Commit Graph

8607 Commits

Author SHA1 Message Date
Kevin Fenzi
00e7d2a28c typo: use the correct seperator
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-01-13 12:01:46 -08:00
Kevin Fenzi
120c29b533 buildvm-s390x-01.stg: do not use linux-system-roles on s390x builder in staging either
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-01-13 11:25:58 -08:00
Kevin Fenzi
4b2e6f8fe4 builders: exclude updating koji-containerbuild for now
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-01-13 10:30:51 -08:00
Kevin Fenzi
4bec2d3255 buildvm_s390x: attempt to rebalance kvm lpar to allow for heavybuilders
We have been having issues with webkitgtk not being able to build due to
memory constraints on the existing builders. Also, we are overcomitted
on memory on the kvm lpar. So, to hopefully fix this:

* remove 3 existing builders.
* just leave the 3 cpus and 17gb memory from one free for the host
* make 2 of the other builders double the size in memory, cpu and disk.
* Will add these 2 to the heavybuilder channel and hopefully webkitgtk
  will be happy again.

I'm a bit concerned that this might slow the mass rebuild down, but we
will see. :)

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-01-12 14:36:11 -08:00
Kevin Fenzi
3328386f51 fix more vim syntax fun
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-01-11 09:26:48 -08:00
Kevin Fenzi
c652719988 vim did something weird here
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-01-11 08:53:49 -08:00
Kevin Fenzi
47cf07184e wildcard-2023.fedoraproject.org: new wildcard ssl cert
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-01-11 08:48:40 -08:00
Kevin Fenzi
4b262d7ada apps.ocp.stg new certs for 2023
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-01-08 18:26:33 -08:00
Kevin Fenzi
5ca2b2eb36 os.fedoraproject.org / app.os.fedoraproject.org: remove more old openshift 3.11 cluster stuff
It may be that having this on some of the proxies is causing problems
because it's trying to ping the old openshift 3.11 cluster and filling
up apache slots with it. We do not need this stuff anymore, so remove
it.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-12-16 10:15:27 -08:00
Adam Williamson
5cd71a659b openQA: don't install from u-t on prod
The current builds are in stable now.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2022-12-14 15:06:18 -08:00
Kevin Fenzi
aa5e7e86ee bashssh: revert hack from 11006 and see if it is really fixed by quoting we did with new ansible
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-12-07 15:19:57 -08:00
Kevin Fenzi
99a074fe36 drop retrace-stg for now on request. ticket 11039
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-12-07 15:13:39 -08:00
Kevin Fenzi
3265538412 bodhi-backend01.stg to f37
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-12-06 16:50:42 -08:00
Pavel Raiskup
ed39dbd82b copr-fe-dev: open port 5000
This will allow us to run a testing web-server (without Apache and
wsgi), and e.g. trace using 'import pdb'.
2022-12-04 15:07:09 +01:00
Pavel Raiskup
361deff545 inventory/copr: drop unused host vars
Complements: 2667ac065f
2022-12-04 15:05:35 +01:00
Pavel Raiskup
2667ac065f inventory/copr: drop unused hosts/vars
The non-aws variant is not used for a looong time.  It just confuses
contributors now.  The stg is not used either.
2022-12-04 15:02:29 +01:00
Adam Williamson
3fc8903111 openQA: install from updates-testing on prod and stg again
I think the recent git builds are good and I want them everywhere
so I can merge a bunch of things and clean up before the weekend.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2022-12-02 14:40:21 -08:00
Kevin Fenzi
249886e228 move compose-x86-01 to f37
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-12-01 10:54:11 -08:00
Kevin Fenzi
55d5bc5502 compose-rawhide01/compose-branched01: move to f37
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-12-01 10:48:25 -08:00
Kevin Fenzi
bc0abc5594 kojipkgs: move to f37
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-11-30 17:01:01 -08:00
Kevin Fenzi
ed584bc419 proxies: remove stray copy-pasta
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-11-30 16:36:11 -08:00
Kevin Fenzi
9e9215b934 f37 uplift
Upgraded proxies and builders to f37. We have a reduced timeframe to get
this done before the holidays, so this time we just upgraded them in
place. Usually we do a full reinstall. We will try and do that next
cycle.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-11-30 16:31:23 -08:00
Adam Williamson
bf501ee013 openqa: disable updates-testing on lab for now
Due to https://progress.opensuse.org/issues/121054 , waiting for
upstream review on my proposed fix.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2022-11-30 08:59:43 -08:00
Pavel Raiskup
207719282e copr-be-dev: fix public IP 2022-11-30 13:27:02 +01:00
Pavel Raiskup
aa6c08f1bc copr-keygen-dev: fix backend's private IP (incoming iptables rules) 2022-11-30 13:12:19 +01:00
Pavel Raiskup
89018eecac copr-be-dev: fix the private IP address
This is needed to correctly configure iptables rules on the keygen side.
2022-11-30 13:03:50 +01:00
Pavel Raiskup
d4f86e3364 copr-be-dev/copr-fe-dev: drop birthday
This was a leftover.
2022-11-30 10:50:38 +01:00
Kevin Fenzi
337548123a koji01/02 t0 f37
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-11-29 15:36:46 -08:00
Pavel Raiskup
b69b07c110 copr-dist-git: use the default swap layout 2022-11-29 16:04:07 +01:00
Kevin Fenzi
b1b0923af0 openshift 3.11: raise a glass!
Our openshift 3.11 cluster(s) served us long and well.

