There is no need to split up partitioning into per-partition tasks.
Use long options for readability.

Use an uppercase LABEL to avoid a warning from mkfs.fat:

    mkfs.fat: Warning: lowercase labels might not work properly on some systems

Use something other than "efi" as the label since some firmware do not
like it. While this is not really an issue for Arch infrastructure, since
there is zero change that this will be run on any MSI hardware with its
broken firmware, it is best to simply folow the wiki anyway. See
https://wiki.archlinux.org/title/EFI_system_partition#Firmware_does_not_see_the_EFI_directory

sgdisk does not align the partition size/end by default. The
`-I`/`--align-end` option needs to be used to enable alignment. See
https://wiki.archlinux.org/title/Advanced_Format#Partition_alignment

Additionally use the partition names (PARTLABELs) that gdisk and cgdisk
set (but sgdisk doesn't) and follow the Discoverable Partitions
Specification by useing the appropriate partition for the root partition.
See https://wiki.archlinux.org/title/Partitioning#Single_root_partition

It is unclear why this was added, as we can just use the default lock
file path (/var/run/rsyncd.lock). Using a non-default path was not added
in the offending commit, but remove it in this revert commit
nevertheless, so the commit can be reverted.

This reverts commit e4e07516.

[1] c55b448c ("Add GitLab Pages for pacman")

Fixes: c55b448c ("Add GitLab Pages for pacman")

This is by far our most popular endpoint and some folks hit us with one
request per 5 seconds which leads to 6GB of daily traffic. Rate limit
them the same as broken RSS readers.

In reality the uwsgi endpoint gets hit with only 1 request on a normal
page load so 20 requests is way to lenient.

Robin Candau authored 9 months ago and Robin Candau committed 9 months ago

> 2024/06/02 11:05:53 \[warn\] 30324#30324: the "listen ... http2" directive is deprecated, use the "http2" directive instead

Fixes archlinux/infrastructure#589

Signed-off-by: Christian Heusel <christian@heusel.eu>

Robin Candau authored 9 months ago and Christian Heusel committed 9 months ago

Trusted Users have been renamed to Package Maintainers (rfcs!7 (diffs))

pacman-contrib recently moved fakeroot to optional dependencies.

Install pantalaimon with `--no-deps` so that we can upgrade matrix-nio
for compatibility with Python 3.12, even though pantalaimon specifies
`<0.21`. This requires listing all packages to be installed, gathered
via `pip freeze`.

Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>

This way the commit hash for "MediaWiki" in
https://wiki.archlinux.org/title/Special:Version is clickable.

Signed-off-by: Christian Heusel <christian@heusel.eu>

nullglob + loop so the service doesn't fail if there are no
 /home/*/.cache/offload-build directories (slightly less efficient
 that one find call, but seems safer also in regards to ARG_MAX)
-mindepth 1 so it doesn't try to delete .cache/offload-build for users
 without any recent builds
no verbose output from rm command, otherwise we'll get 500k log lines
 the first time it runs (calculated around 75G of old tmp directories)

Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>
Co-authored-by: Evangelos Foutras <evangelos@foutras.com>

related to #531



Co-authored-by: Kristian Klausen <kristian@klausen.dk>
Signed-off-by: Christian Heusel <christian@heusel.eu>

2024.05.01 and later images are using Zstandard compression.

The archbuild script actually tries to preserve several other
environment variables, but preserving LOGDEST is specifically needed for
archlinux/devtools!220

This is already done for the 'sudo' role, but we also have a few more
sudoers files which currently go in unverified.

Signed-off-by: Christian Heusel <christian@heusel.eu>

Arch's postfix 3.9.0-1 package removes support for BDB hash: and btree:
database types, and switches the default to LMDB. [1]

[1] archlinux/packaging/packages/postfix@2ebb2274

jre11-openjdk seems unused as Keycloak has moved to Java 17.

Mjolnir does not support Node 20.

The bridge dropped support for Node 18.

Version 1.41.1-2 adds support for the Timeless skin, see
archwiki!71

The 'MonoBook' skin is replaced with 'Timeless' in the configuration
file. MonoBook is quite ugly and legacy skin that should be phased out.
When it is disabled, the skin-specific CSS overrides could be cleaned up
in the archwiki repository.

Also removed outdated comment referring to "internal symbolic names"
that are in a legacy section in the MediaWiki documentation:
https://www.mediawiki.org/wiki/Special:MyLanguage/Manual:$wgDefaultSkin#Legacy_information

E.g. when adding new metrics (from monitoring.al.org) or when people
outside the DevOps team want to improve one of the dashboards.