Commit Graph

137 Commits

Author SHA1 Message Date
Miroslav Suchý
6092f3bdb2 set swappiness to 10 for copr machines 2026-02-04 20:45:38 +01:00
Jakub Kadlcik
afc0a2c783 copr: install jq on our servers 2026-01-15 14:50:12 +01:00
Pavel Raiskup
e6cbeaa3f9 copr-be: fix the expected string in frontend check 2025-12-11 08:49:37 +01:00
Pavel Raiskup
2bab0054d8 copr-be: fix the frontend check after enabling Anubis 2025-12-11 08:34:38 +01:00
Pavel Raiskup
ae33c9d0d4 copr: define cgit_uri template variable
And provide updated httpd/conf.d/cgit.conf.
2025-09-24 14:02:40 +02:00
Pavel Raiskup
a3460b720f copr-dist-git: host Cgit on a less obvious location
My hypothesis is that web crawlers are especially attracted to the /cgit
string in the URL, assuming it leads to useful source code for AI
training.

In reality, our cgit instance isn't a valuable source for AI learning.
It primarily contains unstructured changes to spec files that often fail
to comply with guidelines.  It seems unlikely that a human is
intentionally directing AI crawlers to our instance.

I may be wrong, but the experiment is as simple as the change in this
commit.

Closes: https://github.com/fedora-copr/copr/issues/3873

P.S. On the off chance you actually want to use Copr's Git repos for AI
learning, you're welcome to!  But please reach out to us first—we can
find a better way for you to access all that data than using Cgit.

Closes: #2858
2025-09-24 13:38:05 +02:00
Michal Konecny
2ec055db6f Use first uppercase letter for all handlers
This will unify all the handlers to use first uppercase letter for
ansible-lint to stop complaining.

I went through all `notify:` occurrences and fixed them by running
```
set TEXT "text_to_replace"; set REPLACEMENT "replacement_text"; git grep
-rlz "$TEXT" . | xargs -0 sed -i "s/$TEXT/$REPLACEMENT/g"
```

Then I went through all the changes and removed the ones that wasn't
expected to be changed.

Fixes https://pagure.io/fedora-infrastructure/issue/12391

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2025-02-10 20:31:49 +00:00
Kevin Fenzi
9876752df2 Fix renamed handler for restart nrpe
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-01-24 14:01:45 -08:00
Ryan Lerch
47c68f478d ansiblelint fixes - fqcn[action-core] - template to ansible.builtin.template
Replaces references to template: with ansible.builtin.template

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 11:30:29 +10:00
Ryan Lerch
3c41882bb0 ansiblelint fixes - fqcn[action-core] - shell to ansible.builtin.shell
Replaces references to shell: with ansible.builtin.shell

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 11:29:10 +10:00
Ryan Lerch
25391e95b7 ansiblelint fixes - fqcn[action-core] - package to ansible.builtin.package
Replaces many references to  package: with ansible.builtin.package

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 11:28:00 +10:00
Ryan Lerch
462176464b ansiblelint fixes-- fqcn[action-core] - command to ansible.builtin.command
Replaces many references to  command: with ansible.builtin.command

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 11:26:47 +10:00
Ryan Lerch
6a3816dfdc ansiblelint fixes-- fqcn[action-core] - copy to ansible.builtin.copy
Replaces many references to 'copy' with ansible.builtin.copy

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 10:43:31 +10:00
Ryan Lerch
691adee6ee Fix name[casing] ansible-lint issues
fix 1900 failures of the following case issue:

`name[casing]: All names should start with an uppercase letter.`

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-14 20:20:07 +10:00
Jakub Kadlcik
b9bb247f93 copr-base: make sure we don't use iptables-legacy
See https://github.com/fedora-copr/copr/issues/3439
2024-11-30 23:58:22 +01:00
Pavel Raiskup
e17564484e copr: avoid the ipv6/offloading kludges
Neither of those survives reboot, yet network seems to work.
2024-11-29 20:22:42 +01:00
Ryan Lerch
89f6f1fc32 Fix majority of remaining yamllint warnings and errors
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2024-11-28 17:31:45 +10:00
Jakub Kadlcik
1bd0133ed2 copr-base: golang-github-prometheus-node-exporter was renamed to node-exporter 2024-11-27 21:22:02 +01:00
Jakub Kadlcik
67cc0600fc copr: the eth0 device is now called ens5
At first, I wanted to fix the current name and change it back to eth0 but it
seems this is a desired naming from now on and we should probably adopt it.

