1
1
Fork 0
mirror of https://gitlab.archlinux.org/archlinux/infrastructure.git synced 2024-05-23 16:16:11 +02:00
Commit Graph

2122 Commits

Author SHA1 Message Date
Kristian Klausen 4ff17e8707 keycloak: Update links to "Service Agreements"
Ref: https://gitlab.archlinux.org/archlinux/service-agreements/-/merge_requests/16
2021-09-04 13:01:55 +02:00
Ira ㋡ 0ab630e96a Add terms template with external links to project's terms and conditions 2021-09-04 12:48:37 +02:00
Ira ㋡ ab2064e646 Add terms and conditions preamble text 2021-09-04 12:48:37 +02:00
Jakub Klinkovský 329cab6992 archwiki: update to 1.36.1-3 2021-09-02 20:50:40 +02:00
Jan Alexander Steffens (heftig) 901416ce13
matrix: Update synapse to 1.41.1 2021-08-31 22:21:47 +02:00
Jan Alexander Steffens (heftig) 41956295a1
matrix: Update turnserver config
- Drop the custom service file, use the packaged one
- Merge in the comments from the packaged config file
2021-08-28 22:41:10 +02:00
Evangelos Foutras 7d5dee0a88
Add Wants=network-online.target to a few services
After=network-online.target is likely insufficient by itself.

Fixes: 104d08a1db ("archweb: Put most services after network-online.target")
Fixes: c844d0cb6c ("Split storage box monitoring into new text collector")
2021-08-28 14:42:41 +03:00
Evangelos Foutras 104d08a1db
archweb: Put most services after network-online.target
We noticed readlinks and reporead on gemini failing to connect to the
archweb database immediately after rebooting. To fix this, place them
after network-online.target. Do the same for all but one of the other
service units even though they run on timers 10-15 minutes after boot
for completeness and correctness.
2021-08-28 13:29:16 +03:00
Jan Alexander Steffens (heftig) e2643bf741
matrix: Update synapse to 1.41.0 2021-08-26 19:24:03 +02:00
Jan Alexander Steffens (heftig) 1bbbe70ecc
matrix: Remove synapse's log buffering
The JournalHandler doesn't support flushing, anyway.
2021-08-26 19:24:03 +02:00
Jan Alexander Steffens (heftig) f2808b95c8
matrix: Expose the bridge's metrics 2021-08-26 19:24:03 +02:00
Jan Alexander Steffens (heftig) 9460b9acdf
matrix: Update bridge to 0.30.0 2021-08-26 19:24:03 +02:00
Jan Alexander Steffens (heftig) aaec777647
matrix: Update mjolnir to v0.1.19 2021-08-26 19:24:03 +02:00
Evangelos Foutras 70dbfcd9c4 Merge branch 'update-mirrorcheck-locations' into 'master'
Update mirrorcheck locations

See merge request archlinux/infrastructure!483
2021-08-24 21:41:28 +00:00
Evangelos Foutras 7cc64e5483
archweb: Gate donation import tasks on archweb_site 2021-08-24 23:54:48 +03:00
Kristian Klausen 6a11db2f20 Use wireguard for db connections to archlinux.org
Fix #177
2021-08-24 21:08:08 +02:00
Kristian Klausen a06ed9ef10 networking: Make hcloud-init.service more reliable
Fix #371
2021-08-24 19:00:24 +02:00
Kristian Klausen 9227825b96
Revert "common: override smartd.service with ConditionVirtualization=no"
It has been applied upstream[1] and released with smartmontools 7.2[2].

[1] 61bc85ecad
[2] https://github.com/smartmontools/smartmontools/releases/tag/RELEASE_7_2

This reverts commit b4c97002f5.
2021-08-22 17:13:59 +02:00
Kristian Klausen d7d4ecbce1
Add GitLab Pages for "Service Agreements"
Ref: https://gitlab.archlinux.org/archlinux/service-agreements/-/merge_requests/16
2021-08-22 13:13:36 +02:00
Evangelos Foutras 5a88a31374
fluxbb: Speed up search and increase buffer pool 2021-08-19 03:48:53 +03:00
Evangelos Foutras 6534413cf3
mariadb: Tweak query cache settings
We used to set query_cache_type to 0 in the default settings but we were
also setting query_cache_size to a non-zero/non-default value, which was
in turn re-enabling the query cache. Update the configuration to reflect
the actual cache state and make sure query_cache_size is set to zero for
the "query_cache_type = 0" case.

