1
1
Fork 0
mirror of https://gitlab.archlinux.org/archlinux/infrastructure.git synced 2024-05-07 02:16:02 +02:00
Commit Graph

226 Commits

Author SHA1 Message Date
Evangelos Foutras d58b875b06
Update build.archlinux.org info (DX182 -> AX162-R)
New server; same CPU and RAM as previous one, hopefully more stable.
2024-05-03 19:59:23 +03:00
Kristian Klausen 4e5550a877
Decommission bugs.archlinux.org and replace it with a static copy[1]
As announced[2][3] the bugtracker has been migrated to gitlab, so
bugs.a.o can be decommissioned and replaced with a static copy[1](to
avoid link rot).

[1] https://gitlab.archlinux.org/archlinux/bugs-archive/
[2] https://archlinux.org/news/bugtracker-migration-to-gitlab-completed/
[3] https://lists.archlinux.org/hyperkitty/list/arch-dev-public@lists.archlinux.org/thread/WYXDTJ3TR2DWRQCDZK44BQDH67IDVGTS/

Fix #550
Fix #551
2024-02-10 17:07:38 +01:00
Christian Heusel 7bfce43262
add the new build server 2024-01-19 23:16:55 +01:00
Kristian Klausen 3a555a1a10
Provision workers (servers) for the buildbot POC
Requested by @anthraxx 👀

The servers have been configured with the common and firewalld roles.
2024-01-19 22:24:54 +01:00
Kristian Klausen a3b753108f
Remove accidentally added Fastly backed subdomain
It was not supposed to go in the commit and it will be added at later
date, when it is ready(ish).

Fixes: 122eb202 ("Add dedicated Fastly billing account")
2023-12-31 02:12:47 +01:00
Kristian Klausen 122eb202d9
Add dedicated Fastly billing account 2023-12-09 19:53:40 +01:00
Kristian Klausen 1576ee7027
Add GitHub Pages for archinstall[1]
I don't expect more GitHub Pages to be set up, so using a explict
resource instead of abstracting it, is fine I think.

[1] https://github.com/archlinux/archinstall/issues/2098
2023-11-22 20:46:56 +01:00
Kristian Klausen 02960645de
Rename tu-bylaws.aur.a.o to package-maintainer-bylaws.aur.a.o
The role has been renamed[1], so rename the bylaw subdomain.

tu-bylaws.aur.a.o will be kept around for some time redirecting to
package-maintainer-bylaws.aur.a.o.

[1] https://gitlab.archlinux.org/archlinux/rfcs/-/merge_requests/7

Ref #533
2023-10-16 00:33:20 +02:00
Kristian Klausen b2ffb068a7
Create sandbox DNS zone
The VMs created in the Hetzner cloud sandbox project must be accessible
with a DNS name. This creates a dedicated DNS zone for this purpose.

For now this zone will only be used by the aurweb project, so it can
create DNS records for the VMs it creates. This is needed so the dynamic
created environment can be accessed over HTTPS.

[1] https://docs.gitlab.com/ee/ci/review_apps/
2023-08-19 22:02:21 +02:00
Kristian Klausen 4d43045b42
Setup bugbuddy server for upcoming bugbuddy tool
Bugbuddy is the upcoming tool for assigning package bugs to the proper
folks. The bugbuddy role will be created at a later date when the tool
is ready.
2023-08-13 23:46:23 +02:00
Evangelos Foutras c6cd385b31
tf-stage1: drop maybe obsolete g2kjxsblac7x CNAME
We are not sure where this CNAME was originally used. DNS records were
transferred to Terraform sometime in 2020 so we lack history for them.
2023-08-07 00:01:45 +03:00
Kristian Klausen 653f8011db
Add GitLab Pages for alpm-types[1]
[1] https://gitlab.archlinux.org/archlinux/alpm/alpm-types/-/issues/36
2023-07-10 17:35:48 +02:00
Giancarlo Razzolini dbaee79ee5 Redirect status to the non CNAME version for now
Until we get our situation with uptimerobot fixed, we are redirecting
status.archlinux.org to the standard uptimerobot URL, that is provided
with their free plan. Once/if we re-gain our premium access, we can
simply revert this MR.
2023-06-29 19:21:36 +00:00
Leonidas Spyropoulos b892c0e8f1
geomirror: new uk based mirror sponsored from jump.net.uk
Initial setup bootstrapped from arch-boxes repo [1], default user 'arch'
removed after.

