Commit Graph

44520 Commits

Author SHA1 Message Date
Aurélien Bompard
8de72a0f0c Use our postgresql server for IPA-tuura
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-10-21 16:12:10 +02:00
David Kirwan
f7fb7cbe03 forgejo: add task for creating runnerhost vm
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2025-10-21 11:58:16 +01:00
Ryan Lerch
ad62f85166 forge: change from email address to fedoraforge-noreply@fp.o
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-10-21 16:42:59 +10:00
Ryan Lerch
5370f141e2 Add fedoraforge-noreply to mail blackholes and username blocklist
- Add fedoraforge-noreply to /dev/null in aliases.static to prevent email delivery
- Add fedoraforge pattern to USERNAME_BLOCKLIST in noggin.cfg.py to prevent account creation
- Used fedoraforge-noreply instead of just fedoraforge in case we decide to enable incoming emails on forge in the future
2025-10-21 07:03:02 +10:00
Pavel Raiskup
c64c7fee3a kickstarts: limit the size of raid6 for / 2025-10-20 18:19:31 +00:00
Aurélien Bompard
3cd397629d Declare in IPA the public hostname
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-10-20 15:40:51 +02:00
Aurélien Bompard
3cf70744f0 Fix JSON syntax error
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-10-20 15:34:17 +02:00
Ryan Lerch
d8cc080029 forge: enable email notifications on prod
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-10-20 17:57:12 +10:00
Kevin Fenzi
4af418b1f5 batcave01: move to vmhost-x86-01
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-10-17 15:14:11 -07:00
Kevin Fenzi
fc4158d896 proxy10: switch to f43
We are trying this to see if it has any help or at least datapoints for
the timeout issue.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-10-17 09:54:11 -07:00
James Antill
a75022cdc3 docs-rsync: Copy the stg script to prod. Fixes #12848.
Signed-off-by: James Antill <james@and.org>
2025-10-17 16:49:51 +00:00
Kevin Fenzi
6c8fb623c4 proxies / staging: set memory to 16g for staging proxies
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-10-17 08:52:33 -07:00
Jakub Kadlcik
78fc3dc04e copr-be: idempotent touch 2025-10-17 11:23:23 +02:00
Pavel Raiskup
865ac61eb2 copr_hypervisor: don't let external world routing through the box 2025-10-17 08:32:37 +02:00
Kevin Fenzi
146229ae13 proxies: coreos uses env_suffix for website name
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-10-16 16:38:33 -07:00
Kevin Fenzi
d8ecaa06dd proxies: jenkins and testdays are both prod only
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-10-16 16:17:57 -07:00
Kevin Fenzi
535eb3dd1b proxies: drop ipsilon-project from reverproxy too
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-10-16 15:54:00 -07:00
Kevin Fenzi
a82dfa1229 proxies: lists.pagure.io is prod only
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-10-16 15:33:53 -07:00
Kevin Fenzi
27f007c333 proxies: getfedora.org and fedoracommunity.org only get setup in prod
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-10-16 15:18:35 -07:00
Kevin Fenzi
86256e5884 proxies / staging: switch proxy02.stg to f43
We want to make sure this generally works fine before redoing a prod one
with f43.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-10-16 13:46:33 -07:00
Pavel Raiskup
3f4bd0ccf5 copr-be: start building on p09 again 2025-10-16 21:55:47 +02:00
Pavel Raiskup
82522377cd copr_hypervisor: tweak FORWARD nftables 2025-10-16 21:38:29 +02:00
Patrik Polakovic
82b086f6be Add glibc32 to Pungi template filter
Related issue: pagure.io/releng/issue/12023
Signed-off-by: Patrik Polakovic <patrik@alphamail.org>
2025-10-16 18:34:36 +00:00
James Antill
e9082f4fb2 docs-rsync.stg: A workaround for the mtime/hardlink disk space usage.
Signed-off-by: James Antill <james@and.org>
2025-10-16 14:23:14 -04:00
Pavel Raiskup
dc4beb8903 copr-be: cleanup after today's debugging 2025-10-16 20:19:53 +02:00
Aurélien Bompard
b4bb584dd8 Try to get keycloak to trust the IPA CA cert
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-10-16 18:05:10 +02:00
Aurélien Bompard
7b0e77aaf4 IPAtuura: selinux perms
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-10-16 17:26:23 +02:00
Aurélien Bompard
d04e809c34 IPAtuura: selinux perms
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-10-16 17:24:00 +02:00
Aurélien Bompard
e7f242aa30 IPAtuura: selinux perms
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-10-16 17:21:54 +02:00
Aurélien Bompard
8851700c1e IPAtuura: selinux perms
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-10-16 17:19:38 +02:00
Aurélien Bompard
fcc66b66cd Add missing file
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-10-16 17:14:52 +02:00
Aurélien Bompard
6caeda2a6a IPAtuura: get a cert from IPA
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-10-16 17:13:41 +02:00
Pavel Raiskup
ef027df700 copr-be: provision_builder_tasks: fix link 2025-10-16 16:56:35 +02:00
Pavel Raiskup
779e78cdaa copr-be: provision_builder_tasks: avoid symlinks in mock override dir
These are hard to copy from backend -> builder via ansible;  ansible
copy dereferences.
2025-10-16 16:51:22 +02:00
Pavel Raiskup
c0057ead03 copr-be: provision_builder_tasks: try to not dereference symlinks 2025-10-16 16:17:08 +02:00
Aurélien Bompard
a2452a6c84 Fix handler execution order
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-10-16 16:14:28 +02:00
Aurélien Bompard
1e7b4451a8 Typo
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-10-16 16:09:58 +02:00
Aurélien Bompard
1f416b0215 Typo
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-10-16 16:07:25 +02:00
Aurélien Bompard
1d52c77c99 IPAtuura: more config
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-10-16 16:06:23 +02:00
Pavel Raiskup
7b2518f8a8 copr-be: disable vms on p09 hypervisor
https://github.com/fedora-copr/copr/issues/3945
2025-10-16 15:59:46 +02:00
Pavel Raiskup
efe1744357 copr-be: follow=false on file restore
This was breaking /etc/mock files.
2025-10-16 15:41:24 +02:00
Aurélien Bompard
b7dfae125c Syntax
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-10-16 15:40:45 +02:00
Aurélien Bompard
00a36aa4f6 Syntax
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-10-16 15:36:41 +02:00
Aurélien Bompard
5dd03158f9 ipatuura01: make it an IPA client
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-10-16 15:28:49 +02:00
Pavel Raiskup
d3f2909991 copr-be: try to fix idempotence again 2025-10-16 14:36:55 +02:00
Pavel Raiskup
7a4e58e55d copr-be: simplify permission setup 2025-10-16 14:31:26 +02:00
Pavel Raiskup
f483ac375e copr-be: debugging idempotence #3 2025-10-16 13:08:02 +02:00
Pavel Raiskup
6b8fcbe5bf copr-be: debugging idempotence #2 2025-10-16 13:03:53 +02:00
Pavel Raiskup
35b3583748 copr-be: debugging rsync idempotence 2025-10-16 13:00:30 +02:00
Pavel Raiskup
37475b0e65 copr-be: one more idempotence fix 2025-10-16 12:56:31 +02:00