Jan Alexander Steffens (heftig)
31a33cc804
matrix: Update badwords
2024-03-27 23:33:05 +01:00
Evangelos Foutras
82e1cefb70
security_tracker: bump version to 0.14.5
...
Fixes a NOT NULL violation related to Pacman 6.1 dropping MD5 checksums
from repository databases.
2024-03-25 13:15:03 +02:00
Kristian Klausen
e128cd0f4c
tf-stage2: Update code to reflect that Keycloak registration is disabled
...
Registration has been disabled since 2023-07-09, so the code should have
been updated a long time ago.
2024-03-23 15:13:38 +01:00
Jan Alexander Steffens (heftig)
64c408c611
matrix: Update synapse to 1.103.0
2024-03-22 14:40:00 +01:00
Kristian Klausen
d5f5cf6b52
Cleanup flyspray leftovers
...
Fixes: 4e5550a8
2024-03-17 00:18:10 +01:00
Evangelos Foutras
eaeb54129a
find-arch-on-crt.sh: remove no-op bugs-old exclude
2024-03-17 01:02:47 +02:00
Evangelos Foutras
df9b4d5085
find-arch-on-crt.sh: adjust for patsub_replacement
...
This shell behavior[1] in Bash 5.2 "expands occurrences of '&' in the
replacement string of pattern substitution to the text matched by the
pattern" but we want literal ampersands so escape them.
[1] https://www.gnu.org/software/bash/manual/html_node/The-Shopt-Builtin.html
2024-03-17 00:55:34 +02:00
Kristian Klausen
90c28dc595
Merge branch 'publish-geo-mirrors-at-dashboards-al-org' into 'master'
...
Make the "Geo Mirrors" dashboard and metrics publicly available
See merge request archlinux/infrastructure!809
2024-03-16 22:47:47 +01:00
Kristian Klausen
e0423d7e0b
Make the "Geo Mirrors" dashboard and metrics publicly available
...
This may be interesting for our mirror administrators and mirror owners.
I tried backfilling the data, but was unsuccessful, due to a bug[1]. We
may try again if/when the bug is fixed.
[1] https://github.com/prometheus/prometheus/issues/13747
2024-03-16 22:45:18 +01:00
Evangelos Foutras
1fadf90b44
archbuild: use lineinfile to override makepkg.conf
...
The only variables we want to change are MAKEFLAGS and SRCDEST so
this is a cleaner approach compared to templating the whole file.
2024-03-16 00:31:14 +02:00
Christian Heusel
e1854f8695
Merge branch 'pubkeys/eworm' into 'master'
...
pubkeys/eworm: update my actively used keys
See merge request archlinux/infrastructure!811
2024-03-14 14:22:33 +01:00
Christian Hesse
883ac518aa
pubkeys/eworm: update my actively used keys
2024-03-14 13:27:16 +01:00
Christian Heusel
7ddfe31d27
Merge branch '563-wiki-sender' into 'master'
...
archwiki: Switch notification mail to noreply
Closes #563
See merge request archlinux/infrastructure!810
2024-03-13 14:31:35 +01:00
Christian Heusel
e25bb53d9f
archwiki: Switch notification mail to noreply
...
Change this to the noreply mail but also add a wiki tag to it so it can
more easily be filtered in mail programs.
Fixes https://gitlab.archlinux.org/archlinux/infrastructure/-/issues/563
Signed-off-by: Christian Heusel <christian@heusel.eu>
2024-03-13 00:37:31 +01:00
Christian Heusel
562621b979
Merge branch 'polyzen-new-ssh' into 'master'
...
