Commit Graph

44907 Commits

Author SHA1 Message Date
Kevin Fenzi
2955b27656 another test commit
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-12-03 14:34:47 -08:00
Kevin Fenzi
d37db87b70 Revert "whitespace change to test"
This reverts commit bcca5f58f4.
2025-12-03 14:33:07 -08:00
Kevin Fenzi
bcca5f58f4 whitespace change to test
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-12-03 14:30:16 -08:00
Kevin Fenzi
2c29dbef64 anubis: allowlist src/extras
These are some smallish json files that are used by various scripts.
Lets just allowlist them.

See https://pagure.io/fedora-infrastructure/issue/12946

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-12-03 11:46:29 -08:00
Kevin Fenzi
9b02c8bf4e download: add some kernel.org mirrors (infra#12941)
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-12-03 11:26:58 -08:00
Kevin Fenzi
900a06c049 os-control: add sysadmin-openshift to be able to login and sudo
We want to add a few folks here so they can login to os-control and sudo
and debug cluster wide issues.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-12-03 09:17:18 -08:00
Aurélien Bompard
1a56c792b9 Fix MirrorManager buildconfig name
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-12-03 12:31:24 +01:00
Aurélien Bompard
ee5f25d199 Update the Redis images in OpenShift
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-12-03 12:29:50 +01:00
Kevin Fenzi
91ca2a6bf3 pagure-stg01: say fare thee well
We have moved over to pagure-stg02 now in rdu3, so retire this vm.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-12-02 14:28:06 -08:00
Carl George
cb060922ad mirrormanager: Adjust EPEL 10 regexes for optional components
Detect EPEL 10 repos in the archive with names like "10.0z".

Signed-off-by: Carl George <carlwgeorge@gmail.com>
2025-12-02 15:26:45 -06:00
Kevin Fenzi
4ae493f195 anubis: reduce forks, was impossible at the former level
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-12-02 12:19:38 -08:00
Kevin Fenzi
708c0fdaa2 anubis: adjust forks on src to slow challenge
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-12-02 11:05:15 -08:00
Kevin Fenzi
00c612bd6a anubis: allow packit user-agent
Per https://pagure.io/fedora-infrastructure/issue/12923
just allowlist the packit user agent at least for now.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-12-02 10:22:27 -08:00
Kevin Fenzi
0612c1786d pagure: make forks anubis challenge much harder
Sadly, scrapers are hammering on forks on pagure.io.
So, lets increase the challenge difficulty to slow them down.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-12-02 09:01:29 -08:00
Ryan Lerch
c5a3f3c305 forge: change landing page to home
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-12-02 19:37:32 +10:00
Kevin Fenzi
5ead097f79 dhcpd: add in rdu2-cc mgmt and hosts
This adds all the machines we are moving from rdu2-cc to rdu3.
Their management ports and their first 10G ports to provision.

note that while vmhost-x86-copr02 has a 10g card, it's not
'seeing' it, so I can't see what the mac addresses are on it.
We will need to check this after the move and get it working.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-12-01 12:56:52 -08:00
Jeremy Cline
9355e3a931 fedora-image-uploader: Fix the azure key file name
The combined key+cert is just suffixed with .pem
2025-12-01 13:28:16 -05:00
Kevin Fenzi
ea1b90077f retire vmhost-x86-cc05.rdu-cc.fedoraproject.org and vmhost-x86-cc06.rdu-cc.fedoraproject.org
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-12-01 09:44:25 -08:00
Kevin Fenzi
7fbb35c25b anubis: drop libreoffice rules
We had this in place when scrapers were hitting libreoffice really hard.
They don't seem to be anymore, so drop it for now.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-11-30 14:03:22 -08:00
Kevin Fenzi
8a27e50c53 anubis-el8: enable opengraph for pagure.io and weigh forks higher.
Enable opengraph here (
https://pagure.io/fedora-infrastructure/issue/12946 )
and weigh forks higher to see about keeping DDOS type people away.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-11-30 09:23:38 -08:00
Michal Konecny
d2404414a6 [robosignatory] Fix typo in vars file name
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2025-11-28 11:38:42 +01:00
Michal Konecny
f8ed8f5087 [robosignatory] Include missing vars file
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2025-11-28 11:36:36 +01:00
Samyak Jain
4f2bf475b5 Revert "Fedora 41 is now EOL"
EOL is shifted to december 10.

This reverts commit 717323a450.

Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2025-11-28 15:50:14 +05:30
Michal Konecny
4fdd0c9fca [robosignatory] Increase the prefetch value
The robosignatory is currently stuck on one failing message, this should
allow it to process other messages in queue as well even when there is
one bad message.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2025-11-28 10:55:48 +01:00
Samyak Jain
717323a450 Fedora 41 is now EOL
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2025-11-27 19:43:32 +05:30
Frank Ch. Eigler
4f699461db debuginfod: mark servers for systemd Restart=always
Make long-lived outages of these services less likely.
2025-11-27 10:31:39 +00:00
Michal Konecny
b4425bf9e6 [pagure] Re-enable project creation on staging
See https://pagure.io/fedora-infrastructure/issue/12943 for the reason
behind this.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2025-11-27 11:14:33 +01:00
Jeremy Cline
121e874f73 fedora-image-uploader: use combined key and certificate
The Azure client needs both the key and cert in a single file, it's not
possible to specify them separately as far as I can tell. Switch to
using the combined file for the secret.

See also: https://pagure.io/fedora-infra/ansible/pull-request/2969#comment-226104
2025-11-26 10:58:58 +00:00
Michal Konecny
35b08c5e84 [OpenShift] Add abompard to cluster owners
This is already done on os-control01, just adding it here, so it's in
ansible as well.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2025-11-26 10:24:20 +00:00
Jiri Kyjovsky
6f94dc8907 copr: migration to f43, drop birthday, enable services 2025-11-26 10:57:16 +01:00
Jiri Kyjovsky
f8cf895147 copr: migration to f43 part 2 2025-11-26 09:47:15 +01:00
Jiri Kyjovsky
b29b05efb5 copr-be-temp: initiate temp backend instance 2025-11-26 08:49:20 +01:00
Jiri Kyjovsky
78a5b65cf0 copr: migrate to f43 step 1 2025-11-26 08:47:00 +01:00
Ryan Lerch
327232a079 forge: add group mapping for forge-ci-owners
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-11-26 09:53:00 +10:00
David Kirwan
0023664c38 forgejo: remove extra quotations around variable
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2025-11-25 10:02:18 +00:00
David Kirwan
c08e0331e9 forgejo: change path on git checkout of forgejo runner role
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2025-11-25 09:56:06 +00:00
David Kirwan
e806dc4473 forgejo: Add task to copy runners vars to the os-control
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2025-11-25 09:49:51 +00:00
Ryan Lerch
7cf9f24946 forge: add githubusercontent.com to whitelist also
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-11-25 12:27:02 +10:00
Ryan Lerch
c05b29efdd forge: add *.github.com to the migrations whitelist
it was also failing on api.github.com

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-11-25 12:14:14 +10:00
Ryan Lerch
189baf621c forge: add github to allowed domains for migrations
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-11-25 11:19:39 +10:00
Greg Sutcliffe
dab61bf938 openvpn/server: assign IP to ipsilon03
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-11-24 16:35:57 +00:00
Greg Sutcliffe
d2c7e129cb Firmware: add a NFT rule to allow 8080 to noc01 from mgmt vlans
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-11-24 10:36:15 +00:00
Michal Konecny
fa75642f20 [db-fas01] Add nft rule for ipsilon03
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2025-11-24 09:42:40 +01:00
Kevin Fenzi
2f76d23a6b proxies: block another fork for now
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-11-23 17:39:50 -08:00
Kevin Fenzi
dc92733422 main: add zabbix playbook to main.yml
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-11-23 15:15:38 -08:00
Simon de Vlieger
28daeaad95 koji: remove osbuild plugin configuration
This is part of an approved change [1] to remove `koji-osbuild` from
Fedora's Koji instances. In this commit the Koji configuration is
changed to no longer serve `osbuildImage` tasks in web or hub.

The `koji-osbuild` plugin has been replaced previously with the
`koji-image-builder` plugin which, instead of talking to a remotely
hosted service, builds images on Koji builders themselves.

All users of `koji-osbuild` have been migrated to `koji-image-builder`
and no builds are being scheduled that need to be handled by
`koji-osbuild` anymore.

[1]: https://fedoraproject.org/wiki/Changes/KojiServiceImageBuilderRemoval

Signed-off-by: Simon de Vlieger <supakeen@redhat.com>
2025-11-23 23:09:52 +00:00
Jiri Kyjovsky
3699a1b0d0 coprbe: fix raid assembly failing when arrays are already active 2025-11-23 22:59:36 +01:00
Jiri Kyjovsky
8daa7e4eb1 copr: revert inventory changes, and birthday 2025-11-23 22:34:22 +01:00
Jiri Kyjovsky
04b6d4fea5 copr-be-dev-temp: revert inventory changes 2025-11-23 22:10:34 +01:00
Jiri Kyjovsky
f935ba42b7 copr-keygen-dev: specify the backend private ip 2025-11-23 20:12:57 +01:00