https://gitlab.archlinux.org/archlinux/arch-boxes/-/jobs/157024/artifacts/browse/output

Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>
2023-06-22 08:26:11 +01:00
Evangelos Foutras 61abfb9a07
tf-stage1: fix archlinux.tf formatting
With rsync.sandbox being gone from archlinux_org_cname, the indentation
needs to be adjusted.
2023-05-28 13:04:54 +03:00
Evangelos Foutras ae827fd6c8
tf-stage1: remove git repos experimental servers
This has moved to production.
2023-05-28 12:52:53 +03:00
Kristian Klausen ae53da3568
Setup OpenSearch server for GitLab's advanced search feature[1]
GitLab is configured to use OpenSearch from its admin panel[2].

[1] https://docs.gitlab.com/ee/user/search/advanced_search.html
[2] https://docs.gitlab.com/ee/integration/advanced_search/elasticsearch.html#enable-advanced-search

Fix #159
2023-05-24 19:04:26 +02:00
Evangelos Foutras b0dff74234
tf-stage1: define primary IPv{4,6} for all servers
New feature by Hetzner, primary IPs are a way to manage addresses
assigned to each cloud server. This allows having IPv6-only boxes.
2023-05-07 15:25:13 +03:00
Evangelos Foutras d1acbf9513
tf-stage1: update hcloud provider to 1.38.2
Newer = better.
2023-05-07 13:04:47 +03:00
Leonidas Spyropoulos eaff95a8b4
gitlab: move gitlab to bare metal host
Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>
2023-05-06 21:23:29 +01:00
Kristian Klausen 5fbf3652f9
Move GitLab's container registry to a dedicated domain (registry.al.org)
It looks more professional and we can move it to a dedicated box if the
load increases.
2023-04-02 16:57:39 +02:00
Evangelos Foutras 9222e8d4d3
Grow debuginfod volume from 100G to 125G
Chonky packages are chonky. The extra 25G should last us 6-12 months.
2023-03-03 20:35:12 +02:00
Evangelos Foutras 0bb74a4ae7
Grow debuginfod volume from 50G to 100G
Enabling debug packages by default has resulted in more debug packages.

Nobody could have foreseen this.
2023-02-24 21:25:54 +02:00
Evangelos Foutras c366ae0793
Scale up debuginfod to CX21 (for more RAM)
When debuginfod processes big debug packages it can run out of memory
and get killed. Then, it gets restarted by systemd only to OOM again.

Let's try doubling the memory to ~4G.
2023-02-21 19:35:11 +02:00
Evangelos Foutras 9338663fce
Replace runner2 with runner3 (with the same specs)
Equinix's AMS1 DC is being shut down so we need to recreate this box.

For Geo variety, this one is created in Frankfurt instead of Amsterdam.

Ref #495
2023-02-11 17:28:19 +02:00
Evangelos Foutras 6a55c9009f
Replace repro1 with repro3 (same CPU, 32G->64G RAM)
Equinix's AMS1 DC is being shut down so we need to recreate this box.

