Signed-off-by: Christian Heusel <christian@heusel.eu>

Signed-off-by: Christian Heusel <christian@heusel.eu>

When there was an error i.e. with the image verification the loopdev
variable was unbound in the cleanup function. We fix this by defining
the variable as empty.

Signed-off-by: Christian Heusel <christian@heusel.eu>

Signed-off-by: Christian Heusel <christian@heusel.eu>

Jakub Klinkovský authored 1 year ago and Christian Heusel committed 1 year ago

Related to #557

Related to #550
Related to #551

Fixes: 4e5550a8 ("Decommission bugs.archlinux.org and replace it with a static copy[1]")
Signed-off-by: Christian Heusel <christian@heusel.eu>

This feature is needed for the static copy of bugs.a.o[2], to redirect
some of the migrated tasks to the new gitlab URLs.

[1] https://docs.gitlab.com/ee/user/project/pages/redirects.html#domain-level-redirects
[2] https://gitlab.archlinux.org/archlinux/bugs-archive/-/blob/snapshots/_redirects

As announced[2][3] the bugtracker has been migrated to gitlab, so
bugs.a.o can be decommissioned and replaced with a static copy[1](to
avoid link rot).

[1] https://gitlab.archlinux.org/archlinux/bugs-archive/
[2] https://archlinux.org/news/bugtracker-migration-to-gitlab-completed/
[3] https://lists.archlinux.org/hyperkitty/list/arch-dev-public@lists.archlinux.org/thread/WYXDTJ3TR2DWRQCDZK44BQDH67IDVGTS/

Fix #550
Fix #551

Since Gitlab causes high email traffic, apply the same rule as for the
aur by adding the sasl_username for gitlab to the no limits list.

Fix #564

Doesn't make sense to split these; the notifications are unnecessary.

fixes #560



Signed-off-by: Christian Heusel <christian@heusel.eu>

Jakub Klinkovský authored 1 year ago and Christian Heusel committed 1 year ago

- The /index.php? rule disallows all URLs with this prefix, so using
  longer prefixes does not make sense.
- Allow indexing of the Help: namespace which contains relevant text.
- Keep the intention of disallowing special namespaces, including the
  File: alias for Image: and using the /title/ path and colon separator
  for the namespace prefix.

https://phabricator.wikimedia.org/T353985



Signed-off-by: Christian Heusel <christian@heusel.eu>

This also switches from Extension:NativeSVGHandler to the now builtin
$wgSVGNativeRendering which was introduced in version 1.41.0.

Signed-off-by: Christian Heusel <christian@heusel.eu>

It needs to match Prometheus' scrape_interval setting, so
$__rate_interval does not drop below the minimum interval.

Fixes the following error logged to the journal:

> prometheus-mysqld-exporter[2247]: ts=2023-12-24T13:16:45.938Z
> caller=exporter.go:173 level=error msg="Error from scraper"
> scraper=slave_status target=localhost:3306 err="Error 1227 (42000):
> Access denied; you need (at least one of) the SLAVE MONITOR privilege(s)
> for this operation"

[1] https://github.com/prometheus/mysqld_exporter/issues/640

Grafana complains otherwise:

logger=provisioning.dashboard type=file name=default
t=2023-12-23T21:25:35.96456815Z level=error msg="failed to save dashboard"
file=/var/lib/grafana/dashboards/dashboards/archive.json
error="Unique identifier needed to be able to get a dashboard"

The format of the MySQL user credentials has been slightly changed:
https://github.com/prometheus/mysqld_exporter/releases/tag/v0.15.0

Our custom Keycloak theme[2] must be updated to use the new account
console[3] which will be handled later.

[1] https://www.keycloak.org/2023/04/keycloak-2110-released#_experimental_account_console_version_3
[2] https://gitlab.archlinux.org/archlinux/keycloak-archlinux-theme
[3] https://gitlab.archlinux.org/archlinux/keycloak-archlinux-theme/-/blob/238889fb36d512f0baa328fad00531ef53c14c1f/lib/src/main/resources/theme/archlinux/account/theme.properties#L1

Fixes: 140b9acd ("tf-stage2: Add an arch specific question for signing up to reduce spam")

Fixes: 98f20948 ("fluxbb: update the navbar url from bugs to gitlab")
Signed-off-by: Christian Heusel <christian@heusel.eu>