Commit Graph

34815 Commits

Author SHA1 Message Date
Kevin Fenzi
cbf343dd4e fix buildhw-x86-05 nm
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-04 09:54:41 -07:00
Kevin Fenzi
7ef6f3ea42 Revert "buildhw-x86-02: try and not specify state"
This reverts commit 926cb41759.
2021-05-04 09:35:47 -07:00
Kevin Fenzi
926cb41759 buildhw-x86-02: try and not specify state
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-04 09:31:41 -07:00
Kevin Fenzi
44adfa7b09 buildhw: try setting persistent_state: present
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-04 09:26:50 -07:00
Kevin Fenzi
e6e066d3d7 buildhw: adjust some mac addresses and such
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-04 09:20:18 -07:00
Pavel Raiskup
3899746bd2 copr-hv: images in /libvirt-images to have qemu-group
And really allow qemu group to rwx that dir.
2021-05-04 18:13:15 +02:00
Pavel Raiskup
4ea239858b copr-hv: correctly put copr user to qemu group
... to have access to /libvirt-images directory.
2021-05-04 17:59:10 +02:00
Kevin Fenzi
3c12ef6aa9 Killed trailing spaces in group/host vars with fire.
Normally it's just a nitpick to not have trailing spaces on variables.
However, for some things like mac address, it really matters.
Bunches of buildhw's were failing ansibile because they were passing
"mac address " to linux-system-roles networking and ansible was going
'huh, nope, I can't find that mac address here at all'.
So, just blow all the tailing spaces away to avoid any other variables
that hit this.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-04 08:52:52 -07:00
Kevin Fenzi
f7f7a3e8de buildhw-x86-01: re-add disabled for eth1
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-04 08:48:12 -07:00
Pavel Raiskup
570d580e24 copr-hv: disable copr vmhost01 as it is not responding 2021-05-04 17:46:01 +02:00
Pavel Raiskup
835cc2626f copr-hv: install copr user only once 2021-05-04 17:46:01 +02:00
Pierre-Yves Chibon
6906744f61 distgit/pagure: Specify the url to oraculum in the config
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2021-05-04 11:53:21 +02:00
Kevin Fenzi
98c8532ad6 buildhw-x86-01: remove space from end of mac address
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-03 18:50:15 -07:00
Kevin Fenzi
a7aac93e49 buildhw-x86-01: try not specifying eth1 state
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-03 18:24:54 -07:00
Kevin Fenzi
71e3a60ea1 group_vars/all: switch default to ipa
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-03 17:38:40 -07:00
Kevin Fenzi
6efdaca83b kernel_qa: add host_group_desc
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-03 17:32:06 -07:00
Kevin Fenzi
5c88af7d29 kernel_qa: try and use _ in the hostgroup name
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-03 17:27:11 -07:00
Kevin Fenzi
28c35a9b87 compose-rawhide01: move to f34
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-03 15:23:45 -07:00
Kevin Fenzi
b80b859c34 kojipkgs: move to f34
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-03 15:16:06 -07:00
Kevin Fenzi
bcfd447c94 bastion: allow sysadmin-kernel ssh access
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-03 15:05:18 -07:00
Kevin Fenzi
91be703c05 re-add kernel01 to enroll in ipa
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-03 14:45:20 -07:00
Kevin Fenzi
80b3c96f9d Move a bunch of machines to f34 from f32.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-03 14:43:28 -07:00
Stephen Smoogen
805a14569e add in bridge 2 onto the two vmhosts-cc boxes. 2021-05-03 16:30:40 -04:00
Owen W. Taylor
2ad2899256 flatpak-indexer: Update to a new upstream
The important change here is to retry to connect when we lose our connection
to rabbitmq.fedoraproject.org. (https://pagure.io/fedora-infrastructure/issue/9794)

be75c716bae720c45e720f8e1cecab01f4355bd3..98645617cd8529c042f1c398b283264a66a4bea5

Owen W. Taylor (6):
      run-redis.sh: bind only to localhost and set a (trivial) password
      release_info.py: Fix typo in the release name for F35
      bodhi_change_monitor: handle exceptions when talking to fedora-messaging
      bodhi_change_monitor: Don't just retry on stream lost, retry on connection refused
      bodhi_change_monitor: Retry on ssl.SSLError
      bodhi_change_monitor: Improve logging of exceptions

Signed-off-by: Owen W. Taylor <otaylor@fishsoup.net>
2021-05-03 19:04:10 +00:00
Pavel Raiskup
c4d56a9419 copr: fix cron MAILTO so it doesn't bounce 2021-05-03 21:03:50 +02:00
Kevin Fenzi
c935c54e9d oci-registries: Move staging and prod candidate to f34
Also resize candidate-registery01 in prod as it was close to full.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-03 10:45:28 -07:00
Kevin Fenzi
68d9114494 adjust rkhunter some more for podman and postgres
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-03 09:29:30 -07:00
Kevin Fenzi
bbd0b3c3e6 Move compose-x86-01.stg to f34.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-03 09:29:30 -07:00
Stephen Smoogen
d31b6543fc Put in a change for internal rsync to hopefully work with dl servers 2021-05-03 11:52:06 -04:00
Kevin Fenzi
52e27c723b vars: F32 is still supported for a bit longer.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-03 08:46:22 -07:00
Justin W. Flory (he/him) [Fedora Project]
f1c0e18e4c Email aliases: Swap diversity@fp.o from @jflory7 to @siddharthvipul1
This commit swaps the recipients of the diversity@fp.o email address
from @jflory7, the outgoing D&I Advisor, with @siddharthvipul1, the
incoming D&I Advisor for Fedora 34.

