WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-04-30 13:32:30 +08:00
Code Issues Packages Projects Releases Wiki Activity
44,944 Commits 9 Branches 0 Tags
fc4ab99572ebf2f7f14968a4db63fbb7ee7fdc74
Commit Graph

44944 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
David Kirwan
fc4ab99572 forgejo: update distgit playbook to target correct role 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2025-12-08 14:20:17 +00:00
David Kirwan
46b9264ba8 forgejo: distgit playbook 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2025-12-08 14:16:15 +00:00
Jiri Kyjovsky
6bf2cc4cd8 copr: move pulp-redirect file to persistent storage 2025-12-07 18:05:20 +00:00
Kevin Fenzi
557a9df3af pkgs: adjust procs and threads too 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-06 10:19:15 -08:00
Kevin Fenzi
ea1a9a5b6b proxies: block /history/ and /blame/ on the web interface of src. 
Scrapers are crawling these endpoints and pkgs01 takes a while to call
git on the backend and return data to them. This causes latency to
increase a bunch because it's got all those blame and history requests
it's processing so it can't process more important things.

So, lets just block these for now. Any users who need them can easily
git clone locally and run history/blame just fine.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-06 10:10:35 -08:00
Kevin Fenzi
b61fef52f4 varnish: also cache ttf files 
These fonts are kind of hit a lot, no need to send to the pkgs01 backend
for them, we can just cache them in varnish for clients.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-06 10:10:35 -08:00
Kevin Fenzi
d9ea824473 pkgs01: sync apache values with what we have on pagure.io 
This will increase some values to allow for handling
scrapers better. In any case it doesn't seem to hurt.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-06 10:10:35 -08:00
Kevin Fenzi
b6e8f0cad8 pkgs01: bump to 48G memory 
This might help with handling scrapers.
 2025-12-06 10:10:35 -08:00
Mattia Verga
7517b2ce1e bodhi: upgrade to F43 and 25.11.2 
Signed-off-by: Mattia Verga <mattia.verga@tiscali.it>
 2025-12-05 20:42:51 +00:00
Kevin Fenzi
a7402ebf5f anubis: allowlist productmd 
The python productmd library hits kojipkgs to find recent
composes/compose information. It's not easy for it to adjust on the
client end, but it does send a user-agent header like "productmd/1.49"
So, lets just allowlist it for now.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-05 10:09:49 -08:00
David Kirwan
185e0c81ed forgejo: wip distgit role 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2025-12-05 14:28:04 +00:00
Michal Konecny
8f4e37a1f6 db01.stg: Double the amount of CPUs 
Bodhi messaging queue on staging has around 1 000 000 messages in it and
after some investigation it seems that the processing is blocked on
database. Let's bump the amount of CPUs to 8.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2025-12-05 14:11:30 +01:00
Kevin Fenzi
6ff7ce78ce pkgs01: double cpus to 32 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-04 18:15:38 -08:00
Kevin Fenzi
99633bb861 backup: use external pagure01 ip 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-04 14:31:14 -08:00
Kevin Fenzi
f4e7495b01 virthost: increase nrpe proc limits 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-04 14:27:46 -08:00
Kevin Fenzi
57a4b9da41 nagios: make log01 not monitor / and have a higher limit for /var/log 
/ and /var/log are the same filesystem on log01, so it makes little
sense to monitor both. Just monitor /var/log and increase it's limits.
We are going to archive things, but likely in january.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-04 14:23:11 -08:00
Gregory Bartholomew
bfcd857278 retire legacy fedora websites repo phase 2 
Signed-off-by: Gregory Bartholomew <gregory.lee.bartholomew@gmail.com>
 2025-12-04 20:48:05 +00:00
Kevin Fenzi
68d7014d04 collectd: delete some old fedmsg roles 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-04 12:28:49 -08:00
Greg Sutcliffe
5443368122 Zabbix: Add RabbitMQ monitoring ... to the correct role 
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2025-12-04 14:27:59 +00:00
Greg Sutcliffe
2f89694058 Zabbix: Add RabbitMQ monitoring 
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2025-12-04 14:02:02 +00:00
Michal Konecny
9586313f2b [ipsilon] Bump ipsilon01 to F43 
ipsilon02 is already running on F43, let's bump the ipsilon01 as well.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2025-12-04 14:30:51 +01:00
Patrik Polakovič
de1d02a255 Forgejo migration: pungi-fedora related templates 
Related issue: forge.fedoraproject.org/releng/tickets/issues/13090
Signed-off-by: Patrik Polakovič <patrik@alphamail.org>
 2025-12-04 12:23:59 +01:00
Maxwell G
51ab1dc9e6 anubis: allow checking for dead.package files 
Checking for the presence of dead.package by trying to download the
dead.package file and checking for an HTTP 404 or 200 is an easy way to
check if a package is retied in distgit.
This practice is used in the wild in tools like fedora-misc-package-utilities.
 2025-12-03 20:15:35 -06:00
Cristian Le
144fbc70fd RabbitMQ: Add rmdepcheck queue 
Signed-off-by: Cristian Le <git@lecris.dev>
 2025-12-04 01:47:32 +00:00
Neal Gompa
8f67be96eb roles/fasjson: Add myself (Neal Gompa) to fedora-ready-team@ alias 
I am the main technical point of contact for folks working within
the Fedora Ready program, so it makes sense to have me on this alias.

