Commit Graph

33407 Commits

Author SHA1 Message Date
Adrian Reber
87d4e49174 mirrormanager: updated mirrorlist-server to 3.0.2
The testing of generate-mirrorlist-cache showed that private mirrors
where not part of the mirrorlist cache any more. Only private Internet2
mirrors where included in the cache.

This is fixed upstream in 3.0.2.

Signed-off-by: Adrian Reber <adrian@lisas.de>
2020-11-12 08:34:32 +01:00
Kevin Fenzi
030a0ddc40 proxies / websites: revert disabling some sites in stg now that it's back
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-11-11 19:36:32 -08:00
Kevin Fenzi
385acb276e proxies /redirects: don't use env here
The site is the prod name, with an alias for the stg host.
No need to try and install into a stg site when it doesn't exist.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-11-11 18:30:34 -08:00
Kevin Fenzi
bbfc222d25 proxies / websites: re-enable some hosts in stg
we disabled these when we didn't have stg in iad2 yet.
Now that we do, we can re-add them.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-11-11 16:34:00 -08:00
Kevin Fenzi
f7bf329dad copr-be-dev-temp: don't check nagios on this instance either.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-11-11 10:05:18 -08:00
Kevin Fenzi
e901377054 mailman02: we never ended up using mailman02, lets retire it.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-11-11 09:09:43 -08:00
Pavel Raiskup
589cd1a71f copr-keygen-dev: disable birthday 2020-11-11 16:06:04 +01:00
Pavel Raiskup
de562df21d copr-be-dev: drop birthday 2020-11-11 15:32:17 +01:00
Pavel Raiskup
48ad5a9e23 copr-be: install python3-boto 2020-11-11 15:28:34 +01:00
Pavel Raiskup
c3b99bf900 copr-be-dev: birthday again 2020-11-11 15:18:15 +01:00
Pavel Raiskup
7065fcd5d0 Revert "copr-be-dev: disable letsencrypt temporarily"
This reverts commit df6a0ecf7f.
2020-11-11 15:17:08 +01:00
Pavel Raiskup
df6a0ecf7f copr-be-dev: disable letsencrypt temporarily
Before we can move the elastic IP to the new VM.
2020-11-11 14:57:46 +01:00
Jakub Kadlcik
5f38224ccf Revert "copr: we are going to provision copr-distgit-dev and copr-fe-dev from scratch"
We don't need the `birthday` defined anymore.
2020-11-11 14:48:03 +01:00
Jakub Kadlcik
2c66bb8868 reprovisioning copr-distgit-dev from a new instance 2020-11-11 14:12:15 +01:00
Jakub Kadlcik
e043b62c5a reprovisioning copr-fe-dev from a new instance 2020-11-11 14:12:15 +01:00
Pavel Raiskup
04343eee01 copr/base: install cronie-anacrontab
... right before we try to configure it.
2020-11-11 13:53:02 +01:00
Jakub Kadlcik
c4fdc906e2 copr: we are going to provision copr-distgit-dev and copr-fe-dev from scratch 2020-11-11 13:29:55 +01:00
Pavel Raiskup
231b34885a copr-be-dev: disable birthday
Playbook needs fixes, but the initial steps succeeded.
2020-11-11 13:14:06 +01:00
Pavel Raiskup
4ccc0c053e copr: don't use IPs in inventory
But to avoid the long outage on copr-backend (all the hosted
repositories), provide another alternative DNS entry that will be used
during transition period when running the playbook.
2020-11-11 12:59:06 +01:00
Mark O'Brien
75f42908a1 osbs: create network file for eth0 stage 2020-11-11 11:43:41 +00:00
Mark O'Brien
e7bbf8ff29 osbs: update python package to py3 stage 2020-11-11 11:34:38 +00:00
Pavel Raiskup
f351fe2d32 aws_cloud: pre-setup hostname early
To allow the initial postfix start:
Nov 11 10:38:33 107.20.83.139 postfix/sendmail[26023]: warning: valid_hostname: numeric hostname: 107.20.83.139
Nov 11 10:38:33 107.20.83.139 postfix/sendmail[26023]: fatal: unable to use my own hostname
Nov 11 10:38:33 107.20.83.139 postfix[26025]: warning: valid_hostname: numeric hostname: 107.20.83.139
Nov 11 10:38:33 107.20.83.139 postfix[26025]: fatal: unable to use my own hostname
2020-11-11 11:45:55 +01:00
Pavel Raiskup
b087f9ea72 copr: temporarily drop postfix_group
As the initial playbook run fails with that.
2020-11-11 11:36:03 +01:00
Pavel Raiskup
a1df2a519c copr-be-dev, copr-keygen-dev: define birthday on IPs 2020-11-11 11:19:40 +01:00
Pavel Raiskup
04aa62f691 copr: comment-out persistent_clout.yml
At this moment we don't have any OpenStack for that, and the recursive
include of basessh role breaks the playbook execution.
2020-11-11 11:17:07 +01:00
siddharthvipul
8e9de94b15 osbs: decrease lv size for stg vms
Signed-off-by: siddharthvipul <siddharthvipul1@gmail.com>
2020-11-11 15:11:37 +05:30
Mark O'Brien
924aef6f79 osbs: dont install fas in staging 2020-11-11 09:16:49 +00:00
Pavel Raiskup
2013b14099 copr-be-dev, copr-keygen-dev: allow initial run against IPs 2020-11-11 09:42:06 +01:00
Pavel Raiskup
f6fe521591 copr: enable @copr/copr on devel instances 2020-11-11 09:32:06 +01:00
Pavel Raiskup
ff896361d8 copr-be-dev, copr-keygen-dev: new VMs with temp IPs 2020-11-11 09:22:09 +01:00
Adrian Reber
3509e0c04f mirrormanager: fix up typo in directory name
Signed-off-by: Adrian Reber <adrian@lisas.de>
2020-11-11 08:15:14 +01:00
Adrian Reber
8a89e5977b mirrormanager: install generate-mirrorlist-cache
This installs the new rust-based generate-mirrorlist-cache tool which
can create the mirrorlist cache files much faster.

