Commit Graph

26718 Commits

Author SHA1 Message Date
Konrad Kleine
cd55750d30 copr-be: use powerful builders for llvm snapshots
This was the ticket in which we requested high-performance builders in the first place: https://github.com/fedora-copr/copr/issues/2987
2025-08-21 13:10:55 +00:00
Ryan Lerch
ea53a45fc3 [forgejo] update admin group to sysadmin-forge
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-08-21 19:37:08 +10:00
Ryan Lerch
9ea5295dca [forgejo] update oauth config to match brand better
resolves: https://codeberg.org/fedora/forgejo-deployment/issues/144

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-08-21 18:48:30 +10:00
Ryan Lerch
90d7691f4b [forgejo] disable user deletion of forgejo accounts
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-08-21 08:36:21 +00:00
Akashdeep Dhar
ffbbaa2d68 refactor(mdapi): use env_suffix variable for hostname configuration
Replace hardcoded staging conditional logic with `env_suffix` template variable

Signed-off-by: Akashdeep Dhar <akashdeep.dhar@gmail.com>
2025-08-21 03:22:35 +00:00
Kevin Fenzi
81229d2315 torrent01: fix ipv4 config as well
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-08-20 14:07:53 -07:00
Kevin Fenzi
369337d0a0 update torrent and mediawiki configs for new ips
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-08-20 14:03:16 -07:00
David Kirwan
da2c3cc7bb forgejo: update the ipsilon config for forgejo staging
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2025-08-20 15:53:15 +00:00
Akashdeep Dhar
a56abdf8af openshift-apps/mdapi: Remove unused config files and simplify templates
- Remove myconfig.py, mdapi.cfg, and config.toml unused configuration files
- Remove associated ConfigMaps and volume mounts from templates
- Remove fedora-messaging related configurations and volumes
- Simplify hostname conditional logic in deploymentconfig template

Signed-off-by: Akashdeep Dhar <akashdeep.dhar@gmail.com>
2025-08-20 07:44:07 +00:00
Akashdeep Dhar
879bd775dc feat(mdapi): add GitHub webhook trigger to buildconfig
Add GitHub trigger with environment-specific secrets to enable
automatic builds on repository changes.

Signed-off-by: Akashdeep Dhar <akashdeep.dhar@gmail.com>
2025-08-20 04:40:31 +00:00
Pedro Moura
dc8968d34b removed easyfix role
Signed-off-by: Pedro Moura <pmoura@redhat.com>
2025-08-18 19:24:47 +00:00
Greg Sutcliffe
1d01f4d4e2 Zabbix: make the time-period for CPU load alerts configurable
in particular, sundries01 gets a massive CPU spike every hour
for about 15mins, so we set that host to 30m for an alert

Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-08-18 17:25:58 +01:00
Aurélien Bompard
34f4f8d119 Webhook2fedmsg: Allow the UI's OIDC callback URL
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-08-18 14:45:56 +02:00
Ryan Lerch
52063ee3d1 [forgejo] disable users able to log in with password
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-08-18 17:14:47 +10:00
David Kirwan
a899f6c4bb forgejo: set the correct hostname in the route
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2025-08-14 14:25:50 +01:00
Akashdeep Dhar
24f88e1ce6 fix(mdapi): add hostname argument for staging environment
Signed-off-by: Akashdeep Dhar <akashdeep.dhar@gmail.com>
2025-08-14 10:41:46 +00:00
James Antill
778711e986 updates-uptimes: Add {{files}} prefix to path.
Signed-off-by: James Antill <james@and.org>
2025-08-13 18:19:25 -04:00
Carl George
875b764644 batcave: re-enable CentOS 10 snapshot sync
https://codeberg.org/fedora/epel/issues/36

Signed-off-by: Carl George <carlwgeorge@gmail.com>
2025-08-13 21:11:05 +00:00
Carl George
c419dacd38 batcave: exclude more unnecessary paths from CentOS 10 sync
Signed-off-by: Carl George <carlwgeorge@gmail.com>
2025-08-13 21:11:05 +00:00
Michal Konecny
b82f406da8 [mdapi] Only reflect the GO changes on staging
Production is not ready yet to work with that changes. Let us separate
them using jinja templating.
2025-08-13 15:28:03 +02:00
James Antill
e29a37a23a updates-uptimes: Add dynamic uptime for main data. Fix cron (sigh 12h fix).
Signed-off-by: James Antill <james@and.org>
2025-08-12 17:20:21 -04:00
Kevin Fenzi
fd6828d7c8 buildvm-x86-riscv: increase max jobs a bunch
These vm's run tasks like newrepos and tagging, so they can handle a lot
more smaller jobs like that. Increase things to 128 for now.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-08-12 09:06:29 -07:00
Samyak Jain
a0d0e67578 robosignatory: switch eln to fedora-44 key
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2025-08-12 14:35:47 +00:00
Samyak Jain
bdbe1b4120 robosignatory: also allow resigning f44 tagged packages
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2025-08-12 14:35:47 +00:00
Samyak Jain
4418d1d001 Branch Fedora 43 from Rawhide
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2025-08-12 14:35:47 +00:00
Aurélien Bompard
b754a19491 w2fm: let the build know about the environment
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-08-12 15:45:20 +02:00
Akashdeep Dhar
50818352ab fix(mdapi): configure buildconfig to use Containerfile instead of Dockerfile
OpenShift was failing to build mdapi because it was looking for Dockerfile
but the repository contains Containerfile. Added dockerStrategy.dockerfilePath
configuration to specify the correct container build file.

