Decommission Equinix Metal servers at legacy AMS1 DC

Closes #495

See merge request !676

Added hosts:

- repro3.pkgbuild.com
- runner3.archlinux.org
- seoul.mirror.pkgbuild.com
- sydney.mirror.pkgbuild.com

Removed hosts:

- repro1.pkgbuild.com
- runner2.archlinux.org

Equinix's AMS1 DC is being shut down so we need to recreate this box.

For Geo variety, this one is created in Frankfurt instead of Amsterdam.

Ref #495

Equinix's AMS1 DC is being shut down so we need to recreate this box.

Ref #495

Pass --target=i386-pc to grub-install to stick with legacy BIOS boot.

Our partitioning scheme is not suitable for EFI boot.

/etc/motd now contains "OS Rescue Environment" when in rescue mode.

This directory isn't part of the docker package so we need to create it.

aurweb: set receive.fsckobjects to true

See merge request !675

https://git-scm.com/docs/git-config#Documentation/git-config.txt-receivefsckObjects
Related: aurweb#426



Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>

mailman: Patch out CC modification breaking DKIM/DMARC

See merge request !673

The bug[1] would explain all the bounces and unsubscriptions, so patch
it manually until upstream gets it sorted.

[1] https://gitlab.com/mailman/mailman/-/issues/636

Follow-up to merge request !671.

Give Leonidas full DevOps access

See merge request !671

We've been seeing CPU spikes that a single vCPU can't handle, resulting
in alerts about high CPU usage. Let's try two cores to see how they do.

Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>

Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>

See merge request !670

Ref #491

This alert only triggers for america.mirror.pkgbuild.com. Ideally, we
should be able to increase the trigger point for high-bandwidth boxes.
I don't see a straightforward way to implement it, so disable for now.

This reverts commit fd28fffb.

Ref #489

For the upcoming "Git packaging sources"[1], we need a shadow copy of
repos.archlinux.org we can test stuff on (Ansible roles, packaging
workflow etc.). We still have repos-git.archlinux.org, but that box is
more of a POC box allocated to anthraxx for his MRs related to the git
migration.

More details on how the box was setup can be found in[2]. Only the
terraform code is committed to the master branch, as it is annoying
having the server in the state without the corresponding IaC code
comitted.

This was deployed Fri Dec 16 01:10:15 2022 +0100.

[1] https://lists.archlinux.org/archives/list/arch-dev-public@lists.archlinux.org/thread/YKKYBXQL62U5RTYIRI2NT2I3EG7V63HT/
[2] !665

Fix #479

See merge request !656

Decommission patchwork.archlinux.org and replace it with a static copy[1]

Closes #487

See merge request !668

As announced on the mailing list[2] pacman has been migrated to gitlab
and there is no real use for patchwork left, so it can be
decommissioned. A static copy[1] is kept around for the time being to
avoid link rot.

[1] https://gitlab.archlinux.org/archlinux/patchwork-archive
[2] https://lists.archlinux.org/archives/list/arch-dev-public@lists.archlinux.org/message/7B6R5HVEC67U7B2VQ3SKUVXU4RDCRRMM/

Fix #487

The arch-boxes images now default to Geo mirrors and no longer ship
reflector, so we don't have to disable reflector-init or update the
mirrorlist.

We currently have 23G of debug packages and soon expect quite a bit more
since the debug option is being enabled by default in devtools 20230105.

Keycloak is apparently sending over 4k worth of response headers under
some circumstances (maybe when the client sends a stale cookie?), which
causes Nginx to return a 502 error and log "upstream sent too big header
while reading response header from upstream". This is likely also
related to this upstream issue[1]. So bump the buffer to 8k.

[1] https://github.com/keycloak/keycloak/issues/16181