Commit Graph

27491 Commits

Author SHA1 Message Date
Samyak Jain
c71e1f8bab robosignatory: also allow resigning f44 tagged packages with f45 key
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2026-01-28 15:38:55 +00:00
Greg Sutcliffe
460cd098d7 Zabbix: fix apache-status access on pkgs
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-01-27 18:03:36 +00:00
Jiri Kyjovsky
4adce255f5 copr: add powerful builders for riscv team 2026-01-27 11:52:58 +01:00
Adam Williamson
1d65a5dd55 testdays: update git URL to forge
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-01-26 23:34:39 -08:00
Adam Williamson
ae2cd3530b roles/openqa/server: drop OpenID auth support
We've been using OAuth2 for prod and stg for some time now, so
let's clean this up.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-01-26 15:40:50 -08:00
Adam Williamson
4e4a12f2c3 roles/openqa/server: show more builds on the front page
We only have two job groups, so the front page is a bit sad and
empty. Let's show 10 builds per group, not 3.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-01-26 15:37:24 -08:00
Greg Sutcliffe
a72e5b2fbf Zabbix: fix different handling of /apache-status on proxy hosts
Seems like the proxies don't want to handle port 80 nicely, I get
errors in Zabbix for them using localhost:80/apache-status (which
works elsewhere, like sundries). However using https/443 seems to
work, so we'll do that instead.

Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-01-26 11:39:48 +00:00
Greg Sutcliffe
3b9f1808a2 Zabbix: fixes infra/tickets#12976 - add apache-status monitoring
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-01-26 11:22:52 +00:00
Jiri Kyjovsky
de8f2a8197 copr: add emulated riscv64 resalloc tags 2026-01-26 10:17:11 +01:00
Kevin Fenzi
1b938e0c7a Revert "koji: re-block some koji endpoints due to scrapers"
This reverts commit ffbcb36d91.

We no longer need this after the blocking of that abusive ASN.
2026-01-25 10:46:37 -08:00
Kevin Fenzi
ffbcb36d91 koji: re-block some koji endpoints due to scrapers
They are hitting these endpoints really hard.
Might be able to lift it later...

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-01-25 10:24:17 -08:00
Adam Williamson
ec42689b4d Update fedora-nightlies URLs for forgejo migration
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-01-23 18:48:32 -08:00
Adam Williamson
804efd40d1 Update pagure.io/fedora-qa to forge.fedoraproject.org/quality
Quality org has completed moving repos to Forgejo (all but one),
so let's update all of these.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-01-23 15:31:46 -08:00
Greg Sutcliffe
ac05b2c713 DHCP: update mac for x86-copr02 - fix typo
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-01-23 13:26:12 +00:00
Greg Sutcliffe
e073db663d DHCP: update mac for x86-copr02
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-01-23 13:23:35 +00:00
David Kirwan
c7b256b857 communishift: wip shutting down projects marked for deletion
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2026-01-23 13:23:03 +00:00
Greg Sutcliffe
01ab35531a Zabbix: fixes infra/tickets#12992 - add IPA backup monitoring
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-01-23 10:22:29 +00:00
Gregory Bartholomew
7e69bf85e8 redirect torrent.fp.o to fp.o/torrents
Signed-off-by: Gregory Bartholomew <gregory.lee.bartholomew@gmail.com>
2026-01-22 22:31:24 +00:00
Adam Williamson
2a8f208ce6 Fix qa redirect (remove trailing slash)
The qa.fp.o redirect is to a wiki page, it should not have a
trailing slash.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-01-22 14:16:53 -08:00
Kevin Fenzi
f3406c7ee7 anubis-el: add missing check for port
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-01-22 10:50:15 -08:00
Kevin Fenzi
4e9729d938 anubis: fix ports for el vs non el versions
I mistakenly changed the port in the fedora/non el one, that was
correct.

Need to add the port in the el one for selinux to allow httpd to work.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-01-22 10:44:20 -08:00
Kevin Fenzi
07940d97ac download / anubis: fix typo of file vs copy module
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-01-22 10:26:24 -08:00
Kevin Fenzi
6ceb3ea68b download: enable/finish anubis for other download servers
Fixed up a few things missed and caught in testing on dl01:
* need to setup subuid/subgid files for podman
* need to allow the right port for httpd to listen in selinux
* need httpd network connect to allow it to connect to anubis
* adjust worker values, we were not using prefork for a long time
so the values were just default up them a bunch.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-01-22 10:16:22 -08:00
Kevin Fenzi
9717d920af anubis: rename anubis-el8 to anubis-el and see about enabling on download
Looks like the scrapers are hitting the download servers now.
So, look at setting up an anubis pod there like we did for pagure.
anubis package isn't available for epel9, so we just use the container.

