Commit Graph

235 Commits

Author SHA1 Message Date
Patrick Uiterwijk
7b9af8332c Use rngd on builders
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2018-05-14 13:54:22 +02:00
Kevin Fenzi
83059c1fbc revert haveged install on builders 2018-05-13 21:55:37 +00:00
Kevin Fenzi
45297394ef add haveged on builders for vm random 2018-05-13 21:30:03 +00:00
Kevin Fenzi
112f14f740 missing ) 2018-05-13 19:50:42 +00:00
Kevin Fenzi
a1a82b2ee7 increase oz time on aarch64 also 2018-05-13 19:44:26 +00:00
Kevin Fenzi
1a4710e65f this needs set on 03 also 2018-05-11 16:43:16 +00:00
Kevin Fenzi
37dd6c16a4 fix logic 2018-03-22 22:54:55 +00:00
Kevin Fenzi
6dcc71fe94 fix typo 2018-03-22 22:23:03 +00:00
Kevin Fenzi
5dcd66d570 Per https://pagure.io/releng/issue/7326 move the power builders oz config to use just 1 cpu for now.
There is a bug in nested virt with more than 1 cpu that is causing all the images to fail to build.
2018-03-22 21:37:39 +00:00
Kevin Fenzi
4d82d4f9aa make s390x image building vm have a longer/different timeout for oz than the rest do for now 2018-03-16 21:19:35 +00:00
Kevin Fenzi
92f0ccf3e1 do not set sysctl on buildvm-armv7-03 for debug info gathering 2018-03-13 00:10:15 +00:00
Kevin Fenzi
f14ef92fd3 add sysctl for armv7 builders to avoid compose lockups 2018-03-01 21:04:16 +00:00
Kevin Fenzi
11e384a8c3 lets try and install oz/imagefactory on s390x builders too 2018-02-27 00:57:34 +00:00
Kevin Fenzi
252126c28d add bugurl default to koji builders 2018-02-16 23:08:05 +00:00
Kevin Fenzi
d96ccc806d add libkcapi to increase a kernel limit on arm builders. Ticket 6636 2018-01-19 21:06:53 +00:00
Patrick Uiterwijk
e82dafaafd Mount kojid secrets by default in runroot
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2018-01-10 15:47:32 +00:00
Patrick Uiterwijk
4763d25f0a Move the inner keytab stuff to the actual playbook
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2018-01-05 09:55:15 +00:00
Patrick Uiterwijk
f56cb3e60a Rename the keytab and its service
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2018-01-05 09:51:17 +00:00
Patrick Uiterwijk
c05ef11ebd Allow the shared directory to be mounted
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2018-01-05 10:47:35 +01:00
Patrick Uiterwijk
cea3c93ff9 Attempt setup for shared secret keytab for odcs
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2018-01-05 09:47:11 +00:00
Kevin Fenzi
1f8bbceaa7 drop buildppc64/buildppc64le/aarch64 secondary builders 2018-01-02 21:35:54 +00:00
Patrick Uiterwijk
ff3daf593f Koji builder is missing a dep on python2-koji
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-12-08 21:57:54 +00:00
Kevin Fenzi
414aa42414 need the policy name here 2017-10-14 23:23:23 +00:00
Kevin Fenzi
8c1044b842 Make sure builders are in permissive selinux mode 2017-10-13 21:44:53 +00:00
Patrick Uiterwijk
adcbf72f03 Packageize this, packageize that, packageize the world
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-10-08 22:25:52 +00:00
Kevin Fenzi
e4331eccb5 reorg allowed scms in staging to test fedpkg changes for git://pkgs to https://src 2017-09-27 19:48:29 +00:00
Kevin Fenzi
35b6f496ef install kernel-modules too, needed for at least HFS+ 2017-09-05 14:51:48 +00:00
Kevin Fenzi
479d504ae6 set buildvm-s390x-01 to only 1 job at a time to avoid congestion 2017-08-20 20:43:30 +00:00
Patrick Uiterwijk
b7c4f38fd2 Also add /mnt/koji symlink on buildvm-s390x-01
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-08-15 08:46:59 +00:00
Patrick Uiterwijk
bd8f4e6a76 Do not allow building from forks via a workaround
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2017-08-07 15:41:10 +02:00
Ralph Bean
84bb8ffe84 Also, for staging. 2017-08-04 21:42:44 +00:00
Ralph Bean
6ba8087d07 URL change for pagure on dist-git. 2017-08-04 21:40:55 +00:00
Ralph Bean
7a62af798d Deny access to pagure-on-dist-git fork repos. 2017-08-02 00:13:59 +00:00
Ralph Bean
dd6c1f52f0 Cosmetic - change kojid prod allowed_scms to be newline-delimited. 2017-08-02 00:13:59 +00:00
Ralph Bean
0736fcb4f7 Tell staging koji to disallow building from forks. 2017-07-31 19:44:29 +00:00
Ralph Bean
44e1a81e23 Seems obvious that stg koji should accept src.stg scm urls. 2017-07-31 19:33:55 +00:00
Ralph Bean
872ed30b89 Cosmetic - convert staging kojid allowed_scms config from spaces to newlines for readability. 2017-07-31 19:06:14 +00:00
Patrick Uiterwijk
d442a5a9c1 Tag these plays temporarily
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-07-18 16:50:48 +00:00
Patrick Uiterwijk
77954f9881 Remove httpd from builders - it's a bad idea
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-07-18 16:49:00 +00:00
Patrick Uiterwijk
08d514565d Manually create apache user on builders
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-07-18 16:45:15 +00:00
Patrick Uiterwijk
280786c927 Revert "Temporarily put the s390 cache at the end to prevent failing all builds"
This reverts commit abfb679f05.
2017-07-18 15:26:33 +00:00
Patrick Uiterwijk
abfb679f05 Temporarily put the s390 cache at the end to prevent failing all builds
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-07-11 09:06:24 +00:00
Kevin Fenzi
d860015a28 lets try this s390 caching again 2017-05-14 18:30:14 +00:00
Kevin Fenzi
5b223fd084 revert it 2017-05-11 21:49:28 +00:00
Kevin Fenzi
fe7802aa8a set s390x builders to use kojipkgs-cache01 locally 2017-05-11 20:14:13 +00:00
Dennis Gilmore
c301dd90c3 install libvirt-client on the builders
libvirt-client is needed to ensure that we can get a simple view
into things when image building goes wrong

Signed-off-by: Dennis Gilmore <ausil@fedoraproject.org>
2017-05-09 14:44:29 +00:00
Patrick Uiterwijk
8ef9f6ce82 Revert "Temporarily disable this handler as the change does not affect anything actually"
This reverts commit 0fdfe2e338.
2017-04-18 02:47:16 +00:00
Patrick Uiterwijk
72417f1cbd Kill the max_loop=64 part
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-04-18 02:46:47 +00:00
Patrick Uiterwijk
0fdfe2e338 Temporarily disable this handler as the change does not affect anything actually
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-04-18 02:31:24 +00:00
Patrick Uiterwijk
fca9819f8a No longer depend on reverse DNS for keytab entry decision
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-04-18 02:26:36 +00:00