Commit Graph

44546 Commits

Author SHA1 Message Date
James Antill
386c4e573e epel: Add el10 epel GPG KEY.
Signed-off-by: James Antill <james@and.org>
2025-10-21 19:32:58 -04:00
James Antill
51655912dc epel: Add el10 epel file.
Signed-off-by: James Antill <james@and.org>
2025-10-21 19:22:26 -04:00
James Antill
be8ab9e311 *-test* hosts: Add el10-test host file
Signed-off-by: James Antill <james@and.org>
2025-10-21 19:09:50 -04:00
Kevin Fenzi
6f5c2337d9 copr-hypervisor: add nbde bindings
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-10-21 14:13:37 -07:00
Kevin Fenzi
3c3ef0a311 copr-hypervisor: add nbde device
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-10-21 13:56:54 -07:00
Kevin Fenzi
210e8b3e16 copr-hypervisor: fix missing name=
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-10-21 13:53:50 -07:00
Kevin Fenzi
095d5d0cca copr-hypervisor: fix indentation
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-10-21 13:49:12 -07:00
Kevin Fenzi
d2b4bbd372 copr-hypervisor / p09: add nbde handling in rdu3
This adds network block device encryption to the 3 (so far) power9's in
rdu3. This will allow them to unlock encrypted partitions from our
tang server(s).

