The previous deployment of Redis has issue with the latest version and
the docker.io is failing on ratelimit. So let's build the redis
deployment from the flatpak-indexer Dockerfile. For details see infra/tickets#13390
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
For infra/tickets#13351
This makes a staging rhel10 vm thats just the same size / place
as pagure-stg01.
It still needs external ip's and nat in from those, but this should be
enough to install it and start setting things up.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
Set the systemd-boot package to build on secure-boot channel and set all
the normal permissions for that that other secure-boot builds have.
Add the systemd-boot cert to pesign config so it can be signed by the
right cert.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
test_models.py is not packaged, so we need to use a modified
patch file with the changes to that file stripped.
Signed-off-by: Adam Williamson <awilliam@redhat.com>
728b6c57a3 inadvertently put the
annotations in the wrong place for bodhi-celery (in spec, not in
metadata).
Signed-off-by: Adam Williamson <awilliam@redhat.com>
See https://github.com/fedora-infra/bodhi/pull/6110 . We want to
be able to gate (only) Fedora ELN kernel updates via gating.yaml
(RemoteRule). However, if we just turned on the RemoteRule policy
for "fedora-eln", suddenly hundreds of existing gating.yamls which
specify "fedora-*" would apply to ELN, which we don't want.
To solve this, we will make Bodhi use "eln" not "fedora-eln" as
the product_version for ELN. That requires us to add "eln" to the
null policies. Let's also enable RemoteRule for "eln" at the same
time. This should not cause any existing policies to apply (unless
there are any which just specify '*', I guess) but will allow us
to add a kernel policy that applies to 'eln'.
Signed-off-by: Adam Williamson <awilliam@redhat.com>
Set DEBUG=true for staging OpenShift deployment (both the main
Deployment and the sync CronJob) to enable debug logging.
Remove the entire roles/blockerbugs/ directory which was the old
VM-based deployment (Apache/WSGI). This role has been fully
superseded by roles/openshift-apps/blockerbugs/ and is not
referenced by any playbook.
Assisted-by: Claude Opus 4.6
* nftables: (2 commits)
Cleanup nft merge. Chg osbuildapi and nft_custom_rules to use nft_table_filter.
...
Signed-off-by: James Antill <james@and.org>
We were copying in the req instead of the ca, so this messaging hook has
been broken for a long while. This is the hook that notifys on uploads.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
