Commit Graph

583 Commits

Author SHA1 Message Date
Kevin Fenzi
f7391dd3fa base: You cannot have two when: clauses, just switch to one of them.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2019-02-20 01:11:51 +00:00
Kevin Fenzi
c3dc33cacc koji builders: we also want to allow port 80 connections to kojipkgs02.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2019-02-15 20:47:45 +00:00
Kevin Fenzi
b035dceff5 base/postfix: no need to make a hash here, regexp uses the normal file.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2019-02-13 18:21:25 +00:00
Kevin Fenzi
6a0a3994ce base/postfix: fix typo. It's regexp not regex.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2019-02-13 17:58:36 +00:00
Kevin Fenzi
8cd9d8750b base/postfix: convert sender map to a regex so we can reject emails with two @'s in From.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2019-02-13 17:54:47 +00:00
Kevin Fenzi
df6ecb8a7d base: do not try and install the global set on rhel8 beta yet.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2019-02-12 22:25:16 +00:00
Kevin Fenzi
ec716db512 base: do not try and install old policycoreutils name on rhel8 beta
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2019-02-12 22:21:54 +00:00
Patrick Uiterwijk
74adf3d61e Add maptype
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2019-02-07 09:12:11 +00:00
Patrick Uiterwijk
697e09fe7e Do a sender_access for mailman as well
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2019-02-07 09:03:51 +00:00
Patrick Uiterwijk
648c238cfe Add sender_access for mailman
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2019-02-07 09:03:51 +00:00
Mikolaj Izdebski
feeabd07b4 Add parentheses to workaround unexpected jinja2 operator precedence 2019-02-06 09:48:04 +01:00
Mikolaj Izdebski
16b878b802 Make base krb5.conf work with ansible_hostname unset 2019-02-06 09:46:34 +01:00
Mikolaj Izdebski
55bcab7042 Don't require facts gathered for installing base krb5.conf 2019-02-06 09:43:00 +01:00
Adam Williamson
d9db9714d8 Handle systems where the main if is not eth0 a bit better
ifcfg.j2 has a pretty awkward assumption that the interface
connected to the infra network will be eth0 (or enc900) - it
only includes the GATEWAY, DOMAIN and DNS1/DNS2 lines if the
interface is one of those two. It seems we were trying quite
hard to make eth0 always be "the interface", but now that's
been broken in a few systems. enc900 was added as apparently
that's what the main interface is called on some s390 boxes;
on openqa-ppc64le-01 the if that's connected is eth2 (eth0 is
present, but not connected), and on the new qa01 and qa02, it's
em3 (according to smooge, we have to use 'predictable' interface
names on those boxes as the old names really *do* get assigned
to different interfaces on each boot).

So since we now have several different cases where the 'eth0'
assumption doesn't hold, let's build a slightly better system
for handling it. This replaces ifcfg.j2's hard-coded list with
a variable, and sets the default value of the variable to the
two names ifcfg.j2 handled before: [ 'eth0', 'enc900' ]. This
allows the systems where the main interface is *not* one of
these to set the variable accordingly, and hopefully that'll
give them correct ifcfg files.

