This is already done for the 'sudo' role, but we also have a few more
sudoers files which currently go in unverified.

Signed-off-by: Christian Heusel <christian@heusel.eu>

Arch's postfix 3.9.0-1 package removes support for BDB hash: and btree:
database types, and switches the default to LMDB. [1]

[1] archlinux/packaging/packages/postfix@2ebb2274

jre11-openjdk seems unused as Keycloak has moved to Java 17.

Onboard svartkanin as Support Staff

See merge request !820

Mjolnir does not support Node 20.

The bridge dropped support for Node 18.

add the new repo server

See merge request !819

This was done via the sync-ssh-hostkeys.yml playbook.

Signed-off-by: Christian Heusel <christian@heusel.eu>

As discussed in #531


we want to split the repo and the archive server and as a first step of
that we're commissioning this AX41-NVME server from hetzner to serve as
a future repo host.

Signed-off-by: Christian Heusel <christian@heusel.eu>

archwiki: Update to 1.41.1-2

See merge request !817

Version 1.41.1-2 adds support for the Timeless skin, see
archwiki!71

The 'MonoBook' skin is replaced with 'Timeless' in the configuration
file. MonoBook is quite ugly and legacy skin that should be phased out.
When it is disabled, the skin-specific CSS overrides could be cleaned up
in the archwiki repository.

Also removed outdated comment referring to "internal symbolic names"
that are in a legacy section in the MediaWiki documentation:
https://www.mediawiki.org/wiki/Special:MyLanguage/Manual:$wgDefaultSkin#Legacy_information

E.g. when adding new metrics (from monitoring.al.org) or when people
outside the DevOps team want to improve one of the dashboards.

archwiki: Update to version 1.41.1-1

See merge request !816

Signed-off-by: Christian Heusel <christian@heusel.eu>

Move backup-related variable defaults from the database roles into the
borg_client role. Also check group membership to guard installation of
database backup helper scripts.

Due to the "systemctl is-active foo && backup-foo || true" shorthand,
errors during database dumping were being ignored. Change the MariaDB
section to also be wrapped in a proper if statement. Finally, get rid
of "|| true" silencing statements + enable errexit in helper scripts.

dbscripts: Upgrade to latest commit

See merge request !813

archlinux/dbscripts@cde46716


includes fixes for pacman 6.1

Signed-off-by: David Runge <dvzrv@archlinux.org>

Onboard carsme as Junior Package maintainer

Closes #579

See merge request !815

Fixes #579

Fixes a NOT NULL violation related to Pacman 6.1 dropping MD5 checksums
from repository databases.

Registration has been disabled since 2023-07-09, so the code should have
been updated a long time ago.

Fixes: 4e5550a8 ("Decommission bugs.archlinux.org and replace it with a static copy[1]")

This shell behavior[1] in Bash 5.2 "expands occurrences of '&' in the
replacement string of pattern substitution to the text matched by the
pattern" but we want literal ampersands so escape them.

[1] https://www.gnu.org/software/bash/manual/html_node/The-Shopt-Builtin.html

Make the "Geo Mirrors" dashboard and metrics publicly available

See merge request !809

This may be interesting for our mirror administrators and mirror owners.

I tried backfilling the data, but was unsuccessful, due to a bug[1]. We
may try again if/when the bug is fixed.

[1] https://github.com/prometheus/prometheus/issues/13747

The only variables we want to change are MAKEFLAGS and SRCDEST so
this is a cleaner approach compared to templating the whole file.

pubkeys/eworm: update my actively used keys

See merge request !811

archwiki: Switch notification mail to noreply

Closes #563

See merge request !810

Change this to the noreply mail but also add a wiki tag to it so it can
more easily be filtered in mail programs.

Fixes #563



Signed-off-by: Christian Heusel <christian@heusel.eu>