1
1
Fork 0
mirror of https://gitlab.archlinux.org/archlinux/infrastructure.git synced 2024-04-28 03:15:00 +02:00
Commit Graph

42 Commits

Author SHA1 Message Date
Kristian Klausen 8a7e85f70c
Promote gromit to full DevOps
Fix #573
2024-02-22 22:51:08 +01:00
Kristian Klausen 5cd5fd42c0
Offboard grazzolini as DevOps
Fix #566
2024-02-10 19:52:08 +01:00
Kristian Klausen 4e5550a877
Decommission bugs.archlinux.org and replace it with a static copy[1]
As announced[2][3] the bugtracker has been migrated to gitlab, so
bugs.a.o can be decommissioned and replaced with a static copy[1](to
avoid link rot).

[1] https://gitlab.archlinux.org/archlinux/bugs-archive/
[2] https://archlinux.org/news/bugtracker-migration-to-gitlab-completed/
[3] https://lists.archlinux.org/hyperkitty/list/arch-dev-public@lists.archlinux.org/thread/WYXDTJ3TR2DWRQCDZK44BQDH67IDVGTS/

Fix #550
Fix #551
2024-02-10 17:07:38 +01:00
Christian Heusel ea44bdb93e
Give gromit access to the build server
related to https://gitlab.archlinux.org/archlinux/infrastructure/-/merge_requests/787

Signed-off-by: Christian Heusel <christian@heusel.eu>
2024-01-06 20:00:02 +01:00
Jan Alexander Steffens (heftig) 8e8fe2c5ee
README, root_access: Mention how to reencrypt when using TOFU 2023-12-28 00:23:12 +01:00
Evangelos Foutras 49339d5666
Fix filename for heftig's new key in root_access
The new key is under pubkeys/heftig_nitrokey.pub, and pubkeys/heftig.pub
was renamed to pubkeys/heftig_yubikey.pub. Update root_ssh_keys to refer
to "heftig_nitrokey.pub" as "heftig.pub" does not exist anymore.

Fixes: 13a4bddf0d ("pubkeys/heftig: Add my new Nitrokey, reorganize")
2023-12-28 01:15:45 +02:00
Evangelos Foutras 0d0c512eab
Re-encrypt vault passwords with heftig's new key
Follow-up to merge request archlinux/infrastructure!786. New key is
already trusted by four master keys in archlinux-keyring 20231222-1.

https://gitlab.archlinux.org/archlinux/archlinux-keyring/-/issues/254
2023-12-28 00:56:32 +02:00
Kristian Klausen fc87beb5af
Give gromit access to gitlab.archlinux.org
So he can help updating gitlab.
2023-12-13 23:19:12 +01:00
Christian Heusel 83498bf16f
Give gromit access to the archmanweb server
In the context of the bugmigration the navbar of this service has to be
redeployed for which I request access to this service.

related to: https://gitlab.archlinux.org/archlinux/infrastructure/-/merge_requests/776
Signed-off-by: Christian Heusel <christian@heusel.eu>
2023-11-28 14:22:59 +01:00
Kristian Klausen c216752047
Onboard gromit as Junior DevOps
gromit is our newest Junior DevOps[1] and will get access to:
* bugs.archlinux.org: for helping with the bug migration
* wiki.archlinux.org: for helping with (archwiki) maintenance

[1] https://lists.archlinux.org/archives/list/arch-devops@lists.archlinux.org/message/2LAOGIVY33MZLBZCDSQHDQVQNEULLUTW/

Fix #543
2023-10-21 21:05:56 +02:00
Evangelos Foutras 236b2ac28e
Give Leonidas full DevOps access 2023-01-30 08:07:17 +02:00
Kristian Klausen 893a95f329
Kill the mailman2 server and put the mailman3 server in its place
With the final lists migrated to mailman3[1], the mailman2 server can
finally be killed.

When the mailman3 server was initially setup[2], it was done on a
separate server because the mailman and mailman3 packages conflicted,
and the traffic was routed over wireguard (HTTP, LMTP and SMTP).

Instead of installing mailman3 on the original lists.al.org server and
transferring the data, it was easier just to install the missing pieces
(basically Postfix and adjusting the Nginx configuration) on the ml3
server and move the IPs (to keep the IP mail reputation).

So basically the following was done:
- The IPs for the original lists.al.org was moved to the mailman3.al.org
  server
- The mailman2 datadir was transferred to mailman3.al.org server, so we
  can keep the pipermail links alive, and import missing mails if needed
- The original lists.al.org server was decommissioned
- The mailman3.al.org server was renamed to lists.al.org
- The missing pieces was added to the mailman3 role (basically Postfix +
  Nginx adjustments)
- The mailman role was deleted and the mailman3 role renamed to mailman

[1] 75ac7d09 ("mailman: Fourth and final batch of mailman3 migrated lists")
[2] 9294828f ("Setup mailman3 server")

Fix #59
2022-09-28 21:04:41 +02:00
Kristian Klausen ad04da88e0
pubkeys: Merge klausenbusk's keys into a single file
They should never have been in two files.

Fixes: 98704c48 ("root_ssh: Add additional SSH key for klausenbusk")
2022-09-10 19:10:34 +02:00
Evangelos Foutras f45c7dfdae
Give artafinde access to the AUR server
Recently added to the aurweb project as Developer, access to the server
hosting the AUR should provide him more opportunity for troubleshooting.
2022-08-01 16:51:50 +03:00
Kristian Klausen b151af1e0d
Give artafinde access to the mailman servers
artafinde wants to help with the mailman3 migration[1], so give him
access to the mailman servers.

