Add rebuilderd_worker role for repro1.pkgbuild.com

The repro3.pkgbuild.com machine was a packet.net box with an Ubuntu
installation. Now converted to an Arch Linux installation managed by
ansible with a new rebuilderd_worker role.

README.md

@@ -239,8 +239,8 @@ So to set up this server from scratch, run:
 ### reproducible.archlinux.org
 
 #### Services
-  - Runs a master rebuilderd instance two workers:
-    - repro3.pkgbuild.com (packet.net machine which runs Ubuntu)
+  - Runs a master [rebuilderd](docs/rebuilderd.md) instance two workers:
+    - repro1.pkgbuild.com (packet.net Arch Linux box)
 
 ### runner2.archlinux.org
 

docs/ssh-hostkeys.txt

@@ -207,17 +207,6 @@
 256 MD5:15:45:eb:91:69:df:c3:6d:9f:99:b9:13:02:94:a6:ac root@archlinux-packer (ED25519)
 2048 MD5:ca:2f:cf:5c:4d:ec:75:c3:71:76:d6:b7:b9:fa:aa:32 root@archlinux-packer (RSA)
 
-# repro3.pkgbuild.com
-1024 SHA256:TMj3Dtfd3A6F/fJmfN8O/zWIc/6vw9MYD9/X1KzYjlY root@repro3.pkgbuild.com (DSA)
-256 SHA256:OD0gODdNpAI8AvhParH5VeBNnLqzLCfIDe3qXhmKeO8 root@repro3.pkgbuild.com (ECDSA)
-256 SHA256:xH+7wNVlENrsUN+zEwpYaE0quIYNzrv5Wnkda1OMLeY root@repro3.pkgbuild.com (ED25519)
-2048 SHA256:nLn8nuwjiJE7P+55PXcKNP0X/q9YyoijfAipBpumtY8 root@repro3.pkgbuild.com (RSA)
-
-1024 MD5:21:ec:75:2f:fc:85:48:72:c5:a8:8c:dd:af:70:12:32 root@repro3.pkgbuild.com (DSA)
-256 MD5:2f:9b:bc:8b:37:e0:13:b3:8f:70:72:25:a8:16:35:57 root@repro3.pkgbuild.com (ECDSA)
-256 MD5:46:f2:00:34:63:f7:38:e3:f4:cc:13:ea:c5:fd:58:24 root@repro3.pkgbuild.com (ED25519)
-2048 MD5:7d:9d:61:02:73:8a:a1:51:73:ef:b8:b3:fb:d7:72:0f root@repro3.pkgbuild.com (RSA)
-
 # reproducible.archlinux.org
 1024 SHA256:3HoA8rGGureKWKaIZst+Dc6f7yrf3Wfn5PO1HFMl35E root@archlinux-packer (DSA)
 256 SHA256:Yp3GHPq6GZZWUBv13XPiXciAbDFPH4XnEVHzR3/whUw root@archlinux-packer (ECDSA)

docs/ssh-known_hosts.txt

@@ -93,11 +93,6 @@ quassel.archlinux.org ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbm
 quassel.archlinux.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMJ8pFEQOPKxtdHcNkYP/lmF9vrM5ub30Kbeo3SQJ3OI
 quassel.archlinux.org ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPHwHxYNG1vjRiEfoVEa9onPLdUNFdwmrCblc95ALKU+GTCOO8C6gBo2J4w5hB6CABUh4zJn2AbXi1E6YQdGyumfvBhXzpim+wdPtDh/Wrqxl8M06Gk2+YbAS1m0452xsMELodNTPd7HDB0iXDEfEjB02jk7D/KHIVWkKi0wlV3d4WG1M0c5D+MA3zFoYN/EwcRYK120P3dbYzdCwrYi6IdgA/+2g8ALvkAkLEW3uYyIct8kQ/sTLKcKimuyeiYCEn2jviIJjraF2T0U6m+dgfEEBtyITzvP9/3oAflIsgr1LHHVwfhdlbml1LvqPojYpBV2YrE8esmCzhs0a6TWP5
 
