Commit Graph

2387 Commits

Author SHA1 Message Date
Pavel Raiskup
bf99504840 copr-fe: drop a redundant rule
See https://github.com/fedora-copr/copr/issues/4171
2026-02-16 16:55:45 +01:00
Jiri Kyjovsky
8dd7e55028 copr-hv: enable migrated hvs on copr-be-dev 2026-02-16 15:34:54 +01:00
Miroslav Suchý
68ec08de9f copr: fix name of the pool 2026-02-16 13:28:14 +01:00
Miroslav Suchý
2cfcd10d79 copr: fix name of the pool 2026-02-16 13:21:56 +01:00
Miroslav Suchý
23ff808fe3 copr: add x86_64 reserved powerful builders 2026-02-16 11:26:43 +01:00
Pavel Raiskup
a943654af2 copr-be: avoid the hacks - we no longer need the testing VMs 2026-02-13 17:36:19 +01:00
Pavel Raiskup
432f23126e copr-be: keep one more p09 machine up for debugging 2026-02-13 12:33:27 +01:00
Jakub Kadlcik
8015bf47c7 copr: change default storage for new projects to Pulp
See https://fedora-copr.github.io/posts/migrating-copr-results-to-pulp
2026-02-12 13:40:59 +01:00
Pavel Raiskup
30c0defe44 copr-backend: more verbose machine termination 2026-02-07 21:08:10 +01:00
Miroslav Suchý
6092f3bdb2 set swappiness to 10 for copr machines 2026-02-04 20:45:38 +01:00
Pavel Raiskup
8e09c0498e copr-be: keep one machine running for Kevin's debugging 2026-02-02 16:55:54 +01:00
Jiri Kyjovsky
4adce255f5 copr: add powerful builders for riscv team 2026-01-27 11:52:58 +01:00
Jiri Kyjovsky
de8f2a8197 copr: add emulated riscv64 resalloc tags 2026-01-26 10:17:11 +01:00
Kevin Fenzi
a754144f19 Update infra pagure.io links to forge.fp.o (WIP)
This should update all the references we have to
https://pagure.io/fedora-infrastructure to the
new https://forge.fedoraproject.org/infra/tickets/ area.

Do not merge this before the migration on tuesday.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-01-20 14:39:40 -08:00
Jakub Kadlcik
7a7d7dac7d copr-be-dev: use image-builder for uploads to libvirt
There is a small bug in the `image-builder upload` code, causing it to always
use the "default" libvirt pool. I am proposing a fix here
https://github.com/osbuild/images/pull/2147
and I uploaded the current builder images with the patched version.
2026-01-20 11:24:12 +01:00
Jakub Kadlcik
c97e52d18d copr-fe: configure high-perf builders for npache/Kernel-ark-ci
Fix https://github.com/fedora-copr/copr/issues/4118
2026-01-19 10:52:59 +01:00
Jakub Kadlcik
938f070470 copr-be-dev: use image-builder for uploading to OSUOSL OpenStack 2026-01-15 14:50:12 +01:00
Jakub Kadlcik
7a85d348d4 copr-be-dev: use image-builder for uploading images to IBM Cloud
Completely dropping the dependency on
https://github.com/praiskup/ibmcloud-cli-fedora-container

Although I needed to copy its `create_in_region` function here to this code.
That part is not supported by `image-builder` yet. But either way, we don't
need the `ibmcloud` binary at this point.
2026-01-15 14:50:12 +01:00
Jakub Kadlcik
afc0a2c783 copr: install jq on our servers 2026-01-15 14:50:12 +01:00
Jakub Kadlcik
4997a77bd0 copr-be: automatically AWS images with FedoraGroup=copr 2026-01-12 16:33:17 +01:00
Jakub Kadlcik
7cce8fddce copr-be-dev: install image-builder for uploading builder images 2026-01-12 16:20:08 +01:00
Jakub Kadlcik
44cbb54975 copr-be: add dependency on pv 2026-01-12 15:44:27 +01:00
Jakub Kadlcik
9f7c3b53c6 copr-be: don't modify the redirect path for dnf install 2026-01-08 17:47:33 +01:00
Jiri Kyjovsky
dd07996948 copr-dist-git: redirect http to https 2026-01-08 16:56:35 +01:00
Jiri Kyjovsky
3595436104 copr-anubis: loosen policies (go through defaults), allow essentials 2026-01-08 16:40:34 +01:00
Jakub Kadlcik
a56f61e4b5 copr-be: oops a typo, in lua there is no != but ~= 2026-01-07 21:50:18 +01:00
Jakub Kadlcik
55e6989d10 copr-be: oops forgot one important comment about the redirect 2026-01-07 21:43:16 +01:00
Jakub Kadlcik
f357513bdf copr-be: fix Pulp redirect for RPM files
We cannot simply use the same Copr path but on Pulp, because the
directory structure is different.