Signed-off-by: Neal Gompa <ngompa@fedoraproject.org>
 2025-12-04 01:43:52 +00:00
Kevin Fenzi
2d3797de65 nagios / external: try and put pagure01 in rdu3_external to see if that makes noc02 happy 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-03 17:08:34 -08:00
Kevin Fenzi
b5ae9eb8c2 anubis-el8: set forks back to just increase weight 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-03 16:46:09 -08:00
Kevin Fenzi
a47c38f68a koji_builder: update pagure.io ip address for builders firewall 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-03 16:26:50 -08:00
Kevin Fenzi
70c964ed9b pagure02: fare thee well. 
We have moved to pagure01, retire pagure02

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-03 16:20:22 -08:00
Kevin Fenzi
f7e4a1bdd7 anubis: 30 is too high, down to 20 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-03 16:08:52 -08:00
Kevin Fenzi
4822e9cd13 anubis: revert challenging all /forks/ 
This was an attempt to block the scrapers, but sadly it breaks humans.
We cannot challenge everything under forks because people need to push
pr's and those get blocked.

So, go back to just weighting those higher...

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-03 15:52:57 -08:00
Kevin Fenzi
c01f8c16bb Revert "another try" 
This reverts commit 6e4c336953.
 2025-12-03 15:10:43 -08:00
Kevin Fenzi
6e4c336953 another try 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-03 15:04:28 -08:00
Kevin Fenzi
09fe51bd5a Reapply "another test commit" 
This reverts commit 5f90feac35.
 2025-12-03 14:59:02 -08:00
Kevin Fenzi
5f90feac35 Revert "another test commit" 
This reverts commit 2ddb417487.
 2025-12-03 14:55:24 -08:00
Kevin Fenzi
2ddb417487 another test commit 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-03 14:46:44 -08:00
Kevin Fenzi
56bf10f404 Revert "another test commit" 
This reverts commit 2955b27656.
 2025-12-03 14:41:37 -08:00
Kevin Fenzi
2955b27656 another test commit 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-03 14:34:47 -08:00
Kevin Fenzi
d37db87b70 Revert "whitespace change to test" 
This reverts commit bcca5f58f4.
 2025-12-03 14:33:07 -08:00
Kevin Fenzi
bcca5f58f4 whitespace change to test 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-03 14:30:16 -08:00
Kevin Fenzi
2c29dbef64 anubis: allowlist src/extras 
These are some smallish json files that are used by various scripts.
Lets just allowlist them.

See https://pagure.io/fedora-infrastructure/issue/12946

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-03 11:46:29 -08:00
Kevin Fenzi
9b02c8bf4e download: add some kernel.org mirrors (infra#12941) 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-03 11:26:58 -08:00
Kevin Fenzi
900a06c049 os-control: add sysadmin-openshift to be able to login and sudo 
We want to add a few folks here so they can login to os-control and sudo
and debug cluster wide issues.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-03 09:17:18 -08:00
Aurélien Bompard
1a56c792b9 Fix MirrorManager buildconfig name 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-12-03 12:31:24 +01:00
Aurélien Bompard
ee5f25d199 Update the Redis images in OpenShift 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-12-03 12:29:50 +01:00
Kevin Fenzi
91ca2a6bf3 pagure-stg01: say fare thee well 
We have moved over to pagure-stg02 now in rdu3, so retire this vm.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-02 14:28:06 -08:00
Carl George
cb060922ad mirrormanager: Adjust EPEL 10 regexes for optional components 
Detect EPEL 10 repos in the archive with names like "10.0z".

Signed-off-by: Carl George <carlwgeorge@gmail.com>
 2025-12-02 15:26:45 -06:00
Kevin Fenzi
4ae493f195 anubis: reduce forks, was impossible at the former level 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-02 12:19:38 -08:00
Kevin Fenzi
708c0fdaa2 anubis: adjust forks on src to slow challenge 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-02 11:05:15 -08:00
Kevin Fenzi
00c612bd6a anubis: allow packit user-agent 
Per https://pagure.io/fedora-infrastructure/issue/12923
just allowlist the packit user agent at least for now.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-02 10:22:27 -08:00