Commit Graph

96 Commits

Author SHA1 Message Date
Jakub Kadlcik
742f68d258 I've added some templates, but forgot to install them 2019-06-11 02:17:13 +02:00
Jakub Kadlčík
022ed16be9 Fix indentation 2019-06-07 00:17:24 +02:00
Jakub Kadlčík
f68efa7797 copr-dist-git: automatize cert renewal with certbot-renew.timer 2019-06-07 00:02:48 +02:00
Jakub Kadlčík
49d6f8343d copr: distgit: fix selinux context for letsencrypt, see d6b034984 2019-06-04 14:35:05 +02:00
Jakub Kadlčík
96de11a1bf Create manual playbooks for upgrading Copr instances
There is a problem with our current playbooks, that they can be
executed automatically without us knowing about it. That is an issue
particularly during release process because we can prepare new
packages into infra-tags repo or bodhi and a nightly reprovision
can upgrade to them outside of an outage window or any of us being
prepared for it.

Therefore `groups/copr-*.yml` playbooks *should not* upgrade any
packages, but only ensure, that those packages are installed. For
upgrade, there should be separate `manual/copr/copr-*-upgrade.yml`
playbooks. Because they are located under `manual` directory, it
is secured, that they can't be run automatically.
2019-05-01 18:39:27 +02:00
Miroslav Suchý
16c80501f5 copr: squash_actions is deprecated 2019-04-02 10:27:39 +02:00
clime
81ede91dd7 copr-dist-git: enable ssl conf for letsencrypt 2018-06-29 11:19:13 +02:00
clime
04f75f2423 copr-dist-git: include certbot role 2018-06-29 10:41:16 +02:00
clime
4daee14690 copr-dist-git-dev: install ssl.conf 2018-06-29 10:33:03 +02:00
clime
1fa75c53fa copr-dist-git-dev: include certbot role 2018-06-28 14:23:12 +02:00
Kevin Fenzi
a8714caab3 first cut at changing all the old |changed to is changed per ansible deprecations 2018-05-07 23:51:48 +00:00
clime
6122dd4901 copr-dist-git: create directory for custom SELinux policies 2018-01-03 14:18:43 +01:00
clime
c0631fed5d copr-dist-git: give map permission on git_user_content_t to cgit 2018-01-03 14:07:40 +01:00
Kevin Fenzi
afef097a3d switch all the include tasks to import tasks 2017-10-17 17:37:03 +00:00
Kevin Fenzi
a4ca0db30c more include cleanups 2017-10-15 20:22:53 +00:00
clime
6d2dadf8b5 copr-dist-git: switch selinux to enforcing 2017-07-31 09:39:15 +02:00
clime
420205573a copr-dist-git: remove no longer needed groups 2017-07-19 19:20:43 +02:00
clime
1a29d4f8c9 copr-dist-git: install scl-utils-build to able to parse scl-enabled specfiles 2017-07-18 16:14:59 +02:00
clime
474f0c5648 copr-dist-git: pre-create some more groups 2017-06-27 22:27:27 +02:00
clime
aa871d3842 copr-dist-git: raise number of inodes for the mounted tmpfs volume 2017-06-09 08:14:50 +02:00
clime
fedf0525b0 copr-dist-git: make /tmp tmpfs mount larger in size 2017-05-23 11:22:02 +02:00
clime
ca805c553d copr-dist-git: logrotate fix 2017-04-11 02:46:31 +02:00
clime
c470ebc124 copr-dist-git: remove unnecessary chown on /var/lib/copr-dist-git 2017-04-11 02:46:31 +02:00
clime
fba2becab3 copr-dist-git: use now what is built in @copr/copr-dev and @copr/copr repos 2017-04-10 15:23:09 +02:00
clime
3692faa1e8 copr-dist-git: compatibility fixes for the latest dist-git and copr-dist-git upstream 2017-04-10 14:35:02 +02:00
clime
34a4e94cab copr-dist-git: basically the current copr-dist-git user is no longer needed
only copr-service is (user under which copr-dist-git service currently runs)
2017-03-05 10:51:18 +01:00
Kevin Fenzi
2508622b74 enable syntax highlight on copr-dist-git 2017-03-05 01:34:24 +00:00
clime
2a81a086ed copr-dist-git: adjust devel setup according to the current state of dist-git upstream 2017-03-04 10:27:49 +01:00
clime
90a56ab59d copr-dist-git: set groups for copr-service user at the point of its creation 2017-02-23 17:22:25 +01:00
clime
3dc7d772c9 copr: prepare deploy of new dist-git upstream package to copr-dist-git-dev 2017-02-13 20:59:28 +01:00
clime
197b291809 copr-dist-git; create users and groups beforehand with predefined uids and gids
...so that we don't need to chown huge amount of files after deploy
2017-01-21 12:11:59 +01:00
clime
1354d0201c copr-dist-git: move non-critical long-running tasks to the playbook end
...so that the machine can operate meanwhile
2017-01-20 20:19:25 +01:00
clime
986292e1b6 copr-dist-git: use directory recurse to set ownership of cgit_pkg_list file 2017-01-19 22:42:31 +01:00
clime
f92cf56dff copr-dist-git: use dnf ansible module instead of yum 2017-01-19 16:13:31 +01:00
clime
48cf5488e0 copr-dist-git: use dnf ansible plugin instead of yum-deprecated shell command 2017-01-19 16:11:50 +01:00
Kevin Fenzi
b1a2d105c9 In ansible 2.2 always_run is depreciated. Switch to check_mode. 2016-11-01 16:29:49 +00:00
Kevin Fenzi
4e0d8bad1d Move these to templates as we have some variables to set. 2016-09-25 16:32:47 +00:00
Kevin Fenzi
79a0cb2dce Make cgitrc and cgitrc.slow files and copy them over instead of lineinline and a remote copy that changes every run. 2016-09-25 16:25:53 +00:00
clime
a09c776cca add copr-service to docker group for copr-dist-git.service 2016-09-19 18:47:02 +02:00
clime
5ebe0801a7 upgrade copr-dist-git if higher version is available 2016-09-19 16:56:27 +02:00
clime
25b81efb87 fix clone url for copr-dist-git 2016-09-15 13:34:00 +02:00
clime
5463c97775 display clone url in copr cgit repos 2016-09-09 10:12:59 +02:00
Kevin Fenzi
746faca21c comment duplicate scan-path lineinfile that was making 2 tasks change every run 2016-07-21 16:20:49 +00:00
Miroslav Suchý
0113684f11 copr: clean /tmp periodicaly
this is needed mainly due rpm2gem which left files behind
See:
https://github.com/fedora-ruby/gem2rpm/issues/85
2016-07-14 16:37:37 +02:00
Miroslav Suchý
cc79a1be34 copr: switch copr-dist-git to permissive 2016-07-12 09:25:56 +02:00
Miroslav Suchý
cc1658ce3a copr: performance tunning of cgit
See
https://lists.zx2c4.com/pipermail/cgit/2016-July/003153.html

Lets make cron job, which generate the cgitrc file.

Generate the cgitrc every hours and set TTL to 2 hours.
2016-07-11 14:42:48 +02:00
Miroslav Suchý
7f5d1823dc copr: configure cgit cache 2016-06-30 11:42:35 +02:00
Kevin Fenzi
aca2819807 Replace command with idempotent seboolean module 2016-06-29 19:02:24 +00:00
Miroslav Suchý
76f124fc40 copr: use robots.txt for dist-git 2016-06-29 14:12:04 +02:00
Miroslav Suchý
10e94b4a99 copr: allow httpd to run cgit 2016-06-29 13:21:28 +02:00