https://fedoraproject.org/wiki/Changes/EnableConsistentDeviceNamingCloud

This commit will probably break playbooks for the production instances but I
cannot do a "if devel" condition here. So hopefully, we will be fine.
2024-11-27 21:14:57 +01:00
Jakub Kadlcik
804b7558dd copr-base: we cannot start node exporter because we don't have the package now 2024-11-27 15:41:02 +01:00
Jakub Kadlcik
476d71fb8a copr-base: don't install golang-github-prometheus-node-exporter 2024-11-27 15:29:08 +01:00
Pavel Raiskup
4a01fb6f3e copr: use aws_ipv6_con var on more palces 2024-03-13 21:35:22 +01:00
Pavel Raiskup
5a45135c38 copr: ipv6 also on non-Fedora boxes 2024-03-13 21:32:51 +01:00
Pavel Raiskup
20d43f939f copr-pulp: setup ipv6 2024-03-13 21:26:45 +01:00
Pavel Raiskup
cdb5c923a5 copr-pulp-dev: don't start node exporter
EL9 boxes have the service named differently, and we don't need it
started right now.
2024-03-13 19:47:40 +01:00
Jakub Kadlcik
4889f42f5e copr/base: do all the networking magic only on Fedora
On copr-pulp-dev the connection is named `System eth0`. I don't have
time to debug it right now and we IMHO don't need the networking magic
right from the start.
2023-08-20 19:40:39 +02:00
Jakub Kadlcik
dd31fcceea copr/base: use rsyslog-logrotate only on Fedora
It isn't available in EPEL8
2023-08-20 19:31:22 +02:00
Jakub Kadlcik
60d5faf5d6 copr: mask systemd-oomd only on Fedora hosts
The copr-pulp instance will run on RHEL8 and systemd-oomd is not
installed there.
2023-08-20 19:22:44 +02:00
Pavel Raiskup
21be6fd294 copr: use smtp-auth-relay for all hosts 2023-06-19 11:08:23 +02:00
Pavel Raiskup
70d60d4968 copr/base: forward cron output to copr-team 2023-02-21 09:08:36 +01:00
Pavel Raiskup
a1019b0e4a copr/base: post logrotate scripts should ping to rsyslog.pid, not syslog.pid 2023-02-15 11:31:29 +01:00
Pavel Raiskup
e24dfce94f copr/base: rsyslog uses "rsyslog" logrotate file, not syslog 2023-02-15 10:35:47 +01:00
Pavel Raiskup
265fd1bb73 copr/base: override rsyslog logrotate config
Copy-paste the stuff others use in this repository.  While on it, assure
logrotate is installed on copr boxes, and install the packages by a
single 'package' statement.
2023-02-15 10:19:29 +01:00
Jakub Kadlcik
98410c9b7b copr: mask the systemd-oomd service 2023-01-09 11:40:08 +01:00
Jakub Kadlcik
02130aed22 Revert "copr: ipv6.never-default yes"
This reverts commit 8f59bfd6cb.

It was a bad idea. It won't be possible to curl the server via IPv6
2022-12-06 16:14:05 +01:00
Jakub Kadlcik
8f59bfd6cb copr: ipv6.never-default yes
Don't use IPv6 gateway. It breaks OpenID login for us

https://github.com/fedora-copr/copr/issues/2418
https://pagure.io/fedora-infrastructure/issue/11025
2022-12-06 14:27:14 +01:00
Jakub Kadlcik
ee1f6638a6 copr: restart systemd-oomd after changing its config 2022-11-29 22:46:43 +01:00
Jakub Kadlcik
1e56a328b8 copr: use SwapUsedLimit=80 for systemd-oomd on all copr servers 2022-11-29 22:25:55 +01:00
Pavel Raiskup
5107c13c9c copr/base: better detect ipv6 config
Check the connection configuration, not the actual device setup (device
setup might be automatically configured, but still non-working).
2022-11-29 21:43:11 +01:00
Pavel Raiskup
2bb712b026 copr-base: ipv6.may-fail yes 2022-11-28 18:25:41 +01:00
Pavel Raiskup
20ab4ef0b1 copr-base: we need ipv6.method auto eventually
This is needed to setup gateway, etc.  After that we need to do
'nmcli con up'.
2022-11-23 22:42:54 +01:00
Pavel Raiskup
96b00cbd33 copr-base: don't reconfigure ipv6 over again 2022-11-23 12:42:10 +01:00
Pavel Raiskup
a1b7c1102a copr/base, copr-fe: don't restart prometheus exporter all the time 2022-11-23 12:17:34 +01:00
Pavel Raiskup
094242ecc6 copr/base: drop an unused resolv.conf hack
This was long time ago used with the Fedora Infra OpenStack.
2022-11-23 12:12:13 +01:00
Pavel Raiskup
84386e8b4f copr_base: install acl package 2022-11-22 23:29:56 +01:00
Pavel Raiskup
e61a356554 copr-base: test ipv6 manual 2022-11-22 10:49:19 +01:00
Jakub Kadlcik
070a99e324 copr: use nmcli to configure IPv6
The best conversion table I found is here
https://networkmanager.dev/docs/api/latest/nm-settings-ifcfg-rh.html
See: Table 23. ipv6 setting
2022-11-21 11:16:12 +01:00
Jakub Kadlcik
83c20f9aeb copr: disable offloading in the nmconnection keyfile
The old network script is deprecated, please see
/etc/sysconfig/network-scripts/readme-ifcfg-rh.txt

You can check that the settings are correct with

    ethtool -k eth0 | egrep 'tcp-segmentation-offload:
                             |generic-receive-offload:
                             |generic-segmentation-offload: '
2022-11-19 14:38:22 +01:00
Silvie Chlupova
7a88ef0429 copr: restart node_exporter just in case the service file changed 2022-05-04 13:03:35 +02:00
Silvie Chlupova
b951f4ec82 copr: change node_exporter settings according to changes in golang-github-prometheus-node-exporter 2022-04-27 14:47:47 +02:00