Commit Graph

677 Commits

Author SHA1 Message Date
Pavel Raiskup
b7bdcacc3e distgit: fix chown in make-new-lookaside-links
Followup for 9d9680cc73
2020-08-19 13:24:58 +02:00
张皓
9d9680cc73 Fix syntax error in make-new-lookaside-links
Fix syntax error in make-new-lookaside-links
2020-08-19 10:08:56 +00:00
Pierre-Yves Chibon
69cd8056e1 distgit/pagure: update deprecated environment variable to the new one
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-08-07 09:59:21 +02:00
Pierre-Yves Chibon
4ceb0b2c1c distgit/pagure: Drop old code dealing with phx2 and py2 and rhel7
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-07-27 09:46:58 +02:00
Pierre-Yves Chibon
84f046eaba distgit/pagure: Drop 1755 in favor of spelled out permissions on /var/log/pagure
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-07-27 09:44:44 +02:00
Pierre-Yves Chibon
e6c0433e19 distgit/pagure: set the sticky bit on /var/log/pagure so the group membership remains
The owner itself does not really matter, especially when considering the
section above where the pagure user is created in the packager group.

Fixes https://pagure.io/releng/issue/9623

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-07-24 11:24:28 +02:00
Pierre-Yves Chibon
43a68e2c57 distgit/pagure: another clean up of old cruft from another time (py2/rhel7)
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-07-23 13:15:24 +02:00
Pierre-Yves Chibon
745e7b04ce distgit/pagure: remove old cruft from another time (py2/rhel7)
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-07-23 13:14:19 +02:00
Pierre-Yves Chibon
5aa15e44e3 distgit/pagure: Do not allow packagers to create the 'master' branch if it does not exist in PDC
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-07-23 13:03:10 +02:00
Pierre-Yves Chibon
7c51566c36 distgit/pagure: Log auth-related into in a file on disk and create the place for it
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-07-23 12:59:20 +02:00
Pierre-Yves Chibon
19ad9380b0 dist-git: clean up the playbook for the left over phx2 sections
Remove all the sections there were RHEL7/phx2/gitolite related
now that we're running on RHEL8 with python3 and all of its goodies

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-07-10 12:51:56 +00:00
Pierre-Yves Chibon
f2066c896d distgit: looks like the acl action does not support with_items, pity
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-06-16 20:56:31 +02:00
Pierre-Yves Chibon
9d4902f887 distgit: the configuration file does not support quotes and it doesn't find the file if there are some
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-06-16 20:53:39 +02:00
Pierre-Yves Chibon
b57fcaccf7 distgit: Add missing tag to a task
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-06-16 20:53:17 +02:00
Pierre-Yves Chibon
46b327807f distgit: turn on fedora-messaging notification and give apache access to the git hook cert and keys
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-06-15 13:56:38 +02:00
Pierre-Yves Chibon
891dcaac2b distgit: give access to the fedora-messaging certs to the packager group
This solves the permission denied error packager would see otherwise
when pushing to dist-git as the hooks would fail to send notifications
on the fedora-messaging bus.

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-06-10 10:06:13 +02:00
Pierre-Yves Chibon
be6153da0d distgit/pagure: there is no longer a gitolite_queue worker so don't put things in that queue
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-06-10 00:01:13 +02:00
Kevin Fenzi
0b64e5469a iad2: disable fedmsg on upload now until its ported
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-06-09 14:53:11 -07:00
Pierre-Yves Chibon
c05f210557 distgit/pagure: don't do fedmsg anymore
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-06-06 21:17:19 +02:00
Pierre-Yves Chibon
adce324050 distgit/pagure: Add the iad2 internal IP to the whitelist of IPs
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-06-06 21:03:53 +02:00
Pierre-Yves Chibon
aacd00cdc1 distgit: iad2 also runs rhel8 and thus python 3.6 so adjust the path to the static files
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-06-04 14:27:01 +02:00
Pierre-Yves Chibon
64773f2049 distgit/pagure: iad2 has the same rules as staging, python 3.6
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-06-04 14:11:50 +02:00
Pierre-Yves Chibon
4d2f3eb5ac distgit/pagure: flip httpd_can_network_connect on the host
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-05-27 16:37:29 +02:00
Pierre-Yves Chibon
5b4ba6cd8e distgit: install py3-grokmirror in staging/iad2
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-05-27 07:59:26 +02:00
Pierre-Yves Chibon
1dfa047cec distgit: python-grokmirror is now available on epel8-infra
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-05-26 22:42:53 +02:00
Pierre-Yves Chibon
0f7a6efc2b pagure and distgit/pagure: Drop the db-pagure hostname and populate the db used in the inventor host file instead
Basically, instead of relying on an obscure db-pagure variable that
then needs to be specified in the /etc/hosts file.
Just define the pagure_db_host variable in the host's inventory
file so it exists as a variable available in the playbook/role.
This makes things more explicit and easier to debug/tweak as needed.

