mirror/ infrastructure
1
1
Fork 0
mirror of https://gitlab.archlinux.org/archlinux/infrastructure.git synced 2024-06-06 06:56:10 +02:00
Code Issues
3,573 Commits 22 Branches 0 Tags 17 MiB
Commit Graph

3573 Commits

Author SHA1 Message Date
Jan Alexander Steffens (heftig) 901416ce13
matrix: Update synapse to 1.41.1 2021-08-31 22:21:47 +02:00
Jan Alexander Steffens (heftig) 41956295a1
matrix: Update turnserver config 
- Drop the custom service file, use the packaged one
- Merge in the comments from the packaged config file
 2021-08-28 22:41:10 +02:00
Evangelos Foutras 7d5dee0a88
Add Wants=network-online.target to a few services 
After=network-online.target is likely insufficient by itself.

Fixes: 104d08a1db ("archweb: Put most services after network-online.target")
Fixes: c844d0cb6c ("Split storage box monitoring into new text collector")
 2021-08-28 14:42:41 +03:00
Evangelos Foutras 99aeb8c2ea Merge branch 'archweb-wait-online' into 'master' 
archweb: Put most services after network-online.target

See merge request archlinux/infrastructure!486
 2021-08-28 10:37:17 +00:00
Evangelos Foutras 104d08a1db
archweb: Put most services after network-online.target 
We noticed readlinks and reporead on gemini failing to connect to the
archweb database immediately after rebooting. To fix this, place them
after network-online.target. Do the same for all but one of the other
service units even though they run on timers 10-15 minutes after boot
for completeness and correctness.
 2021-08-28 13:29:16 +03:00
Jan Alexander Steffens (heftig) 78cd1dd567
matrix: Update bridged rooms 2021-08-26 19:24:03 +02:00
Jan Alexander Steffens (heftig) 1278707cf2
matrix: Update badwords 2021-08-26 19:24:03 +02:00
Jan Alexander Steffens (heftig) e2643bf741
matrix: Update synapse to 1.41.0 2021-08-26 19:24:03 +02:00
Jan Alexander Steffens (heftig) 1bbbe70ecc
matrix: Remove synapse's log buffering 
The JournalHandler doesn't support flushing, anyway.
 2021-08-26 19:24:03 +02:00
Jan Alexander Steffens (heftig) f2808b95c8
matrix: Expose the bridge's metrics 2021-08-26 19:24:03 +02:00
Jan Alexander Steffens (heftig) 9460b9acdf
matrix: Update bridge to 0.30.0 2021-08-26 19:24:03 +02:00
Jan Alexander Steffens (heftig) aaec777647
matrix: Update mjolnir to v0.1.19 2021-08-26 19:24:03 +02:00
Evangelos Foutras 70dbfcd9c4 Merge branch 'update-mirrorcheck-locations' into 'master' 
Update mirrorcheck locations

See merge request archlinux/infrastructure!483
 2021-08-24 21:41:28 +00:00
Kristian Klausen b4a8ee06a6 Merge branch 'wireguard-archweb' into 'master' 
Use wireguard for db connections to archlinux.org

Closes #177

See merge request archlinux/infrastructure!476
 2021-08-24 21:14:23 +00:00
Evangelos Foutras 7cc64e5483
archweb: Gate donation import tasks on archweb_site 2021-08-24 23:54:48 +03:00
Evangelos Foutras 49b49925bb
mirrors: Update archweb_mirrorcheck_locations 2021-08-24 23:54:48 +03:00
Kristian Klausen 6a11db2f20 Use wireguard for db connections to archlinux.org 
Fix #177
 2021-08-24 21:08:08 +02:00
Kristian Klausen 1db79c8045 Merge branch 'hcloud-init' into 'master' 
networking: Make hcloud-init.service more reliable

Closes #371

See merge request archlinux/infrastructure!474
 2021-08-24 17:12:27 +00:00
Kristian Klausen a06ed9ef10 networking: Make hcloud-init.service more reliable 
Fix #371
 2021-08-24 19:00:24 +02:00
Evangelos Foutras 5a65b59032 Merge branch 'upgrade-servers-task' into 'master' 
Add simple playbook task for upgrading servers

We want to treat our servers as cattle; hopefully when this is fleshed
out a bit more, it can accomplish the job without too many casualties.

See merge request archlinux/infrastructure!475
 2021-08-23 20:31:08 +00:00
Evangelos Foutras 006cdc0446
Document semi-automated server updates 2021-08-23 23:19:48 +03:00
Evangelos Foutras 5ff9037832
Do not reboot gemini if there are logged on users 
This is done to avoid killing db-update and related processes.
 2021-08-23 21:15:49 +03:00
Evangelos Foutras 4986190a69
Skip rebooting if package builds are running 2021-08-23 21:15:49 +03:00
Evangelos Foutras 485e26bb53
Wait for svntogit before rebooting after upgrade 2021-08-22 19:46:40 +03:00
Evangelos Foutras 19084fe336
Abort the play if any hosts fail to upgrade 2021-08-22 19:46:40 +03:00
Evangelos Foutras 7605e7ee78
Use serial = 1 for servers without rescue shell 2021-08-22 19:46:39 +03:00
Evangelos Foutras 871f9a208e
Do rolling upgrades in batches of 20% 2021-08-22 19:46:39 +03:00
Evangelos Foutras 55199ad75a
Update archlinux-keyring before full system upgrade 2021-08-22 19:46:39 +03:00
Evangelos Foutras 0bc7a762bf
upgrade-servers: Don't reboot if no upgrades occurred 2021-08-22 19:46:39 +03:00
Evangelos Foutras ad14ad7db8
Add simple playbook task for upgrading servers 
We want to treat our servers as cattle; hopefully when this is fleshed
out a bit more, it can accomplish the job without too many casualties.
 2021-08-22 19:46:39 +03:00
Kristian Klausen 9227825b96
Revert "common: override smartd.service with ConditionVirtualization=no" 
It has been applied upstream[1] and released with smartmontools 7.2[2].

