[FBR] Pagure configuration change
by Pierre-Yves Chibon
Hi everyone,
I would like to push this patch and run pagure's playbook.
All this do is changing the order of the vhost in the apache configuration file
(and adds a couple of comments).
This will allow to serve the SSL cert for pagure.io by default to client that do
not support SNI.
This will also fix the milter (the mechanism used to reply to a ticket via
email), which is currently hotfix to not check the SSL cert.
+1?
Thanks,
Pierre
8 years, 8 months
[release] pagure: 0.1.21
by Pierre-Yves Chibon
Hi everyone,
I just released a new version of pagure: 0.1.21.
Here is its changelog:
* Wed Aug 05 2015 Pierre-Yves Chibon <pingou(a)pingoured.fr> - 0.1.21
- Update to 0.1.21
- Make SSH protocol explicit for SSH URLs (Till Maas)
- Adjust the documentation (layout and content)
- Rework the doc server to allow showing html files directly
- Fix installing the pagure hook correctly (tickets and requests)
- Give proper attribution to the pagure logo to Micah Deen in the documentation
- Increase pull request text field lengths to 80 (Till Maas)
- Fix who can open a remote PR and the check that the repo allows PR
- If there is no commit and no content, it means we didn't find the file: 404
It's currently running in stg and apparently it's doing fine :)
Happy testing!
Pierre
8 years, 8 months
Meeting Agenda Item: Introduction Zach Villers
by Zach Villers
ehlo Infra team,
I'm interested in joining the infra group as an apprentice. I recently passed the RHCSA, am semi-proficient in bash-scripting, and am working on learning Python. I would like to learn more about packaging and managing servers.
irc handle: aikidouke
(Aikido is a martial art, uke is the person that falls down)
github mess: https://github.com/Aikidouke
Look forward to talking to you all soon!
*in case you have a really good memory, I did join and dropped out right away about six months ago. I was way too busy and a little overwhelmed. I have time now to at least come to the meetings and really want to find a way to contribute and learn.*
8 years, 8 months
Freeze break request: fix backups for qadevel.qa.fedoraproject.org
by Kevin Fenzi
qadevel.qa.fedoraproject.org uses port 222 for ssh shell access.
ansible is happy using port 222 just fine, but rdiff-backup isn't.
It uses port 22 by default, and fails.
The following patch should fix this issue.
+1s? I would apply this, run the backup playbook and then watch
tomorrow's backups to confirm they work. If not we could revert this.
kevin
--
diff --git a/playbooks/rdiff-backup.yml b/playbooks/rdiff-backup.yml
index 9accda6..fd9dec7 100644
--- a/playbooks/rdiff-backup.yml
+++ b/playbooks/rdiff-backup.yml
@@ -20,11 +20,11 @@
tasks:
- name: run rdiff-backup hitting all the global targets
- local_action: "shell rdiff-backup --create-full-path --print-statistics {{ inventory_hostname }}::{{ item }} /fedora_backups/{{ inventory_hostname }}/`basename {{ item }}` | mail -r sysadmin-backup-members(a)fedoraproject.org -s 'rdiff-backup: {{ inventory_hostname }}:{{ item }}' sysadmin-backup-members(a)fedoraproject.org"
+ local_action: "shell rdiff-backup --remote-schema 'ssh -p {{ ansible_ssh_port }} -C %s rdiff-backup --server' --create-full-path --print-statistics {{ inventory_hostname }}::{{ item }} /fedora_backups/{{ inventory_hostname }}/`basename {{ item }}` | mail -r sysadmin-backup-members(a)fedoraproject.org -s 'rdiff-backup: {{ inventory_hostname }}:{{ item }}' sysadmin-backup-members(a)fedoraproject.org"
with_items: global_backup_targets
when: global_backup_targets is defined
- name: run rdiff-backup hitting all the host targets
- local_action: "shell rdiff-backup --exclude='**git-seed*' --exclude='**git_seed' --exclude='**.snapshot' --create-full-path --print-statistics {{ inventory_hostname }}::{{ item }} /fedora_backups/{{ inventory_hostname }}/`basename {{ item }}` | mail -r sysadmin-backup-members(a)fedoraproject.org -s 'rdiff-backup: {{ inventory_hostname }}:{{ item }}' sysadmin-backup-members(a)fedoraproject.org"
+ local_action: "shell rdiff-backup --remote-schema 'ssh -p {{ ansible_ssh_port }} -C %s rdiff-backup --server' --exclude='**git-seed*' --exclude='**git_seed' --exclude='**.snapshot' --create-full-path --print-statistics {{ inventory_hostname }}::{{ item }} /fedora_backups/{{ inventory_hostname }}/`basename {{ item }}` | mail -r sysadmin-backup-members(a)fedoraproject.org -s 'rdiff-backup: {{ inventory_hostname }}:{{ item }}' sysadmin-backup-members(a)fedoraproject.org"
with_items: host_backup_targets
when: host_backup_targets is defined
8 years, 8 months
Freeze Break Request - give compose fedmsg certs to s390-koji01
by Ralph Bean
The s390 koji hub was rebuilt and ansibilized shortly before freeze
set in. It had a fedmsg_certs dictionary defined in the koji ansible
group which gave it the certs it needed for koji stuff, but it was
missing an extra cert definition for the compose process it carries
out.
This patch over writes that original var with a setup specific to the
s390 node.
Can I get two +1s to push this out?
diff --git a/inventory/host_vars/s390-koji01.qa.fedoraproject.org b/inventory/host_vars/s390-koji01.qa.fedoraproject.org
index 795fa9f..e355230 100644
--- a/inventory/host_vars/s390-koji01.qa.fedoraproject.org
+++ b/inventory/host_vars/s390-koji01.qa.fedoraproject.org
@@ -34,3 +34,41 @@ koji_server_url: "http://s390.koji.fedoraproject.org/kojihub"
koji_weburl: "http://s390.koji.fedoraproject.org/koji"
fedmsg_koji_instance: s390
+
+# Overload the fedmsg_certs definition from the ansible koji group, since the
+# s390 hub *also* does compose stuff, not just koji stuff.
+fedmsg_certs:
+- service: shell
+ owner: root
+ group: sysadmin
+- service: koji
+ owner: root
+ group: apache
+ can_send:
+ - buildsys.build.state.change
+ - buildsys.package.list.change
+ - buildsys.repo.done
+ - buildsys.repo.init
+ - buildsys.rpm.sign
+ - buildsys.tag
+ - buildsys.task.state.change
+ - buildsys.untag
+- service: bodhi
+ owner: root
+ group: masher
+ can_send:
+ - compose.branched.complete
+ - compose.branched.mash.complete
+ - compose.branched.mash.start
+ - compose.branched.pungify.complete
+ - compose.branched.pungify.start
+ - compose.branched.rsync.complete
+ - compose.branched.rsync.start
+ - compose.branched.start
+ - compose.epelbeta.complete
+ - compose.rawhide.complete
+ - compose.rawhide.mash.complete
+ - compose.rawhide.mash.start
+ - compose.rawhide.rsync.complete
+ - compose.rawhide.rsync.start
+ - compose.rawhide.start
8 years, 8 months
