We are running short on storage and don't really need 3 months of log,
so reduce it to 2 months instead of expanding the disk.

commit 100dbb8781d780d35ad0569222bcda3ef85bbe0a upstream.

Without this fix all the Prometheus dashboards failed loading data with:
"Error updating options: origin not allowed".

[1] https://github.com/grafana/grafana/issues/45117#issuecomment-1033842787

Kevin Morris authored 3 years ago and Evangelos Foutras committed 3 years ago

[foutrelis: add vault variables described in !532]

Signed-off-by: Kevin Morris <kevr@0cost.org>
Signed-off-by: Evangelos Foutras <evangelos@foutrelis.com>

No need to duplicate the logs from /srv/gitlab/logs/.

Making 'kernel.yama.ptrace_scope' more strict by setting it to '2'
causes failures in elfutils' test suite. While tentatively helpful
on other servers, it seems kind of unnecessary for a build server.

Fixes: #424 (to be reopened though, if more restrictions are found)

It previously used mountpoint="/rootfs" which didn't match any mounts.

Also fix HostOutOfInodes and tweak HostDiskWillFillIn24Hours slightly.

The two secrets: vault_aurweb_{secret,postmaster}

Kevin Morris authored 3 years ago and Kristian Klausen committed 3 years ago

Signed-off-by: Kevin Morris <kevr@0cost.org>

Kevin Morris authored 3 years ago and Kristian Klausen committed 3 years ago

To call these externally, poetry run must be used. This
patch brings in some wrappers that call `poetry run`
within `{{ aurweb_dir }}`.

Signed-off-by: Kevin Morris <kevr@0cost.org>

Kevin Morris authored 3 years ago and Kristian Klausen committed 3 years ago

Signed-off-by: Kevin Morris <kevr@0cost.org>

Change storage box size from 10000 to 10240 GiB.

Using GitLab's official backup tool takes too much time and, more
importantly, space; /srv/gitlab is a bit over 430G but backing it
up nearly exhausts its 1TB volume.

As we're creating btrfs snapshots and backing those up with borg, it
seems unnecessary to also create tarballs of the same data. GitLab's
documentation mentions snapshots as a viable backup strategy, and to
the restored system it should seem like recovering from a power loss.

[1] https://docs.gitlab.com/ee/raketasks/backup_restore#alternative-backup-strategies

The sponsored mirrors have a ton of storage, but mirror.pkgbuild.com
doesn't, so debug packages aren't synced to it.

[1] {america,asia,europe}.mirror.pkgbuild.com

Morten Linderud authored 3 years ago and Kristian Klausen committed 3 years ago

Signed-off-by: Morten Linderud <morten@linderud.pw>

Morten Linderud authored 3 years ago and Kristian Klausen committed 3 years ago

Signed-off-by: Morten Linderud <morten@linderud.pw>

A dashboard will be added at a later date.

Morten Linderud authored 3 years ago and Kristian Klausen committed 3 years ago

Displays packages

https://debuginfod.archlinux.org/packages/



Signed-off-by: Morten Linderud <morten@linderud.pw>

Morten Linderud authored 4 years ago and Kristian Klausen committed 3 years ago

Signed-off-by: Morten Linderud <morten@linderud.pw>

Morten Linderud authored 4 years ago and Kristian Klausen committed 3 years ago

Signed-off-by: Morten Linderud <morten@linderud.pw>

Leonidas Spyropoulos authored 3 years ago and Frederik Schwan committed 3 years ago

Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>

PHP7 will likely be removed from the repos soon[1]. Time to upgrade! :)

[1] https://archlinux.org/todo/php-7-retiredment/

Without this change, "Search for pages containing" doesn't work.

It has been killed by systemd-oomd a few times recently and we don't
want to start it manually every time it happens.