Commit Graph

44568 Commits

Author SHA1 Message Date
Aurélien Bompard
998ec3b4dd IPA-tuura: fix path to TLS certs
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-10-22 17:07:28 +02:00
Aurélien Bompard
900d4e634a Deploy the apache config file
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-10-22 17:02:21 +02:00
Aurélien Bompard
16e68316b7 IPA-tuura: add dependency
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-10-22 16:51:45 +02:00
Aurélien Bompard
907bea162f Fix script
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-10-22 16:47:12 +02:00
James Antill
a5ef33fc87 ip6tables: No service on el10.
Signed-off-by: James Antill <james@and.org>
2025-10-22 10:46:05 -04:00
Aurélien Bompard
928c932acf Forgot to rename a file
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-10-22 16:44:26 +02:00
Aurélien Bompard
474565393f IPA-tuura: install another systemwide package in the venv because the package on PyPI is incomplete
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-10-22 16:43:19 +02:00
Aurélien Bompard
d84c8503a0 Fix script
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-10-22 16:35:31 +02:00
Aurélien Bompard
a330b0c705 IPA-tuura: install SSSDConfig manually, it's not in PyPI
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-10-22 16:32:37 +02:00
Aurélien Bompard
e966b66ed9 IPA-tuura: add dependency
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-10-22 15:50:22 +02:00
Aurélien Bompard
7f06dcfcc6 IPA-tuura: add dependency
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-10-22 15:48:04 +02:00
Aurélien Bompard
cd5d25f977 IPA-tuura: add dependency
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-10-22 15:46:12 +02:00
Aurélien Bompard
1b64f6c92c Typo
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-10-22 15:44:21 +02:00
Aurélien Bompard
15127684df IPA-tuura: install psycopg2 in the virtualenv
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-10-22 15:40:26 +02:00
Aurélien Bompard
d5a32ae8b5 IPA-tuura: add psycopg2
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-10-22 15:36:39 +02:00
Jakub Kadlcik
02b039a9a2 copr-fe: always point to Pulp through CDN
See https://github.com/fedora-copr/copr/issues/3502
See https://github.com/fedora-copr/copr/pull/3966
Fix https://github.com/fedora-copr/copr/issues/3921
2025-10-22 14:20:00 +02:00
Aurélien Bompard
a05040cc37 IPA-tuura: fix virtualenv creation
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-10-22 14:08:50 +02:00
Aurélien Bompard
9e8f678437 IPA-tuura: dont use the httpd/mod_ssl role
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-10-22 13:53:15 +02:00
Aurélien Bompard
dc87c6ded8 Deploy IPA-tuura directly in the VM
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-10-22 13:39:50 +02:00
Michal Konecny
6337df3098 [proxies] Add id.stg.fp.o wildcard cert
There was a wildcard cert for id.stg.fedoraproject.org missing. It's now
available so let's use it.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2025-10-22 11:23:04 +02:00
Pavel Raiskup
0e36bf168b copr_hypervisor: correct the rdu3 gateway 2025-10-22 08:49:20 +02:00
Pavel Raiskup
4b78485abe copr-be: start machines on the three p09 boxes in rdu3 2025-10-22 08:31:48 +02:00
James Antill
386c4e573e epel: Add el10 epel GPG KEY.
Signed-off-by: James Antill <james@and.org>
2025-10-21 19:32:58 -04:00
James Antill
51655912dc epel: Add el10 epel file.
Signed-off-by: James Antill <james@and.org>
2025-10-21 19:22:26 -04:00
James Antill
be8ab9e311 *-test* hosts: Add el10-test host file
Signed-off-by: James Antill <james@and.org>
2025-10-21 19:09:50 -04:00
Kevin Fenzi
6f5c2337d9 copr-hypervisor: add nbde bindings
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-10-21 14:13:37 -07:00
Kevin Fenzi
3c3ef0a311 copr-hypervisor: add nbde device
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-10-21 13:56:54 -07:00
Kevin Fenzi
210e8b3e16 copr-hypervisor: fix missing name=
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-10-21 13:53:50 -07:00
Kevin Fenzi
095d5d0cca copr-hypervisor: fix indentation
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-10-21 13:49:12 -07:00
Kevin Fenzi
d2b4bbd372 copr-hypervisor / p09: add nbde handling in rdu3
This adds network block device encryption to the 3 (so far) power9's in
rdu3. This will allow them to unlock encrypted partitions from our
tang server(s).

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-10-21 13:46:06 -07:00
Pavel Raiskup
4935051cab copr-backend: fix vm-delete 2025-10-21 21:45:28 +02:00
Pavel Raiskup
37a0d08531 copr_hypervisor: correctly use full hostname 2025-10-21 21:40:09 +02:00
Pavel Raiskup
6260f07b89 copr-backend: helpers.py to use hostvars 2025-10-21 21:35:33 +02:00
Pavel Raiskup
3fa41bfdb7 copr-backend: another typo in helpers.py 2025-10-21 21:33:59 +02:00
Pavel Raiskup
867070ed05 copr-backend: fix the helpers.py dict 2025-10-21 21:32:38 +02:00
Pavel Raiskup
aaf76f0886 copr-be: oops I broke it - let's iterate faster on fix 2025-10-21 21:30:47 +02:00
Pavel Raiskup
e864e4a3cd copr-be: helpers.py is a template 2025-10-21 21:25:18 +02:00
Pavel Raiskup
7c423f25d0 copr-be: bake hypervisor config into hostvars 2025-10-21 21:19:04 +02:00
Kevin Fenzi
aff07cf6e4 communishift: add comminishift-fedora-coreos-ai-helpers
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-10-21 11:36:11 -07:00
Pavel Raiskup
ae96be8f75 copr_hypervisor: fix typo 2025-10-21 20:09:20 +02:00
Pavel Raiskup
cf97ca7257 copr_hypervisor: fix libvirt conn host spec 2025-10-21 20:05:52 +02:00
Pavel Raiskup
7ee2364ae6 copr-be/copr_hypervisor: access libvirt over ipv6 address
See https://github.com/fedora-copr/copr/issues/3786
2025-10-21 20:02:46 +02:00
James Antill
4fa8443c68 postfix: Turn off TLSv1.0/1.1
Signed-off-by: James Antill <james@and.org>
2025-10-21 11:50:11 -04:00
Aurélien Bompard
0feed3e810 IPAtuura: fix login IPA rule
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-10-21 17:32:37 +02:00
Aurélien Bompard
8206161d13 Configure authentication in IPA for IPA-tuura
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-10-21 17:26:08 +02:00
Aurélien Bompard
47e7b0db96 IPAtuura: run migrations and use the proper keycloak hostname
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-10-21 16:43:52 +02:00
David Kirwan
6f6d1c9244 forgejo: fix typo in VM dataVolumeTemplate volume
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2025-10-21 15:27:57 +01:00
David Kirwan
c67a7034ae forgejo: update VM mac
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2025-10-21 15:22:34 +01:00
Aurélien Bompard
8de72a0f0c Use our postgresql server for IPA-tuura
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-10-21 16:12:10 +02:00
David Kirwan
f7fb7cbe03 forgejo: add task for creating runnerhost vm
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2025-10-21 11:58:16 +01:00