This brings it in line with the non-JSON "reduced" log format.

Ensure all the nameservers serving the geo.mirror.pkgbuild.com subzone
are working and respond with a valid resource record to A/AAAA queries.

Makes prometheus.yml less noisy and doesn't break when non-vhost
mappings are added to blackbox_targets.

Make sure lists are indented correctly and enable lstrip_blocks to get
consistent indendation of lines inside Jinja blocks.

Monitoring just geo.mirror.pkgbuild.com would only monitor the mirror
returned for that geographical area, with this commit we monitor all the
potential returned mirrors.

Co-authored-by: Evangelos Foutras <evangelos@foutrelis.com>

Fix #443

This is needed so we can provide stable links for libosinfo (used by
gnome-boxes, virt-install and virt-manager for easy installation).

Potentially useful to quickly know which mirror we're talking to.

Using paccache for this which keeps up to 3 versions per package, and
also instructing it to keep any packages accessed in the past 2 weeks.

On some build failures, or perhaps when rebooting the boxes while a
build is ongoing, repro chroots can be left behind taking up space.

Add a service with a daily timer to remove week old chroots.

Fixes: 9f65f99c ("Add GeoIP domain for our sponsored mirros")

We don't want mirror.pkgbuild.com's DNS server to be a
single-point-of-failure, so this commit adds multiple authoritative DNS
servers for the zone. The extra DNS servers are run on the geomirror
servers.

The _acme-challenge zone, used for obtaining certificates, is run solely
on mirror.pkgbuild.com's DNS server, to avoid syncing DNS records
between the servers (KISS).

We want the GeoIP databases to be ready for use by software installed
by dependant roles; run geoipupdate when it's installed or configured.

We had a GeoIP mirror in the past based on nginx and its GeoIP module,
but it didn't perform very well, due to the high latency (asking a
central server for the package and then redirected to the closest
mirror).

One of the reasons for offering this service, is so we can relieve
mirror.pkgbuild.com which is burning a ton of traffic (50TB/month),
likely due to it being the default mirror in our Docker image. Another
reason is so we can offer a link to our arch-boxes images in libosinfo
(used by gnome-boxes, virt-install and virt-manager), with good enough
performance for most users.

This time we take a different approach and use a DNS based solution,
which means the latency penalty is only paid once (the first DNS
request). The downside is that the mirrors must have a valid certificate
for the same domain name, which makes using third-party mirrors a
challenge. So for now, we are just using the sponsored mirorrs
controlled by the DevOps team.

Fix #101

It's on github not gitlab

With the PHP->Python port done[1][2], there isn't much need for aur-dev
anynmore. Most things can also be tested locally and aur-dev haven't got
any love since the port (ex: allowing the aurweb maintainers to deploy
without asking DevOps).

[1] https://lists.archlinux.org/pipermail/aur-general/2022-February/036786.html
[2] !525

Changing it to 770 so prometheus memcached exporter can connect to it.

Changing it to 770 so prometheus memcached exporter can connect to it.

archwiki/templates/LocalSettings.php.j2: place the commands in the QuestyCaptcha question inside <code> tags

This makes it more easier to distinguish the command from the rest of the text.

Thorben Günther authored 3 years ago and Kristian Klausen committed 2 years ago

Fix #364

Kevin Morris authored 3 years ago and Kristian Klausen committed 2 years ago

Without this, we update while services are still running, and those
services depend on the AUR directory state. This commit installs
services much earlier, downs all of them, deploys out updates, then
starts them all again at the end.

Signed-off-by: Kevin Morris <kevr@0cost.org>

Amin Vakil authored 3 years ago and Kristian Klausen committed 2 years ago

Creates a systemd service which executes these commands on first boot:

pacman-key --init

pacman-key --populate archlinux

Also it makes sure /etc/pacman.d/gnupg is not absent.

At last it removes /etc/machine-id to make sure systemd launches first
boot services.

nl6720 authored 3 years ago and Jelle van der Waa committed 2 years ago

Various files in /extensions/ need to be accessible for extensions to work.

Based on example from https://www.mediawiki.org/wiki/Manual:Short_URL/Nginx.

Fixes #355.

nl6720 authored 2 years ago and Kristian Klausen committed 2 years ago

Upstream security and maintenance release.
https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/thread/YJNXKPV5Z56NSUQ4G3SXPDUIZG5EQ7UR/

Jelle van der Waa authored 3 years ago and Levente Polyak committed 2 years ago

Signed-off-by: Levente Polyak <anthraxx@archlinux.org>

- Create packer builder in FSN1 and change image to ubuntu-20.04
- Add "use_proxy: false" to provisioner config to work around [1]
- Reduce the size of the BIOS boot partition to 1M (from 10M) [2]
- Update bootstrap_version to 2022.03.01

[1] https://github.com/hashicorp/packer-plugin-ansible/issues/69
[2] https://www.gnu.org/software/grub/manual/grub/html_node/BIOS-installation.html

During the migration to Quarkus distribution we switched to the
packaged version of the theme (keycloak-archlinux-theme).

This reverts commit 9d169a5b.

The relevant fixes have been included in systemd 250.4-2.

The intention of "unique" in "groups['buildservers'] | sort | unique"
was to account for combining multiple groups and passing them to the
sort and unique filters. However, with only one group it looks silly.

There is a need for build servers to never build against outdated repo
databases, even with syncrepo providing a local mirror that is updated
every minute. To that effect, we adjust mirrorlist on build servers so
the first mirror is the tier0 mirror provided by gemini.

Keep the syncrepo role on build servers in order to have a local cache
of packages and avoid concurrent build jobs downloading the same files
causing them to be corrupted.

Finally, configure gemini to use its own repos (like other mirrors do).