[ansible] Fixup nmcli and iptables-restore
by Nicolas Chauvet
commit e681cbc0054cf26dee1cea2120dc21e5ac7e6992
Author: Nicolas Chauvet <kwizart(a)gmail.com>
Date: Sun Oct 21 18:14:34 2018 +0200
Fixup nmcli and iptables-restore
inventory/host_vars/buildvm-07.virt.rpmfusion.net | 9 +++++++++
roles/base/tasks/main.yml | 4 ++--
2 files changed, 11 insertions(+), 2 deletions(-)
---
diff --git a/inventory/host_vars/buildvm-07.virt.rpmfusion.net b/inventory/host_vars/buildvm-07.virt.rpmfusion.net
new file mode 100644
index 0000000..6720b95
--- /dev/null
+++ b/inventory/host_vars/buildvm-07.virt.rpmfusion.net
@@ -0,0 +1,9 @@
+---
+datacenter: virt
+
+#
+# We need to mount koji storage rw here so run_root can work.
+# The rest of the group can be ro, it's only builders in the
+# compose channel that need a rw mount
+
+nfs_mount_opts: "rw,hard,bg,intr,noatime,nodev,nosuid,nfsvers=3"
diff --git a/roles/base/tasks/main.yml b/roles/base/tasks/main.yml
index a44f9b7..f3b63c4 100644
--- a/roles/base/tasks/main.yml
+++ b/roles/base/tasks/main.yml
@@ -62,7 +62,7 @@
- ifcfg
- name: get interface uuid
- shell: nmcli -f "DEVICE,UUID" c show --active | grep -E '^eth|^br'
+ shell: nmcli -f "DEVICE,UUID" c show --active | grep -E '^eth|^br|^en'
register: if_uuid
changed_when: false
failed_when: 'if_uuid.stdout == ""'
@@ -189,7 +189,7 @@
- base
- name: iptables
- template: src={{ item }} dest=/etc/sysconfig/iptables mode=0600 validate="/sbin/iptables-restore --text %s"
+ template: src={{ item }} dest=/etc/sysconfig/iptables mode=0600 validate="/sbin/iptables-restore %s"
with_first_found:
- iptables/iptables.{{ datacenter }}
- iptables/iptables.{{ inventory_hostname }}
6 years, 2 months
[ansible] Add home group
by Nicolas Chauvet
commit f722d2094d46122032b9160ff6f7756d282b28b7
Author: Nicolas Chauvet <kwizart(a)gmail.com>
Date: Mon Oct 8 14:08:12 2018 +0200
Add home group
inventory/builders | 3 +++
1 files changed, 3 insertions(+), 0 deletions(-)
---
diff --git a/inventory/builders b/inventory/builders
index c311287..58be36f 100644
--- a/inventory/builders
+++ b/inventory/builders
@@ -43,6 +43,9 @@ buildaarch64
buildvm-ppc64
buildvm-ppc64le
+[home:children]
+home-arm
+
[scaleway-c1]
arm-builder01.scaleway.rpmfusion.net
arm-builder02.scaleway.rpmfusion.net
6 years, 2 months
[ansible] Update rpmfusion default postfix main.cf
by Nicolas Chauvet
commit fd14115095eefd28f8db33628a55e904675d4154
Author: Nicolas Chauvet <kwizart(a)gmail.com>
Date: Wed Oct 3 18:49:54 2018 +0200
Update rpmfusion default postfix main.cf
roles/base/files/postfix/main.cf/main.cf | 7 +++++--
1 files changed, 5 insertions(+), 2 deletions(-)
---
diff --git a/roles/base/files/postfix/main.cf/main.cf b/roles/base/files/postfix/main.cf/main.cf
index 5d152fc..c77ae28 100644
--- a/roles/base/files/postfix/main.cf/main.cf
+++ b/roles/base/files/postfix/main.cf/main.cf
@@ -313,7 +313,7 @@ unknown_local_recipient_reject_code = 550
#relayhost = [mailserver.isp.tld]
#relayhost = uucphost
#relayhost = [an.ip.add.ress]
-relayhost = [mx1.rpmfusion.net]
+relayhost = [smtp-relay]
# REJECTING UNKNOWN RELAY USERS
@@ -353,7 +353,7 @@ relayhost = [mx1.rpmfusion.net]
# address masquerading or other forms of address rewriting including
# username->Firstname.Lastname mapping.
-masquerade_domains = rpmfusion.org
+masquerade_domains = !lists.rpmfusion.org rpmfusion.org
masquerade_exceptions = root apache
# ADDRESS REDIRECTION (VIRTUAL DOMAIN)
@@ -682,6 +682,9 @@ readme_directory = /usr/share/doc/postfix-2.4.5/README_FILES
# add this to new postfix to get it to add proper message-id and other
# headers to outgoing emails via the gateway.
+smtpd_relay_restrictions = permit_mynetworks,
+ permit_sasl_authenticated,
+ reject_unauth_destination
message_size_limit = 20971520
#inet_protocols = ipv4
6 years, 2 months
[ansible] Add update-koji-owner for f29/f30
by Nicolas Chauvet
commit 3e4c3b76a522fbea249b25f4e5feef4c57927509
Author: Nicolas Chauvet <kwizart(a)gmail.com>
Date: Tue Oct 2 17:02:40 2018 +0200
Add update-koji-owner for f29/f30
roles/bodhi2/backend/tasks/main.yml | 2 +-
1 files changed, 1 insertions(+), 1 deletions(-)
---
diff --git a/roles/bodhi2/backend/tasks/main.yml b/roles/bodhi2/backend/tasks/main.yml
index 8ef916f..1c7ceeb 100644
--- a/roles/bodhi2/backend/tasks/main.yml
+++ b/roles/bodhi2/backend/tasks/main.yml
@@ -177,7 +177,7 @@
- name: sync packages from pkgdb2 to koji fedora
cron: name="owner-sync-fedora" minute="7,17,27,37,47,57" user="root"
- job="/usr/local/bin/owner-sync-pkgdb f26-free; /usr/local/bin/owner-sync-pkgdb f26-nonfree; /usr/local/bin/owner-sync-pkgdb f27-free; /usr/local/bin/owner-sync-pkgdb f27-nonfree; /usr/local/bin/owner-sync-pkgdb f28-free; /usr/local/bin/owner-sync-pkgdb f28-nonfree"
+ job="/usr/local/bin/owner-sync-pkgdb f27-free; /usr/local/bin/owner-sync-pkgdb f27-nonfree; /usr/local/bin/owner-sync-pkgdb f28-free; /usr/local/bin/owner-sync-pkgdb f28-nonfree; /usr/local/bin/owner-sync-pkgdb f29-free; /usr/local/bin/owner-sync-pkgdb f29-nonfree; /usr/local/bin/owner-sync-pkgdb f30-free; /usr/local/bin/owner-sync-pkgdb f30-nonfree"
cron_file=update-koji-owner-fedora
when: inventory_hostname.startswith('bodhi-backend01') and env == "production"
tags:
6 years, 2 months