Commit Graph

44975 Commits

Author SHA1 Message Date
Greg Sutcliffe
222ecbf573 Zabbix: apply load macro to all copr hosts instead of just the backend
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-12-10 10:54:25 +00:00
Ryan Lerch
f5a1e46632 forge: add seperate group mapping for staging
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-12-10 20:19:29 +10:00
Pavel Raiskup
17fc107bac copr-be: disable storinator backups (the server is being moved) 2025-12-10 09:18:30 +01:00
Kevin Fenzi
144a8e55c4 proxy110: move to f43
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-12-09 16:16:49 -08:00
Kevin Fenzi
452cb142ac virthost: install collectd on fedora based virthosts
collectd would be nice on bvmhost-p10-01/02.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-12-09 15:40:08 -08:00
Kevin Fenzi
f24a9cbda9 dhcpd: fix more duplicates
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-12-09 13:07:40 -08:00
Kevin Fenzi
a9418545f3 dhcp: fix mgmt ips for rdu2-cc mgmt
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-12-09 12:06:30 -08:00
Kevin Fenzi
065a89faeb pagure.io: increase processes
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-12-09 11:34:04 -08:00
Kevin Fenzi
79c110457c proxies: do not sync docs if they are already synced
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-12-09 11:33:19 -08:00
Greg Sutcliffe
b46074af58 Zabbix: Add the correct shebang to the Datanommer script
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-12-09 17:08:17 +00:00
Greg Sutcliffe
8bea488272 Zabbix: Add Datanommer monitoring to noc01
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-12-09 16:59:35 +00:00
Miroslav Suchý
360d90e907 bump up number of reserved instances 2025-12-09 14:31:52 +01:00
Greg Sutcliffe
426ef4df32 Zabbix: Increase vcpu to zabbix01
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-12-09 10:56:16 +00:00
Tomas Hrcka
aca5a237fc [forge] - Add forge-infra-* groups mappings to infra org
Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
2025-12-09 09:30:17 +00:00
Pavel Raiskup
287960a5d6 copr: more power in AWS, since hypervisors are being moved to a different lab 2025-12-09 10:16:57 +01:00
Akashdeep Dhar
23f52cc48a anubis: allow Pagure attachment paths for Fedora Forge references
Allow attachment file requests (/issue/raw/files/*) through Anubis for
Fedora Forge integration, while maintaining the usual bot protection.

Signed-off-by: Akashdeep Dhar <akashdeep.dhar@gmail.com>
2025-12-08 22:01:54 +00:00
Akashdeep Dhar
1a58c8ff14 Restrict the changes to the staging environment temporarily
Signed-off-by: Akashdeep Dhar <akashdeep.dhar@gmail.com>
2025-12-08 22:00:38 +00:00
Akashdeep Dhar
ed1103649c proxies/forge: proxy attachment requests from Forge to Pagure
redirect attachment file requests from Fedora Forge to Pagure for migrated
projects, allowing attachments to remain on this existing instance without
needing to be migrated.

Signed-off-by: Akashdeep Dhar <akashdeep.dhar@gmail.com>
2025-12-08 22:00:38 +00:00
Kevin Fenzi
29a4165b81 nagios: pagure/pagure-stg: adjust smtp ssl check to use external ips
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-12-08 13:33:03 -08:00
Kevin Fenzi
e2eeee78f2 nagios / pagure.io/stg.pagure.io: setup external hosts for these
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-12-08 12:46:13 -08:00
Kevin Fenzi
929f957cb2 nagios: fix check_disk on the client side of log01
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-12-08 12:29:33 -08:00
Kevin Fenzi
a7a060af87 nagios: use logging_rdu3 host group and drop non rdu3 duplicate group
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-12-08 11:48:31 -08:00
Kevin Fenzi
737608a2e2 Revert "nagios / external: try and put pagure01 in rdu3_external to see if that makes noc02 happy"
This reverts commit 2d3797de65.

This just adds confusion, try reverting it for now.
2025-12-08 11:09:56 -08:00
Kevin Fenzi
fd342ee1a4 pagure.io: forbid generating archives from forks
pagure will generate a zip or gz archive of any particular thing on a
fork. scrapers crawl this and generate an archive for every single
tag in a fork.

Since we don't really need these in forks, lets forbid that.

Users that somehow need an archive for a fork can clone locally and
generate one. Non forks we are leaving enabled at this time as they
can/do use this for releases.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-12-08 10:15:16 -08:00
Kevin Fenzi
88686312db pagure: enable rewriteengine
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-12-08 10:03:20 -08:00
Kevin Fenzi
8fbcbac96d pagure: fix order of operations to not block after proxying (which will not work)
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-12-08 10:00:54 -08:00
Kevin Fenzi
b88b92a719 pagure: disable /blame/ on pagure.io
The blame endpoint gets crawled a lot by scrapers and it's very
intensive for pagure. It has to run the blame in the git repo, which
can take a while and requests pile up.

