Nils Philippsen
205e2c9ed5
distgit/pagure: Set git directories as safe
...
This was fixed previously for pagure.io in the context of
paguremirroring. Turns out, it affects all kinds of git operations, so
document and move accordingly.
Fixes: releng#12181
Fixes: fedora-infrastructure#12010
Signed-off-by: Nils Philippsen <nils@redhat.com >
2024-06-27 11:21:19 +02:00
Nils Philippsen
0adf0869a6
distgit/pagure: Appease yamllint
...
Signed-off-by: Nils Philippsen <nils@redhat.com >
2024-06-27 11:21:07 +02:00
Michal Konecny
38ca9f6f73
[distgit/pagure] Set ACL for newly created files in /var/log/pagure
...
Fix for https://pagure.io/fedora-infrastructure/issue/11957 was introduced to
pagure role, but it wasn't added to dist-git role as well. Let's fix that.
Signed-off-by: Michal Konecny <mkonecny@redhat.com >
2024-06-04 10:40:45 +02:00
Kevin Fenzi
3c960624f4
fas2: good bye! You served long and well
...
Remove fas2 and all the checks that depended on it.
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2022-07-01 12:09:36 -07:00
Pierre-Yves Chibon
0d1d2aace5
distgit/pagure: create the git user and add it to the packager group
...
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr >
2021-03-01 16:25:10 +01:00
Pierre-Yves Chibon
7868dcfa81
distgit/pagure: add a hotfix tag where we fix the /var/log/pagure folder
...
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr >
2021-02-12 09:52:00 +01:00
Pierre-Yves Chibon
0b3a2cc4a8
distgit/pagure: use symlink instead of complicated paths
...
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr >
2020-11-05 15:58:58 +01:00
Pierre-Yves Chibon
8890fb10a9
distgit/pagure: add missing '/'
...
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr >
2020-11-05 15:50:20 +01:00
Pierre-Yves Chibon
77096060f6
distgit/pagure: Configure selinux in distgit just like on pagure.io
...
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr >
2020-11-05 15:48:41 +01:00
Kevin Fenzi
d9e8f5951a
distgit: correct path to pagure_sar.py script
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2020-10-02 09:27:38 -07:00
Pierre-Yves Chibon
4ceb0b2c1c
distgit/pagure: Drop old code dealing with phx2 and py2 and rhel7
...
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr >
2020-07-27 09:46:58 +02:00
Pierre-Yves Chibon
84f046eaba
distgit/pagure: Drop 1755 in favor of spelled out permissions on /var/log/pagure
...
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr >
2020-07-27 09:44:44 +02:00
Pierre-Yves Chibon
e6c0433e19
distgit/pagure: set the sticky bit on /var/log/pagure so the group membership remains
...
The owner itself does not really matter, especially when considering the
section above where the pagure user is created in the packager group.
Fixes https://pagure.io/releng/issue/9623
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr >
2020-07-24 11:24:28 +02:00
Pierre-Yves Chibon
43a68e2c57
distgit/pagure: another clean up of old cruft from another time (py2/rhel7)
...
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr >
2020-07-23 13:15:24 +02:00
Pierre-Yves Chibon
745e7b04ce
distgit/pagure: remove old cruft from another time (py2/rhel7)
...
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr >
2020-07-23 13:14:19 +02:00
Pierre-Yves Chibon
7c51566c36
distgit/pagure: Log auth-related into in a file on disk and create the place for it
...
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr >
2020-07-23 12:59:20 +02:00
Pierre-Yves Chibon
891dcaac2b
distgit: give access to the fedora-messaging certs to the packager group
...
This solves the permission denied error packager would see otherwise
when pushing to dist-git as the hooks would fail to send notifications
on the fedora-messaging bus.
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr >
2020-06-10 10:06:13 +02:00
Pierre-Yves Chibon
4d2f3eb5ac
distgit/pagure: flip httpd_can_network_connect on the host
...
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr >
2020-05-27 16:37:29 +02:00
Pierre-Yves Chibon
e0ed6697f4
distgit: make the iad2 host closer to the current staging and different from phx2
...
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr >
2020-05-25 23:10:15 +02:00
Pierre-Yves Chibon
85649b78b3
distgit/pagure: in staging we no longer have fedmsg
...
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr >
2020-05-20 15:57:43 +02:00
Pierre-Yves Chibon
69f8d706d0
distgit/pagure: drop the fas2 hotfix since this is no longer used
...
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr >
2020-05-20 12:56:44 +02:00
Pierre-Yves Chibon
107d6e331f
distgit/pagure: use python3 in staging and keep prod to python2
...
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr >
2020-05-20 12:56:26 +02:00
Pierre-Yves Chibon
1320bb90b2
distgit/pagure: libsemanage-python is python3-libsemanage on rhel8
...
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr >
2020-05-20 12:49:57 +02:00
Pierre-Yves Chibon
66c4bb4a18
distgit/pagure: install different packages in stg vs prod
...
