Ref #439

Fix #446

gitlab: Disable built-in monitoring

See merge request !440

Thorben Günther authored 3 years ago and Kristian Klausen committed 2 years ago

Fix #364

aurweb: down services before updating

See merge request !537

Kevin Morris authored 3 years ago and Kristian Klausen committed 2 years ago

Without this, we update while services are still running, and those
services depend on the AUR directory state. This commit installs
services much earlier, downs all of them, deploys out updates, then
starts them all again at the end.

Signed-off-by: Kevin Morris <kevr@0cost.org>

Pacman keyring init

Closes #383

See merge request !493

Amin Vakil authored 3 years ago and Kristian Klausen committed 2 years ago

Creates a systemd service which executes these commands on first boot:

pacman-key --init

pacman-key --populate archlinux

Also it makes sure /etc/pacman.d/gnupg is not absent.

At last it removes /etc/machine-id to make sure systemd launches first
boot services.

Access to homedir is opt-in for support staff.

Fix #447

archwiki/templates/nginx.d.conf.j2: fix access to MediaWiki extension assets

Closes #355

See merge request !548

nl6720 authored 2 years ago and Jelle van der Waa committed 2 years ago

Various files in /extensions/ need to be accessible for extensions to work.

Based on example from https://www.mediawiki.org/wiki/Manual:Short_URL/Nginx.

Fixes #355.

archwiki: Update to 1.37.2-1

See merge request !549

nl6720 authored 2 years ago and Kristian Klausen committed 2 years ago

Upstream security and maintenance release.
https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/thread/YJNXKPV5Z56NSUQ4G3SXPDUIZG5EQ7UR/

Add diffutils needed for "terraform fmt --check --diff".

Jelle van der Waa authored 2 years ago and Levente Polyak committed 2 years ago

Signed-off-by: Levente Polyak <anthraxx@archlinux.org>

archwiki: Update to 1.37.1-5

See merge request !547

Update packer build and use smaller BIOS boot partition

See merge request !546

- Create packer builder in FSN1 and change image to ubuntu-20.04
- Add "use_proxy: false" to provisioner config to work around [1]
- Reduce the size of the BIOS boot partition to 1M (from 10M) [2]
- Update bootstrap_version to 2022.03.01

[1] https://github.com/hashicorp/packer-plugin-ansible/issues/69
[2] https://www.gnu.org/software/grub/manual/grub/html_node/BIOS-installation.html

keycloak: migrate to Quarkus distribution

See merge request !544

During the migration to Quarkus distribution we switched to the
packaged version of the theme (keycloak-archlinux-theme).

To be determined if we want to implement this rule.

This reverts commit 9d169a5b.

The relevant fixes have been included in systemd 250.4-2.

The intention of "unique" in "groups['buildservers'] | sort | unique"
was to account for combining multiple groups and passing them to the
sort and unique filters. However, with only one group it looks silly.

Use tier0 mirror on build servers

See merge request !543

There is a need for build servers to never build against outdated repo
databases, even with syncrepo providing a local mirror that is updated
every minute. To that effect, we adjust mirrorlist on build servers so
the first mirror is the tier0 mirror provided by gemini.

Keep the syncrepo role on build servers in order to have a local cache
of packages and avoid concurrent build jobs downloading the same files
causing them to be corrupted.

Finally, configure gemini to use its own repos (like other mirrors do).

Some users scrape our git endpoint with quite some requests per second
(32) this is not something cgit/smartgit can handle and has caused the
AUR to go down once (http 502).

Re-enable when all servers have been upgraded to systemd 251.

Order and exact values copied from the CF example in resolved.conf.

tf-stage1: standardize on TTL 3600 for DNS records

See merge request !542