Commit Graph

28517 Commits

Author SHA1 Message Date
Kevin Fenzi
66e45ad988 communishift: adjust for new cert-manager setup.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:12 +02:00
Clement Verna
d7207c70a2 Bodhi: move the wsgi file where httpd expect it in stg
Signed-off-by: Clement Verna <cverna@tutanota.com>
2020-04-24 21:34:12 +02:00
Adrian Reber
24d5180f47 127.0.01 is not really valid, let's use 127.0.0.1
Signed-off-by: Adrian Reber <adrian@lisas.de>
2020-04-24 21:34:12 +02:00
Kevin Fenzi
6052756805 postgresql_server / db-koji01: Adjust a bunch more for performance.
The current settings cause database dumps to drive the load way up
and make the entire application slow, so we need to adjust.
Using pgtune, these values might well be better.

shared_buffers + effective_cache_size should = total memory.
random_page_cost should be lowered a bunch since we are on ssds there.
1.1 is only slightly more than 1.0 for sequential.
effective_io_concurrency should also be raised a bunch for ssds.
a few other values should be higher based on memory.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:12 +02:00
Adrian Reber
3f723683c4 New mirrorlist container should listen on 127.0.0.1
As default the mirrorlist container listens on 0.0.0.0. This switches
the listen address to 127.0.0.1.

Signed-off-by: Adrian Reber <adrian@lisas.de>
2020-04-24 21:34:12 +02:00
Adrian Reber
86c4eb91c1 Fixes for rootless mirrorlist containers (staging)
- chown /var/log/mirrormanager to mirrormanager.mirrormanager
- drop selinux relabeling for mounted directories

Signed-off-by: Adrian Reber <adrian@lisas.de>
2020-04-24 21:34:12 +02:00
Pierre-Yves Chibon
198ba09f4c bodhi: don't install bodhi-docs via rpm in the web container
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-04-24 21:34:12 +02:00
Adrian Reber
2cb4f66f27 Switch staging to new rust based mirrorlist server
Signed-off-by: Adrian Reber <adrian@lisas.de>
2020-04-24 21:34:12 +02:00
Pierre-Yves Chibon
49305e19f0 bodhi: install fedora-messaging in the base image
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-04-24 21:34:12 +02:00
Pierre-Yves Chibon
92c2ea3c85 bodhi: fix the indentation of the other docker files
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-04-24 21:34:12 +02:00
Pierre-Yves Chibon
6b8360749b bodhi: let's try some more indentation for the base dockerfile
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-04-24 21:34:12 +02:00
Clement Verna
7a121506d4 Bodhi: build the stage container base from git
Signed-off-by: Clement Verna <cverna@tutanota.com>
2020-04-24 21:34:12 +02:00
Pierre-Yves Chibon
77670b9610 Bodhi: Split the buildconfig for stg and for prod
This way we can change things in staging without impacting production since
we're in freeze.
Once the freeze is over, we'll likely want to migrate production to the new
way.
While splitting the buildconfig, we're also moving out the docker files to
make the file easier to read.

