James Antill
386c4e573e
epel: Add el10 epel GPG KEY.
...
Signed-off-by: James Antill <james@and.org >
2025-10-21 19:32:58 -04:00
James Antill
51655912dc
epel: Add el10 epel file.
...
Signed-off-by: James Antill <james@and.org >
2025-10-21 19:22:26 -04:00
James Antill
be8ab9e311
*-test* hosts: Add el10-test host file
...
Signed-off-by: James Antill <james@and.org >
2025-10-21 19:09:50 -04:00
Kevin Fenzi
6f5c2337d9
copr-hypervisor: add nbde bindings
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-10-21 14:13:37 -07:00
Kevin Fenzi
3c3ef0a311
copr-hypervisor: add nbde device
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-10-21 13:56:54 -07:00
Kevin Fenzi
210e8b3e16
copr-hypervisor: fix missing name=
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-10-21 13:53:50 -07:00
Kevin Fenzi
095d5d0cca
copr-hypervisor: fix indentation
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-10-21 13:49:12 -07:00
Kevin Fenzi
d2b4bbd372
copr-hypervisor / p09: add nbde handling in rdu3
...
This adds network block device encryption to the 3 (so far) power9's in
rdu3. This will allow them to unlock encrypted partitions from our
tang server(s).
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-10-21 13:46:06 -07:00
Pavel Raiskup
4935051cab
copr-backend: fix vm-delete
2025-10-21 21:45:28 +02:00
Pavel Raiskup
37a0d08531
copr_hypervisor: correctly use full hostname
2025-10-21 21:40:09 +02:00
Pavel Raiskup
6260f07b89
copr-backend: helpers.py to use hostvars
2025-10-21 21:35:33 +02:00
Pavel Raiskup
3fa41bfdb7
copr-backend: another typo in helpers.py
2025-10-21 21:33:59 +02:00
Pavel Raiskup
867070ed05
copr-backend: fix the helpers.py dict
2025-10-21 21:32:38 +02:00
Pavel Raiskup
aaf76f0886
copr-be: oops I broke it - let's iterate faster on fix
2025-10-21 21:30:47 +02:00
Pavel Raiskup
e864e4a3cd
copr-be: helpers.py is a template
2025-10-21 21:25:18 +02:00
Pavel Raiskup
7c423f25d0
copr-be: bake hypervisor config into hostvars
2025-10-21 21:19:04 +02:00
Kevin Fenzi
aff07cf6e4
communishift: add comminishift-fedora-coreos-ai-helpers
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-10-21 11:36:11 -07:00
Pavel Raiskup
ae96be8f75
copr_hypervisor: fix typo
2025-10-21 20:09:20 +02:00
Pavel Raiskup
cf97ca7257
copr_hypervisor: fix libvirt conn host spec
2025-10-21 20:05:52 +02:00
Pavel Raiskup
7ee2364ae6
copr-be/copr_hypervisor: access libvirt over ipv6 address
...
See https://github.com/fedora-copr/copr/issues/3786
2025-10-21 20:02:46 +02:00
James Antill
4fa8443c68
postfix: Turn off TLSv1.0/1.1
...
Signed-off-by: James Antill <james@and.org >
2025-10-21 11:50:11 -04:00
Aurélien Bompard
0feed3e810
IPAtuura: fix login IPA rule
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2025-10-21 17:32:37 +02:00
Aurélien Bompard
8206161d13
Configure authentication in IPA for IPA-tuura
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2025-10-21 17:26:08 +02:00
Aurélien Bompard
47e7b0db96
IPAtuura: run migrations and use the proper keycloak hostname
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2025-10-21 16:43:52 +02:00
David Kirwan
6f6d1c9244
forgejo: fix typo in VM dataVolumeTemplate volume
...
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com >
2025-10-21 15:27:57 +01:00
David Kirwan
c67a7034ae
forgejo: update VM mac
...
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com >
2025-10-21 15:22:34 +01:00
Aurélien Bompard
8de72a0f0c
Use our postgresql server for IPA-tuura
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2025-10-21 16:12:10 +02:00
David Kirwan
f7fb7cbe03
forgejo: add task for creating runnerhost vm
...
