Commit Graph

45253 Commits

Author SHA1 Message Date
Adam Williamson
1d65a5dd55 testdays: update git URL to forge
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-01-26 23:34:39 -08:00
Adam Williamson
f07a93576f openqa: drop a stray - from a variable definition
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-01-26 15:42:09 -08:00
Adam Williamson
ae2cd3530b roles/openqa/server: drop OpenID auth support
We've been using OAuth2 for prod and stg for some time now, so
let's clean this up.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-01-26 15:40:50 -08:00
Adam Williamson
4e4a12f2c3 roles/openqa/server: show more builds on the front page
We only have two job groups, so the front page is a bit sad and
empty. Let's show 10 builds per group, not 3.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-01-26 15:37:24 -08:00
Greg Sutcliffe
40cc20185a Zabbix: fix more hosts/groups for apache-status
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-01-26 14:18:01 +00:00
Greg Sutcliffe
a72e5b2fbf Zabbix: fix different handling of /apache-status on proxy hosts
Seems like the proxies don't want to handle port 80 nicely, I get
errors in Zabbix for them using localhost:80/apache-status (which
works elsewhere, like sundries). However using https/443 seems to
work, so we'll do that instead.

Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-01-26 11:39:48 +00:00
Greg Sutcliffe
3b9f1808a2 Zabbix: fixes infra/tickets#12976 - add apache-status monitoring
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-01-26 11:22:52 +00:00
Jiri Kyjovsky
de8f2a8197 copr: add emulated riscv64 resalloc tags 2026-01-26 10:17:11 +01:00
Kevin Fenzi
1b938e0c7a Revert "koji: re-block some koji endpoints due to scrapers"
This reverts commit ffbcb36d91.

We no longer need this after the blocking of that abusive ASN.
2026-01-25 10:46:37 -08:00
Kevin Fenzi
27a81038b9 proxies: block a bunch of networks from an abusive asn
This asn is hammering koji links.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-01-25 10:32:48 -08:00
Kevin Fenzi
ffbcb36d91 koji: re-block some koji endpoints due to scrapers
They are hitting these endpoints really hard.
Might be able to lift it later...

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-01-25 10:24:17 -08:00
Adam Williamson
ec42689b4d Update fedora-nightlies URLs for forgejo migration
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-01-23 18:48:32 -08:00
Adam Williamson
804efd40d1 Update pagure.io/fedora-qa to forge.fedoraproject.org/quality
Quality org has completed moving repos to Forgejo (all but one),
so let's update all of these.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-01-23 15:31:46 -08:00
Greg Sutcliffe
ac05b2c713 DHCP: update mac for x86-copr02 - fix typo
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-01-23 13:26:12 +00:00
Greg Sutcliffe
e073db663d DHCP: update mac for x86-copr02
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-01-23 13:23:35 +00:00
David Kirwan
c7b256b857 communishift: wip shutting down projects marked for deletion
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2026-01-23 13:23:03 +00:00
Greg Sutcliffe
263a84d3b5 Zabbix: forgot README update for new Zabbix scripts
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-01-23 10:22:46 +00:00
Greg Sutcliffe
01ab35531a Zabbix: fixes infra/tickets#12992 - add IPA backup monitoring
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-01-23 10:22:29 +00:00
Kevin Fenzi
daf6c8871e download-ib01/iso01: drop old centos linux sync attempting
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-01-22 16:10:22 -08:00
Greg Sutcliffe
00e4eb6b3d Proxies: Fixes #13051 - remove old cert management for getfedora
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-01-22 22:39:24 +00:00
Gregory Bartholomew
7e69bf85e8 redirect torrent.fp.o to fp.o/torrents
Signed-off-by: Gregory Bartholomew <gregory.lee.bartholomew@gmail.com>
2026-01-22 22:31:24 +00:00
Adam Williamson
2a8f208ce6 Fix qa redirect (remove trailing slash)
The qa.fp.o redirect is to a wiki page, it should not have a
trailing slash.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-01-22 14:16:53 -08:00
Kevin Fenzi
f3406c7ee7 anubis-el: add missing check for port
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-01-22 10:50:15 -08:00
Kevin Fenzi
4e9729d938 anubis: fix ports for el vs non el versions
I mistakenly changed the port in the fedora/non el one, that was
correct.

Need to add the port in the el one for selinux to allow httpd to work.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-01-22 10:44:20 -08:00
Kevin Fenzi
896ab6360b download: block subnet thats using rclone against master mirrors
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-01-22 10:35:44 -08:00
Kevin Fenzi
07940d97ac download / anubis: fix typo of file vs copy module
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-01-22 10:26:24 -08:00
Kevin Fenzi
6ceb3ea68b download: enable/finish anubis for other download servers
Fixed up a few things missed and caught in testing on dl01:
* need to setup subuid/subgid files for podman
* need to allow the right port for httpd to listen in selinux
* need httpd network connect to allow it to connect to anubis
* adjust worker values, we were not using prefork for a long time
so the values were just default up them a bunch.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-01-22 10:16:22 -08:00
Kevin Fenzi
9717d920af anubis: rename anubis-el8 to anubis-el and see about enabling on download
Looks like the scrapers are hitting the download servers now.
So, look at setting up an anubis pod there like we did for pagure.
anubis package isn't available for epel9, so we just use the container.

