WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-04-24 10:31:56 +08:00
Code Issues Packages Projects Releases Wiki Activity
6,842 Commits 9 Branches 0 Tags
73d8098fc2356cea2a6f990ef33d4e6b28d59cd8
Commit Graph

73 Commits

Author SHA1 Message Date
Patrick Uiterwijk
273620cd25 We need the _exec version off course 2015-03-13 00:50:40 +00:00
Patrick Uiterwijk
4a19044c35 More fixes to selinux pkgs 2015-03-13 00:49:11 +00:00
Patrick Uiterwijk
c015ad545c Same fix on more places 2015-03-13 00:45:16 +00:00
Patrick Uiterwijk
04dee89215 This type is always nfs_t, and we have a policy to allow that.. 2015-03-12 15:26:30 +00:00
Patrick Uiterwijk
1365500c17 Creating branches is now started by genacls.sh. 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2015-02-24 09:40:25 +00:00
Pierre-Yves Chibon
f883635ab5 Set the git_cgi_use_nfs SELinux boolean for the lookaside 2015-02-19 13:38:24 +01:00
Kevin Fenzi
5c6d849828 Wonder if it's a formatting issue 2015-02-16 16:01:27 +00:00
Kevin Fenzi
efc074f1ae Some more idemportency stuff 2015-02-16 15:51:08 +00:00
Kevin Fenzi
e6f2b7ad74 Run this even when doing check 2015-02-16 15:37:37 +00:00
Kevin Fenzi
88d5fd21e6 Move mount of lookaside on pkgs to nfs/client role 2015-02-16 14:47:04 +00:00
Pierre-Yves Chibon
31d4a63cd5 We do want a certificate in stg 2015-01-29 17:03:35 +00:00
Pierre-Yves Chibon
ad0972e28c Use different certs for prod and stg 2015-01-29 16:59:37 +00:00
Pierre-Yves Chibon
94c23a6992 Turn on the SELinux boolean nis_enabled on pkgs 2015-01-29 11:59:48 +01:00
Pierre-Yves Chibon
edaf6e3e80 Fix the content for /srv/cache 2015-01-28 15:27:57 +01:00
Pierre-Yves Chibon
bca02bd864 No need for two states and s/file/touch 2015-01-28 14:03:14 +01:00
Pierre-Yves Chibon
63fc693a28 Needs space 2015-01-28 13:55:29 +01:00
Pierre-Yves Chibon
44fe149b9e Precise the state, we want directories not file 2015-01-28 13:54:53 +01:00
Pierre-Yves Chibon
d2e73c5d91 Add our own SELinux policy for upload.cgi 
Many thanks to tfirg on #selinux for helping out making this policy
 2015-01-28 12:22:16 +01:00
Pierre-Yves Chibon
299ecf5943 Adjust the mode for the update hook itself 2015-01-27 18:44:14 +01:00
Mathieu Bridon
31933066d0 distgit: Fix perms on the Gitolite stuff 
We can't execute the update hooks otherwise.
 2015-01-27 18:40:11 +01:00
Pierre-Yves Chibon
14eeee7437 Fix the check-update-hooks, repos are in /srv 2015-01-27 17:14:30 +01:00
Mathieu Bridon
158afc5467 distgit: We also need semanage here 2015-01-27 15:48:22 +01:00
Mathieu Bridon
8a6719517b Revert "distgit: Merge in the cgit/make_pkgs_list role" 
This reverts commit a29f50a19a.

Turns out, Fedora People needs this as well, so it needs to remain
separated.

Sorry for the noise!
 2015-01-27 15:33:45 +01:00
Mathieu Bridon
a29f50a19a distgit: Merge in the cgit/make_pkgs_list role 
Having it split out was causing trouble, because distgit depends on it,
but it depends on the /srv/git folder being created, which is created
in the distgit role...

Nothing else uses this though, so merging it is the easy way out.
 2015-01-27 15:31:17 +01:00
Mathieu Bridon
c066e21c3a distgit: Ensure the proper SELinux contexts 2015-01-27 13:36:15 +01:00
Pierre-Yves Chibon
c617bc46a1 Give /srv/cache/lookaside/pkgs to apache 2015-01-27 08:49:35 +01:00
Pierre-Yves Chibon
52ff90ba9c Drop the fas.conf specific to distgit 2015-01-23 17:59:36 +01:00
Pierre-Yves Chibon
79eb0db7c0 Let distgit install its own fas.conf after the first run of fas_client 2015-01-23 15:06:47 +01:00
Mathieu Bridon
4602628727 Add the gen-acls user to the packager group 
This is required to run gitolite compile properly.
 2015-01-22 19:49:15 +01:00
Pierre-Yves Chibon
7a2f626fc9 Specify otherwise the groups with shell access 2015-01-22 18:06:52 +01:00
Pierre-Yves Chibon
8521f61cf8 Some join logic to fix the call to users-from-fas 2015-01-22 18:05:06 +01:00
Pierre-Yves Chibon
2ef9c6cc60 Adjust the list of person having shell access 2015-01-22 18:03:46 +01:00
Pierre-Yves Chibon
273bdee55a No comas it said 2015-01-22 17:53:10 +01:00
Pierre-Yves Chibon
4b430db9bb Run the script once and locally - Thansk Toshio 2015-01-22 17:51:15 +01:00
Pierre-Yves Chibon
1eb813ae53 Try specifying it is a python script 2015-01-22 17:08:33 +01:00
Pierre-Yves Chibon
a846a04f7b Try getting the list in 2 steps - Thank Toshio 2015-01-22 17:00:17 +01:00
Pierre-Yves Chibon
d7df8b7738 Another approach using lineinfile 2015-01-22 16:42:31 +01:00
Pierre-Yves Chibon
5cad48a1b7 Add a state for the file 2015-01-22 16:33:16 +01:00
Pierre-Yves Chibon
c5f1823b70 Try with file instead of assemble 2015-01-22 16:31:06 +01:00
Pierre-Yves Chibon
b7851f4b49 Try using the users-from-fas script to list users having a shell access 2015-01-22 16:19:47 +01:00
Pierre-Yves Chibon
1fbbefe117 Drop fixing the perms on /etc/gitolite/hook 2015-01-22 16:19:47 +01:00
Pierre-Yves Chibon
3aa0d39237 Create the local folder for gitolite3 and put it our hook 2015-01-22 15:40:15 +01:00
Pierre-Yves Chibon
e8d65d80ec Fix the permission and ownership on the gitolite hooks 2015-01-22 12:33:26 +01:00
Pierre-Yves Chibon
8cdc6d9b3c Adjust the path to /src/git/rpms to avoid searching twice in rpms and in repositories 2015-01-21 11:42:11 +01:00
Pierre-Yves Chibon
6893cbd335 Fix check-update-hooks cron to find the git repos properly 2015-01-21 11:10:42 +01:00
Pierre-Yves Chibon
ee7c1e4de9 Adjust the $HOME of the gen-acls user 2015-01-20 19:27:45 +01:00
Till Maas
a87f2b4325 Remove process-git-requests from distgit role 
The script is maintained in rel-eng repo. The version here is outdated.
 2015-01-12 22:34:13 +01:00
Kevin Fenzi
fe29fed6b0 Another cron fix 2015-01-10 02:36:27 +00:00
Mathieu Bridon
08d6bc634f distgit: Update the gitolite.rc file to Gitolite3 2014-12-15 17:46:19 +00:00
Mathieu Bridon
9bad15971c distgit: Schedule a weekly check of the update hooks 
This allows ensuring over time that all repositories have the right
update hooks set up.
 2014-10-27 10:48:12 +01:00