This reverts commit 9d169a5b.

The relevant fixes have been included in systemd 250.4-2.

The intention of "unique" in "groups['buildservers'] | sort | unique"
was to account for combining multiple groups and passing them to the
sort and unique filters. However, with only one group it looks silly.

There is a need for build servers to never build against outdated repo
databases, even with syncrepo providing a local mirror that is updated
every minute. To that effect, we adjust mirrorlist on build servers so
the first mirror is the tier0 mirror provided by gemini.

Keep the syncrepo role on build servers in order to have a local cache
of packages and avoid concurrent build jobs downloading the same files
causing them to be corrupted.

Finally, configure gemini to use its own repos (like other mirrors do).

Some users scrape our git endpoint with quite some requests per second
(32) this is not something cgit/smartgit can handle and has caused the
AUR to go down once (http 502).

Re-enable when all servers have been upgraded to systemd 251.

Order and exact values copied from the CF example in resolved.conf.

Keeps us from having to deal with .pacnew files.

Fixes these display counters which were tied to aur.archlinux.org:

- Uptime
- RootFS Total
- RAM Total
- SWAP Total

Also add a decimal point to the latter two fields.

No changes made to it; this is to reduce noise in future modifications.

Kind of sensitive information that doesn't need to be available to all
hosts.

Kristian Klausen authored 3 years ago and Jelle van der Waa committed 3 years ago

https://github.com/jenkins-x-charts/grafana-dashboard/pull/5
Kristian Klausen (2):
      loki: Use rate() for both loki_distributor_ingester_{appends,failure}_total
      loki: Fix panel title not starting with a capital letter

Jelle van der Waa authored 3 years ago and Jelle van der Waa committed 3 years ago

Make nginx serve static assets to offload gunicorn as for example
loading the home page is making 7 static requests out of 8 requests in
total. Set caching headers for now for 7 days, so browsers don't request
ideally this would be 30 days but let's keep it 7 days for now.

We don't have any state for dashboards.archlinux.org we want to persist,
so to avoid any stale data in the database, start with a new empty
in-memory database every time Grafana starts.

It has been on dashboards.archlinux.org for a few weeks.

We are running short on storage and don't really need 3 months of log,
so reduce it to 2 months instead of expanding the disk.

commit 100dbb8781d780d35ad0569222bcda3ef85bbe0a upstream.

Without this fix all the Prometheus dashboards failed loading data with:
"Error updating options: origin not allowed".

[1] https://github.com/grafana/grafana/issues/45117#issuecomment-1033842787

Kevin Morris authored 3 years ago and Evangelos Foutras committed 3 years ago

[foutrelis: add vault variables described in !532]

Signed-off-by: Kevin Morris <kevr@0cost.org>
Signed-off-by: Evangelos Foutras <evangelos@foutrelis.com>

No need to duplicate the logs from /srv/gitlab/logs/.

Making 'kernel.yama.ptrace_scope' more strict by setting it to '2'
causes failures in elfutils' test suite. While tentatively helpful
on other servers, it seems kind of unnecessary for a build server.

Fixes: #424 (to be reopened though, if more restrictions are found)

It previously used mountpoint="/rootfs" which didn't match any mounts.

Also fix HostOutOfInodes and tweak HostDiskWillFillIn24Hours slightly.