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-04-24 21:34:12 +02:00
Pierre-Yves Chibon
ebe8d4728a resultsdb: install ci_resultsdb on the stg box
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-04-24 21:34:12 +02:00
Aurélien Bompard
b906c4e887 Forgot quotes, sorry
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-04-24 21:34:12 +02:00
Aurélien Bompard
266985c3f2 Make those variables available
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-04-24 21:34:12 +02:00
Aurélien Bompard
426d9b7b63 We have differnt vars files for staging and prod, use them
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-04-24 21:34:12 +02:00
Aurélien Bompard
116ced3334 Make the Bodhi versions more widely available
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-04-24 21:34:12 +02:00
Aurélien Bompard
a818d432ef Bodhi's static files dir is now versionned
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-04-24 21:34:12 +02:00
Clement Verna
b480336ed0 Bodhi: use python3 to run ansible on the stg backend box
Signed-off-by: Clement Verna <cverna@tutanota.com>
2020-04-24 21:34:12 +02:00
Tomas Hrnciar
70a00e6925 copr-fe: adds PAGURE_INSTANCES 2020-04-24 21:34:12 +02:00
Clement Verna
3fff578533 Bodhi: Move bodhi-backend01.stg to Fedora 30
Signed-off-by: Clement Verna <cverna@tutanota.com>
2020-04-24 21:34:12 +02:00
Kevin Fenzi
844bd333e9 bodhi / backend: No longer sync or make aarch64 for epel7.
Since rhel dropped alt arch aarch64 with 7.7, we have to drop it in epel too.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:12 +02:00
Aurélien Bompard
be681e40f3 Bind AMQP queues to both amq.topic and zmq.topic
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-04-24 21:34:12 +02:00
Aurélien Bompard
5c94352aa3 Fix AMQP connections over TLS for Celery
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-04-24 21:34:12 +02:00
Rick Elrod
7086ad2bb7 koji_hub: fix syntax error in if expression
Signed-off-by: Rick Elrod <relrod@redhat.com>
2020-04-24 21:34:12 +02:00
Aurélien Bompard
35e04b9110 Use TLSv1.3 in Celery
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-04-24 21:34:12 +02:00
Aurélien Bompard
5c28ee7a45 Rebase bodhi on F30
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-04-24 21:34:12 +02:00
Aurélien Bompard
7a6d8c8f7c On recent Fedoras, /usr/bin/celery is already the Py3 version
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-04-24 21:34:12 +02:00
Aurélien Bompard
8c96f6e24b Don't overwrite the rabbitmq admin user tags
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-04-24 21:34:12 +02:00
Aurélien Bompard
99fc8667ca Typo in celeryconfig
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-04-24 21:34:12 +02:00
Aurélien Bompard
fb8b70778a Bodhi 5: stop and start the new service as well during manual operations
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-04-24 21:34:12 +02:00
Aurélien Bompard
e160a30a32 Update Bodhi to 5.0 in staging
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-04-24 21:34:12 +02:00
Stephen Smoogen
70d56da700 add in centos to sync-rhn 2020-04-24 21:34:12 +02:00
Kevin Fenzi
5fef36d394 FROZEN!
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:12 +02:00
Kevin Fenzi
c55fd61bb8 robosignatory: Use gid 988 for robosignatory group.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:12 +02:00
Mohan Boddu
3407fa8626 F31 Final Freeze
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
2020-04-24 21:34:12 +02:00
Aurélien Bompard
3dabb3a067 Remove useless comment
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-04-24 21:34:12 +02:00
Aurélien Bompard
0a67ba350c Fix the name of the CoreOS S3 bucket for robosignatory
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-04-24 21:34:12 +02:00
Kevin Fenzi
37d59d1917 oci-registry: Updated all of them to f30
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:12 +02:00
Kevin Fenzi
ddbf606a49 robosignatory: add signing for f32-mingw32-dwarf
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:12 +02:00
Kevin Fenzi
c5291dc402 dnf-automatic: disable updates repo on initial install.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:12 +02:00
Kevin Fenzi
1ff61c5636 dnf-automatic: exclude the dnf stack from getting auto-updated by dnf-automatic.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:12 +02:00
Kevin Fenzi
a21f9f21be armv7_one_nic install: also need to set threads vs native
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:12 +02:00
Kevin Fenzi
fd1c7cf395 base: change conditional, perhaps ansible likes this one better?
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:12 +02:00
Kevin Fenzi
53c3309269 base: Tweak conditionals to be much simpiler.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:12 +02:00
Kevin Fenzi
c80a06773a armv7_on_nic: set this to super fast cache mode
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:12 +02:00
Kevin Fenzi
df4d17f839 virt_instance_create: ansible_python_interperter should be a var
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:12 +02:00
Kevin Fenzi
74c4fc2188 virt_instance_create: Try and use python2 for the virt_boot call since it's python2.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:12 +02:00
Kevin Fenzi
35258909e0 group_vars / all / armv7-2nic install: try virt-2.11
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:12 +02:00