Kevin Fenzi
2955b27656
another test commit
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-12-03 14:34:47 -08:00
Kevin Fenzi
d37db87b70
Revert "whitespace change to test"
...
This reverts commit bcca5f58f4 .
2025-12-03 14:33:07 -08:00
Kevin Fenzi
bcca5f58f4
whitespace change to test
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-12-03 14:30:16 -08:00
Kevin Fenzi
2c29dbef64
anubis: allowlist src/extras
...
These are some smallish json files that are used by various scripts.
Lets just allowlist them.
See https://pagure.io/fedora-infrastructure/issue/12946
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-12-03 11:46:29 -08:00
Kevin Fenzi
9b02c8bf4e
download: add some kernel.org mirrors (infra#12941)
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-12-03 11:26:58 -08:00
Kevin Fenzi
900a06c049
os-control: add sysadmin-openshift to be able to login and sudo
...
We want to add a few folks here so they can login to os-control and sudo
and debug cluster wide issues.
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-12-03 09:17:18 -08:00
Aurélien Bompard
1a56c792b9
Fix MirrorManager buildconfig name
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2025-12-03 12:31:24 +01:00
Aurélien Bompard
ee5f25d199
Update the Redis images in OpenShift
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2025-12-03 12:29:50 +01:00
Kevin Fenzi
91ca2a6bf3
pagure-stg01: say fare thee well
...
We have moved over to pagure-stg02 now in rdu3, so retire this vm.
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-12-02 14:28:06 -08:00
Carl George
cb060922ad
mirrormanager: Adjust EPEL 10 regexes for optional components
...
Detect EPEL 10 repos in the archive with names like "10.0z".
Signed-off-by: Carl George <carlwgeorge@gmail.com >
2025-12-02 15:26:45 -06:00
Kevin Fenzi
4ae493f195
anubis: reduce forks, was impossible at the former level
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-12-02 12:19:38 -08:00
Kevin Fenzi
708c0fdaa2
anubis: adjust forks on src to slow challenge
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-12-02 11:05:15 -08:00
Kevin Fenzi
00c612bd6a
anubis: allow packit user-agent
...
Per https://pagure.io/fedora-infrastructure/issue/12923
just allowlist the packit user agent at least for now.
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-12-02 10:22:27 -08:00
Kevin Fenzi
0612c1786d
pagure: make forks anubis challenge much harder
...
Sadly, scrapers are hammering on forks on pagure.io.
So, lets increase the challenge difficulty to slow them down.
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-12-02 09:01:29 -08:00
Ryan Lerch
c5a3f3c305
forge: change landing page to home
...
Signed-off-by: Ryan Lerch <rlerch@redhat.com >
2025-12-02 19:37:32 +10:00
Kevin Fenzi
5ead097f79
dhcpd: add in rdu2-cc mgmt and hosts
...
This adds all the machines we are moving from rdu2-cc to rdu3.
Their management ports and their first 10G ports to provision.
note that while vmhost-x86-copr02 has a 10g card, it's not
'seeing' it, so I can't see what the mac addresses are on it.
We will need to check this after the move and get it working.
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-12-01 12:56:52 -08:00
Jeremy Cline
9355e3a931
fedora-image-uploader: Fix the azure key file name
...
The combined key+cert is just suffixed with .pem
2025-12-01 13:28:16 -05:00
Kevin Fenzi
ea1b90077f
retire vmhost-x86-cc05.rdu-cc.fedoraproject.org and vmhost-x86-cc06.rdu-cc.fedoraproject.org
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-12-01 09:44:25 -08:00
Kevin Fenzi
7fbb35c25b
anubis: drop libreoffice rules
...
We had this in place when scrapers were hitting libreoffice really hard.
They don't seem to be anymore, so drop it for now.
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-11-30 14:03:22 -08:00
Kevin Fenzi
8a27e50c53
anubis-el8: enable opengraph for pagure.io and weigh forks higher.
...
Enable opengraph here (
https://pagure.io/fedora-infrastructure/issue/12946 )
and weigh forks higher to see about keeping DDOS type people away.
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-11-30 09:23:38 -08:00
Michal Konecny
d2404414a6
[robosignatory] Fix typo in vars file name
...
Signed-off-by: Michal Konecny <mkonecny@redhat.com >
2025-11-28 11:38:42 +01:00
Michal Konecny
f8ed8f5087
[robosignatory] Include missing vars file
...
Signed-off-by: Michal Konecny <mkonecny@redhat.com >
2025-11-28 11:36:36 +01:00
Samyak Jain
4f2bf475b5
Revert "Fedora 41 is now EOL"
...
EOL is shifted to december 10.
This reverts commit 717323a450 .
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com >
2025-11-28 15:50:14 +05:30
Michal Konecny
4fdd0c9fca
[robosignatory] Increase the prefetch value
...
The robosignatory is currently stuck on one failing message, this should
allow it to process other messages in queue as well even when there is
one bad message.
Signed-off-by: Michal Konecny <mkonecny@redhat.com >
2025-11-28 10:55:48 +01:00
Samyak Jain
717323a450
Fedora 41 is now EOL
...