Add new SSH key for polyzen
See merge request archlinux/infrastructure!806
2024-03-13 00:31:22 +01:00
Daniel M. Capella
ade3939c99
Add new SSH key for polyzen
2024-03-13 00:19:34 +01:00
Jan Alexander Steffens (heftig)
e1d62dd468
matrix: Update synapse to 1.102.0
2024-03-09 05:55:24 +01:00
Christian Heusel
7550b020fe
Merge branch 'wiki-pacman-6.1.0' into 'master'
...
archwiki: Switch captcha to time-based method
See merge request archlinux/infrastructure!808
2024-03-06 23:40:46 +01:00
Christian Heusel
048167d6be
archwiki: Switch captcha to time-based method
...
Up until now the captcha has depended on the exact output of the pacman
version command which could lead to multiple problematic scenarios:
a) User uses testing repos (user pacman newer)
b) Server is not instantly updated (user pacman newer)
c) User system is not updated (user pacman older)
Circumvent this problem by switching to a time based captcha instead.
Signed-off-by: Christian Heusel <christian@heusel.eu>
2024-03-06 23:33:01 +01:00
Jelle van der Waa
5909800fd5
archweb: update to latest release
2024-03-05 19:09:50 +01:00
Christian Heusel
b7d89cb2bc
Merge branch 'archmanweb-v1.10' into 'master'
...
Update archmanweb to v1.10
See merge request archlinux/infrastructure!807
2024-03-03 16:55:55 +01:00
Jakub Klinkovský
861337b988
Update archmanweb to v1.10
2024-03-03 16:41:59 +01:00
Christian Heusel
4956c186b4
Merge branch '575-onboard-codingkoopa' into 'master'
...
Onboard codingkoopa as support staff
Closes #575
See merge request archlinux/infrastructure!805
2024-03-03 14:38:53 +01:00
Christian Heusel
c589a18bbe
Onboard codingkoopa as support staff
...
Fixes https://gitlab.archlinux.org/archlinux/infrastructure/-/issues/575
2024-03-02 01:59:05 +01:00
Kristian Klausen
af243ca613
Merge branch 'promote-gromit-full-devops' into 'master'
...
Promote gromit to full DevOps
Closes #573
See merge request archlinux/infrastructure!798
2024-02-22 22:56:15 +01:00
Kristian Klausen
8a7e85f70c
Promote gromit to full DevOps
...
Fix #573
2024-02-22 22:51:08 +01:00
Christian Heusel
4b45d967c0
Merge branch 'mediawiki-1.41.0-3' into 'master'
...
archwiki: Update to version 1.41.0-3
See merge request archlinux/infrastructure!802
2024-02-21 22:47:11 +01:00
Christian Heusel
8b7f30ff88
archwiki: Update to version 1.41.0-3
...
Signed-off-by: Christian Heusel <christian@heusel.eu>
2024-02-21 22:46:37 +01:00
Jan Alexander Steffens (heftig)
96219779dd
matrix: Update synapse to 1.101.0
2024-02-19 18:44:15 +01:00
Kristian Klausen
cf20697629
hedgedoc: Move the client secret to the config file for security
...
The systemd environment variables can be read by anyone, so move the
secret to the configuration file, which can only be read by root and the
hedgedoc user.
Fix #562
2024-02-19 00:26:53 +01:00
Kristian Klausen
036555ad72
hedgedoc: Make the config file non-world writable
...
The config file contain secrets, so it should not be world writable.
Fix #562
2024-02-19 00:12:41 +01:00
Kristian Klausen
ee91fbe386
Merge branch 'fail2ban-firewalld-ipset' into 'master'
...
fail2ban: Use a managed firewalld ipset
See merge request archlinux/infrastructure!804
2024-02-18 23:31:41 +01:00
Kristian Klausen
95e19506ff
fail2ban: Use a managed firewalld ipset
...
The firewalld direct interface is deprecated and will be removed in a
future release[1]. Recently IPv4 connectivity inside docker containers
on our runners broke and after some troubleshooting, the issue was
pinpointed to the start of the fail2ban service. We also had issues in
the past where sometimes firewalld had to be restarted after boot before
network connectivity worked in libvirt on our runners.