Ref #495
2023-02-11 16:48:58 +02:00
Evangelos Foutras 20ce0d8d73
Scale up debuginfod to CPX11
We've been seeing CPU spikes that a single vCPU can't handle, resulting
in alerts about high CPU usage. Let's try two cores to see how they do.
2023-01-28 09:17:17 +02:00
Kristian Klausen 28cf3aa375
Provision shadow copy of repos for testing git packaging
For the upcoming "Git packaging sources"[1], we need a shadow copy of
repos.archlinux.org we can test stuff on (Ansible roles, packaging
workflow etc.). We still have repos-git.archlinux.org, but that box is
more of a POC box allocated to anthraxx for his MRs related to the git
migration.

More details on how the box was setup can be found in[2]. Only the
terraform code is committed to the master branch, as it is annoying
having the server in the state without the corresponding IaC code
comitted.

This was deployed Fri Dec 16 01:10:15 2022 +0100.

[1] https://lists.archlinux.org/archives/list/arch-dev-public@lists.archlinux.org/thread/YKKYBXQL62U5RTYIRI2NT2I3EG7V63HT/
[2] https://gitlab.archlinux.org/archlinux/infrastructure/-/merge_requests/665

Fix #479
2023-01-12 23:55:03 +01:00
Kristian Klausen 24e73359c6
Decommission patchwork.archlinux.org and replace it with a static copy[1]
As announced on the mailing list[2] pacman has been migrated to gitlab
and there is no real use for patchwork left, so it can be
decommissioned. A static copy[1] is kept around for the time being to
avoid link rot.

[1] https://gitlab.archlinux.org/archlinux/patchwork-archive
[2] https://lists.archlinux.org/archives/list/arch-dev-public@lists.archlinux.org/message/7B6R5HVEC67U7B2VQ3SKUVXU4RDCRRMM/

Fix #487
2023-01-08 22:10:49 +01:00
Evangelos Foutras 9c183fb48d
Grow debuginfod volume from 25G to 50G
We currently have 23G of debug packages and soon expect quite a bit more
since the debug option is being enabled by default in devtools 20230105.
2023-01-06 01:40:37 +02:00
Evangelos Foutras 0f8ef2c479
Add GitLab Pages for "rfc"
Ref: https://gitlab.archlinux.org/archlinux/rfcs/-/merge_requests/15
2022-11-17 22:29:27 +02:00
Evangelos Foutras 39bcf629f0
tf-stage1: version bump of terraform providers
- hcloud: 1.34.3 -> 1.35.2
- hetznerdns: 2.1.0 -> 2.2.0
2022-10-29 15:36:25 +03:00
Kristian Klausen 893a95f329
Kill the mailman2 server and put the mailman3 server in its place
With the final lists migrated to mailman3[1], the mailman2 server can
finally be killed.

When the mailman3 server was initially setup[2], it was done on a
separate server because the mailman and mailman3 packages conflicted,
and the traffic was routed over wireguard (HTTP, LMTP and SMTP).

Instead of installing mailman3 on the original lists.al.org server and
transferring the data, it was easier just to install the missing pieces
(basically Postfix and adjusting the Nginx configuration) on the ml3
server and move the IPs (to keep the IP mail reputation).

So basically the following was done:
- The IPs for the original lists.al.org was moved to the mailman3.al.org
  server
- The mailman2 datadir was transferred to mailman3.al.org server, so we
  can keep the pipermail links alive, and import missing mails if needed
- The original lists.al.org server was decommissioned
- The mailman3.al.org server was renamed to lists.al.org
- The missing pieces was added to the mailman3 role (basically Postfix +
  Nginx adjustments)
- The mailman role was deleted and the mailman3 role renamed to mailman

[1] 75ac7d09 ("mailman: Fourth and final batch of mailman3 migrated lists")
[2] 9294828f ("Setup mailman3 server")

Fix #59
2022-09-28 21:04:41 +02:00
Evangelos Foutras 29aaed2bd0
syncriscv: add role for mirroring the RISC-V port
Going to be served by all our Geo boxes under riscv.mirror.pkgbuild.com.
2022-09-16 22:22:43 +03:00
Kristian Klausen 661a22375f
tf-stage1: Move WKD subdomains to the archlinux-keyring project
The WKD logic has been moved to the archlinux-keyring project[1][2].