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-05-26 14:08:01 +02:00
Pierre-Yves Chibon
e0ed6697f4 distgit: make the iad2 host closer to the current staging and different from phx2
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-05-25 23:10:15 +02:00
Pierre-Yves Chibon
2d1de54c89 distgit: Apply Kevin's fix to get the static files to show
Basically, we have two places where we apply the rewrite rule
allowing to access static files either in pagure-dist-git
or in the regular pagure.
We had fixed the first one earlier and this commit fixes the
second one.

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-05-23 21:30:32 +02:00
Pierre-Yves Chibon
da660c1852 distgit/pagure: pagure in staging runs with python 3.6
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-05-23 20:02:39 +02:00
Pierre-Yves Chibon
592e4749c1 distgit: create the pkgs.stg certs via letsencrypt
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-05-23 15:56:46 +02:00
Pierre-Yves Chibon
687230bfb8 distgit: turn off grokmirror for now in stg
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-05-23 15:08:51 +02:00
Pierre-Yves Chibon
3ad71fd2a0 distgit: Install mod_auth_openidc via modules in RHEL8
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-05-22 17:54:51 +02:00
Pierre-Yves Chibon
3ed325d3b7 distgit/pagure: on rhel8 it is mandatory to have a WSGIProcessGroup for pagure to work
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-05-22 17:29:40 +02:00
Pierre-Yves Chibon
23c94a35d1 distgit: now that the dist-git package is available, a number of steps can be re-enabled
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-05-22 11:30:58 +02:00
Pierre-Yves Chibon
93a30623c6 distgit: another place we're being bitten by the lack of dist-git package
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-05-20 18:28:06 +02:00
Pierre-Yves Chibon
7c2b0b2923 distgit: a few other places where the missing dist-git needs to be accounted for
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-05-20 17:59:15 +02:00
Pierre-Yves Chibon
54cbb646a5 distgit: dist-git is not yet available for rhel8, so is its config folder
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-05-20 17:38:33 +02:00
Pierre-Yves Chibon
6881735c06 distgit: fun thing, dist-git isn't available for rhel8 atm...
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-05-20 17:04:13 +02:00
Pierre-Yves Chibon
6ef5a99f56 distgit: mod_auth_openidc is not in rhel8 yet
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-05-20 16:45:20 +02:00
Pierre-Yves Chibon
ce213161a3 distgit: adjust the list of packages to be installed in stg/rhel8 and drop gitolite there as well
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-05-20 16:24:45 +02:00
Pierre-Yves Chibon
85649b78b3 distgit/pagure: in staging we no longer have fedmsg
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-05-20 15:57:43 +02:00
Pierre-Yves Chibon
ed659f15ac distgit/pagure: drop the requirement on pygments
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-05-20 13:14:05 +02:00
Pierre-Yves Chibon
69f8d706d0 distgit/pagure: drop the fas2 hotfix since this is no longer used
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-05-20 12:56:44 +02:00
Pierre-Yves Chibon
107d6e331f distgit/pagure: use python3 in staging and keep prod to python2
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-05-20 12:56:26 +02:00
Pierre-Yves Chibon
1320bb90b2 distgit/pagure: libsemanage-python is python3-libsemanage on rhel8
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-05-20 12:49:57 +02:00
Pierre-Yves Chibon
66c4bb4a18 distgit/pagure: install different packages in stg vs prod
Since we're currently rebuilding stg on rhel8 while prod is still
rhel7

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-05-20 11:46:58 +02:00
Pierre-Yves Chibon
85d6c77276 distgit/pagure: Drop installing pygment2
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-05-20 11:44:46 +02:00
Pierre-Yves Chibon
353ae17378 distgit/pagure: allow provenpackager to by-pass PR-only projects
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-05-11 11:48:06 +02:00
Pierre-Yves Chibon
48793d378d distgit/pagure: only show the ssh url to packager and don't allow moving git tags around
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-05-04 11:32:45 +02:00
Pierre-Yves Chibon
850d3dc4b6 distgit/pagure: Add the tag_project ACL
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-04-24 21:34:28 +02:00