Commit graph

41,854 commits

Author SHA1 Message Date
58f8c45973 [mailman] Use xapian as a backend for fulltext search
The whoosh engine doesn't seem to be maintained anymore and when generating the
index it got stuck when the size was about 20 GB. Xapian on the other hand looks
more stable and much quicker when generating the index.

Unfortunately the xapian-haystack package is not available in Fedora/EPEL yet
and waiting for review to be finished.

Link to review bug: https://bugzilla.redhat.com/show_bug.cgi?id=2313507

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-10-07 07:43:36 +00:00
4dcd6929e1 Add openssl-devel-engine to the multilib list
https://bugzilla.redhat.com/show_bug.cgi?id=2315672
2024-10-05 17:34:33 +00:00
3e0989ae7e nfs/client / buildvm: do not show this as changed for check runs ever
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-10-05 09:14:20 -07:00
Davide Cavalca
a5f6a7c2ff Add missing gtk4 multilib packages 2024-10-04 21:37:05 +00:00
ca26655f73 fedora-coreos-pipeline: Add Mick Tarsel to owners
For help looking at ppc64le failures and doing some development.
2024-10-04 21:21:33 +00:00
Jeremy Cline
96094a15d4 cloud-image-uploader: use .cert suffix to appease skopeo
Skopeo fails to login with:

FATA[0000] authenticating creds for "registry.stg.fedoraproject.org": creating new docker client:
missing client certificate registry-fedoraproject.cert for key registry-fedoraproject.key

It seems it is rather picky about the suffix, even though the docs
mentioned both crt and cert being used.
2024-10-04 21:06:52 +00:00
4521007e25 ppc64le-test02: put in cloud group for now
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-10-04 14:05:12 -07:00
349730a38a c-i-u: try 'name' not 'secretName' when projecting secrets
This is what's in the docs, and it blew up with secretName...

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2024-10-04 13:31:06 -07:00
e70c7f9969 bvmhost-x86-riscv01: update ip address info
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-10-04 13:28:05 -07:00
Jeremy Cline
f8cad3cd92
fedora-image-uploader: Add the push cert for registry.fedoraproject.org
To push images, we need to use a client certificate and key[0]. Add
those to the image uploader container.

[0] 7a10d32e16/f/playbooks/groups/releng-compose.yml (_144)
2024-10-04 16:17:18 -04:00
d3831e8178 ppc64le-test02: setup network config
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-10-04 11:11:32 -07:00
c53deb118f ppc64le-test02: add ccd file
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-10-04 10:53:42 -07:00
16d03722b1 ppc64le-test02: add power10 test instance at osuosl
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-10-04 10:50:13 -07:00
Jeremy Cline
c443794a41
fedora-image-uploader: Adjust stage registry URL
The container can't reach the old URL, but can talk to this one.
2024-10-04 11:52:08 -04:00
56cdb275af [mailman] Increase the lvm size for staging
Now that the fulltext search index is finally generated, we need to resize the
LVM again. That should be the last time.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-10-04 09:01:01 +02:00
4b2cb0d132 proxies / staging: fix website for bugs redirect on staging
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-10-03 18:35:27 -07:00
47334a564e certificates / staging: new cert for *.apps.ocp.stg
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-10-03 17:48:39 -07:00
c04dd50fbf certificates: move to new 2024 wildcard fedoraproject.org cert
The old one expires in about 57 days, but might as well just renew it
early and avoid problems later.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-10-03 16:50:01 -07:00
Jeremy Cline
09e774f4a9 Reapply "fedora-image-uploader: Add staging config for container uploads"
This reverts commit 15dbcbb7ac, which was
a revert of commit 5e0ad1134d (pr #2200).

Adam Williamson got rid of the need for buildah so hopefully we won't
run into lots of permission issues.
2024-10-03 22:45:13 +00:00
51390ae115 proxies / iad2: memory to 16g
proxy01/10 were bumped to 16gb a while back, so make sure the ansible
host vars match that.

proxy101/110 (the internal ones used by hosts inside iad2) had only 8g
and were looking pretty loaded. So, bump them up to 16gb as well in
ansible. I already manually increased them to 16g, but this way if we
reinstall them they will be correct.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-10-03 14:32:03 -07:00
14eda1f16e kojira / staging: use correct conditionals for stg/prod
I got the conditionals backwards here.
We only want to drop those things in koji 1.35.0 in staging, but keep
them in production.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-10-03 12:23:43 -07:00
1cab62674b koji / manual / staging sync: fixes from recent sync
* The password was being set to the prod one
* The allowed ip in the database was the phx2 one. ;(
* The sequences were too low, prod already passed those, so increase
  them.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-10-03 10:03:52 -07:00
Jakub Kadlcik
826c2f8c7f copr: make sure python3-copr-common is always up to date
Fix https://github.com/fedora-copr/copr/issues/3437
2024-10-03 13:22:10 +02:00
ace9d37537 proxies: fix odcs redirect and add bugs redirect
For ticket 12030 we want to add a 'bugs.fedoraproject.org' redirect to
the page on how to file bugs. This does that and also cleans up an
ordering issue to finish off odcs redirects.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-10-02 14:00:38 -07:00
b9ec7574ad nfs/client: fix copypasta
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-10-02 12:02:16 -07:00
592f0c8f3c nfs/client: add a nmcli c up eth0 for buildvms / clean old stuff
buildvm's when reinstalled have systemd-resolved with no info in it,
doing a nmcli c up eth0 will cause NM to refresh systemd-resolved.
We need this for mounting nfs volumes so it can resolve the netapp.