Now that the setting controls the real state of the query cache, disable
it for bbs.archlinux.org; its hit rate is small compared to insert rate.
2021-08-18 19:56:50 +03:00
Evangelos Foutras 1b2cfa7120
mariadb: Remove no-auto-rehash setting 2021-08-18 19:36:49 +03:00
Evangelos Foutras de7582913c
mariadb: Move two common variables out of playbooks
Default query_cache_type to 0 and innodb_file_per_table to true.
2021-08-18 03:07:12 +03:00
Evangelos Foutras f7033ae2cd
Drop kernels from IgnorePkg
Main motivation behind this is preparing for doing more automatic
upgrades. The need for ignoring kernel updates isn't clear either.
2021-08-17 18:46:18 +03:00
Jan Alexander Steffens (heftig) 284ac9c86a networking: Default static_dns to true for static IP configuration 2021-08-16 00:47:25 +00:00
Jan Alexander Steffens (heftig) 6c4f215b3c matrix.archlinux.org: Configure static DNS via networking role
Hetzner DNS has been delaying many responses for 5 seconds, causing
outgoing federation work to pile up, almost running into OOM before we
noticed.

I don't know if were being throttled because federation makes a *lot* of
requests. Anyway, using Cloudflare DNS seems to solve it.

Enable DNSOverTLS for this because we can.
2021-08-16 00:47:25 +00:00
Evangelos Foutras 7b68eb3594
fluxbb: fix instability caused by slow searches 2021-08-16 00:22:42 +03:00
Jan Alexander Steffens (heftig) 8adf5899e6
matrix: Reduce synapse.logging.context logging to ERROR
This one is pretty spammy with warnings that don't mean much.
2021-08-15 00:12:27 +02:00
Jan Alexander Steffens (heftig) c7fbb9c236
matrix: Use 5.0 for get_users_in_room
Other caches around this code use 500000 entries, so just copy that.
2021-08-15 00:12:27 +02:00
Jelle van der Waa 3ef5d11bdf
Update firewalld.conf 2021-08-12 21:13:27 +02:00
Jan Alexander Steffens (heftig) 62481d5501
matrix: Increase size of get_users_in_room cache
This cache was seeing constant evictions at its former size (70k).

With a size of 200k it now stabilizes at ~122k entries with a
significant drop in server load.
2021-08-11 20:14:01 +02:00
Jan Alexander Steffens (heftig) 481033af57
matrix: Update synapse to 1.40.0 2021-08-10 21:49:51 +02:00
Jan Alexander Steffens (heftig) b53b8eaf80
matrix: Increase pantalaimon start sleep to 30 seconds
Now that Pantalaimon refuses operations until it has sync'ed with the
homeserver, we need to give it time to do so or Mjolnir will refuse to
start.
2021-08-05 18:25:15 +02:00
Jan Alexander Steffens (heftig) f9c0bbe3c8
matrix: Update bridge to 0.29.0 2021-08-05 18:25:15 +02:00
Kristian Klausen 779326b3bf
prometheus_exporters: Fix the AUR exporter never starting after boot 2021-08-01 20:38:00 +02:00
Leonidas Spyropoulos 24746910c7 prometheus: add matrix metrics and dashboard
The dashboards is from [1] and fixed with:
sed 's/${DS_PROMETHEUS}/$datasource/g' -i synapse.json

