- May 09, 2022
-
-
Leonidas Spyropoulos authored
Signed-off-by:
Leonidas Spyropoulos <artafinde@gmail.com>
-
Evangelos Foutras authored
Bash histories indicate this isn't being used anywhere other than {build,gemini}.archlinux.org and gemini's filelist is so big that locate becomes so slow that it's practically useless on this box.
-
Evangelos Foutras authored
-
Evangelos Foutras authored
-
- May 08, 2022
-
-
Evangelos Foutras authored
-
- May 07, 2022
-
-
Kristian Klausen authored
Onboard artafinde as Junior DevOps Closes #452 See merge request !567
-
Kristian Klausen authored
artafinde is our new newest Junior DevOp[1] and will get access to: * monitoring.al.org: for setting up gitlab-exporter[1] * gitlab.al.org: for setting up gitlab-exporter[1] * dashboards.al.org: in case he wants to do more monitoring related stuff [1] https://lists.archlinux.org/pipermail/arch-devops/2022-May/000558.html [2] https://gitlab.archlinux.org/artafinde/gitlab-exporter/ Fix #452
-
Evangelos Foutras authored
Move highly sensitive secrets to new "super" vault See merge request !565
-
Evangelos Foutras authored
-
Evangelos Foutras authored
- group_vars/all/vault_mariadb.yml: remove 'zabbix' database user - misc/vaults/additional-credentials.vault: remove zabbix irc bot - roles/dbscripts/tasks/main.yml: drop unused tier0 mirror access
-
Evangelos Foutras authored
-
Evangelos Foutras authored
The idea bebind this is to be able to give vault access to new DevOps members without giving away more important credentials like Hetzner's.
-
Evangelos Foutras authored
These were previously removed temporarily and re-created several minutes later during the process of deploying archusers to gemini.archlinux.org.
-
Evangelos Foutras authored
Add additional pubkey for dvzrv See merge request archlinux/infrastructure!568
-
David Runge authored
pubkeys/dvzrv.pub: Add pubkey based on auth subkey of PGP key `1793DAD5D803A8FFD7451697BB992F9864FAD168`.
-
- May 04, 2022
-
-
Jan Alexander Steffens (heftig) authored
-
Jan Alexander Steffens (heftig) authored
-
- Apr 29, 2022
-
-
Evangelos Foutras authored
geomirror: leverage LUA records for failover+GeoIP See merge request archlinux/infrastructure!563
-
Evangelos Foutras authored
In an effort to stay consistent with the TTL used for the archlinux.org and pkgbuild.com NS records, as well as slightly improve lookup latency.
-
Evangelos Foutras authored
PowerDNS provides a neat way to implement GeoIP-based redirection and automatic failover. With GeoLite2-City database, it is able to select the closest mirror from a list of IPs we provide. Every 60 seconds it also checks if the mirror's HTTPS URL is working as expected; if that check fails, it stops giving it out (this acts as automatic failover).
-
- Apr 28, 2022
-
-
Jan Alexander Steffens (heftig) authored
archbuild: Distribute CPU and IO resources equally among users See merge request archlinux/infrastructure!564
-
- Apr 27, 2022
-
-
Jan Alexander Steffens (heftig) authored
-
Jan Alexander Steffens (heftig) authored
archbuild: Turn off Git's safe.directory See merge request archlinux/infrastructure!561
-
Jan Alexander Steffens (heftig) authored
Without this setting, Git exits with an error when the repository is not owned by the current user. This messes with our shared srcdest.
-
- Apr 26, 2022
-
-
Evangelos Foutras authored
Packer bootstrap tweaks See merge request archlinux/infrastructure!562
-
Evangelos Foutras authored
-
Evangelos Foutras authored
-
Evangelos Foutras authored
-
- Apr 23, 2022
-
-
Evangelos Foutras authored
New hcloud adds protection fields to servers, volumes and floating IPs.
-
- Apr 22, 2022
-
-
Jelle van der Waa authored
-
- Apr 20, 2022
-
-
Evangelos Foutras authored
Since we are now using the local disk instead of a volume (which can be scaled up easily) it helps to have a more consistent view of free space.
-
Evangelos Foutras authored
All database user passwords have been updated to use scram-sha-256, so there's no need for backward compatibility with md5.
-
Evangelos Foutras authored
-
Evangelos Foutras authored
Also remove the suggestion to call delete_old_cluster.sh; it's now being created under /tmp and it only contains a command to remove the old data directory. (We can do the latter ourselves after some time has passed.)
-
Evangelos Foutras authored
Ensure the correct version is installed and matches $FROM_VERSION.
-
Evangelos Foutras authored
-
Evangelos Foutras authored
Commit 8f113698b63b15a4e0a4b15d3ee37238c1d1821d upstream: Remove analyze_new_cluster script from pg_upgrade Since this script just runs vacuumdb anyway, remove the script and replace the instructions to run it with instructions to run vacuumdb directly.
-
Evangelos Foutras authored
Not much point in vimdiff'ing pg_hba.conf and postgresql.conf.
-
Evangelos Foutras authored
Adapt upgrade_pg.sh to avoid manipulating /var/lib/postgres' structure as the postgres user. Instead, create a new empty data directory owned by postgres for initdb to use.
-
Evangelos Foutras authored
postgres: rebase config to postgresql 14.2-1 See merge request archlinux/infrastructure!560
-