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com >
2025-11-27 19:43:32 +05:30
Frank Ch. Eigler
4f699461db
debuginfod: mark servers for systemd Restart=always
...
Make long-lived outages of these services less likely.
2025-11-27 10:31:39 +00:00
Michal Konecny
b4425bf9e6
[pagure] Re-enable project creation on staging
...
See https://pagure.io/fedora-infrastructure/issue/12943 for the reason
behind this.
Signed-off-by: Michal Konecny <mkonecny@redhat.com >
2025-11-27 11:14:33 +01:00
Jeremy Cline
121e874f73
fedora-image-uploader: use combined key and certificate
...
The Azure client needs both the key and cert in a single file, it's not
possible to specify them separately as far as I can tell. Switch to
using the combined file for the secret.
See also: https://pagure.io/fedora-infra/ansible/pull-request/2969#comment-226104
2025-11-26 10:58:58 +00:00
Michal Konecny
35b08c5e84
[OpenShift] Add abompard to cluster owners
...
This is already done on os-control01, just adding it here, so it's in
ansible as well.
Signed-off-by: Michal Konecny <mkonecny@redhat.com >
2025-11-26 10:24:20 +00:00
Jiri Kyjovsky
6f94dc8907
copr: migration to f43, drop birthday, enable services
2025-11-26 10:57:16 +01:00
Jiri Kyjovsky
f8cf895147
copr: migration to f43 part 2
2025-11-26 09:47:15 +01:00
Jiri Kyjovsky
b29b05efb5
copr-be-temp: initiate temp backend instance
2025-11-26 08:49:20 +01:00
Jiri Kyjovsky
78a5b65cf0
copr: migrate to f43 step 1
2025-11-26 08:47:00 +01:00
Ryan Lerch
327232a079
forge: add group mapping for forge-ci-owners
...
Signed-off-by: Ryan Lerch <rlerch@redhat.com >
2025-11-26 09:53:00 +10:00
David Kirwan
0023664c38
forgejo: remove extra quotations around variable
...
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com >
2025-11-25 10:02:18 +00:00
David Kirwan
c08e0331e9
forgejo: change path on git checkout of forgejo runner role
...
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com >
2025-11-25 09:56:06 +00:00
David Kirwan
e806dc4473
forgejo: Add task to copy runners vars to the os-control
...
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com >
2025-11-25 09:49:51 +00:00
Ryan Lerch
7cf9f24946
forge: add githubusercontent.com to whitelist also
...
Signed-off-by: Ryan Lerch <rlerch@redhat.com >
2025-11-25 12:27:02 +10:00
Ryan Lerch
c05b29efdd
forge: add *.github.com to the migrations whitelist
...
it was also failing on api.github.com
Signed-off-by: Ryan Lerch <rlerch@redhat.com >
2025-11-25 12:14:14 +10:00
Ryan Lerch
189baf621c
forge: add github to allowed domains for migrations
...
Signed-off-by: Ryan Lerch <rlerch@redhat.com >
2025-11-25 11:19:39 +10:00
Greg Sutcliffe
dab61bf938
openvpn/server: assign IP to ipsilon03
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-11-24 16:35:57 +00:00
Greg Sutcliffe
d2c7e129cb
Firmware: add a NFT rule to allow 8080 to noc01 from mgmt vlans
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-11-24 10:36:15 +00:00
Michal Konecny
fa75642f20
[db-fas01] Add nft rule for ipsilon03
...
Signed-off-by: Michal Konecny <mkonecny@redhat.com >
2025-11-24 09:42:40 +01:00
Kevin Fenzi
2f76d23a6b
proxies: block another fork for now
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-11-23 17:39:50 -08:00
Kevin Fenzi
dc92733422
main: add zabbix playbook to main.yml
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-11-23 15:15:38 -08:00
Simon de Vlieger
28daeaad95
koji: remove osbuild plugin configuration
...
This is part of an approved change [1] to remove `koji-osbuild` from
Fedora's Koji instances. In this commit the Koji configuration is
changed to no longer serve `osbuildImage` tasks in web or hub.
The `koji-osbuild` plugin has been replaced previously with the
`koji-image-builder` plugin which, instead of talking to a remotely
hosted service, builds images on Koji builders themselves.
All users of `koji-osbuild` have been migrated to `koji-image-builder`
and no builds are being scheduled that need to be handled by
`koji-osbuild` anymore.
[1]: https://fedoraproject.org/wiki/Changes/KojiServiceImageBuilderRemoval
Signed-off-by: Simon de Vlieger <supakeen@redhat.com >
2025-11-23 23:09:52 +00:00
Jiri Kyjovsky
3699a1b0d0
coprbe: fix raid assembly failing when arrays are already active
2025-11-23 22:59:36 +01:00
Jiri Kyjovsky
8daa7e4eb1
copr: revert inventory changes, and birthday
2025-11-23 22:34:22 +01:00
Jiri Kyjovsky
04b6d4fea5
copr-be-dev-temp: revert inventory changes
2025-11-23 22:10:34 +01:00
Jiri Kyjovsky
f935ba42b7
copr-keygen-dev: specify the backend private ip
2025-11-23 20:12:57 +01:00