install_arch: align partition end, update root partition type, partition labels and ESP volume label

See merge request !830

There is no need to split up partitioning into per-partition tasks.
Use long options for readability.

Use an uppercase LABEL to avoid a warning from mkfs.fat:

    mkfs.fat: Warning: lowercase labels might not work properly on some systems

Use something other than "efi" as the label since some firmware do not
like it. While this is not really an issue for Arch infrastructure, since
there is zero change that this will be run on any MSI hardware with its
broken firmware, it is best to simply folow the wiki anyway. See
https://wiki.archlinux.org/title/EFI_system_partition#Firmware_does_not_see_the_EFI_directory

sgdisk does not align the partition size/end by default. The
`-I`/`--align-end` option needs to be used to enable alignment. See
https://wiki.archlinux.org/title/Advanced_Format#Partition_alignment

Additionally use the partition names (PARTLABELs) that gdisk and cgdisk
set (but sgdisk doesn't) and follow the Discoverable Partitions
Specification by useing the appropriate partition for the root partition.
See https://wiki.archlinux.org/title/Partitioning#Single_root_partition

The server was created on 2023-05-27 with tf and announced the next
day[1]. It is becoming annoying to keep a unstaged change around, so new
tf changes can be deployed, so let's just commit the change.

[1] #257 (comment 96721)

It is unclear why this was added, as we can just use the default lock
file path (/var/run/rsyncd.lock). Using a non-default path was not added
in the offending commit, but remove it in this revert commit
nevertheless, so the commit can be reverted.

This reverts commit e4e07516.

[1] c55b448c ("Add GitLab Pages for pacman")

Fixes: c55b448c ("Add GitLab Pages for pacman")

Fixes #591

Signed-off-by: Christian Heusel <christian@heusel.eu>

Fixes #592

Signed-off-by: Christian Heusel <christian@heusel.eu>

archweb: tweak our rate limits

See merge request !834

This is by far our most popular endpoint and some folks hit us with one
request per 5 seconds which leads to 6GB of daily traffic. Rate limit
them the same as broken RSS readers.

In reality the uwsgi endpoint gets hit with only 1 request on a normal
page load so 20 requests is way to lenient.

Switch to http2 directive in nginx configs

Closes #589

See merge request !833

Robin Candau authored 9 months ago and Robin Candau committed 9 months ago

> 2024/06/02 11:05:53 \[warn\] 30324#30324: the "listen ... http2" directive is deprecated, use the "http2" directive instead

Fixes #589

Onboard bertptrs as Junior Package Maintainer

Closes #587

See merge request !831

Fixes #587

Signed-off-by: Christian Heusel <christian@heusel.eu>

Rename 'Trusted Users' to 'Package Maintainers' in pkgbuild.com homepage

See merge request !832

Robin Candau authored 9 months ago and Christian Heusel committed 9 months ago

Trusted Users have been renamed to Package Maintainers (rfcs!7 (diffs))

pacman-contrib recently moved fakeroot to optional dependencies.

Install pantalaimon with `--no-deps` so that we can upgrade matrix-nio
for compatibility with Python 3.12, even though pantalaimon specifies
`<0.21`. This requires listing all packages to be installed, gathered
via `pip freeze`.

aurweb: release 6.2.10

See merge request !829

Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>

Requested by Allan on IRC (-devops).

archwiki: LocalSettings.php: add gitlab.archlinux.org to wgGitRepositoryViewers

See merge request !825

This way the commit hash for "MediaWiki" in
https://wiki.archlinux.org/title/Special:Version is clickable.

Signed-off-by: Christian Heusel <christian@heusel.eu>

Fixes #582



Signed-off-by: Christian Heusel <christian@heusel.eu>

archbuild: delete offload build directories not just artifacts

See merge request !823

nullglob + loop so the service doesn't fail if there are no
 /home/*/.cache/offload-build directories (slightly less efficient
 that one find call, but seems safer also in regards to ARG_MAX)
-mindepth 1 so it doesn't try to delete .cache/offload-build for users
 without any recent builds
no verbose output from rm command, otherwise we'll get 500k log lines
 the first time it runs (calculated around 75G of old tmp directories)

Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>
Co-authored-by: Evangelos Foutras <evangelos@foutras.com>

prepare the split of repo and archive server

See merge request !824