Now we have everything finally moved to the openshift 4 clusters (fas2
was the last holdout). We can finally retire this. :)

🎉🥂

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-11-28 13:08:01 -08:00
Pavel Raiskup
4948de43a3 copr-keygen: fix "private" ipv4 address to fix firewall 2022-11-28 19:50:04 +01:00
Jakub Kadlcik
4bdce0d462 copr: drop birthday and enable services 2022-11-28 19:17:33 +01:00
Pavel Raiskup
8a1d3a64f6 copr-be: promote f37 images to production 2022-11-28 18:44:02 +01:00
Pavel Raiskup
f7b53ea28a copr-keygen: services enabled 2022-11-28 18:30:16 +01:00
Jakub Kadlcik
f0ba42ac38 copr: drop birthday and enable services on production frontend
This reverts commit 94178e08e5.
2022-11-28 18:17:21 +01:00
Jakub Kadlcik
94178e08e5 Revert "copr: drop birthday and enable services on production frontend"
This reverts commit 65a06bd718.
2022-11-28 17:38:08 +01:00
Jakub Kadlcik
65a06bd718 copr: drop birthday and enable services on production frontend 2022-11-28 16:43:28 +01:00
Pavel Raiskup
9e4f3363d8 copr-keygen: new backend's private IP 2022-11-28 16:32:41 +01:00
Pavel Raiskup
9482bc377d copr-be: run playbook against the new production machine 2022-11-28 16:17:44 +01:00
Jakub Kadlcik
b683427d3a copr: production birthday=yes, disable_services=true and uncomment copr-be-temp 2022-11-28 14:50:35 +01:00
Adam Williamson
2cb4e8363a openqa: drop stg worker scratch build
there's a newer build in updates-testing, now.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2022-11-25 16:18:07 -08:00
Adam Williamson
6aa77e9423 openqa: try and fix on-disk encryption stuff
Some of the openqa workers are encrypted and some aren't (this is a bit of a
mess that's partly a result of all the redeployments we did around
https://bugzilla.redhat.com/show_bug.cgi?id=2009585 ). We should only run
the nbde_client role on workers which are encrypted. Hopefully this gets that
right.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2022-11-25 16:10:11 -08:00
Adam Williamson
e8e51b9709 openqa: make sure a64-worker01 isn't in two conflicting groups
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2022-11-25 15:27:16 -08:00
Adam Williamson
a4a262d5e7 Set openqa_tap_iface for openqa-x86-worker05
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2022-11-25 15:08:09 -08:00
Adam Williamson
28110d34be openqa/worker: prepare to handle multiple tap worker classes
I'm going to try splitting the tap jobs across multiple worker
hosts. We have quite a lot of tap jobs, now, and I have seen
sometimes a situation where all non-tap jobs have been run and
the non-tap worker hosts are sitting idle, but the single tap
worker host has a long queue of tap jobs to get through.

We can't just put multiple hosts per instance into the tap
class, because then we might get a case where job A from a tap
group is run on one host and job B from a tap group is run on
a different host, and they can't communicate. It's actually
possible to set this up so it works, but it needs yet more
complex networking stuff I don't want to mess with. So instead
I'm just gonna split the tap job groups across two classes,
'tap' and 'tap2'. That way we can have one 'tap' worker host
and one 'tap2' worker host per instance and arch, and they will
each get about half the tap jobs.

Unfortunately since we only have one aarch64 worker for lab it
will still have to run all the jobs, but for all other cases we
do have at least two workers, so we can split the load.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2022-11-25 14:11:58 -08:00
Pavel Raiskup
20ab4ef0b1 copr-base: we need ipv6.method auto eventually
This is needed to setup gateway, etc.  After that we need to do
'nmcli con up'.
2022-11-23 22:42:54 +01:00
Pavel Raiskup
cac048ea1b Revert "copr-be-dev-temp once more"
This reverts commit b8d01fe722.
2022-11-23 21:38:42 +01:00
Jakub Kadlcik
2fabdc2749 copr: drop birthday and enable services for copr-fe-dev 2022-11-23 21:20:50 +01:00
Jakub Kadlcik
e0177640da copr: set birthday=true for copr-fe-dev 2022-11-23 20:42:19 +01:00
Pavel Raiskup
b8d01fe722 copr-be-dev-temp once more 2022-11-23 18:44:02 +01:00