[1] 61bc85ecad
[2] https://github.com/smartmontools/smartmontools/releases/tag/RELEASE_7_2

This reverts commit b4c97002f5.
 2021-08-22 17:13:59 +02:00
Kristian Klausen d7d4ecbce1
Add GitLab Pages for "Service Agreements" 
Ref: https://gitlab.archlinux.org/archlinux/service-agreements/-/merge_requests/16
 2021-08-22 13:13:36 +02:00
Evangelos Foutras 5a88a31374
fluxbb: Speed up search and increase buffer pool 2021-08-19 03:48:53 +03:00
Evangelos Foutras 6534413cf3
mariadb: Tweak query cache settings 
We used to set query_cache_type to 0 in the default settings but we were
also setting query_cache_size to a non-zero/non-default value, which was
in turn re-enabling the query cache. Update the configuration to reflect
the actual cache state and make sure query_cache_size is set to zero for
the "query_cache_type = 0" case.

Now that the setting controls the real state of the query cache, disable
it for bbs.archlinux.org; its hit rate is small compared to insert rate.
 2021-08-18 19:56:50 +03:00
Evangelos Foutras 1b2cfa7120
mariadb: Remove no-auto-rehash setting 2021-08-18 19:36:49 +03:00
Evangelos Foutras de7582913c
mariadb: Move two common variables out of playbooks 
Default query_cache_type to 0 and innodb_file_per_table to true.
 2021-08-18 03:07:12 +03:00
Levente Polyak e40ff091bd Merge branch 'feature/borg-out-of-place-call' into 'master' 
borg: allow out of place calls

See merge request archlinux/infrastructure!435
 2021-08-17 22:40:48 +00:00
Levente Polyak d62f409642
borg: allow out of place calls by prepending the root directory 2021-08-18 00:39:03 +02:00
Levente Polyak c225001bc8
borg: avoid missing directory error duo to double delete 
We force delete in the signal handler as a graceful script execution
already deletes the file. This way we avoid any errors being wrongly
printed.
 2021-08-18 00:39:02 +02:00
Levente Polyak 9f1e1c9285
borg: use readable template label for mktemp files 
Signed-off-by: Levente Polyak <anthraxx@archlinux.org>
 2021-08-18 00:38:59 +02:00
Evangelos Foutras f7033ae2cd
Drop kernels from IgnorePkg 
Main motivation behind this is preparing for doing more automatic
upgrades. The need for ignoring kernel updates isn't clear either.
 2021-08-17 18:46:18 +03:00
Jan Alexander Steffens (heftig) 693bab32ab Merge branch 'static-dns' into 'master' 
matrix.archlinux.org: Configure static DNS via networking role

See merge request archlinux/infrastructure!479
 2021-08-16 00:48:33 +00:00
Jan Alexander Steffens (heftig) 284ac9c86a networking: Default static_dns to true for static IP configuration 2021-08-16 00:47:25 +00:00
Jan Alexander Steffens (heftig) 6c4f215b3c matrix.archlinux.org: Configure static DNS via networking role 
Hetzner DNS has been delaying many responses for 5 seconds, causing
outgoing federation work to pile up, almost running into OOM before we
noticed.

I don't know if were being throttled because federation makes a *lot* of
requests. Anyway, using Cloudflare DNS seems to solve it.

Enable DNSOverTLS for this because we can.
 2021-08-16 00:47:25 +00:00
Jan Alexander Steffens (heftig) 94de7e216a group_vars: Enable configure_network for hcloud hosts 
I don't know why this wasn't enabled.
 2021-08-16 00:47:25 +00:00
Evangelos Foutras 7b68eb3594
fluxbb: fix instability caused by slow searches 2021-08-16 00:22:42 +03:00
Jan Alexander Steffens (heftig) 8adf5899e6
matrix: Reduce synapse.logging.context logging to ERROR 
This one is pretty spammy with warnings that don't mean much.
 2021-08-15 00:12:27 +02:00
Jan Alexander Steffens (heftig) c7fbb9c236
matrix: Use 5.0 for get_users_in_room 
Other caches around this code use 500000 entries, so just copy that.
 2021-08-15 00:12:27 +02:00
Kristian Klausen d496bde433
Remove the technical github user as admin after configuring mirroring 
Fix #386
 2021-08-14 15:10:03 +02:00
Kristian Klausen 847337407b
Onboard alex19ep as new TU 
Ref #388
 2021-08-13 20:41:44 +02:00