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com >
2025-10-21 11:58:16 +01:00
Ryan Lerch
ad62f85166
forge: change from email address to fedoraforge-noreply@fp.o
...
Signed-off-by: Ryan Lerch <rlerch@redhat.com >
2025-10-21 16:42:59 +10:00
Ryan Lerch
5370f141e2
Add fedoraforge-noreply to mail blackholes and username blocklist
...
- Add fedoraforge-noreply to /dev/null in aliases.static to prevent email delivery
- Add fedoraforge pattern to USERNAME_BLOCKLIST in noggin.cfg.py to prevent account creation
- Used fedoraforge-noreply instead of just fedoraforge in case we decide to enable incoming emails on forge in the future
2025-10-21 07:03:02 +10:00
Pavel Raiskup
c64c7fee3a
kickstarts: limit the size of raid6 for /
2025-10-20 18:19:31 +00:00
Aurélien Bompard
3cd397629d
Declare in IPA the public hostname
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2025-10-20 15:40:51 +02:00
Aurélien Bompard
3cf70744f0
Fix JSON syntax error
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2025-10-20 15:34:17 +02:00
Ryan Lerch
d8cc080029
forge: enable email notifications on prod
...
Signed-off-by: Ryan Lerch <rlerch@redhat.com >
2025-10-20 17:57:12 +10:00
Kevin Fenzi
4af418b1f5
batcave01: move to vmhost-x86-01
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-10-17 15:14:11 -07:00
Kevin Fenzi
fc4158d896
proxy10: switch to f43
...
We are trying this to see if it has any help or at least datapoints for
the timeout issue.
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-10-17 09:54:11 -07:00
James Antill
a75022cdc3
docs-rsync: Copy the stg script to prod. Fixes #12848 .
...
Signed-off-by: James Antill <james@and.org >
2025-10-17 16:49:51 +00:00
Kevin Fenzi
6c8fb623c4
proxies / staging: set memory to 16g for staging proxies
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-10-17 08:52:33 -07:00
Jakub Kadlcik
78fc3dc04e
copr-be: idempotent touch
2025-10-17 11:23:23 +02:00
Pavel Raiskup
865ac61eb2
copr_hypervisor: don't let external world routing through the box
2025-10-17 08:32:37 +02:00
Kevin Fenzi
146229ae13
proxies: coreos uses env_suffix for website name
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-10-16 16:38:33 -07:00
Kevin Fenzi
d8ecaa06dd
proxies: jenkins and testdays are both prod only
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-10-16 16:17:57 -07:00
Kevin Fenzi
535eb3dd1b
proxies: drop ipsilon-project from reverproxy too
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-10-16 15:54:00 -07:00
Kevin Fenzi
a82dfa1229
proxies: lists.pagure.io is prod only
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-10-16 15:33:53 -07:00
Kevin Fenzi
27f007c333
proxies: getfedora.org and fedoracommunity.org only get setup in prod
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-10-16 15:18:35 -07:00
Kevin Fenzi
86256e5884
proxies / staging: switch proxy02.stg to f43
...
We want to make sure this generally works fine before redoing a prod one
with f43.
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-10-16 13:46:33 -07:00
Pavel Raiskup
3f4bd0ccf5
copr-be: start building on p09 again
2025-10-16 21:55:47 +02:00
Pavel Raiskup
82522377cd
copr_hypervisor: tweak FORWARD nftables
2025-10-16 21:38:29 +02:00
Patrik Polakovic
82b086f6be
Add glibc32 to Pungi template filter
...
Related issue: pagure.io/releng/issue/12023
Signed-off-by: Patrik Polakovic <patrik@alphamail.org >
2025-10-16 18:34:36 +00:00
James Antill
e9082f4fb2
docs-rsync.stg: A workaround for the mtime/hardlink disk space usage.
...
Signed-off-by: James Antill <james@and.org >
2025-10-16 14:23:14 -04:00