[1] https://gitlab.archlinux.org/archlinux/infrastructure/-/issues/59
2022-06-22 21:18:42 +02:00
Evangelos Foutras a9e0790f53
Remove the three dashes from all YAML documents
These are used to signal the start of the document in a stream of many
documents. As Ansible only supports one YAML document per file this is
unnecessary. About a third of our YAML documents already lacked these.
2022-06-08 14:35:45 +03:00
Kristian Klausen 4c6203e727
Onboard artafinde as Junior DevOps
artafinde is our new newest Junior DevOp[1] and will get access to:
* monitoring.al.org: for setting up gitlab-exporter[1]
* gitlab.al.org: for setting up gitlab-exporter[1]
* dashboards.al.org: in case he wants to do more monitoring related
  stuff

[1] https://lists.archlinux.org/pipermail/arch-devops/2022-May/000558.html
[2] https://gitlab.archlinux.org/artafinde/gitlab-exporter/

Fix #452
2022-05-07 18:41:05 +02:00
Evangelos Foutras b4d60ae2f6
Move highly sensitive secrets to new "super" vault
The idea bebind this is to be able to give vault access to new DevOps
members without giving away more important credentials like Hetzner's.
2022-05-07 17:45:19 +03:00
Kristian Klausen 98704c4893 root_ssh: Add additional SSH key for klausenbusk
He has too many smartcards!
2021-06-02 18:45:01 +02:00
Sven-Hendrik Haase 06cd2e06a5
Give Kristian full DevOps access 2021-06-02 16:21:50 +02:00
Sven-Hendrik Haase d2b110d250 Add dashboards.archlinux.org for public Grafana dashboards
Co-authored-by: Kristian Klausen <kristian@klausen.dk>
2021-05-13 23:28:01 +02:00
Kristian Klausen f57830bd84 Give klausenbusk root access to runner{1,2}.al.org 2021-05-12 11:36:22 +02:00
Kristian Klausen b696716b1d Give klausenbusk root access to {bugs,monitoring}.al.org
klausenbusk is our new newest Junior DevOp and he needs some access:
* bugs.al.org for helping with migrating Flyspray tasks to GitLab
* monitoring.al.org for setting up centralized logging
2021-04-09 19:49:58 +00:00
Kristian Klausen ea9f114de1 root_ssh: Support giving root access to only some hosts 2021-04-09 19:49:58 +00:00
Kristian Klausen 4112bdf9fd Make ansible-lint happy
yaml: truthy value should be one of [false, true] (truthy)
yaml: wrong indentation: expected 4 but found 2 (indentation)
yaml: too few spaces before comment (comments)
yaml: missing starting space in comment (comments)
yaml: too many blank lines (1 > 0) (empty-lines)
yaml: too many spaces after colon (colons)
yaml: comment not indented like content (comments-indentation)
yaml: no new line character at the end of file (new-line-at-end-of-file)
load-failure: Failed to load or parse file
parser-error: couldn't resolve module/action 'hosts'. This often indicates a misspelling, missing collection, or incorrect module path.
2021-02-14 14:22:05 +01:00
Sven-Hendrik Haase 3f9a91b978
Give freswa full DevOps access 2020-11-15 15:22:15 +01:00
Jelle van der Waa cea22895a4 Retire barthalion as devops 2020-08-30 00:58:21 +00:00
Jelle van der Waa 0e9b17b45e Retire Bluewind as devops 2020-08-30 00:58:21 +00:00
Jelle van der Waa b07bd06886
Retire fukawi as devops
https://lists.archlinux.org/pipermail/arch-devops/2020-June/000424.html
2020-07-08 18:20:54 +02:00
Jan Alexander Steffens (heftig) 9590a6484f
root_access: Replace my GPG key 2020-05-20 03:58:31 +02:00
Jelle van der Waa 919a6d4bba Add url to fukawi2's pubkey 2020-05-02 01:06:30 +02:00
Sven-Hendrik Haase 16e101871b
Add note about having all keys lsigned before trying to reencrypt the vault 2019-10-10 23:52:43 +02:00
Sven-Hendrik Haase 28f8cf4ee8
Retire seblu and pierre 2019-10-10 23:48:50 +02:00
Giancarlo Razzolini dfca3dad4e
root_access: Add anthraxx to the root access file. 2019-09-12 17:41:14 -03:00
Jelle van der Waa 8264b976d4 revoke seblu's root access 2019-08-14 09:50:11 +02:00
Jelle van der Waa 2422fa8093 group_vars: remove thomas from sudoers 2019-05-06 16:14:51 +02:00
Giancarlo Razzolini f397362dd8
root_access: For some reason, after all this time, still did not had sudo access. 2019-04-14 18:11:27 -03:00
Florian Pritz ed51f84f7d
Remove allan from wheel group
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2019-02-10 22:23:47 +01:00
Florian Pritz 2ec6c3adf6 Give Pierre full root access
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2019-02-10 15:32:18 +01:00
Florian Pritz cb46185a7f Document what to run when root_access variables are changed
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2019-02-10 15:32:18 +01:00
Florian Pritz 6d4c3dee5f
root_access: Sort lists
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2019-02-10 15:12:37 +01:00
Florian Pritz 8b8abd3d83
Rename group_vars/root_pubkeys to root_access
This better reflects the content (sudo wheel access + root login).

Signed-off-by: Florian Pritz <bluewind@xinu.at>
2019-02-10 15:07:49 +01:00