Copr:

    @copr/copr-dev/fedora-43-x86_64/09975054-copr-cli/copr-cli-2.4.post1-1.git.12.8aed90c.fc43.src.rpm

Pulp:

    @copr/copr-dev/fedora-43-x86_64/Packages/c/copr-cli-2.4.post1-1.git.12.8aed90c.fc43.src.rpm
2026-01-07 21:39:23 +01:00
Jiri Kyjovsky
d79d6ca487 copr/anubis: fix configuration on frontend to protect only /coprs (same for distgit)
Anubis was accidentally enabled for all traffic (/) instead of just
the /coprs/ web UI. This caused unnecessary bot challenges for API
clients, dnf/yum, and other automated tools.

Use Anubis BASE_PREFIX to cleanly protect only specific endpoints:
- Frontend: /coprs/ (web UI)
- Dist-git: /{{ cgit_uri }}/ (package browser)

https://anubis.techaro.lol/docs/admin/installation#using-base-prefix
2026-01-07 13:58:11 +01:00
Pavel Raiskup
cd95aa0095 copr-be: try to use x86 copr04 2025-12-20 15:54:12 +01:00
Pavel Raiskup
373bda5563 copr-hypervisor: avoid using ansible copr module for now
https://github.com/fedora-copr/copr/issues/4094
2025-12-18 18:20:01 +01:00
Pavel Raiskup
02fb5aac8f copr-hypervisor: drop the hack for helpers repo 2025-12-18 17:07:17 +01:00
Pavel Raiskup
514bb44914 copr-be: limit the number of builds in a single sandbox
This appears to be problem in recent days.  One user still can submit
more builds in parallel, but not in a single project (e.g., Packit).
2025-12-18 17:03:39 +01:00
Pavel Raiskup
ee10005271 copr-hypervisor: drop glanceclient
It's not easily installable on RHEL 10, and we anyway upload images
directly from copr-backend these days.
2025-12-18 16:18:45 +01:00
Pavel Raiskup
4078ccff24 copr-hypervisor: don't enable el8 on el10 hosts 2025-12-18 16:15:54 +01:00
Jakub Kadlcik
e751ba0278 backend: allow resalloc WebUI to connect to the database
See https://github.com/fedora-copr/copr/issues/4007
2025-12-18 11:48:12 +01:00
Jakub Kadlcik
158fc0e6a1 backend: I think this is the correct indentation 2025-12-18 11:47:16 +01:00
Jakub Kadlcik
56852ba78c copr-backend: disable NoNewPrivileges for lighttpd
See https://github.com/fedora-copr/copr/issues/4007
2025-12-18 11:21:32 +01:00
Pavel Raiskup
e6cbeaa3f9 copr-be: fix the expected string in frontend check 2025-12-11 08:49:37 +01:00
Pavel Raiskup
2bab0054d8 copr-be: fix the frontend check after enabling Anubis 2025-12-11 08:34:38 +01:00
Jiri Kyjovsky
9048e49e6a copr-frontend: fix oidc login behind anubis
Fix OIDC "Invalid redirect_uri" error (Flask generating http:// URLs).
Since SSL is terminated at the frontend/Anubis, traffic reaches this backend via HTTP.
This forces the application to believe it is running over HTTPS based on the header
forwarded by the trusted frontend, ensuring OIDC redirect URLs are generated with https://.
2025-12-10 16:33:55 +01:00
Pavel Raiskup
50223282e7 copr-fe: deploy anubis
Relates: https://pagure.io/fedora-infrastructure/issue/12971
Fixes: https://github.com/fedora-copr/copr/issues/4064

Co-authored-by: Jiri Kyjovsky <j1.kyjovsky@gmail.com>
2025-12-10 16:01:04 +01:00
Jiri Kyjovsky
6bf2cc4cd8 copr: move pulp-redirect file to persistent storage 2025-12-07 18:05:20 +00:00
Jiri Kyjovsky
3699a1b0d0 coprbe: fix raid assembly failing when arrays are already active 2025-11-23 22:59:36 +01:00
Jiri Kyjovsky
b22673576e copr-dist-git: allow anubis for f43 2025-11-23 20:08:51 +01:00
Jiri Kyjovsky
e59050d445 copr: revert UID changes, otherwise chown is needed 2025-11-20 14:02:47 +01:00
Jiri Kyjovsky
7bc8709b8a copr-devel: final move of dist git and keygen 2025-11-12 15:25:22 +01:00
Jiri Kyjovsky
b892c72c1a copr: remove specified uid for copr signer, clashes with others
namely:
dhcpcd:x:992:992:Minimalistic DHCP client:/var/lib/dhcpcd:/usr/sbin/nologin
2025-11-12 12:57:33 +01:00
Jiri Kyjovsky
9001be94ca copr-devel: moving devel infrastructure to fedora43 [part 1] 2025-11-09 22:29:16 +01:00
Jiri Kyjovsky
24c6aff32a copr: move anubis role as dependency for copr-dist-git 2025-11-03 01:12:08 +01:00