commit 96fa07e9a521b91b3df71db2faf3e40215f4d692 Author: Nicolas Chauvet <kwizart(a)gmail.com&gt; Date: Thu Apr 4 15:38:53 2019 +0200 Refresh koji hub options roles/koji_hub/templates/hub.conf.j2 | 13 ++++++++----- 1 files changed, 8 insertions(+), 5 deletions(-) --- diff --git a/roles/koji_hub/templates/hub.conf.j2 b/roles/koji_hub/templates/hub.conf.j2 index 07c5ed8..b88bd11 100644 --- a/roles/koji_hub/templates/hub.conf.j2 +++ b/roles/koji_hub/templates/hub.conf.j2 @@ -12,7 +12,9 @@ DBPass = {{ armkojiPassword }} {% endif %} KojiDir = /mnt/koji MemoryWarnThreshold = 10000 -MaxRequestLength = 83886080 +MaxRequestLength = 167772160 +RLIMIT_AS = 10737418240 +CheckClientIP = False ## SSL client certificate auth configuration ## #note: ssl auth may also require editing the httpd config (conf.d/kojihub.conf) @@ -64,13 +66,12 @@ DisableNotifications = False #Plugins = koji-disable-builds-plugin #Plugins = darkserver-plugin -#Plugins = fedmsg-koji-plugin runroot_hub hub_containerbuild -Plugins = runroot_hub -# +Plugins = runroot_hub hub_containerbuild {% if inventory_hostname.startswith('koji') %} [policy] + tag = has_perm secure-boot && package kernel shim grub2 fedora-release fedora-repos pesign :: allow package kernel shim grub2 fedora-release fedora-repos pesign :: deny @@ -89,7 +90,9 @@ tag = channel = method createrepo :: use createrepo - has req_channel :: req + method createdistrepo :: use createrepo + method buildContainer :: use powerbuilder + has req_channel && has_perm customchannel :: req is_child_task :: parent # Policy to move build to powerfull builders source */chromium-* :: use powerbuilder