Commit Graph

38215 Commits

Author SHA1 Message Date
Michal Konečný
05c8f26f1d [release-monitoring] Use the correct folder for pushd
My mistake, let's fix this.

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
2022-12-05 14:18:59 +01:00
Michal Konečný
31c1c7bca7 [release-monitoring] Add npm to build config - staging
Javascript and CSS dependencies for Anitya are now managed by npm. Let's reflect
this in Anitya buildconfig.

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
2022-12-05 14:07:34 +01:00
Pavel Raiskup
ed39dbd82b copr-fe-dev: open port 5000
This will allow us to run a testing web-server (without Apache and
wsgi), and e.g. trace using 'import pdb'.
2022-12-04 15:07:09 +01:00
Pavel Raiskup
361deff545 inventory/copr: drop unused host vars
Complements: 2667ac065f
2022-12-04 15:05:35 +01:00
Pavel Raiskup
2667ac065f inventory/copr: drop unused hosts/vars
The non-aws variant is not used for a looong time.  It just confuses
contributors now.  The stg is not used either.
2022-12-04 15:02:29 +01:00
Kevin Fenzi
70530bf832 proxies: drop some old openshift3 things
fas, openshift kerneltest and the old openshift console/api are no more.
Remove them now to fix up reverseproxy templates.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-12-03 20:47:00 -08:00
Kevin Fenzi
531eee95d3 proxies / reverseproxy: try and fix template to be correct.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-12-03 20:39:13 -08:00
Kevin Fenzi
3c5ae163f9 proxy: simplify reverseproxy template
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-12-03 20:29:36 -08:00
Adam Williamson
3fc8903111 openQA: install from updates-testing on prod and stg again
I think the recent git builds are good and I want them everywhere
so I can merge a bunch of things and clean up before the weekend.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2022-12-02 14:40:21 -08:00
Kevin Fenzi
823fadedf8 notifs: use localhost for smtp in prod too
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-12-01 16:29:07 -08:00
Kevin Fenzi
249886e228 move compose-x86-01 to f37
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-12-01 10:54:11 -08:00
Kevin Fenzi
55d5bc5502 compose-rawhide01/compose-branched01: move to f37
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-12-01 10:48:25 -08:00
Stephen Smoogen
aef2250f24 update the mirrorsdate graph to 2023 2022-12-01 12:24:11 -05:00
Kevin Fenzi
bc0abc5594 kojipkgs: move to f37
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-11-30 17:01:01 -08:00
Kevin Fenzi
ed584bc419 proxies: remove stray copy-pasta
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-11-30 16:36:11 -08:00
Kevin Fenzi
9e9215b934 f37 uplift
Upgraded proxies and builders to f37. We have a reduced timeframe to get
this done before the holidays, so this time we just upgraded them in
place. Usually we do a full reinstall. We will try and do that next
cycle.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-11-30 16:31:23 -08:00
Kevin Fenzi
b20a65e4fa koji-hub: try moving webkitgtk to heavybuilder for aarch64 builders
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-11-30 11:23:57 -08:00
Adam Williamson
bf501ee013 openqa: disable updates-testing on lab for now
Due to https://progress.opensuse.org/issues/121054 , waiting for
upstream review on my proposed fix.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2022-11-30 08:59:43 -08:00
Pavel Raiskup
207719282e copr-be-dev: fix public IP 2022-11-30 13:27:02 +01:00
Pavel Raiskup
aa6c08f1bc copr-keygen-dev: fix backend's private IP (incoming iptables rules) 2022-11-30 13:12:19 +01:00
Pavel Raiskup
89018eecac copr-be-dev: fix the private IP address
This is needed to correctly configure iptables rules on the keygen side.
2022-11-30 13:03:50 +01:00
Pavel Raiskup
d4f86e3364 copr-be-dev/copr-fe-dev: drop birthday
This was a leftover.
2022-11-30 10:50:38 +01:00
Lukas Holecek
c6df495552 waiverdb: Set fixed number of processes ans threads
New waiverdb container image starts 8 gunicorn web worker processes by
default using WEB_CONCURRENCY environment variable. This causes memory
to spike (over 500MiB) and workers to get terminated.