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-10-21 13:46:06 -07:00
Pavel Raiskup
4935051cab copr-backend: fix vm-delete 2025-10-21 21:45:28 +02:00
Pavel Raiskup
37a0d08531 copr_hypervisor: correctly use full hostname 2025-10-21 21:40:09 +02:00
Pavel Raiskup
6260f07b89 copr-backend: helpers.py to use hostvars 2025-10-21 21:35:33 +02:00
Pavel Raiskup
3fa41bfdb7 copr-backend: another typo in helpers.py 2025-10-21 21:33:59 +02:00
Pavel Raiskup
867070ed05 copr-backend: fix the helpers.py dict 2025-10-21 21:32:38 +02:00
Pavel Raiskup
aaf76f0886 copr-be: oops I broke it - let's iterate faster on fix 2025-10-21 21:30:47 +02:00
Pavel Raiskup
e864e4a3cd copr-be: helpers.py is a template 2025-10-21 21:25:18 +02:00
Pavel Raiskup
7c423f25d0 copr-be: bake hypervisor config into hostvars 2025-10-21 21:19:04 +02:00
Kevin Fenzi
aff07cf6e4 communishift: add comminishift-fedora-coreos-ai-helpers
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-10-21 11:36:11 -07:00
Pavel Raiskup
ae96be8f75 copr_hypervisor: fix typo 2025-10-21 20:09:20 +02:00
Pavel Raiskup
cf97ca7257 copr_hypervisor: fix libvirt conn host spec 2025-10-21 20:05:52 +02:00
Pavel Raiskup
7ee2364ae6 copr-be/copr_hypervisor: access libvirt over ipv6 address
See https://github.com/fedora-copr/copr/issues/3786
2025-10-21 20:02:46 +02:00
James Antill
4fa8443c68 postfix: Turn off TLSv1.0/1.1
Signed-off-by: James Antill <james@and.org>
2025-10-21 11:50:11 -04:00
Aurélien Bompard
0feed3e810 IPAtuura: fix login IPA rule
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-10-21 17:32:37 +02:00
Aurélien Bompard
8206161d13 Configure authentication in IPA for IPA-tuura
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-10-21 17:26:08 +02:00
Aurélien Bompard
47e7b0db96 IPAtuura: run migrations and use the proper keycloak hostname
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-10-21 16:43:52 +02:00
David Kirwan
6f6d1c9244 forgejo: fix typo in VM dataVolumeTemplate volume
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2025-10-21 15:27:57 +01:00
David Kirwan
c67a7034ae forgejo: update VM mac
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2025-10-21 15:22:34 +01:00
Aurélien Bompard
8de72a0f0c Use our postgresql server for IPA-tuura
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-10-21 16:12:10 +02:00
David Kirwan
f7fb7cbe03 forgejo: add task for creating runnerhost vm
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2025-10-21 11:58:16 +01:00
Ryan Lerch
ad62f85166 forge: change from email address to fedoraforge-noreply@fp.o
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-10-21 16:42:59 +10:00
Ryan Lerch
5370f141e2 Add fedoraforge-noreply to mail blackholes and username blocklist
- Add fedoraforge-noreply to /dev/null in aliases.static to prevent email delivery
- Add fedoraforge pattern to USERNAME_BLOCKLIST in noggin.cfg.py to prevent account creation
- Used fedoraforge-noreply instead of just fedoraforge in case we decide to enable incoming emails on forge in the future
2025-10-21 07:03:02 +10:00
Pavel Raiskup
c64c7fee3a kickstarts: limit the size of raid6 for / 2025-10-20 18:19:31 +00:00
Aurélien Bompard
3cd397629d Declare in IPA the public hostname
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-10-20 15:40:51 +02:00
Aurélien Bompard
3cf70744f0 Fix JSON syntax error
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-10-20 15:34:17 +02:00
Ryan Lerch
d8cc080029 forge: enable email notifications on prod
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-10-20 17:57:12 +10:00
Kevin Fenzi
4af418b1f5 batcave01: move to vmhost-x86-01
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-10-17 15:14:11 -07:00
Kevin Fenzi
fc4158d896 proxy10: switch to f43
We are trying this to see if it has any help or at least datapoints for
the timeout issue.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-10-17 09:54:11 -07:00
James Antill
a75022cdc3 docs-rsync: Copy the stg script to prod. Fixes #12848.
Signed-off-by: James Antill <james@and.org>
2025-10-17 16:49:51 +00:00
Kevin Fenzi
6c8fb623c4 proxies / staging: set memory to 16g for staging proxies
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-10-17 08:52:33 -07:00
Jakub Kadlcik
78fc3dc04e copr-be: idempotent touch 2025-10-17 11:23:23 +02:00
Pavel Raiskup
865ac61eb2 copr_hypervisor: don't let external world routing through the box 2025-10-17 08:32:37 +02:00
Kevin Fenzi
146229ae13 proxies: coreos uses env_suffix for website name
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-10-16 16:38:33 -07:00
Kevin Fenzi
d8ecaa06dd proxies: jenkins and testdays are both prod only
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-10-16 16:17:57 -07:00
Kevin Fenzi
535eb3dd1b proxies: drop ipsilon-project from reverproxy too
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-10-16 15:54:00 -07:00
Kevin Fenzi
a82dfa1229 proxies: lists.pagure.io is prod only
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-10-16 15:33:53 -07:00
Kevin Fenzi
27f007c333 proxies: getfedora.org and fedoracommunity.org only get setup in prod
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-10-16 15:18:35 -07:00
Kevin Fenzi
86256e5884 proxies / staging: switch proxy02.stg to f43
We want to make sure this generally works fine before redoing a prod one
with f43.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-10-16 13:46:33 -07:00
Pavel Raiskup
3f4bd0ccf5 copr-be: start building on p09 again 2025-10-16 21:55:47 +02:00
Pavel Raiskup
82522377cd copr_hypervisor: tweak FORWARD nftables 2025-10-16 21:38:29 +02:00
Patrik Polakovic
82b086f6be Add glibc32 to Pungi template filter
Related issue: pagure.io/releng/issue/12023
Signed-off-by: Patrik Polakovic <patrik@alphamail.org>
2025-10-16 18:34:36 +00:00
James Antill
e9082f4fb2 docs-rsync.stg: A workaround for the mtime/hardlink disk space usage.
Signed-off-by: James Antill <james@and.org>
2025-10-16 14:23:14 -04:00