Commit Graph

33 Commits

Author SHA1 Message Date
George T Kramer c877b0e3e5 Use stronger cryptographic primitives when generating koji CA certs
Signed-off-by: George T Kramer <george.t.kramer@intel.com>
2019-07-29 15:37:14 -07:00
George T Kramer ea7f3d0802 Use stronger cryptographic primitives when generating koji certs
Comply with current NSA recommendations

Signed-off-by: George T Kramer <george.t.kramer@intel.com>
2019-07-29 15:32:22 -07:00
George T Kramer de2c38561d Add tar.xz snapshot for cgit
Signed-off-by: George T Kramer <george.t.kramer@intel.com>
2019-07-29 14:34:03 -07:00
George T Kramer 9fcd5a9be6 Quote systemd environment variables for proxy
Allow values for proxy variables to contain spaces

Signed-off-by: George T Kramer <george.t.kramer@intel.com>
2019-07-15 16:51:35 -07:00
George T Kramer 2bc57c7a44 Fix up koji NFS server deployment
Only install nfs-utils bundle.  This package was previously broken and
relied on a dependency in storage-utils, but this has since been fixed.

Add no_root_squash option for exporting a NFS mount to increase the read
performance.

Signed-off-by: George T Kramer <george.t.kramer@intel.com>
2019-06-25 16:48:00 -07:00
George T Kramer 093e9bf862 Update RPM build group with current RPM list
Signed-off-by: George T Kramer <george.t.kramer@intel.com>
2019-06-25 16:47:19 -07:00
George T Kramer 4cbb9d7e59 Add missing assumption for host setup
Koji will not work well if network and time
are not configured properly.  All basic
configurations need performed on the host
first prior to attempting to install and
configure koji.
2019-03-12 17:40:32 -07:00
George T Kramer 101b9b72c8 Allow SSH access for gitolite user
Need to allow developers to do work
2019-03-05 19:16:37 -08:00
George T Kramer 067db867a2 Fix incorrect build group dependency 2019-03-04 19:25:48 -08:00
George T Kramer 7aec646ade Update mash.sh script
Do not bother using DNF to get the NVR of packages.  Call out to RPM
directly instead.

More completely parameterize script to allow for sourcing of variables
from parameters.sh sometime in the future.

Signed-off-by: George T Kramer <george.t.kramer@intel.com>
2019-03-04 19:13:19 -08:00
George T Kramer fc26fcf467 Add missing build group dependency 2019-03-04 18:47:08 -08:00
Pitterle, Matthew D 9706c8611c Implement finds for koji imports 2019-03-04 18:00:48 -08:00
Pitterle, Matthew D 9a0c4f250e Revise git daemon startup command 2019-03-04 17:48:03 -08:00
George T Kramer 4968243eca Fix README presentation
Signed-off-by: George T Kramer <george.t.kramer@intel.com>
2019-03-04 17:43:14 -08:00
George T Kramer a4c68e462d Update README
Explain how to get going and the order in which scripts need run.

Signed-off-by: George T Kramer <george.t.kramer@intel.com>
2019-03-04 17:39:12 -08:00
George T Kramer 85452e2af4 Make setup for koji NFS mounting easier
When koji builder and koji master are hosted on different machines, NFS
mounting is needed to connect the services.  Make this process more
smooth to minimize manual editing of files.  Namely, change the top
directory that koji looks at.  If on the master, this is on the local
file system.  If on the builder not on the master, this is also on the
local file system, but is backed by a NFS mount in a different location.

Signed-off-by: George T Kramer <george.t.kramer@intel.com>
2019-03-04 17:36:19 -08:00
George T Kramer d33200af07 Update copyright for 2019 2019-03-04 17:00:20 -08:00
George T Kramer 66d8fff4b4 Isolate user-facing parameters 2019-03-04 17:00:20 -08:00
George T Kramer 9fcbf230a4 Deploy all DevOps services for development
A deployment of a "koji" server consists of additional services that
support development beyond koji itself.  These include
git/cgit/gitolite, a mash containing the current snapshot of the
packages in koji, and an upstreams package sources cache.

Because these are required for integration with a DevOps workflow, they
are not included by default in the ansible playbook.
2019-03-04 17:00:20 -08:00
George T Kramer 17ac27a687 Quote all subshell usage
Signed-off-by: George T Kramer <george.t.kramer@intel.com>
2018-11-14 12:19:51 -08:00
George T Kramer 3da7b00bbd Ensure RANDFILE exists prior to usage
OpenSSL complains if the RANDFILE does not exist when it is generating
certificates.  Create an initial seed for this file from urandom.

Signed-off-by: George T Kramer <george.t.kramer@intel.com>
2018-11-14 12:17:08 -08:00
George T Kramer bdee352232 Add proxy variables if defined by environment
kojid will not be able to merge repos and mock will not be able to build
a chroot in an environment where proxy variables are used unless they
are defined in configuration files.

Signed-off-by: George T Kramer <george.t.kramer@intel.com>
2018-11-13 11:44:42 -08:00
George T Kramer d79ad7d8ca Quote all parameter dollar signs
Signed-off-by: George T Kramer <george.t.kramer@intel.com>
2018-11-13 10:30:45 -08:00
William Douglas 66d652e20d Use external koji repo
Expect most uses to be downstream so add an external koji repo by
default.
2018-11-07 17:59:03 -08:00
William Douglas e815252e2f Use dnf for mock's package_manager
Configure the dist tag to use dnf rather than yum as Clear Linux
doesn't use yum for the package manager.
2018-11-07 17:48:57 -08:00
William Douglas 4aedc7a00b Add hosts.example
Give a hosts.example and move hosts to be ignored.
2018-11-07 17:48:57 -08:00
George T Kramer d3a608059b Parameterize kojid capacity
Because the kojid capacity is difficult and error-prone to calculate
automatically, let the user define this.  Default the kojid capacity to
what is listed in the pagure documentation.

Signed-off-by: George T Kramer <george.t.kramer@intel.com>
2018-11-07 17:47:12 -08:00
George T Kramer c20e9e6a58 Handle edge case when computing kojid capacity
The kojid capacity can never be zero, must always be at least one.

Signed-off-by: George T Kramer <george.t.kramer@intel.com>
2018-11-07 17:35:24 -08:00
George T Kramer 1a1a715c3f Add installation of koji to script 2018-11-06 11:15:58 -08:00
George T Kramer 809bf1ea20 Automatically determine capacity for kojid
The capacity for kojid should scale according to the number of
processing units available because building packages is largely a
CPU-bound task.  Defaulting to a safe capacity of one-fourth the number
of processing units.

Signed-off-by: George T Kramer <george.t.kramer@intel.com>
2018-11-02 17:14:59 -07:00
George T Kramer ff3cf3fe71 Make external repository usage optional
Making external repository usage optional based on how it's defined or
not defined in parameter.sh so users do not need to edit any script
besides this one.

Signed-off-by: George T Kramer <george.t.kramer@intel.com>
2018-10-25 12:51:35 -07:00
George T Kramer d831850b5f Add missing build root requirement
Signed-off-by: George T Kramer <george.t.kramer@intel.com>
2018-10-25 10:38:23 -07:00
William Douglas a1ac13f792 Initial koji setup and configuration with ansible on Clear 2018-10-22 13:46:38 -07:00