Instead of increasing memory limits, a better solution is to decrease
the number of processes and increase number of threads since the app
mostly waits on DB requests to finish and waiverdb workers themselves
are thread-safe.
2022-11-30 09:47:52 +00:00
Pavel Raiskup
cb2908cc48 copr-dist-git: don't re-add SWAP volume
This volume has been dropped, we now use the /swap swap-file, same as
the other Copr servers.
2022-11-30 09:55:30 +01:00
Kevin Fenzi
337548123a koji01/02 t0 f37
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-11-29 15:36:46 -08:00
Jakub Kadlcik
dec22b4762 copr: install lvm2 package on copr-backend 2022-11-29 23:03:37 +01:00
Jakub Kadlcik
ee1f6638a6 copr: restart systemd-oomd after changing its config 2022-11-29 22:46:43 +01:00
Jakub Kadlcik
1e56a328b8 copr: use SwapUsedLimit=80 for systemd-oomd on all copr servers 2022-11-29 22:25:55 +01:00
Pavel Raiskup
5107c13c9c copr/base: better detect ipv6 config
Check the connection configuration, not the actual device setup (device
setup might be automatically configured, but still non-working).
2022-11-29 21:43:11 +01:00
Pavel Raiskup
e21db9be97 copr-dist-git: typo in the restart_services.yml import 2022-11-29 17:54:00 +01:00
Michal Konečný
febe7abd90 [the-new-hotness] Fix the syntax error in config
Signed-off-by: Michal Konečný <mkonecny@redhat.com>
2022-11-29 15:05:32 +00:00
Pavel Raiskup
6dc43e2d23 copr: disable zram0 swap
We maintain swap partitions ourselves, and zram0 complicates our lives
for multi-swap use-cases:
https://bugzilla.redhat.com/show_bug.cgi?id=2051154
2022-11-29 16:04:07 +01:00
Pavel Raiskup
b69b07c110 copr-dist-git: use the default swap layout 2022-11-29 16:04:07 +01:00
Michal Konečný
851f1474f8 [the-new-hotness] Add new templates to config
Reflect changes introduced in https://github.com/fedora-infra/the-new-hotness/pull/537

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
2022-11-29 15:34:28 +01:00
Kevin Fenzi
b1b0923af0 openshift 3.11: raise a glass!
Our openshift 3.11 cluster(s) served us long and well.

Now we have everything finally moved to the openshift 4 clusters (fas2
was the last holdout). We can finally retire this. :)

🎉🥂

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-11-28 13:08:01 -08:00
Pavel Raiskup
4948de43a3 copr-keygen: fix "private" ipv4 address to fix firewall 2022-11-28 19:50:04 +01:00
Jakub Kadlcik
4bdce0d462 copr: drop birthday and enable services 2022-11-28 19:17:33 +01:00
Pavel Raiskup
8a1d3a64f6 copr-be: promote f37 images to production 2022-11-28 18:44:02 +01:00
Pavel Raiskup
f7b53ea28a copr-keygen: services enabled 2022-11-28 18:30:16 +01:00
Pavel Raiskup
2bb712b026 copr-base: ipv6.may-fail yes 2022-11-28 18:25:41 +01:00
Jakub Kadlcik
f0ba42ac38 copr: drop birthday and enable services on production frontend
This reverts commit 94178e08e5.
2022-11-28 18:17:21 +01:00
Pavel Raiskup
694554c4aa aws_cloud: temporarily work with rsa by default 2022-11-28 17:57:48 +01:00
Jakub Kadlcik
94178e08e5 Revert "copr: drop birthday and enable services on production frontend"
This reverts commit 65a06bd718.
2022-11-28 17:38:08 +01:00
Ondřej Budai
6ba8b69e3e koji_builder: fix the script for updating osbuildapi
The awk helper responsible for extracting IP addresses from the resolvectl
call could handle only 2 of them.
It turns out that api.openshift.com now has 4 A records, therefore this method
became flakey: It added only 2 addresses to the IP set, so if the osbuild
plugin used one of the 2 ignored addresses, the call failed.

This commit solves it by introducing a different method of parsing the
resolvectl output:

We now use an ugly but working sed command that erases everything from the
line except for the IPv4 address. Therefore, I had to quote the echo before
the new sed command so it can get a proper multiline input. Also, I limited
resolvectl to just use IPv4 because the new script cannot handle IPv6
properly. This doesn't cause any harm because api.openshift.com isn't
actually accessible by IPv6. Sigh...
2022-11-28 15:51:28 +00:00
Jakub Kadlcik
65a06bd718 copr: drop birthday and enable services on production frontend 2022-11-28 16:43:28 +01:00
Pavel Raiskup
9e4f3363d8 copr-keygen: new backend's private IP 2022-11-28 16:32:41 +01:00
Pavel Raiskup
9482bc377d copr-be: run playbook against the new production machine 2022-11-28 16:17:44 +01:00
Jakub Kadlcik
b683427d3a copr: production birthday=yes, disable_services=true and uncomment copr-be-temp 2022-11-28 14:50:35 +01:00
Adam Williamson
2cb4e8363a openqa: drop stg worker scratch build
there's a newer build in updates-testing, now.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2022-11-25 16:18:07 -08:00
Adam Williamson
6aa77e9423 openqa: try and fix on-disk encryption stuff
Some of the openqa workers are encrypted and some aren't (this is a bit of a
mess that's partly a result of all the redeployments we did around
https://bugzilla.redhat.com/show_bug.cgi?id=2009585 ). We should only run
the nbde_client role on workers which are encrypted. Hopefully this gets that
right.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2022-11-25 16:10:11 -08:00