This *should* solve the problem of openqa-ppc64le-01.qa and qa01
and qa02 constantly dropping out of network connectivity any
time they got rebooted or the network plays got run.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2018-12-15 11:09:49 -08:00
Adam Williamson
a3f2af5a8c openqa: tweak qa01 ethernet config stuff a bit
Also, allow interface names starting with 'em' in the base
network stuff.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2018-12-14 19:05:20 -08:00
Stephen Smoogen
cc16f56e4f maybe this will make qa02 easier? 2018-12-15 01:14:59 +00:00
Stephen Smoogen
474d84d147 and we break more 2018-12-15 00:20:37 +00:00
Kevin Fenzi
eba72381f8 drop some mirrorlist related logs from rsyslog entirely 2018-12-14 20:09:36 +00:00
Kevin Fenzi
7b10fb8967 remove stray name: 2018-12-13 16:14:17 +00:00
Miroslav Suchý
5f1f04a417 rsyslog: replace obsolete syntax
addressing:
error during parsing file /etc/rsyslog.d/rsyslog-limits.conf, on or before line 1: invalid character '[' - is there an invalid escape sequence somewhere?
2018-12-13 11:25:41 +01:00
Miroslav Suchý
03aa9734f5 do not deploy rsyslog-audit.conf in cloud environment
addressing: https://pagure.io/fedora-infrastructure/issue/7438
2018-12-13 11:25:41 +01:00
Kevin Fenzi
4e20955cf7 fix postfix config on builders to fix dnf-automatic hangs 2018-12-01 22:31:12 +00:00
Mikolaj Izdebski
8da7c1ce6f iptables.kojibuilder is not used in staging 2018-11-30 07:23:12 +00:00
Mikolaj Izdebski
214f94d000 Configure varnish cache on buildvm-s390x-01.stg 2018-11-30 07:02:56 +00:00
Adam Williamson
2ad471f631 On second thoughts, let's have the quotes...
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2018-11-27 15:05:55 -08:00
Adam Williamson
e9f970c058 Try to correct broken 659650ef dnf loop fix
@msuchy was trying to do something good, here, but didn't get
it quite right - base_pkgs_inst and base_pkgs_erase are already
lists. I think this should be the right way to do it.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2018-11-27 15:03:46 -08:00
Miroslav Suchý
659650efb2 Invoking "dnf" only once while using a loop via squash_actions is deprecated.
addressing warning:
[DEPRECATION WARNING]: Invoking "dnf" only once while using a loop via squash_actions is deprecated. Instead of using a loop to supply multiple items and
specifying `name: {{ item }}`, please use `name: [u'policycoreutils-python-utils']` and remove the loop. This feature will be removed in version 2.11.
Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg.
2018-11-27 10:07:52 +01:00
Miroslav Suchý
6fd1dd674a Invoking "dnf" only once while using a loop via squash_actions is deprecated.
addressing warning:
[DEPRECATION WARNING]: Invoking "dnf" only once while using a loop via squash_actions is deprecated. Instead of using a loop to supply multiple items and
specifying `name: {{ item }}`, please use `name: [u'policycoreutils-python-utils']` and remove the loop. This feature will be removed in version 2.11.
Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg.
2018-11-27 10:04:39 +01:00
Miroslav Suchý
91c70c1c83 Invoking "dnf" only once while using a loop via squash_actions is deprecated.
addressing warning:
[DEPRECATION WARNING]: Invoking "dnf" only once while using a loop via squash_actions is deprecated. Instead of using a loop to supply multiple items and
specifying `name: {{ item }}`, please use `name: [u'{{ global_pkgs_inst }}']` and remove the loop. This feature will be removed in version 2.11.
Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg.
2018-11-27 09:53:10 +01:00
Kevin Fenzi
2d7ac321c7 a few tagger stragglers 2018-10-03 17:56:00 +00:00
David Shier
c0f45892ff Removed all traces i could fild of the tagger and statscache (and stats_cache for databases) in ansible, proxy configs, and the nagios config. Pursuant to request in pagzre issue https://pagure.io/fedora-infrastructure/issue/7267 . - Odin2016 2018-10-03 17:50:38 +00:00
Kevin Fenzi
72ddd973f0 clean up main.cf files, add recipient restrictions to more 2018-10-02 00:50:40 +00:00
Kevin Fenzi
ab303a3ae1 adjust postfix config for 3.3.0 and later that has to set smtpd_recipient_restrictions 2018-10-02 00:47:11 +00:00
Kevin Fenzi
0258bf95c7 out with the ntp, in with the chrony 2018-09-26 20:44:52 +00:00
Aurélien Bompard
1d6932fe86 Add lists.pagure.org to Mailman
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2018-09-22 13:53:06 +02:00
Mikolaj Izdebski
259ac6a466 Cleanup some Jenkins leftovers 2018-08-06 19:02:47 +00:00
Jason Tibbitts
73de9829d0 Add a -maintainers alias file.
The current scripting generates aliases of the form
foo-owner@fedoraproject.org.  But this conflicts with our messaging
which says that the project "owns" packages and people "maintain" them.
Plus, "owner" is singular while we really want to have more than one
maintainer.

This simply adds a second alias file generated from the original file.
2018-07-25 22:00:13 +00:00
Kevin Fenzi
c731ace534 Revert this for now. 2018-06-29 22:35:13 +00:00
Kevin Fenzi
ab927fcd31 let us try this to add vmhost to cached facts 2018-06-29 22:21:06 +00:00
Aurélien Bompard
ef8ca5d767 Fixup previous commit 2018-06-15 16:06:29 +00:00
Aurélien Bompard
1a03ecd659 Mailman: next step in adding lists.pagure.io 2018-06-15 15:49:19 +00:00
Kevin Fenzi
04bd0e1ea1 try and make the lock wrapper silent option actually silent 2018-05-19 02:13:47 +00:00
Patrick Uiterwijk
51ec022933 Make silent an option
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2018-05-17 16:34:38 +02:00
Patrick Uiterwijk
8773b6d931 Silence lock wrapper if script is still running
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2018-05-17 16:30:21 +02:00
Kevin Fenzi
cb22afd4fe Look, ask has moved away. I'm sure it will write us back someday... 2018-05-09 02:00:45 +00:00
Kevin Fenzi
a8714caab3 first cut at changing all the old |changed to is changed per ansible deprecations 2018-05-07 23:51:48 +00:00
Ricky Elrod
550610d96f nuke bodhi01.stg and batcomputer01
Signed-off-by: Ricky Elrod <relrod@redhat.com>
2018-05-07 17:01:25 +00:00
Stephen Smoogen
59b547828d lets remove this bodhi stuff. its all in dockah now 2018-05-04 15:07:05 +00:00
Patrick Uiterwijk
5171e61866 Do not allow inbound sslv2/sslv3
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2018-05-04 03:04:21 +02:00
Kevin Fenzi
d55018a9d3 clean up more jenkins leftovers 2018-05-02 17:26:25 +00:00