-# repro3.pkgbuild.com
-repro3.pkgbuild.com ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBEKBOHaqoJe2r1xsGftqBMUrtxVWkQxKj9lXzGInl9IIghihlOi68GFtDsgOdl8KpIVrPx2qW5j2miJb4sTh9GE=
-repro3.pkgbuild.com ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO1K2RKr7q/4Bf9UiAXsyZmUiebZoxEom6AodDjAD7rv
-repro3.pkgbuild.com ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAm20qT1QYQpDZxqAGzU+V4i3WEAMUynuLwsdVECei/GinUGydAoES5DoTCzImGTt7DDs6Un2i3dFZVvC6aLEYdUZpJs31xB5FcK86qetMMcY0TDD218ACj6VbwYWJARwsNuSKsw3yO26eBzQ9XwroKsy0+UbtC2ZNBR0YUu9KOiroRb22RTyMiBkxQdA8KJn9sgNlKz5Nlir40iemkfa7Bsgy1yKJIp/eL/9d415cnhE+5Rnk0CBYoqn7ctLKE59Tdxy5sSM0zjmLt+EIYaUDDvWyQJQC4qelFYXLmfmRVu5sC9T3oDzbNMWlVrc7c+qruSYGWPvRs95RGG58+TiN
-
 # reproducible.archlinux.org
 reproducible.archlinux.org ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBCs2GNtPdFkb9iiclsKjMvvTygCj1up0rKqhTYSC8GFFWgZtE1lsNjSEiFm9fQ0ihYciUfLWh9TlIsQpmVE33zg=
 reproducible.archlinux.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDjL6uJx0faep1bFH6WdydUJ5YvLAoYpbwXqP7FAYA3y

host_vars/repro3.pkgbuild.com → host_vars/repro1.pkgbuild.com

 ---
-hostname: "repro3.pkgbuild.com"
+hostname: "repro1.pkgbuild.com"
 
 ipv4_address: "147.75.81.79"
 ipv4_netmask: "/31"
@@ -12,3 +12,7 @@ network_interface: "enp1s0f0np0"
 system_disks:
   - /dev/sda
 configure_network: true
+
+rebuilderd_workers:
+ - repro11
+ - repro12

hosts

@@ -13,7 +13,7 @@ u236610.your-storagebox.de
 
 [packet_net]
 runner2.archlinux.org
-repro3.pkgbuild.com
+repro1.pkgbuild.com
 
 [mirrors]
 mirror.pkgbuild.com
@@ -73,7 +73,7 @@ runner2.archlinux.org
 secure-runner1.archlinux.org
 
 [reproduciblebuilds]
-repro3.pkgbuild.com
+repro1.pkgbuild.com
 
 [rebuilderd]
 reproducible.archlinux.org
@@ -106,3 +106,4 @@ dragon.archlinux.org
 bugs.archlinux.org
 gemini.archlinux.org
 luna.archlinux.org
+repro1.pkgbuild.com

playbooks/repro1.pkgbuild.com.yml

+---
+
+- name: setup repro1.pkgbuild.com
+  hosts: repro1.pkgbuild.com
+  remote_user: root
+  roles:
+    - { role: common }
+    - { role: tools }
+    - { role: firewalld }
+    - { role: sshd }
+    - { role: unbound }
+    - { role: root_ssh }
+    - { role: rebuilderd_worker }
+    - { role: prometheus_exporters }
+    - { role: fail2ban }

roles/rebuilderd_worker/tasks/main.yml

+- name: install required packages
+  pacman: name=rebuilderd,archlinux-repro state=present
+
+- name: configure rebuilderd-worker.conf
+  template: src=rebuilderd-worker.conf.j2 dest=/etc/rebuilderd-worker.conf owner=rebuilderd group=rebuilderd mode=0660
+
+- name: create arch repro configuration dir
+  file: path=/etc/archlinux-repro state=directory owner=root group=root mode=0750
+
+- name: install archlinux-repro configuration
+  copy: src=repro.conf dest=/etc/archlinux-repro/repro.conf owner=root group=root mode=0660
+
+- name: enable and start rebuilderd-worker@{{ item }}
+  systemd: name=rebuilderd-worker@{{ item }} enabled=yes state=started
+  with_items: '{{ rebuilderd_workers }}'

tf-stage1/archlinux.tf

@@ -131,16 +131,16 @@ resource "hetznerdns_record" "pkgbuild_com_mirror_aaaa" {
   type    = "AAAA"
 }
 
-resource "hetznerdns_record" "pkgbuild_com_repro3_a" {
+resource "hetznerdns_record" "pkgbuild_com_repro1_a" {
   zone_id = hetznerdns_zone.pkgbuild.id
-  name    = "repro3"
+  name    = "repro1"
   value   = "147.75.81.79"
   type    = "A"
 }
 
-resource "hetznerdns_record" "pkgbuild_com_repro3_aaaa" {
+resource "hetznerdns_record" "pkgbuild_com_repro1_aaaa" {
   zone_id = hetznerdns_zone.pkgbuild.id
-  name    = "repro3"
+  name    = "repro1"
   value   = "2604:1380:2001:4500::1"
   type    = "AAAA"
 }