Commit Graph

44783 Commits

Author SHA1 Message Date
Kevin Fenzi
5f2be1fc4e add vmhost-x86-iso01.rdu3.fedoraproject.org to inventory too
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-11-17 12:34:56 -08:00
Kevin Fenzi
9f1a00de86 bvmhost-x86-riscv02 and vmhost-x86-iso01
Add these two virthosts.

bvmhost-x86-riscv02 is a fedora install that will be used for running
qemu emulated riscv builders for composes (not building packages)

vmhost-x86-iso01 is a rhel10 virthost that is in the 'isolated' network
in rdu3. It will be used to migrate rdu2-cc workloads and be replaced by
a new machine when we get it.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-11-17 12:27:34 -08:00
Kevin Fenzi
56a3855460 dhcpd: add vmhost-x86-iso01 and bvmhost-x86-riscv02
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-11-17 11:26:46 -08:00
Adam Williamson
8b4989abe3 Enable updates-testing repo for openQA prod workers temporarily
We need to get them the QMP USB disconnect feature so we can
merge the USB install test PR.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2025-11-17 09:07:31 -08:00
David Kirwan
cc8283db59 forgejo: update values.yml with valkey connection string
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2025-11-17 16:31:31 +00:00
Greg Sutcliffe
cc99cc823d Zabbix: Only send alerts for Average and above to Matrix
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-11-17 16:07:12 +00:00
Greg Sutcliffe
b65110b95f Adjust templates to disable un-needed checks and rework Postfix 2025-11-17 15:53:55 +00:00
James Antill
94bc9204c7 el10: Move to 10.1 and also use a HC value for epel repos.
Signed-off-by: James Antill <james@and.org>
2025-11-17 10:49:50 -05:00
Kevin Fenzi
805d9ff30c riscv-keytabs: make 20 more keytabs
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-11-17 07:33:02 -08:00
Carl George
3e4f01e82c batcave: modify rhel10-sync to delete problematic redhat-release package
https://forge.fedoraproject.org/epel/releng/issues/67
https://issues.redhat.com/browse/RHEL-128741

Signed-off-by: Carl George <carlwgeorge@gmail.com>
2025-11-16 22:22:59 -06:00
Kevin Fenzi
de4be8f8cc proxies: block ip thats hitting a pr endpoint
This ip is posting to /rpms/seahorse/pull-request/5/comment?js=1
about 400k times a day.

It may be a script gone wrong or something.
Remove the block if the user says they fixed it.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-11-16 13:00:20 -08:00
Kevin Fenzi
41e260526d proxies / varnish / src: also cache /static/
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-11-16 12:40:20 -08:00
Kevin Fenzi
56fd203ece proxies / varnish / src: unset the pagure cookie on reply from themes or static content
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-11-16 12:34:26 -08:00
Kevin Fenzi
f1483f1f39 proxies / varnish / src: also cache all static theme
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-11-16 11:32:04 -08:00
Kevin Fenzi
64229b15f2 proxies / varnish: drop cookies for static files so varnish will cache them
varnish won't cache things with cookies (as they might be dependent on
those). So, lets drop cookies for static files that dont care about
that.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-11-16 11:23:36 -08:00
Kevin Fenzi
90e279dee1 src: move src behind proxy varnish
Hopefully this will help the high ai scraper load and not break
anything.

In the event we need to revert, simply change the proxyurl back to the
haproxy endpoint instead of the varnish endpoint.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-11-16 10:52:07 -08:00
Kevin Fenzi
46f9bcb797 src: try putting src behind varnish in staging.
The scrapers are now downloading js and css files at a really high rate,
and thats causing a lot of load on pkgs01.

So, lets see if we can just move src behind the varnish on proxies.
This should allow it to return those pretty static files a lot
faster and not cause load on the backend.

However, putting varnish in the path might mess up something, so
lets just test in staging first.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-11-16 10:05:33 -08:00
Kevin Fenzi
ad54df92ab bvmhost-p10: also disable auto config on bond0 on bvmhosts
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-11-14 12:58:18 -08:00
Kevin Fenzi
258d66463c buildhw-p10-02.stg: try disabling auto6 and dhcp4
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-11-14 12:55:14 -08:00
Kevin Fenzi
bf4b6bfb4d buildhw-p10-01.stg: try disabling auto6 and dhcp4
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-11-14 12:53:09 -08:00
Kevin Fenzi
16752cfd2d buildhw-p10-01.stg: split ipv4 and ipv6
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-11-14 12:48:17 -08:00
Kevin Fenzi
383159eab9 buildhw-p10-01.stg: try and make sure the bond device does not try and get a ipv4 address
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-11-14 12:45:55 -08:00
Kevin Fenzi
888d5632ea ipa / client: stop removing the 04-ipa.conf ssh config
We removed this because it had some options we didn't like long ago.
However, now it's basically all stuff thats already in our base ssh
config.

