James Antill
57bdad10fb
updates-uptimes: Use machine data to find reboot/etc. utf8 diff. uptime-max.
...
Signed-off-by: James Antill <james@and.org >
2025-08-19 19:10:58 -04:00
Greg Sutcliffe
e8cea23281
Zabbix: increase disk thresholds for some proxies
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-08-19 11:47:08 +01:00
Pedro Moura
dc8968d34b
removed easyfix role
...
Signed-off-by: Pedro Moura <pmoura@redhat.com >
2025-08-18 19:24:47 +00:00
Greg Sutcliffe
1d01f4d4e2
Zabbix: make the time-period for CPU load alerts configurable
...
in particular, sundries01 gets a massive CPU spike every hour
for about 15mins, so we set that host to 30m for an alert
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-08-18 17:25:58 +01:00
Greg Sutcliffe
bf5222cb71
Zabbix: adjust swap threshold for ipa01
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-08-18 15:45:59 +01:00
Greg Sutcliffe
8fbbca5daf
Zabbix: use vpn to reach zabbix-server for proxies
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-08-18 14:06:17 +01:00
Greg Sutcliffe
0680bd0178
Zabbix: ignore memory usage on builders
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-08-18 13:56:14 +01:00
Aurélien Bompard
34f4f8d119
Webhook2fedmsg: Allow the UI's OIDC callback URL
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2025-08-18 14:45:56 +02:00
Greg Sutcliffe
55f861ef85
Zabbix: ignore free ram on power hosts
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-08-18 13:02:24 +01:00
Greg Sutcliffe
ebb9d6f4c3
Zabbix: ignore swap on builders, they're always busy
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-08-18 12:55:05 +01:00
Greg Sutcliffe
214f664b09
Zabbix: increase write threshold even more for builders
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-08-18 12:43:39 +01:00
Greg Sutcliffe
0646af4bdb
Zabbix: increase write threshold for builders
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-08-18 12:17:39 +01:00
Greg Sutcliffe
bf3746b0ee
Zabbix: increase read threshold for a64 builders too
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-08-18 12:13:41 +01:00
Greg Sutcliffe
e2934b16b0
Zabbix: increase read threashold for builders too
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-08-18 12:09:53 +01:00
Greg Sutcliffe
04c08dd7d3
Zabbix: ibiblio05 has consistent high read times, increase threshold
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-08-18 12:00:39 +01:00
Greg Sutcliffe
cb2c567c82
Zabbix: move builder memory threshold to group_vars
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-08-18 11:47:07 +01:00
Greg Sutcliffe
4089e651ef
Zabbix: ipa01 has frequent memory spikes, increase threshold
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-08-18 11:35:01 +01:00
Greg Sutcliffe
a0507100b2
Zabbix: move vnet exclusion to group vars
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-08-18 10:59:09 +01:00
Ryan Lerch
52063ee3d1
[forgejo] disable users able to log in with password
...
Signed-off-by: Ryan Lerch <rlerch@redhat.com >
2025-08-18 17:14:47 +10:00
Carl George
4e6b29f033
epel-minor-release/koji-release-tags: Remove present state parameters
...
The default state is present, so it's not necessary to specifiy it.
Signed-off-by: Carl George <carlwgeorge@gmail.com >
2025-08-15 15:42:30 -05:00
Carl George
2e31e51791
epel-minor-release/koji-release-tags: Update inheritance of epel10 tag
...
The epel10 tag is a special locked tag we use for the baseurl of the
local repo in the epel-10 template of mock-core-configs. It is similar
to the locked rawhide tag. During mass branching we need to change its
inheritance to the next epel10.x minor version tag.
Signed-off-by: Carl George <carlwgeorge@gmail.com >
2025-08-15 15:42:30 -05:00
Carl George
c343847f68
epel-minor-release/koji-release-tags: Use more descriptive task names
...
Signed-off-by: Carl George <carlwgeorge@gmail.com >
2025-08-15 15:42:30 -05:00
Carl George
3ea97bebbe
epel-minor-release/koji-release-tags: Enforce bare merge mode on external repos
...
If not specified, koji defaults to "koji" merge mode, not "bare".
Signed-off-by: Carl George <carlwgeorge@gmail.com >
2025-08-15 15:42:30 -05:00
Carl George
d5cabb0a79
epel-minor-release/koji-release-tags: Update external repo handling
...
The original make-koji-release-tags script this playbook is based on had
a significant flaw. The original design was to have external repos for
each epel10.x-base tag that changed URLs over time. For example,
epel10.0-base would have an external repo of el10.0-baseos that would
migrate through the following repos:
* https://infrastructure.fedoraproject.org/repo/centos/centos-10/BaseOS/$arch/os/
* https://infrastructure.fedoraproject.org/repo/centos/centos-10-snapshot/BaseOS/$arch/os/
* https://infrastructure.fedoraproject.org/repo/rhel/rhel10/10.0/repos/$arch/baseos/
During the epel10.0 mass branching, we discovered that wouldn't work.
CentOS and RHEL have many RPMs with the same filename but different
checksums as they have different metadata and are signed with a
different key. Koji build error out when the checksum of an RPM that
has already been indexed changes. The solution to this is to use
external repos whose URLs don't change, but then move the external repos
around to different tags over time. That is what we have already
implemented in production, we just never updated make-koji-release-tags
to reflect it.