The issuse may be due to a bug in the way fail2ban use the direct
interface, a bug in firewalld or a combination thereof. Let's just avoid
the direct interface altogether and create a clean separation, with
firewalld handling the blocking and fail2ban maintaining the ipset.
[1] https://firewalld.org/documentation/man-pages/firewalld.direct.html
2024-02-18 22:57:42 +01:00
Kristian Klausen
c370c9d06e
gitlab_runner: Update concurreny math to reflect the new VM size
...
Fixes: 97bc3928
2024-02-18 18:20:09 +01:00
Levente Polyak
de2c748cf9
Merge branch 'libvirt-max-memory'
2024-02-15 21:07:09 +01:00
Levente Polyak
97bc392866
gitlab_runner: raise max memory to 2GB
...
This is required f.e. for the dbscripts pipeline where kcov coverage
requires quite a bit more memory and fails to run in parallel with 1GB
limit.
2024-02-15 21:00:48 +01:00
Levente Polyak
54d37b4940
Merge remote-tracking branch 'origin/buddies-update-sq-0.33.0'
2024-02-15 20:56:17 +01:00
Christian Heusel
ca25ddb960
bugbuddy: fix download script for sq 0.33.0
...
Signed-off-by: Christian Heusel <christian@heusel.eu>
2024-02-15 20:55:26 +01:00
Christian Heusel
52924e45b0
gluebuddy: fix download script for sq 0.33.0
...
Signed-off-by: Christian Heusel <christian@heusel.eu>
2024-02-15 20:55:25 +01:00
Levente Polyak
85daccf46c
Merge remote-tracking branch 'origin/570-sq-libvirt-executor-update'
2024-02-15 20:53:21 +01:00
Christian Heusel
3a431006a9
gitlab_runner: fix error about unbound variable
...
When there was an error i.e. with the image verification the loopdev
variable was unbound in the cleanup function. We fix this by defining
the variable as empty.
Signed-off-by: Christian Heusel <christian@heusel.eu>
2024-02-15 20:45:56 +01:00
Christian Heusel
fb4d54ce50
gitlab_runner: fix image update for sequoia 0.33.0
...
Signed-off-by: Christian Heusel <christian@heusel.eu>
2024-02-15 20:45:56 +01:00
Christian Heusel
31ac5bb38e
Merge branch 'archwiki-repo-url' into 'master'
...
archwiki: update the repository URL
See merge request archlinux/infrastructure!795
2024-02-15 19:17:57 +01:00
Jakub Klinkovský
4ddea2283e
archwiki: update the repository URL
...
Related to https://gitlab.archlinux.org/archlinux/infrastructure/-/issues/557
2024-02-15 19:13:00 +01:00
Kristian Klausen
6410d3de85
Merge branch 'flyspray-collector-cleanup' into 'master'
...
prometheus_exporters: drop flyspray-textcollector
See merge request archlinux/infrastructure!801
2024-02-14 22:27:49 +01:00
Christian Heusel
99bc245958
prometheus_exporters: drop flyspray-textcollector
...
Related to #550
Related to #551
Fixes: 4e5550a8
2024-02-14 20:22:27 +01:00
Levente Polyak
afac3a3706
dbscripts: bump version to latest commit
2024-02-13 01:21:26 +01:00
Kristian Klausen
9ed0e7621d
Merge branch 'make-lahwaacz-packager' into 'master'
...
Onboard lahwaacz as packager (was junior packager)
See merge request archlinux/infrastructure!797
2024-02-11 20:20:35 +01:00
Sven-Hendrik Haase
d0f238dae0
Onboard lahwaacz as packager (was junior packager)
...
See #554 .
2024-02-10 21:17:10 +01:00
Kristian Klausen
1c58e0c7e1
Onboard wahrwolf as support staff (mirror admin)
...
Fix #565
2024-02-10 20:30:01 +01:00