It causes anoying, but harmless scriptlet messages on updates
and there's no need to remove it to only have it get re-added by
freeipa-client every update.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-11-14 12:34:23 -08:00
Kevin Fenzi
b07c6c4ed9 buildhw-p10-01.stg: add second staging builder lpar
This adds another buildhw-p10 for staging on the second power10 server.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-11-14 11:56:14 -08:00
Kevin Fenzi
7573c165f4 compose-x86-01.stg: move to f43
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-11-14 11:14:58 -08:00
Kevin Fenzi
5ae3a79edf compose-rawhide/branched: Move to f43
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-11-14 10:43:20 -08:00
Gregory Bartholomew
c509e526fb retire legacy fedora websites repo phase 1
Signed-off-by: Gregory Bartholomew <gregory.lee.bartholomew@gmail.com>
2025-11-14 18:31:40 +00:00
Kevin Fenzi
1331fab138 bvmhost-p10-01: add to correct groups to pick up group vars
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-11-14 10:29:24 -08:00
Kevin Fenzi
5c4d62ca23 kojipkgs: cache /compose/iot
Currently we are not caching anything under /compose/ in varnish.
This was desired in case there was some change that got cached when
there were updates.

However, we are hitting an issue currently where clients are requesting
large amounts of "/compose/iot/repo/objects/ABC/" directory listings.
These directories have nearly 65k entries in them and when apache has
to stat 65k files to get attributes it takes a long time.
Sometimes they seem to just get stuck because there are so many.

Caching this tree should allow varnish to cache things and prevent
high load issues.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-11-14 08:49:44 -08:00
Michal Konecny
a75f88d99d [ipa] Fix staging audit tasks
It seems like somebody just copied the production tasks for staging
without changing the LDAP domain, which caused the staging task to fail.
This commit is fixing that. And tagging the related tasks as well.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2025-11-14 09:52:16 +01:00
Paul W. Frields
af9c162d3e Reporting line change 2025-11-13 23:28:36 +00:00
Pedro Moura
58c7f0d2f2 removed datanommer01.fedorainfracloud.org
Signed-off-by: Pedro Moura <pmoura@redhat.com>
2025-11-13 23:04:53 +00:00
Pedro Moura
106bc5d24a print output
Signed-off-by: Pedro Moura <pmoura@redhat.com>
2025-11-13 22:37:04 +00:00
Pedro Moura
c68aa00b2c Add task to install python packages
Signed-off-by: Pedro Moura <pmoura@redhat.com>
2025-11-13 22:37:04 +00:00
Pedro Moura
831e79b5cf Refactor of owner-email-from-pagure.py
Signed-off-by: Pedro Moura <pmoura@redhat.com>
2025-11-13 22:37:03 +00:00
Kevin Fenzi
6ad86be1fe Revert "haproxy: switch kojipkgs to use apache backend on 8080"
This reverts commit 19cf971bde.

We want to switch this back now that the tcp_timeout issue is solved.
2025-11-13 10:42:56 -08:00
Michal Konecny
4fb97d61cd [release-monitoring] Disable check service on staging
I didn't realized that the check service, which is hitting a lot of
repositories is running on staging as well. Let's disable it and leave
it for manual testing if needed.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2025-11-13 15:37:21 +01:00
Jiri Kyjovsky
c447162152 copr-devel: enable copr-be-dev-temp 2025-11-12 16:12:05 +01:00
Jiri Kyjovsky
7bc8709b8a copr-devel: final move of dist git and keygen 2025-11-12 15:25:22 +01:00
Jiri Kyjovsky
b892c72c1a copr: remove specified uid for copr signer, clashes with others
namely:
dhcpcd:x:992:992:Minimalistic DHCP client:/var/lib/dhcpcd:/usr/sbin/nologin
2025-11-12 12:57:33 +01:00
Ryan Lerch
bb5f0b3255 forge: add group mapping for riscv orgwq
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-11-12 21:56:00 +10:00
Aurélien Bompard
f2739e64ae RabbitMQ: be more specific for the server-named queues to avoid conflict with exchange names
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-11-12 12:48:05 +01:00
Kevin Fenzi
51665b4ed3 buildhw-p10-02.stg: add to builders_stg group
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-11-11 19:29:44 -08:00
Ryan Lerch
1f32b08fcd change attachements redirect regex to match namespaced projcets on pagure
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-11-12 10:29:36 +10:00
Akashdeep Dhar
051f01e35f forge: proxy Pagure attachment URLs for migrated content
Add Apache reverse proxy configuration to handle Pagure-style attachment
URLs on Fedora Forge. When users paste migrated issue comments containing
attachment links (/<project>/issue/raw/files/<hash>-<filename>), the proxy
transparently fetches them from pagure.io, ensuring attachments display
correctly after migration from Pagure to Forgejo.

Signed-off-by: Akashdeep Dhar <akashdeep.dhar@gmail.com>
2025-11-12 00:26:25 +00:00
Kevin Fenzi
293f68d9d7 nagios: disable notify-by-fedora-messaging contact since we removed the script call
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-11-11 15:26:13 -08:00
Carl George
afa44e37e0 Retire EPEL 10.0
Signed-off-by: Carl George <carlwgeorge@gmail.com>
2025-11-11 16:34:06 -06:00
Kevin Fenzi
1a10743421 Revert "bvmhost-p10-01: try adding controller back to the bond"
This reverts commit bdfb12483a.
2025-11-11 13:51:44 -08:00
Kevin Fenzi
7917422391 koji_builder / riscv: up jobs on x86 buildvms
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-11-11 08:44:03 -08:00
Greg Sutcliffe
bf7c9afad9 Zabbix: Increase cache values for zabbix01
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-11-11 11:19:22 +00:00