need to either merge and deploy this, or revert
the pungi-fedora changes, kill rawhide compose and re-run.

Seems easier to just push this. ;)

+1s?

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-03-13 10:07:24 -07:00
Carl George
2e3eaabb1c Branch epel10.0 from epel10 
Signed-off-by: Carl George <carlwgeorge@gmail.com>
 2025-02-18 16:26:40 +00:00
Samyak Jain
7880b13991 robosignatory: also allow resigning f43 tagged packages 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2025-02-05 07:38:50 +00:00
Samyak Jain
ccb83f5e63 robosignatory: switch eln to fedora-43 key 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2025-02-05 01:42:32 +05:30
Samyak Jain
fd17adce36 Branch Fedora 42 from Rawhide 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2025-02-04 15:02:50 +00:00
Samyak Jain
fb06fb5d5c Resign f42 builds with f43 key 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2025-01-30 09:50:15 +00:00
Kevin Fenzi
8fa1e3de8c robosignatory: autosign f42 mass rebuild tag 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-01-13 15:01:00 -08:00
Kevin Fenzi
d279fdc48d autosign: remove f39 from signing 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-11-26 11:02:58 -08:00
Paul Whalen
912cac3238 IoT: sign stable with f41 key 
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
 2024-10-25 15:04:23 -04:00
Kevin Fenzi
8a0f0dae94 robosignatory: switch eln to fedora-42 key 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-08-14 14:30:32 -07:00
Kevin Fenzi
0e4e647574 robosignatory: also allow resigning f42 tagged packages 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-08-13 08:04:33 -07:00
Samyak Jain
5096677f85 make robosignatory changes for f41 branching 
Remove resigning of 41 keys with 42; updated artificats to f41 and rawhide to f42;
updated infra-candidate/openh264 for new f42; f41 signing pending, buildsidetags etc

Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2024-08-13 14:13:43 +00:00
Kevin Fenzi
d967d2ae46 robosignatory: fix f42 key signing 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-08-08 07:13:47 -07:00
Kevin Fenzi
509e3fe2d2 Resign f41 builds with f42 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-08-08 06:20:32 -07:00
Samyak Jain
e99d5ce645 robosignatory: f41-rebuild auto signing mass rebuild tag as builds happen 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2024-07-16 09:45:58 +00:00
Kevin Fenzi
d11f9c5ced epel7 retirement 
Drop epel7 all the places in ansible where it is and makes sense.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-07-03 20:00:59 +00:00
james02135
e244c454d8 Add epel-10 sidetag signing 
Signed-off-by: james02135 <james02135@hotmail.com>
 2024-06-20 13:05:57 +00:00
james02135
9f5ab7b7b6 robosignatory: Use epel-10 key for appropriate tags 
Signed-off-by: james02135 <james02135@hotmail.com>
 2024-06-17 09:53:48 +00:00
Samyak Jain
ac33b4287a robosignatory: sign f41-perl side tag 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2024-05-28 17:47:31 +00:00
Samyak Jain
f4d3bf434b robosignatory: sign f41-python side tag 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2024-05-28 17:47:31 +00:00
Kevin Fenzi
d366194a22 module-build-service (mbs): retire service 
With the EOL of Fedora 38 yesterday, we are no longer building any
modules and can retire our module build service.

Note that toddlers needs to be adjusted still, that will happen after
this.

Thanks for all the modules!

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-05-22 13:38:53 -07:00
Samyak Jain
9438b39fd1 F38 is EOL 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2024-05-21 14:33:13 +00:00
Paul Whalen
4a8c9ecf96 IoT: Sign stable with f40 key 
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
 2024-04-22 12:53:38 -04:00