terraform: add junior packager groups and roles for core/extra

See merge request archlinux/infrastructure!674

Leonidas Spyropoulos authored 2 years ago and Levente Polyak committed 1 year ago

Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>

Add "noqa no-changed-when" tags to handlers using the command module.
Perhaps it is wrong of ansible-lint to flag these, since handlers are
not the best place to have conditional execution.

[1] https://github.com/keycloak/keycloak/pull/15746

Fix #501

terraform: update uptimerobot to a different provider

See merge request archlinux/infrastructure!689

https://blog.uptimerobot.com/december-2022-we-are-introducing-sub-users-and-new-plans/



Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>

archwiki: upgrade to 1.39.2-1

See merge request archlinux/infrastructure!694

The credentials are stored in $HOME/.ia instead of $HOME/.config/ia.ini.

Also update the repo URL to point to our GitLab.

Also stop using oauth_auto_login and switch to provider specific
auto_login option.

Offboard kkeen as TU

See merge request archlinux/infrastructure!691

aurweb: update to 6.2.2

See merge request archlinux/infrastructure!692

Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>

It's incompatible with Keycloak 21.

Re-enabling of metrics is tracked in #499.

[1] https://github.com/aerogear/keycloak-metrics-spi/issues/155

Add yan12125 to multilib group

See merge request archlinux/infrastructure!690

common: smartd.conf: disable long self-tests

Closes #498

See merge request archlinux/infrastructure!687

The disks on gemini show increased write latency every now and then,
and this appears to correlate with when long self-tests are running.

Fixes #498

Chonky packages are chonky. The extra 25G should last us 6-12 months.

Add jail for http users

See merge request archlinux/infrastructure!683

Jelle van der Waa authored 2 years ago and Jelle van der Waa committed 2 years ago

Currently the tracker is hammered by a scraper which causes high load if
we don't actually ban the user.

tasks/upgrade-servers: upgrade Keycloak box first

Closes #496

See merge request archlinux/infrastructure!685

matrix.archlinux.org doesn't like it when accounts.archlinux.org is
unavailable at start-up. Try to work around this by upgrading
accounts.archlinux.org first and doing a health check before proceeding
to update the rest of the servers.

Fixes: #496

90 seconds isn't enough time for keycloak's ExecStartPre cmd to finish.

Enabling debug packages by default has resulted in more debug packages.

Nobody could have foreseen this.

flyspray: add removed packages script

See merge request archlinux/infrastructure!681

Jelle van der Waa authored 2 years ago and Jelle van der Waa committed 2 years ago

This script goes through all open bugs in the Arch Linux and Community
tracker and extracts the packagename from "[$pkgname]" and tries match
it to the list of packages in the repo. If there is no match the package
is assumed to be dropped from the repo and printed.

This script will give false positives, but not enough which requires
some extra filtering.

When debuginfod processes big debug packages it can run out of memory
and get killed. Then, it gets restarted by systemd only to OOM again.

Let's try doubling the memory to ~4G.

Onboard pitastrudl as support staff (mirror admin)

See merge request archlinux/infrastructure!679

Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>

Liberally add "noqa no-changed-when" tags to the problematic tasks,
except for two "systemd-tmpfiles --create" calls. For these we can
simply include the creates= parameter in the command module's call.

Leonidas Spyropoulos authored 2 years ago and Evangelos Foutras committed 2 years ago

Convert the permissions to strings to avoid octal interpretation.

Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>