Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>

Kevin Morris authored 2 years ago and Leonidas Spyropoulos committed 2 years ago

This commit brings in four new routes to nginx:
- /archives/metadata.git
- /archives/users.git
- /archives/pkgbases.git
- /archives/pkgnames.git

See https://gitlab.archlinux.org/archlinux/aurweb/-/blob/master/doc/git-archive.md



For now, we will be updating the repositories once every 10 minutes.

Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>
Co-signed by:  Kevin Morris <kevr@0cost.org>

This avoids triggering a GitLab push rule which rejects files that look
like secrets.

Required for poetry 1.2 until #1917 is fixed

https://github.com/python-poetry/poetry/issues/1917



Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>

Fixes: 26f289b7 ("Capitalize the first letter of all task names")

This might be a bug in ansible-lint 6.5.0, but it appears to ignore all
our 'skip_ansible_lint' tags. Fix this by replacing them with noqa tags.

ansible-lint 6.5.0 complains about:

  name: All names should start with an
        uppercase letter. (name[casing])

"poetry run" is very slow[1] and adds +1 second to the startup time.
This is made even worse by the fact that aurweb-git-serve is called
twice by sshd[2].

[1] https://github.com/python-poetry/poetry/issues/3502
[2] https://security.stackexchange.com/questions/123795/authorizedkeyscommand-of-sshd-config-getting-called-twice/123801#123801

This is meant as a extra "backup" and as another way for our users to
fetch PKGBUILDs from the AUR. It also allows the community to create
their own (perhaps better) "AUR" API/database as all essential data is
now available (this + [2]).

At the monent this is experimental and we aren't committing to keeping
it around.

[1] https://github.com/archlinux/aur
[2] http://aur.archlinux.org/packages-meta-ext-v1.json.gz

These are used to signal the start of the document in a stream of many
documents. As Ansible only supports one YAML document per file this is
unnecessary. About a third of our YAML documents already lacked these.

As reported by ansible-lint 6.2.1:

schema: [{'PYTHONPATH': '.'}] is not of type 'object' (schema[tasks])
roles/aurweb/tasks/main.yml:1

schema: [{'SHELL': '/bin/bash'}] is not of type 'object' (schema[tasks])
roles/dbscripts/tasks/main.yml:1

Kevin Morris authored 3 years ago and Kristian Klausen committed 2 years ago

Without this, we update while services are still running, and those
services depend on the AUR directory state. This commit installs
services much earlier, downs all of them, deploys out updates, then
starts them all again at the end.

Signed-off-by: Kevin Morris <kevr@0cost.org>

Kevin Morris authored 3 years ago and Kristian Klausen committed 3 years ago

Signed-off-by: Kevin Morris <kevr@0cost.org>

[1] aurweb!233

Set the aurweb_location configuration so aur-dev emails have the correct
links in the registration url. Add new dependencies to the aurweb role
for the aurweb-notify script to be able to run on the pu branch.

The TU-Bylaws page is now deployed as gitlab page, making all of this
unrequired, the permanent redirect can stay for a while but the wiki is
already updated.

yaml: truthy value should be one of [false, true] (truthy)
yaml: wrong indentation: expected 4 but found 2 (indentation)
yaml: too few spaces before comment (comments)
yaml: missing starting space in comment (comments)
yaml: too many blank lines (1 > 0) (empty-lines)
yaml: too many spaces after colon (colons)
yaml: comment not indented like content (comments-indentation)
yaml: no new line character at the end of file (new-line-at-end-of-file)
load-failure: Failed to load or parse file
parser-error: couldn't resolve module/action 'hosts'. This often indicates a misspelling, missing collection, or incorrect module path.

According to 'doc/maintenance.txt' the usermaint service needs to be
every 2 hours. To remove the last login IP address of all users that did
not login for 7 days.

Closes: #106

With creates: once the aur python module is initially deployed it and
it's console-scripts will never be updated. To update the
console-scripts when the git repository is updated or when a major
Python update is done. As figuring out if a major Python update is done
we simply check if the python module is importable.

Fixes: #164

Jakub Klinkovský authored 4 years ago and Sven-Hendrik Haase committed 4 years ago

The original command does not work due to an import error.

Added python-alembic to the package list and also running initdb.py for creating
the tables when the database is created and alembic update when there's changes to
the code.

The wip/aur branch was not checked for linting issues. Some of them were fixed,
but, particularly the git commands for setting the AUR repo, were skipped, because
the git module does not necessarily cover all the needs. Might be worth taking a look
about it on the future.

Added support for the aurweb role to the new openssh include mechanism,
that's baked into our sshd role.

Add memcached to the playbook and also change the php extensions to use memcached.
Removed the apcu options from defatuls and added memcached settings. Added the php-memcached
packages to the list of needed packages and also remove the apcu tasks. Added the memcached
systemd unit file and enable and start it from the tasks.

Since git is installed on a separate step, remove it from the main list.

Added a smartgit_socket option to the defaults. Reworked the tasks package
installation to look cleaner and also separated the cgit and git package installations
so we can trigger uwsgi reloads on updates. Changed the tubylaws repo update variable
to trigger the bylaws changes only when the tubylaws repository change, not the aurweb
one. Added tasks to install the apcu configuration, cgit uwsgi ini file, cgit rc file and
smartgit uwsgi ini file. Trigger an uwsgi reload in case the cgit-aurweb or git packages
change. Also added a few missing options to the aurweb configuration file. Rework the nginx
configuration file to use the cgit and smartgit uwsgi services.

Since the AUR has its own maintenance mode, there is no need for using the
maintenance role, so it was removed. Added a check on the aurweb config file
that checks for the maintenance variable and uses the variable for allowing
the ip address of the person running the playbook to access the AUR.

playboooks/aur-dev: Remove the intl php extension

Added maintenance mode to the aurweb role using the AUR internal mode. Also,
add the php-apcu-bc package to the list of required packages. Also running the
make required to create the translations.

We have reworked the entire tasks file to do an actual AUR installation.

To make things consistent, rename the role to aurweb.

Jelle van der Waa authored 7 years ago and Giancarlo Razzolini committed 4 years ago

The ansible role for the Arch User Repository.

Thanks-to: Eli Schwartz <eschwartz@archlinux.org>