Will test this with dl01 and tweak until it's working.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-01-22 08:50:34 -08:00
Michal Konecny
57db17afb3 [flatpak-indexer] Run the correct command
The flatpak-indexer-build needs to run only pytest as done in upstream.
Otherwise it fails on missing commands.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-01-22 13:51:42 +01:00
Michal Konecny
83b60d7c3c [flatpak-indexer] Use the correct ImageStreamTag
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-01-22 13:46:37 +01:00
Michal Konecny
71c56a448f [flatpak-indexer] Fix indentation
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-01-22 13:12:40 +01:00
Michal Konecny
bf4f2520ea [flatpak-indexer] Fix the git ref for branch
Upstream repo doesn't have staging and production branches. So let's
just go with main. In case of redis use the branch where the fix is introduced.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-01-22 12:30:44 +01:00
Michal Konecny
78235160d4 [flatpak-indexer] Fix deployment in openshift
The project has plenty of updates upstream. This commit reflects that
changes in deployment.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-01-22 11:19:25 +00:00
Adam Williamson
d76afa032b Move the qa-landingpage reverse proxy config removal
...we already have a better place to do this, it turns out.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-01-21 15:44:01 -08:00
Adam Williamson
521897ede9 sigh, tags
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-01-21 15:05:23 -08:00
Adam Williamson
b67fe0f32f Remove qa-landingpage proxypassreverse config
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-01-21 14:58:44 -08:00
Adam Williamson
382f947eff Drop qa-landingpage, clean up blockerbugs config a bit
Per https://pagure.io/fedora-qa/issue/859 we want to drop the QA
landing page at qa.fedoraproject.org. This should turn it back
into a redirect to the wiki page. We also drop the certificate
for qa.fp.o (since blockerbugs uses the wildcard certificate
anyway) and remove a duplicate reverseproxy entry for blockerbugs
(we had two otherwise-identical entries that were restricted to
prod and stg with `when` conditions).

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-01-21 14:29:13 -08:00
Kevin Fenzi
d30bdfb3ed pagure / staging: add missing endif
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-01-21 13:40:38 -08:00
Anton Medvedev
82f9af8767 feat(roles/pagure): adding myself as pagure admin on stg
Signed-off-by: Anton Medvedev <amedvede@redhat.com>
2026-01-21 21:37:26 +00:00
Ryan Lerch
8ee3cdae56 [forge] fix json in group mapping
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2026-01-21 14:32:57 +10:00
Akashdeep Dhar
e59252d689 Map teams/groups for the design namespace
Signed-off-by: Akashdeep Dhar <akashdeep.dhar@gmail.com>
2026-01-21 14:27:09 +10:00
Gregory Bartholomew
53cbfac4e6 dl.fedoraproject.org: make *-CHECKSUM files download
This is another attempt at 86696cf. Appearently the condition must be
set to "always" in order to for the header to be "persisted across
internal redirects".

Signed-off-by: Gregory Bartholomew <gregory.lee.bartholomew@gmail.com>
2026-01-21 01:00:17 +00:00
Kevin Fenzi
a754144f19 Update infra pagure.io links to forge.fp.o (WIP)
This should update all the references we have to
https://pagure.io/fedora-infrastructure to the
new https://forge.fedoraproject.org/infra/tickets/ area.

Do not merge this before the migration on tuesday.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-01-20 14:39:40 -08:00
Michal Konecny
867111750e [ipsilon] Add OIDC entry for GNOME Damned Lies
Add staging OIDC entry to ipsilon for GNOME Damned Lies. See more info
in https://pagure.io/fedora-infrastructure/issue/13017.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-01-20 15:16:48 +01:00
Greg Sutcliffe
babb906403 Zabbix: increase value cache size
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-01-20 13:51:43 +00:00
Akashdeep Dhar
c060befdf9 Provide namespace/group mapping for translations
Signed-off-by: Akashdeep Dhar <akashdeep.dhar@gmail.com>
2026-01-20 11:30:36 +00:00
Jakub Kadlcik
7a7d7dac7d copr-be-dev: use image-builder for uploads to libvirt
There is a small bug in the `image-builder upload` code, causing it to always
use the "default" libvirt pool. I am proposing a fix here
https://github.com/osbuild/images/pull/2147
and I uploaded the current builder images with the patched version.
2026-01-20 11:24:12 +01:00
Justin Wheeler
0ba3182601 📧 roles(fasjson): Use flock-team FAS group membership for emails
This commit uses the `flock-team` FAS group to direct who receives
emails for the members and sponsors email of the FAS group. By default,
group sponsors will receive mail for Flock sponsorship, while all group
members will receive email for mail sent to the Flock staff mail alias.

Signed-off-by: Justin Wheeler <jwheel@redhat.com>
2026-01-20 10:17:49 +00:00
Ryan Lerch
31ac8f1ff1 [forge] notify admins on new user creation
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2026-01-20 18:07:59 +10:00
Ryan Lerch
fd7c38b8f8 [forge]: require additional emails to be verified
resolves: https://forge.fedoraproject.org/forge/forge/issues/352

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2026-01-20 18:00:27 +10:00
Ryan Lerch
aa5124ddc5 [forge] dont require email confirm for oauth2
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2026-01-20 09:43:36 +10:00
Ryan Lerch
4d84bce710 [forge] enable email confirm for staging
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2026-01-20 08:50:20 +10:00
x3mboy
f79959431b Updating the podcast team members 2026-01-19 22:34:44 +00:00
Gregory Bartholomew
86696cf807 dl.fedoraproject.org: make *-CHECKSUM files download
Signed-off-by: Gregory Bartholomew <gregory.lee.bartholomew@gmail.com>
2026-01-19 22:30:08 +00:00