WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-04-24 10:31:56 +08:00
Code Issues Packages Projects Releases Wiki Activity
6,031 Commits 9 Branches 0 Tags
833bde683249c8dfdfd9a5cfd696caa72c68dc42
Commit Graph

112 Commits

Author SHA1 Message Date
Pierre-Yves Chibon
869802eddc RemiFedora said 0002 was better, especially if we want to access directories 2015-01-30 14:55:21 +01:00
Pierre-Yves Chibon
25ac7e8793 Give other the right to read the file 
This will make cgit happy

Thanks Mathieu :)
 2015-01-30 14:48:40 +01:00
Pierre-Yves Chibon
31d4a63cd5 We do want a certificate in stg 2015-01-29 17:03:35 +00:00
Pierre-Yves Chibon
ad0972e28c Use different certs for prod and stg 2015-01-29 16:59:37 +00:00
Pierre-Yves Chibon
94c23a6992 Turn on the SELinux boolean nis_enabled on pkgs 2015-01-29 11:59:48 +01:00
Pierre-Yves Chibon
edaf6e3e80 Fix the content for /srv/cache 2015-01-28 15:27:57 +01:00
Pierre-Yves Chibon
bca02bd864 No need for two states and s/file/touch 2015-01-28 14:03:14 +01:00
Pierre-Yves Chibon
63fc693a28 Needs space 2015-01-28 13:55:29 +01:00
Pierre-Yves Chibon
44fe149b9e Precise the state, we want directories not file 2015-01-28 13:54:53 +01:00
Pierre-Yves Chibon
d2e73c5d91 Add our own SELinux policy for upload.cgi 
Many thanks to tfirg on #selinux for helping out making this policy
 2015-01-28 12:22:16 +01:00
Pierre-Yves Chibon
299ecf5943 Adjust the mode for the update hook itself 2015-01-27 18:44:14 +01:00
Mathieu Bridon
31933066d0 distgit: Fix perms on the Gitolite stuff 
We can't execute the update hooks otherwise.
 2015-01-27 18:40:11 +01:00
Pierre-Yves Chibon
14eeee7437 Fix the check-update-hooks, repos are in /srv 2015-01-27 17:14:30 +01:00
Mathieu Bridon
5996178fd3 distgit: Don't try reloading apache if it's off 2015-01-27 15:58:24 +01:00
Mathieu Bridon
158afc5467 distgit: We also need semanage here 2015-01-27 15:48:22 +01:00
Mathieu Bridon
8a6719517b Revert "distgit: Merge in the cgit/make_pkgs_list role" 
This reverts commit a29f50a19a.

Turns out, Fedora People needs this as well, so it needs to remain
separated.

Sorry for the noise!
 2015-01-27 15:33:45 +01:00
Mathieu Bridon
a29f50a19a distgit: Merge in the cgit/make_pkgs_list role 
Having it split out was causing trouble, because distgit depends on it,
but it depends on the /srv/git folder being created, which is created
in the distgit role...

Nothing else uses this though, so merging it is the easy way out.
 2015-01-27 15:31:17 +01:00
Mathieu Bridon
c066e21c3a distgit: Ensure the proper SELinux contexts 2015-01-27 13:36:15 +01:00
Pierre-Yves Chibon
c617bc46a1 Give /srv/cache/lookaside/pkgs to apache 2015-01-27 08:49:35 +01:00
Mathieu Bridon
e39ab5d3e8 lookaside: Try again allowing the CGI script 2015-01-26 17:15:52 +01:00
Mathieu Bridon
2562566485 lookaside: Also grant access for the upload 2015-01-26 16:44:10 +01:00
Pierre-Yves Chibon
1351f8609e In EL7 we need to specify who can access 2015-01-26 16:43:18 +01:00
Kevin Fenzi
5da470ec26 Drop ; thats causing an error. Need to merge this with koji hub version. 2015-01-23 21:56:27 +00:00
Pierre-Yves Chibon
52ff90ba9c Drop the fas.conf specific to distgit 2015-01-23 17:59:36 +01:00
Pierre-Yves Chibon
21db51bbf0 Restorecon and restart apache after installing the new cert 2015-01-23 17:20:19 +01:00
Pierre-Yves Chibon
8336113e0f When updating the crl, take into account that there might not be one already 2015-01-23 17:20:19 +01:00
Pierre-Yves Chibon
79eb0db7c0 Let distgit install its own fas.conf after the first run of fas_client 2015-01-23 15:06:47 +01:00
Mathieu Bridon
3ed1da51ca distgit: Remove the update-chained stuff 
This doesn't work with Gitolite.
 2015-01-23 11:23:28 +01:00
Pierre-Yves Chibon
a2abada992 Set the local_code folder in full path 2015-01-23 10:38:05 +01:00
Pierre-Yves Chibon
2eee8a28fe Add the gitolite update hook 2015-01-23 10:13:12 +01:00
Pierre-Yves Chibon
bfa2f9bb43 Use the stg pkgdb when retrieving the groups 2015-01-23 10:08:57 +01:00
Pierre-Yves Chibon
4b57e9101d Run the compile as root but then specify the HOME variable 2015-01-23 10:04:12 +01:00
Mathieu Bridon
4602628727 Add the gen-acls user to the packager group 
This is required to run gitolite compile properly.
 2015-01-22 19:49:15 +01:00
Pierre-Yves Chibon
7a2f626fc9 Specify otherwise the groups with shell access 2015-01-22 18:06:52 +01:00
Pierre-Yves Chibon
8521f61cf8 Some join logic to fix the call to users-from-fas 2015-01-22 18:05:06 +01:00
Pierre-Yves Chibon
2ef9c6cc60 Adjust the list of person having shell access 2015-01-22 18:03:46 +01:00
Pierre-Yves Chibon
0912a7c2a5 Indicate where we list the pkgs admins 2015-01-22 17:59:09 +01:00
Pierre-Yves Chibon
273bdee55a No comas it said 2015-01-22 17:53:10 +01:00
Pierre-Yves Chibon
4b430db9bb Run the script once and locally - Thansk Toshio 2015-01-22 17:51:15 +01:00
Pierre-Yves Chibon
1eb813ae53 Try specifying it is a python script 2015-01-22 17:08:33 +01:00
Pierre-Yves Chibon
2f3cd0f177 Oupsy forgot the template 2015-01-22 17:01:14 +01:00
Pierre-Yves Chibon
a846a04f7b Try getting the list in 2 steps - Thank Toshio 2015-01-22 17:00:17 +01:00
Pierre-Yves Chibon
d7df8b7738 Another approach using lineinfile 2015-01-22 16:42:31 +01:00
Pierre-Yves Chibon
5cad48a1b7 Add a state for the file 2015-01-22 16:33:16 +01:00
Pierre-Yves Chibon
c5f1823b70 Try with file instead of assemble 2015-01-22 16:31:06 +01:00
Pierre-Yves Chibon
b7851f4b49 Try using the users-from-fas script to list users having a shell access 2015-01-22 16:19:47 +01:00
Pierre-Yves Chibon
1fbbefe117 Drop fixing the perms on /etc/gitolite/hook 2015-01-22 16:19:47 +01:00
Pierre-Yves Chibon
797c5434a3 Adjust genacls.pkgdb to mention running our hook 2015-01-22 15:40:15 +01:00
Pierre-Yves Chibon
3aa0d39237 Create the local folder for gitolite3 and put it our hook 2015-01-22 15:40:15 +01:00
Pierre-Yves Chibon
40536895b3 No need to install our hook ourself anymore 2015-01-22 15:40:15 +01:00