While right now load is fine with it, it's might be causing
sporadic 503's that we are seeing cloing things. If there's a bunch
of blame requests cloging up the queue.

Users can git clone and run a blame locally if they need to.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-12-08 09:57:07 -08:00
David Kirwan
3d2ce0e251 forgejo: replace instances of forgejo
- correct typo for distgit across role

Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2025-12-08 17:11:27 +00:00
Greg Sutcliffe
df6f219bcd Zabbix: Use new external API endpoints for COPR hosts
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-12-08 16:46:04 +00:00
Greg Sutcliffe
6ed61b6b5a Zabbix: Bump load limits for copr-be and p10 hosts
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-12-08 16:09:47 +00:00
David Kirwan
6f92a973ff forgejo: rename dist-git playbook, fix typo in role name
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2025-12-08 15:09:11 +00:00
David Kirwan
fc4ab99572 forgejo: update distgit playbook to target correct role
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2025-12-08 14:20:17 +00:00
David Kirwan
46b9264ba8 forgejo: distgit playbook
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2025-12-08 14:16:15 +00:00
Jiri Kyjovsky
6bf2cc4cd8 copr: move pulp-redirect file to persistent storage 2025-12-07 18:05:20 +00:00
Kevin Fenzi
557a9df3af pkgs: adjust procs and threads too
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-12-06 10:19:15 -08:00
Kevin Fenzi
ea1a9a5b6b proxies: block /history/ and /blame/ on the web interface of src.
Scrapers are crawling these endpoints and pkgs01 takes a while to call
git on the backend and return data to them. This causes latency to
increase a bunch because it's got all those blame and history requests
it's processing so it can't process more important things.

So, lets just block these for now. Any users who need them can easily
git clone locally and run history/blame just fine.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-12-06 10:10:35 -08:00
Kevin Fenzi
b61fef52f4 varnish: also cache ttf files
These fonts are kind of hit a lot, no need to send to the pkgs01 backend
for them, we can just cache them in varnish for clients.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-12-06 10:10:35 -08:00
Kevin Fenzi
d9ea824473 pkgs01: sync apache values with what we have on pagure.io
This will increase some values to allow for handling
scrapers better. In any case it doesn't seem to hurt.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-12-06 10:10:35 -08:00
Kevin Fenzi
b6e8f0cad8 pkgs01: bump to 48G memory
This might help with handling scrapers.
2025-12-06 10:10:35 -08:00
Mattia Verga
7517b2ce1e bodhi: upgrade to F43 and 25.11.2
Signed-off-by: Mattia Verga <mattia.verga@tiscali.it>
2025-12-05 20:42:51 +00:00
Kevin Fenzi
a7402ebf5f anubis: allowlist productmd
The python productmd library hits kojipkgs to find recent
composes/compose information. It's not easy for it to adjust on the
client end, but it does send a user-agent header like "productmd/1.49"
So, lets just allowlist it for now.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-12-05 10:09:49 -08:00
David Kirwan
185e0c81ed forgejo: wip distgit role
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2025-12-05 14:28:04 +00:00
Michal Konecny
8f4e37a1f6 db01.stg: Double the amount of CPUs
Bodhi messaging queue on staging has around 1 000 000 messages in it and
after some investigation it seems that the processing is blocked on
database. Let's bump the amount of CPUs to 8.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2025-12-05 14:11:30 +01:00
Kevin Fenzi
6ff7ce78ce pkgs01: double cpus to 32
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-12-04 18:15:38 -08:00
Kevin Fenzi
99633bb861 backup: use external pagure01 ip
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-12-04 14:31:14 -08:00
Kevin Fenzi
f4e7495b01 virthost: increase nrpe proc limits
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-12-04 14:27:46 -08:00
Kevin Fenzi
57a4b9da41 nagios: make log01 not monitor / and have a higher limit for /var/log
/ and /var/log are the same filesystem on log01, so it makes little
sense to monitor both. Just monitor /var/log and increase it's limits.
We are going to archive things, but likely in january.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-12-04 14:23:11 -08:00
Gregory Bartholomew
bfcd857278 retire legacy fedora websites repo phase 2
Signed-off-by: Gregory Bartholomew <gregory.lee.bartholomew@gmail.com>
2025-12-04 20:48:05 +00:00
Kevin Fenzi
68d7014d04 collectd: delete some old fedmsg roles
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-12-04 12:28:49 -08:00
Greg Sutcliffe
5443368122 Zabbix: Add RabbitMQ monitoring ... to the correct role
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-12-04 14:27:59 +00:00