[1] c167e09fe5/contrib/grafana

Closes: #290

Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>
2021-07-31 13:13:07 +02:00
Jan Alexander Steffens (heftig) caa81be756
matrix: Use Bearer authentication for metrics
https://gitlab.archlinux.org/archlinux/infrastructure/-/merge_requests/473
2021-07-31 01:48:50 +02:00
Jan Alexander Steffens (heftig) bdfc6c2c7f
matrix: Update synapse to 1.39.0 2021-07-31 01:16:09 +02:00
Kristian Klausen d2015f4366
common: Remove old "remove old checkservices" task
It was removed in:
d9fdafb0 ("Use archlinux-contrib over git submodule")
c380c429 ("Remove old task to symlink checkservices to /usr/local/bin")
2021-07-30 20:28:16 +02:00
Kristian Klausen a8369f311d Be consistent and use en* everywhere for matching ethernet interfaces
en is the prefix for ethernet according to systemd.net-naming-scheme(7)
2021-07-30 20:18:18 +02:00
Kristian Klausen 74462e62b0 networking: Don't follow the resolv.conf symlink when setting owner/group 2021-07-30 20:18:18 +02:00
Leonidas Spyropoulos ecd08fb7e8 networking: Remove support for specifying DNS servers
Redundant since this commit:
bdd538ec ("Use unbound for rspamd DNS resolving")

Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>
2021-07-30 20:18:18 +02:00
Leonidas Spyropoulos 6201647b6a New shared networking role.
This is shared between common and install_arch roles

Closed: #288

Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>
2021-07-30 20:18:16 +02:00
Evangelos Foutras 9fd5d45806 syncarchive: Drop --delay-updates; breaks incremental scan
The --delay-updates option results in 6G memory usage per archive mirror
for a total of ~18G memory used on gemini when all three archive mirrors
are syncing. Less important (but still revelant!) is the memory usage on
each mirror, which climbs to about 11G during each synchronization.

Removing the --delay-updates option should be OK considering the archive
hosts data that almost never changes. Without this option, rsync is able
to do a sequential scan which uses 90M of memory (per archive mirror) on
gemini and about 250M on each mirror individually.
2021-07-29 17:40:23 +00:00
Evangelos Foutras 49ba41bfe2
syncarchive: Tweak rsync options and drop temp dir
This reflects the recent changes made to syncrepo.
2021-07-29 11:40:48 +03:00
Evangelos Foutras 4fe427a266
syncrepo: Drop --temp-dir option as unneeded
Using a temporary directory outside of /srv/ftp was meant to protect
against incomplete files from being synced by downstream mirrors. It
does not achieve this to much effect though; each file gets uploaded
to the temporary directory but then immediately moved under a .~tmp~
directory at its target location (.~tmp~ because of --delay-updates,
otherwise the file would be renamed to its final path).

The `--delay-updates` option by itself sufficiently protects against
temp files being transferred to downstream mirrors; when used by the
receiver, it automatically adds an exclude rule for ~.tmp~, behaving
exactly like we want it to. As such, the `--temp-dir` option doesn't
provide any further benefit and can be removed.
2021-07-29 11:02:56 +03:00
Evangelos Foutras 8c92967b51
syncrepo-template: Add note about .~tmp~ workaround
The workaround can be skipped/removed when using rsync newer than 3.2.3.
2021-07-29 01:27:15 +03:00
Evangelos Foutras 5704356cd2
syncrepo: Tweak rsync options
- Replace --delete-after with more efficient --delete-delay.
- Move "-p" together with the other short options.
- Remove reference to empty ${VERBOSE} variable.
2021-07-29 01:20:00 +03:00
Evangelos Foutras 8dad3e8562
Revert "syncrepo: Properly clean up .~tmp~ dirs"
This reverts commit 75f9ca3cc6.

This should be fixed in rsync versions newer than 3.2.3. In Arch the fix
has been shipped in the rsync 3.2.3-4 package, which our own mirrors now
have been updated to.

[1] https://github.com/WayneD/rsync/issues/192
2021-07-29 00:29:50 +03:00
Kristian Klausen 7b85025946
Revert "gitlab: Use the legacy storage[1] for GitLab Pages"
The DNS resolution issue has been fixed[1][2].

[1] https://gitlab.com/gitlab-org/gitlab/-/issues/331699#note_635123263
[2] https://gitlab.com/gitlab-org/gitlab-pages/-/merge_requests/513

Fix #380

This reverts commit a863917ffb.
2021-07-28 23:14:05 +02:00