commit 96fa07e9a521b91b3df71db2faf3e40215f4d692
Author: Nicolas Chauvet <kwizart(a)gmail.com>
Date: Thu Apr 4 15:38:53 2019 +0200
Refresh koji hub options
roles/koji_hub/templates/hub.conf.j2 | 13 ++++++++-----
1 files changed, 8 insertions(+), 5 deletions(-)
---
diff --git a/roles/koji_hub/templates/hub.conf.j2 b/roles/koji_hub/templates/hub.conf.j2
index 07c5ed8..b88bd11 100644
--- a/roles/koji_hub/templates/hub.conf.j2
+++ b/roles/koji_hub/templates/hub.conf.j2
@@ -12,7 +12,9 @@ DBPass = {{ armkojiPassword }}
{% endif %}
KojiDir = /mnt/koji
MemoryWarnThreshold = 10000
-MaxRequestLength = 83886080
+MaxRequestLength = 167772160
+RLIMIT_AS = 10737418240
+CheckClientIP = False
## SSL client certificate auth configuration ##
#note: ssl auth may also require editing the httpd config (conf.d/kojihub.conf)
@@ -64,13 +66,12 @@ DisableNotifications = False
#Plugins = koji-disable-builds-plugin
#Plugins = darkserver-plugin
-#Plugins = fedmsg-koji-plugin runroot_hub hub_containerbuild
-Plugins = runroot_hub
-#
+Plugins = runroot_hub hub_containerbuild
{% if inventory_hostname.startswith('koji') %}
[policy]
+
tag =
has_perm secure-boot && package kernel shim grub2 fedora-release fedora-repos
pesign :: allow
package kernel shim grub2 fedora-release fedora-repos pesign :: deny
@@ -89,7 +90,9 @@ tag =
channel =
method createrepo :: use createrepo
- has req_channel :: req
+ method createdistrepo :: use createrepo
+ method buildContainer :: use powerbuilder
+ has req_channel && has_perm customchannel :: req
is_child_task :: parent
# Policy to move build to powerfull builders
source */chromium-* :: use powerbuilder