Signed-off-by: Akashdeep Dhar <akashdeep.dhar@gmail.com>
2025-08-12 10:48:21 +00:00
Akashdeep Dhar
651b58cee2 badges: add client config for UI revamp testing
Signed-off-by: Akashdeep Dhar <akashdeep.dhar@gmail.com>
2025-08-12 07:31:16 +00:00
Akashdeep Dhar
f52650361b fix(mdapi): remove undefined myconfigpy-volume references
Remove volumemount references to myconfigpy-volume from cronjob and
deploymentconfig as the corresponding volume definition was missing,
causing OpenShift deployment failures.

Signed-off-by: Akashdeep Dhar <akashdeep.dhar@gmail.com>
2025-08-12 06:59:54 +00:00
James Antill
a0c202f3af updates-uptimes: More UI changes. Add history/diffstat. Add cron job.
Signed-off-by: James Antill <james@and.org>
2025-08-12 02:30:34 -04:00
Kevin Fenzi
c0d8d62a64 autosign: allow resigning eln packages with fedora-44 key
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-08-11 12:24:23 -07:00
Michal Konecny
91734c9f82 [datanommer] Increase memory limit to 2Gi
Datanommer crashed on big commit message (see
https://apps.fedoraproject.org/datagrepper/v2/id?id=e51ddae8-ba7e-409c-8329-697bac4d4680&is_raw=true&size=extra-large)
and it was killed by OOM.
Increasing the memory limit to 2Gi helped to process the message. So
let's make this change permanent.
2025-08-11 18:28:22 +02:00
Lenka Segura
8177465025 distgit: hotfix for links to accounts.fpo
Signed-off-by: Lenka Segura <lsegura@redhat.com>
2025-08-11 14:08:53 +02:00
Lenka Segura
ca10dca26a distgit: fix lint errors in distgit role
Signed-off-by: Lenka Segura <lsegura@redhat.com>
2025-08-11 13:06:25 +02:00
Jiri Kyjovsky
24a706e39f copr: powerful machines for rocm-packagers-sig/cs10-mathlib-preview 2025-08-11 09:56:05 +02:00
Kevin Fenzi
2a2f75daf1 base / iptables: don't remove iptables for now
This was a good change in theory, but in practice it's not.
The 'iptables-legacy' package provides 'iptables' so it gets removed,
but there's some things we still install that depend on it, so it just
gets pulled in later as a dependency.

Examples:

build* machines install oz and ImageFactory that need it
(but we can possibly drop those now)

virthosts have some libvirt subpackages that require it.

I'm not sure we can readd this in a targeted way or should just drop it
for now entirely.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-08-09 09:17:18 -07:00
Aurélien Bompard
b9c73dd6ee Forward Openshift logs to log01
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-08-09 15:55:03 +00:00
Kevin Fenzi
e57e3dd7e4 ipa/client: mode should be 640 on fedora instances
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-08-08 12:29:13 -07:00
Kevin Fenzi
2b21bc41e4 nfs / client: add some logging to the role to show what mount/dir it's called with
This is useful for places like releng-compose that mount a ton of things
and it's hard to tell which one is failing.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-08-08 12:17:31 -07:00
Kevin Fenzi
db0e5eb546 ipa / client: fedora systems use root:sssd ownership
On rhel the sssd dropin files (which need to be the same owner/group as
the main sssd.conf file) are root:root, but on fedora they are
root:sssd. So, split out this task to handle the two different cases.

Assisted-by: claude
(I had it generate this, and it actually did a reasonable job I think)

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-08-08 11:54:33 -07:00
Lenka Segura
a2cfb0a360 pagure: hotfix for links to accounts.fpo
Signed-off-by: Lenka Segura <lsegura@redhat.com>
2025-08-07 21:15:42 +00:00
Lenka Segura
c5ca513364 pagure: Fix lint errors in main task
Signed-off-by: Lenka Segura <lsegura@redhat.com>
2025-08-07 22:21:42 +02:00
Kevin Fenzi
4445de3f1a tftp_server: drop old rhcos images
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-08-06 11:57:39 -07:00
Kevin Fenzi
94406996e3 tftp_server: delete files not in bigfiles on batcave01
We should just always setup files on batcave and sync them over instead
of having local copies of things.

I've saved a copy of the current one off on each noc in case there was
some super special image we didn't save off, but hopefully we don't need
it.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-08-06 11:54:56 -07:00
Aurélien Bompard
ba0393fece Deploy a patch in distgit to fix Infra ticket 12622
See: https://pagure.io/fedora-infrastructure/issue/12622
Patch sent upstream: https://pagure.io/pagure/pull-request/5529

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-08-06 17:04:00 +02:00
Kevin Fenzi
0df178ffac dns: remove old iad2 zones from named.conf
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-08-05 14:49:10 -07:00
Samyak Jain
8b7b4a8368 robosignatory: also allow resigning f43 tagged packages with f44 key
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2025-08-05 16:43:49 +00:00
Miroslav Suchý
5b12a47264 bump up numbers of reserved instances for copr builders 2025-08-04 13:34:03 +02:00
Akashdeep Dhar
cbd9dbb563 Move from Python-based MDAPI to Go-based MetaSource
Signed-off-by: Akashdeep Dhar <akashdeep.dhar@gmail.com>
2025-08-04 08:33:08 +00:00
Yaakov Selkowitz
3d3cc7f868 flatpak-indexer: raise differ memory limit to 8Gi
This pod keeps getting OOMKilled while processing larger flatpak artifacts.
2025-08-01 08:45:15 +00:00