Signed-off-by: Adrian Reber <adrian@lisas.de>
2020-11-11 06:31:47 +00:00
Will Woods
3dadedeb26 web-data-analysis: fix countme-update
So it turns out that pip3 installs scripts to /usr/local/bin and cron
jobs don't have /usr/local/bin in the path.

This commit adds /usr/local/bin to PATH in countme-update.sh.

For Maximum Correctness we should probably get pip to tell us where it
installed countme-update-{rawdb,totals}.sh but this'll work just fine
as long as pip keeps installing scripts to /usr/bin or /usr/local/bin.

Signed-off-by: Will Woods <wwoods@redhat.com>
2020-11-10 17:57:56 -05:00
Kevin Fenzi
5ac17bc51a varnish: adjust for f33 changes
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-11-10 12:20:50 -08:00
lrossett
806b6bfbdc adding gitlab-centos queue and user 2020-11-10 17:26:05 +00:00
Pierre-Yves Chibon
998c84baaa dist-git: add missing type
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-11-10 17:26:26 +01:00
Pierre-Yves Chibon
872090ee54 dist-git: some more selinux policy changes
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-11-10 17:24:55 +01:00
Pierre-Yves Chibon
f4cb375000 selinux/module: Remove debugging statement now that things work
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-11-10 16:56:13 +01:00
Pierre-Yves Chibon
d503f374db distgit: some more selinux policy update
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-11-10 16:51:51 +01:00
Pierre-Yves Chibon
3351fbd3b4 drop run_once when install selinux policies
Otherwise the policy doesn't get installed everywhere...

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-11-10 16:48:42 +01:00
Pierre-Yves Chibon
74890814a1 distgit: adjust the selinux policy a little more
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-11-10 16:48:30 +01:00
Pierre-Yves Chibon
1e27282806 selinux: Add some debugging
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-11-10 16:37:16 +01:00
Pierre-Yves Chibon
50ad0a15ee selinux/module: try saying which module is being installed
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-11-10 16:30:13 +01:00
Pierre-Yves Chibon
cb2a947479 pagure: fix path to the selinux policy file
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-11-10 15:59:32 +01:00
Pierre-Yves Chibon
be1c8bcb45 distgit: keep working on the http_policy
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-11-10 15:56:37 +01:00
Pierre-Yves Chibon
033c798d6e pagure: make use of the new selinux/module role to install/compile selinux policies
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-11-10 15:55:10 +01:00
Pierre-Yves Chibon
f3a1c52522 distgit: ad missing instruction in the http_policy
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-11-10 15:53:18 +01:00
Pierre-Yves Chibon
f580d72f24 distgit: add the missing headers in the http_policy policy
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-11-10 15:49:30 +01:00
Pierre-Yves Chibon
1df7a7c0d3 distgit: add a selinux tag
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-11-10 15:38:09 +01:00
Pierre-Yves Chibon
1ef758c408 distgit: install another custom selinux policy
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-11-10 15:35:33 +01:00