James Antill
3821ea36b5
Cleanup nft merge. Chg osbuildapi and nft_custom_rules to use nft_table_filter.
...
Signed-off-by: James Antill <james@and.org>
2026-05-01 15:29:04 -04:00
Jiri Kyjovsky
8daa7e4eb1
copr: revert inventory changes, and birthday
2025-11-23 22:34:22 +01:00
Jiri Kyjovsky
f935ba42b7
copr-keygen-dev: specify the backend private ip
2025-11-23 20:12:57 +01:00
Jiri Kyjovsky
9001be94ca
copr-devel: moving devel infrastructure to fedora43 [part 1]
2025-11-09 22:29:16 +01:00
James Antill
80aa4bbbc2
Initial version of iptables to nftables conversion.
2025-01-16 11:28:24 -05:00
1bf81f7ae6
copr-be-dev: migrate to a new VM
...
- testing that mdadm & lvm works after respin
- test networking
2024-11-29 20:36:25 +01:00
f11eb65ffc
copr-infra: setup root passwords
...
This is useful when trying to fix things like /etc/fstab
https://fosstodon.org/@praiskup/113557853677016655
2024-11-29 09:44:21 +01:00
13945a7f06
Revert "copr-be-dev/copr-kg-dev: keep services disabled for now"
...
This reverts commit 21d6565e94
2024-11-27 23:26:39 +01:00
21d6565e94
copr-be-dev/copr-kg-dev: keep services disabled for now
2024-11-27 22:22:46 +01:00
c8f3bbd731
copr-be-dev: a new private IP address
2024-11-27 22:19:36 +01:00
5c4f8b6ae4
copr: cleanup unused config
2024-03-12 13:18:23 +01:00
4df602f3ac
copr-dev: enable services (all on F39 now)
2023-11-22 16:40:17 +01:00
e0d5464fdf
copr-be-dev/copr-kg-dev: fix private IPs
2023-11-22 16:38:44 +01:00
9cb3183a9d
copr-dev: services disabled
...
Per https://docs.pagure.org/copr.copr/how_to_upgrade_persistent_instances.html
2023-11-21 11:59:59 +01:00
21be6fd294
copr: use smtp-auth-relay for all hosts
2023-06-19 11:08:23 +02:00
8d891f9b32
smtp-auth-relay: reset main.cf
...
The postfix_group is used on multiple places.
2023-06-19 10:26:46 +02:00
82205131b7
smtp_auth_relay: new role, use by copr-dist-git-dev for now
2023-06-19 10:10:43 +02:00
207719282e
copr-be-dev: fix public IP
2022-11-30 13:27:02 +01:00
aa6c08f1bc
copr-keygen-dev: fix backend's private IP (incoming iptables rules)
2022-11-30 13:12:19 +01:00
0b7c3fdd95
copr-be-dev: new IP addresses
2022-11-22 23:37:52 +01:00
Jakub Kadlcik
5ef9e5130d
copr: drop birthday, enable services for keygen-dev and distgit-dev
2022-11-22 17:25:57 +01:00
Jakub Kadlcik
9e39477532
copr: set services_disabled to true for dev instances
2022-11-17 23:30:32 +01:00
7173e269bc
copr: support for generating metrics on copr keygen
2021-12-07 12:15:24 +01:00
a9c8dda4ca
copr: auto-setup the ipv6 configuration
...
Turns out that, even though IPv6 is configured on the initial VM boot,
the IPv6 needs manual tweeks and reboot (or nmcli dance). Related to:
https://pavel.raiskup.cz/blog/switch-fedora-box-to-ipv6-in-aws.html
2021-11-30 13:35:23 +01:00
Jakub Kadlcik
bef4b72199
copr: define services_disabled per instance
...
AFAIK we use `services_disabled: true` only when upgrading our severs
from Fedora N to Fedora N+1 which is a big task and we go instances
one by one. Maybe the easier ones in parallel but copr-backend
requires full attention for sure.
If we set `services_disabled: true` for the whole devl/production, we
can't test if the services on each server are starting properly nor we
can't run at least the frontend until all servers are ready.
Let's configure the variable per instance, so whoever is upgrading it
can disable/enable the services when needed.
2021-11-30 02:14:01 +01:00
Jakub Kadlcik
68da3e2977
copr: update backend IP address in the firewall
2021-11-29 20:37:28 +01:00
Jakub Kadlcik
43e9489cc6
copr: update copr-be-dev private IP address
2021-11-29 00:20:58 +01:00
Jakub Kadlcik
493b26446d
copr: update keygen IP tables to allow a new copr-be-dev instance
2021-11-19 19:19:28 +01:00
580cd252c5
Inventory group/host variables: Sort yaml
...
This was done using yq (
https://mikefarah.gitbook.io/yq/operators/sort-keys )
Doing things this way makes it much easier to see if a variable is set
in a file or if two hosts differ in what variables they set. Hopefully
we can keep things sorted moving forward.
Basically this means just sort a-z anything you add to any host or group
vaiable and it will be in the right place.
Additionally, this enforces 'normal' intent rules for all the variable
files which we should also try and obey. 2 spaces for first level, 3 for
next, etc. When in doubt you can run yq on it.
This should cause NO actual vairable changes, it's all just readability
fixing for humans, ansible parses it exactly the same.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-11-16 13:27:57 -08:00
a2d65ff508
Move devel servers to elastic IPs, too
2021-01-18 14:58:58 +01:00
ff896361d8
copr-be-dev, copr-keygen-dev: new VMs with temp IPs
2020-11-11 09:22:09 +01:00
e0378b95ad
copr-be-dev: new (elastic) IP
2020-11-10 10:53:42 +01:00
75c9114d72
copr-keygen-aws: I can not use vars from parent group var file
2020-04-24 21:34:25 +02:00
595c8803fd
copr-keygen-aws: better protect against typos
2020-04-24 21:34:24 +02:00
47560e8426
copr_keygen_dev_aws: fixup iptables rules
...
And sync both copr_keygen_aws and copr_keygen_dev_aws so we can easily
diff them.
2020-04-24 21:34:24 +02:00
2e11c7020e
copr: add copr_keygen*aws group vars
2020-04-24 21:34:24 +02:00