Will test this with dl01 and tweak until it's working.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-01-22 08:50:34 -08:00
Michal Konecny
57db17afb3 [flatpak-indexer] Run the correct command
The flatpak-indexer-build needs to run only pytest as done in upstream.
Otherwise it fails on missing commands.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-01-22 13:51:42 +01:00
Michal Konecny
83b60d7c3c [flatpak-indexer] Use the correct ImageStreamTag
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-01-22 13:46:37 +01:00
Michal Konecny
71c56a448f [flatpak-indexer] Fix indentation
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-01-22 13:12:40 +01:00
Michal Konecny
bf4f2520ea [flatpak-indexer] Fix the git ref for branch
Upstream repo doesn't have staging and production branches. So let's
just go with main. In case of redis use the branch where the fix is introduced.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-01-22 12:30:44 +01:00
Michal Konecny
78235160d4 [flatpak-indexer] Fix deployment in openshift
The project has plenty of updates upstream. This commit reflects that
changes in deployment.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-01-22 11:19:25 +00:00
Adam Williamson
d76afa032b Move the qa-landingpage reverse proxy config removal
...we already have a better place to do this, it turns out.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-01-21 15:44:01 -08:00
Adam Williamson
521897ede9 sigh, tags
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-01-21 15:05:23 -08:00
Adam Williamson
b67fe0f32f Remove qa-landingpage proxypassreverse config
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-01-21 14:58:44 -08:00
Adam Williamson
a994e1031a Gah, drop the when as well
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-01-21 14:46:39 -08:00
Adam Williamson
c2f25426e8 Try and fix the qa redirect
ugh, it's hard to understand this stuff.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-01-21 14:46:16 -08:00
Adam Williamson
2a5465404f proxies-redirects: add a tag for the qa redirects
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-01-21 14:36:47 -08:00
Adam Williamson
382f947eff Drop qa-landingpage, clean up blockerbugs config a bit
Per https://pagure.io/fedora-qa/issue/859 we want to drop the QA
landing page at qa.fedoraproject.org. This should turn it back
into a redirect to the wiki page. We also drop the certificate
for qa.fp.o (since blockerbugs uses the wildcard certificate
anyway) and remove a duplicate reverseproxy entry for blockerbugs
(we had two otherwise-identical entries that were restricted to
prod and stg with `when` conditions).

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-01-21 14:29:13 -08:00
Kevin Fenzi
d30bdfb3ed pagure / staging: add missing endif
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-01-21 13:40:38 -08:00
Anton Medvedev
82f9af8767 feat(roles/pagure): adding myself as pagure admin on stg
Signed-off-by: Anton Medvedev <amedvede@redhat.com>
2026-01-21 21:37:26 +00:00
Greg Sutcliffe
0e0b5f92c6 Zabbix: add shush/ok scripts and playbook
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-01-21 17:00:06 +00:00
Anton Medvedev
edf4cf6030 fix(poddlers): fix empty topic
Signed-off-by: Anton Medvedev <amedvede@redhat.com>
2026-01-21 11:37:34 +01:00
Anton Medvedev
e525e4011b feat(poddlers): reintroduce unretire plugin for poddlers
Signed-off-by: Anton Medvedev <amedvede@redhat.com>
2026-01-21 11:17:10 +01:00
Ryan Lerch
8ee3cdae56 [forge] fix json in group mapping
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2026-01-21 14:32:57 +10:00
Akashdeep Dhar
e59252d689 Map teams/groups for the design namespace
Signed-off-by: Akashdeep Dhar <akashdeep.dhar@gmail.com>
2026-01-21 14:27:09 +10:00
Gregory Bartholomew
53cbfac4e6 dl.fedoraproject.org: make *-CHECKSUM files download
This is another attempt at 86696cf. Appearently the condition must be
set to "always" in order to for the header to be "persisted across
internal redirects".

Signed-off-by: Gregory Bartholomew <gregory.lee.bartholomew@gmail.com>
2026-01-21 01:00:17 +00:00
Kevin Fenzi
a754144f19 Update infra pagure.io links to forge.fp.o (WIP)
This should update all the references we have to
https://pagure.io/fedora-infrastructure to the
new https://forge.fedoraproject.org/infra/tickets/ area.

Do not merge this before the migration on tuesday.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-01-20 14:39:40 -08:00
Jakub Kadlcik
7d56f15586 copr-be: upgrade production builders to F43
Fix https://github.com/fedora-copr/copr/issues/4001

I updated the `copr_builder_images.hypervisor.x86_64` even though the image is
not uploaded there yet because the HV is currently down.

Somebody needs to run this when it gets back online:

    STAMP=$(date -I) \
    ARCHES=x86_64 \
    TARGETS=libvirt \
    copr-upload-builder-images /var/lib/copr/public_html/images/2026-01-14/
2026-01-20 15:50:20 +01:00