I believe that `roles/fasjson` is current and `roles/fas_client` is
retired from FAS2, but I could not find confirmation that it is retired
or deprecated. So, I updated both roles.

CC: @riecatnor @mattdm, who are also included as recipients to this
email address alias.

CC: @lilyx @ramyaparimi @t0xic0der @mouse, sharing as a "For Your
Information". Did you know we have a diversity@fp.o mail alias? Now you
do. 😉

Signed-off-by: Justin W. Flory (he/him) [Fedora Project] <jwf@fedoraproject.org>
2021-05-02 10:05:13 -04:00
Kevin Fenzi
f15f545d8a Add some missing or's. Conjunction junction.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-01 21:55:33 -07:00
Kevin Fenzi
bb23884017 adjust rkhunter rules
Include staging db servers as postgres
drop a bunch of old squid rules from kojipkgs (it uses varnish now)

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-01 21:50:43 -07:00
Kevin Fenzi
d377ff4898 backups: ipa: back up dirserv logs (including audit) too.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-04-30 10:19:03 -07:00
Aurélien Bompard
0c845843c4 Update ipsilon-fedora on the Ipsilon servers
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2021-04-30 10:37:31 +02:00
Aurélien Bompard
809635c923 Improve the IPA backup process
Fixes: https://pagure.io/fedora-infrastructure/issue/9916

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2021-04-30 10:35:33 +02:00
Aurélien Bompard
7c03fc1954 Fix the wiki FPCA requirement
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2021-04-29 10:46:54 +02:00
Francois Andrieu
911bb8ac4f openshift: allow appowner to start a rollout 2021-04-28 21:32:05 +00:00
Kevin Fenzi
2ccda962fe Add a pointer and note about contributions being under the FPCA
Before the ansible repo was public, everyone who could commit to it was
in the sysadmin group, which required FPCA agreement. Now that it's
public we should make sure to clarify this for all users who might
submit contributions. Additionally we should add a note to the pull
request template.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-04-28 21:19:43 +00:00
Pierre-Yves Chibon
5e43bba03e elections: delete the eletions roles that is no longer used
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2021-04-28 21:07:35 +00:00
Kevin Fenzi
629a0ddaf7 ppc64le-test: do not use nrpe checks here.
This instance is in a lab somewhere and doesn't allow nrpe access.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-04-28 12:35:50 -07:00
Kevin Fenzi
28061ef76f fix role name from last commit
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-04-28 10:50:25 -07:00
Kevin Fenzi
94e5eecaea maintainer_test: add nagios client so we can monitor the vpn
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-04-28 10:47:17 -07:00
Stephen Smoogen
fd7fa6e915 remove duplicate vpn:. this is not the reason that copr01 died but it will clean out errors when running ansible-playbook 2021-04-28 12:48:01 -04:00
Stephen Smoogen
7b43b8049a Update kevins config so nagios will load since 16x7 no longer exists
Signed-off-by: Stephen Smoogen <smooge@smoogespace.com>
2021-04-28 16:07:43 +00:00
Stephen Smoogen
e5a3fb3a43 Add in a 12x7 versus 16x7 and make some timeszones friendlier
Signed-off-by: Stephen Smoogen <smooge@smoogespace.com>
2021-04-28 16:07:43 +00:00
Pavel Raiskup
0aede26200 copr-dist-git: simplify cgitrc config, #2
See previous commit.
2021-04-27 22:16:01 +02:00
Pavel Raiskup
4e95c76e0b copr-dist-git: simplify cgitrc config
This is a missing step after:
2e64a15058
2021-04-27 22:01:45 +02:00
Kevin Fenzi
179ce1824b Add pipewire and iptables to multilib_whitelist for x86_64
This should fix: https://bugzilla.redhat.com/show_bug.cgi?id=1953178
and pipewire upgrade issues.

Right now the base f34 repo has iptables.i686 and pipewire.i686 in it.

pipewire.i686 would be pulled into updates by mutter.i686, but there's
not yet a mutter update.
iptables.i686 wouldn't be pulled in as nothing depends on it, but it's in the
base repo so thus on users systems.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-04-27 08:56:28 -07:00
Pavel Raiskup
c6a9256a2f copr-keygen: move handlers to a global place
This used to be a role-specific handler, though we have a special
upgrade playbooks (e.g. copr-keygen-upgrade.yml) that failed because
they use but don't import the copr/* roles (and role handlers).  So we
would have to either import role-specific handlers explicitly, or do
this commit.
2021-04-27 16:54:20 +02:00