Since we're currently rebuilding stg on rhel8 while prod is still
rhel7
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr >
2020-05-20 11:46:58 +02:00
Pierre-Yves Chibon
85d6c77276
distgit/pagure: Drop installing pygment2
...
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr >
2020-05-20 11:44:46 +02:00
Stephen Smoogen
c9f3d2d8be
[pkgs] A ternary needs 2 arguments. I removed one in the previous commit and should have changed the code completely instead.
2020-04-24 21:34:20 +02:00
Stephen Smoogen
ccaa519dd3
[pkgs]: remove mentions of repospanner so that playbooks will set up things without it
2020-04-24 21:34:20 +02:00
Pierre-Yves Chibon
a23e73df37
distgit/pagure: Turn off the pagure-sync-bugzilla cron job
...
This script has been ported to its own upstream at:
https://pagure.io/Fedora-Infra/distgit-bugzilla-sync
and is now running as a cron job in openshift (twice a day).
So we can remove it from this role/host.
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr >
2020-04-24 21:34:20 +02:00
Pierre-Yves Chibon
43be9500bd
distgit/pagure: drop a hotfix that is no longer needed
...
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr >
2020-04-24 21:34:20 +02:00
Pierre-Yves Chibon
de81dd973d
distgit/pagure: change how the group name is defined
...
The previous approach didn't seem to be liked by ansible
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr >
2020-04-24 21:34:17 +02:00
Pierre-Yves Chibon
c9260c2884
dist-git/pagure: src.fp.o doesn't know about the repoSpanner group so use pagure instead
...
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr >
2020-04-24 21:34:17 +02:00
Pierre-Yves Chibon
fb664e3745
dist-git/pagure: enable fedora-messaging in prod as well
...
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr >
2020-04-24 21:34:17 +02:00
Pierre-Yves Chibon
93074d7249
dist-git/pagure: Enable the issue tracker on the tests namespace
...
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr >
2020-04-24 21:34:11 +02:00
Pierre-Yves Chibon
a924fac977
dist-git/pagure: Enable the pagure-dist-git 3rd party plugin in staging
...
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr >
2020-04-24 21:34:08 +02:00
Kevin Fenzi
29ed16ab01
pkgs: Do not try and allow repoSpanner access to pagure config in prod as it isn't deployed there yet.
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2019-03-06 02:03:20 +00:00
Pierre-Yves Chibon
9aa0c13345
Use quotes... annoying ansible
...
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr >
2019-03-04 17:28:34 +01:00
Pierre-Yves Chibon
238c62b290
Make the certs available to repoSpanner on dist-git/stg
...
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr >
2019-03-04 17:22:49 +01:00
Pierre-Yves Chibon
48fdb8060e
Fix ownership of the certs for pagure and koji
...
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr >
2019-03-04 16:46:07 +01:00
Pierre-Yves Chibon
723b21b2f0
Let's try specifying the mode as a string
...
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr >
2019-03-04 15:20:56 +01:00
Pierre-Yves Chibon
e10aebdca4
Try another way to represent the dict
...
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr >
2019-03-04 15:18:09 +01:00
Pierre-Yves Chibon
1921f94538
Another typo to remove
...
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr >
2019-03-04 15:12:17 +01:00
Pierre-Yves Chibon
977eb9fd1e
typi typo
...
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr >
2019-03-04 15:09:25 +01:00
Pierre-Yves Chibon
3490c41c63
src.fp.o: Create /etc/fedora-messaging manually
...
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr >
2019-03-04 14:50:02 +01:00
Pierre-Yves Chibon
4cf80b62a2
Let's try giving it some space(s)
...
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr >
2019-03-04 14:40:55 +01:00
Pierre-Yves Chibon
55b6c9cb63
Start porting pagure at src.fp.o to fedora-messaging
...
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr >
2019-03-04 14:26:43 +01:00
Pierre-Yves Chibon
89fce190b9
[distgit/pagure] hotfix the default hook to clean the PR merge status async
...
This is necessary because of the way our dist-git is deployed, the git hook
only have a read-only access to the database so they can't reset the cached
merge status of the open PRs in the same process so we need to do this via
an async process which is basically what this hotfix does.
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr >
2019-02-27 17:23:25 +01:00
Kevin Fenzi
c86b14b950
pagure / repoSpanner: Fix typo on acl task. It's permissions instead of permission.
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2019-02-23 17:58:22 +00:00
Patrick Uiterwijk
685bdf987f
Allow repoSpanner access to pagure cfg
...
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org >
2019-02-21 13:02:22 +01:00
Kevin Fenzi
8212ee4f20
pagure: disable pagure_api_key_expire_mail.timer jobs for now.
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2019-02-08 23:49:40 +00:00
Pierre-Yves Chibon
dedb06e674
pagure-dist-git is now officially replacing python-pagure-dist-git
...
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr >
2019-01-07 15:41:25 +01:00