Also, drop phx2 route stuff thats no longer needed.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-10-02 11:49:34 -07:00
6524d745d2 virt_instance_create: drop python3 handling
We don't have any python2 using virthosts left (except one)
so lets try dropping this special handling here and just let ansible
sort out that it should use python3.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-10-02 10:50:20 -07:00
f5ceec7303 inventory / all vars: try adding a 'state: up' to default network-connections
On builders currently, they install and everything is up, but
NetworkManager doesn't tell systemd-resolved the new information
(nameservers, search domains, etc). Hopefully adding this will allow it
to actually tell systemd-resolved about it.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-10-02 09:03:09 -07:00
b4fdeeefd8 Revert "Fix ansible_python variable missing"
This reverts commit 60a02a8c7e.
2024-10-02 13:55:04 +02:00
60a02a8c7e Fix ansible_python variable missing
This should fix the `'ansible.vars.hostvars.HostVarsVars object' has no
attribute 'ansible_python'` error when trying to run buildvm.yml playbook with
ppc64le builder.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-10-02 12:46:15 +02:00
Lenka Segura
43a8132ec2 distgit: Add group_modify ACL to distgit token
Signed-off-by: Lenka Segura <lsegura@redhat.com>
2024-10-02 11:20:15 +02:00
04a661b60d kojipkgs: move to f40
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-10-01 15:59:58 -07:00
86fa3d87f5 proxies: move to f40
We still want to probibly do reinstalls on these, but move them to f40
via upgrade for now.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-10-01 14:41:59 -07:00
0028d383e0 inventory: drop copr_db_stg and group since it no longer seems defined
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-10-01 14:24:27 -07:00
James Antill
4680f6089b Wait for host to come back, for ipa/rabbitmq restarts.
Signed-off-by: James Antill <james@and.org>
2024-10-01 18:58:11 +00:00
a3a40cddf1 rabbitmq / staging: no need for eln-distrosync queue in staging
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-10-01 11:08:28 -07:00
a300e295bf update numbers of reserved instances for builders
additionally slightly bump up priority of aarch64 builders so they are likely used for src.rpm building
2024-10-01 10:44:25 +02:00
2ce17f4745 koji / staging: more memory for koji01.stg
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-09-30 17:55:05 -07:00
654979219b vhost_reboot: clean up some old ocp stuff
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-09-30 10:41:51 -07:00
a6b405d31e vhost_reboot: what a lovely delegation
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-09-30 10:39:29 -07:00
6667a00f28 vhost_reboot: delegate to correct host
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-09-30 10:14:46 -07:00
7fd4ed4c67 vhost_update: allow prompt to set targets for update / reboot
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-09-30 10:01:06 -07:00
81b2f70ba6
firmitas: move configuration mount point
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2024-09-30 14:13:35 +01:00
17aeb2c7a8
firmitas: add PVC volume mounts for cronjob and deployment
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2024-09-30 14:03:25 +01:00
Jiri Kyjovsky
612e4276f4 copr: dynamically specify builder volume size
See https://github.com/fedora-copr/copr/issues/3268
2024-09-30 11:06:29 +00:00
ffcc5d8195 [mailman] Another try with command module
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-09-27 15:09:03 +02:00
2c31607cf1 [mailman] Use command instead script module
Script module is for executing local scripts rather use command.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-09-27 10:47:30 +02:00
a5ed1c6a2a [mailman] Add script to enable DMARC mitigation
This script is added to implement
https://pagure.io/fedora-infrastructure/issue/11427

The script was already executed on staging environment and finished without
issue. It could be executed multiple times and only affects list that don't have
the settings set yet. I will document this as another step to take when creating
a new list.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-09-27 08:35:11 +00:00
4d5243ee7f [mailman] Increase the LVM size for staging
The size of fulltext index for staging is roughly around 200 GB, which causes
nagios to alert about disk space. Let's increase the default space for future deployment.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-09-27 09:41:59 +02:00
e57c80b0dd
Poddlers: update config from the Toddlers changes
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-09-27 09:04:20 +02:00