This changes the playbook create the new epel10.x-base tag with the
correct external repo names and switch the existing epel10.x-base tag
from the centos-10 repos to the centos-10-snapshot repos.
Signed-off-by: Carl George <carlwgeorge@gmail.com >
2025-08-15 15:42:22 -05:00
Kevin Fenzi
b4ce7aa042
db01.stg: double memory
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-08-14 11:30:27 -07:00
Kevin Fenzi
e8da330802
proxies: block another network thats generating a ton of traffic
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-08-14 11:30:27 -07:00
Michal Konecny
198d20ee82
[cloud-image-uploader] Use the correct cert
...
The fedora-messaging certs needed to be regenerated because of the
change in CA. Let's use the new ones.
2025-08-14 16:45:40 +02:00
David Kirwan
a899f6c4bb
forgejo: set the correct hostname in the route
...
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com >
2025-08-14 14:25:50 +01:00
Akashdeep Dhar
24f88e1ce6
fix(mdapi): add hostname argument for staging environment
...
Signed-off-by: Akashdeep Dhar <akashdeep.dhar@gmail.com >
2025-08-14 10:41:46 +00:00
James Antill
573bfa12f7
updates-uptimes: Move the script to the installable dir.
...
Signed-off-by: James Antill <james@and.org >
2025-08-13 18:27:35 -04:00
James Antill
778711e986
updates-uptimes: Add {{files}} prefix to path.
...
Signed-off-by: James Antill <james@and.org >
2025-08-13 18:19:25 -04:00
Carl George
875b764644
batcave: re-enable CentOS 10 snapshot sync
...
https://codeberg.org/fedora/epel/issues/36
Signed-off-by: Carl George <carlwgeorge@gmail.com >
2025-08-13 21:11:05 +00:00
Carl George
c419dacd38
batcave: exclude more unnecessary paths from CentOS 10 sync
...
Signed-off-by: Carl George <carlwgeorge@gmail.com >
2025-08-13 21:11:05 +00:00
Kevin Fenzi
29b3da86d5
buildvm-a64-48: drop for now
...
bvmhost-a64-05 has less memory than 01-04, so fewer buildvm's on it.
However, even with that it sometimes is OOM killing one.
So, lets drop 48 for now to give it more free memory.
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-08-13 12:00:35 -07:00
Michal Konecny
92e71e5c8e
[mdapi] Use correct name for jinja template
2025-08-13 15:37:39 +02:00
Michal Konecny
b82f406da8
[mdapi] Only reflect the GO changes on staging
...
Production is not ready yet to work with that changes. Let us separate
them using jinja templating.
2025-08-13 15:28:03 +02:00
Kevin Fenzi
9b5371fa08
proxies: add forge site/reverseproxy
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-08-12 17:35:07 -07:00
Vít Smolík
57ecc1e25c
fixed typos
...
Signed-off-by: Vít Smolík <me@smoliicek.cz >
2025-08-12 21:28:18 +00:00
Carl George
37be8cdf37
Create symlinks to most recent composes instead of empty repos
...
Signed-off-by: Carl George <carlwgeorge@gmail.com >
2025-08-12 17:25:54 -04:00
Diego Herrera
8120c83852
Fix ansible-linter issues
...
Signed-off-by: Diego Herrera <dherrera@redhat.com >
2025-08-12 17:25:54 -04:00
Diego Herrera
d52971b34d
Fix yamllint issues
...
Signed-off-by: Diego Herrera <dherrera@redhat.com >
2025-08-12 17:25:54 -04:00
Diego Herrera
ce547885c1
Add playbook to create folders and repos to setup bohdi during the epel minor branching process
...
Signed-off-by: Diego Herrera <dherrera@redhat.com >
2025-08-12 17:25:54 -04:00
Diego Herrera
2e6a39005d
Add playbook to create epel minor branches
...
Signed-off-by: Diego Herrera <dherrera@redhat.com >
2025-08-12 17:25:54 -04:00
Diego Herrera
a3adc7be16
Add koji release tags playbook for the epel minor branching process
...
Signed-off-by: Diego Herrera <dherrera@redhat.com >
2025-08-12 17:25:54 -04:00
James Antill
e29a37a23a
updates-uptimes: Add dynamic uptime for main data. Fix cron (sigh 12h fix).
...
Signed-off-by: James Antill <james@and.org >
2025-08-12 17:20:21 -04:00
Kevin Fenzi
fd6828d7c8
buildvm-x86-riscv: increase max jobs a bunch
...
These vm's run tasks like newrepos and tagging, so they can handle a lot
more smaller jobs like that. Increase things to 128 for now.
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-08-12 09:06:29 -07:00
Samyak Jain
a0d0e67578
robosignatory: switch eln to fedora-44 key
...
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com >
2025-08-12 14:35:47 +00:00
Samyak Jain
bdbe1b4120
robosignatory: also allow resigning f44 tagged packages
...
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com >
2025-08-12 14:35:47 +00:00
Samyak Jain
4418d1d001
Branch Fedora 43 from Rawhide
...
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com >
2025-08-12 14:35:47 +00:00
Aurélien Bompard
b754a19491
w2fm: let the build know about the environment
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2025-08-12 15:45:20 +02:00