[1] https://gitlab.archlinux.org/archlinux/archlinux-keyring/-/merge_requests/166
[2] https://gitlab.archlinux.org/archlinux/archlinux-keyring/-/merge_requests/169
2022-09-02 19:12:25 +02:00
Evangelos Foutras 19ee76d74c
geo_dns: support geo domains with subset of hosts
Useful if we wanted to create a Geo-based archive consisting of machines
in the archive_mirrors group (though this will likely not happen because
it'd break archlinux-repro due to the ~4 hour sync delay).
2022-08-21 04:44:46 +03:00
Kristian Klausen 2c4a2c3789
tf-stage1: Remove not working aur4 subdomain
aur4 was apparently some kind of "new aur" hosted on luna, which is long
gone.

Fixes: 79f7d599 ("Goodbye luna")
2022-08-11 20:23:50 +02:00
Kristian Klausen aec13ec3ab
Provision server for repos-git POC
anthraxx wants some infra for a repos-git POC, so let's give it to him!

The server has been configured with the common and firewalld role, but
is unmanaged.
2022-08-11 20:18:35 +02:00
Evangelos Foutras eb2d54bbce
Re-enable asia.mirror.pkgbuild.com for Geo duties
Its disks were migrated to a new server (prompted by an unsolvable issue
with the previous box's network interface; might have been a mobo issue).
2022-08-01 15:53:22 +03:00
Evangelos Foutras 8e6ee780f8
tf-stage1: update hcloud provider to 1.34.3
Brings support for managing Primary IPs.
2022-07-18 13:01:39 +03:00
Evangelos Foutras 034acc666a
tf-stage1: add state.archlinux.org to machines
There's a bit of a chicken and egg situation here but it's preferable to
manage the server's attributes the same way as all of the cloud servers.
2022-07-18 12:51:02 +03:00
Evangelos Foutras 1050ebc2d8
tf-stage1: sort machine entries by hostname 2022-07-18 12:24:13 +03:00
Evangelos Foutras 434753d853
Update GitLab verification code for archlinux.page 2022-07-18 09:54:09 +03:00
Evangelos Foutras b6675db5e6
Add new mirrors in Seoul and Sydney 2022-07-10 12:42:15 +03:00
Kristian Klausen cebfe91ed1
Add GitLab Pages for "Monthly Reports"
Ref: https://gitlab.archlinux.org/archlinux/monthly-reports/-/merge_requests/1
2022-07-03 13:21:47 +02:00
Kristian Klausen 6559224bc8
Add GitLab Pages for "repod"
Ref: https://gitlab.archlinux.org/archlinux/repod/-/merge_requests/65
2022-07-03 13:21:44 +02:00
Kristian Klausen 6159b411a1
Add new domain for project documentation (archlinux.page)
We want non-DevOps to be able to deploy project documentation (ex:
repod) with GitLab Pages and a separate domain was considered the only
sensible solution due to security issues[1].

[1] https://github.blog/2013-04-09-yummy-cookies-across-domains/
2022-07-03 13:21:40 +02:00
Evangelos Foutras 563b8de274
Sort geo mirrors in hosts and take asia off for now
asia.mirror.pkgbuild.com has been offline for 12 days so far while we
wait for a NIC replacement. Should have taken it out of DNS NS duties
earlier but better late than never.
2022-05-29 23:42:26 +03:00
Evangelos Foutras c0909e9b0b
Rescale mailman3 from cx11 to cx21
It needs the extra RAM.
2022-05-29 23:41:52 +03:00
Kristian Klausen a9d48ad8ed
mta_sts: Use CRLF line terminators per the RFC[1]
[1] https://datatracker.ietf.org/doc/html/rfc8461#section-3.2
2022-05-16 22:46:01 +02:00