summaryrefslogtreecommitdiffstats
path: root/roles
Commit message (Collapse)AuthorAgeFilesLines
...
* | | While /tmp is likely cleaned automatically, any crash in the shell scriptMichael Scherer2016-03-291-1/+7
| | | | | | | | | | | | would have left over. Using trap should prevent that.
* | | Since the job is running as root, and on people.fedoraproject.org, itMichael Scherer2016-03-291-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | can be abused by a non admin user using a symlink in /tmp (just a simple for loop over the pid space would be enough). Then we can at best erase a almost arbitrary file (using a creative symlink), or at worst, maybe inject data that could be parsed by a software (since the content would be under the control of a attacker, since that's the list of file in a user home directories.
* | | copr: restart copr-dist-gitMiroslav Suchý2016-03-291-0/+2
| | |
* | | Fix typo in apps-fp-o that broke proxy playbook runKevin Fenzi2016-03-291-1/+1
| | |
* | | copr: we need yum, since dnf still cannot handle priority failoverMiroslav Suchý2016-03-291-1/+1
| | |
* | | copr: we need yum, since dnf still cannot handle priority failoverMiroslav Suchý2016-03-291-1/+4
| | |
* | | copr: this should not be needed anymoreMiroslav Suchý2016-03-291-8/+8
| | |
* | | Give bugzilla2fedmsg two more threads.Ralph Bean2016-03-291-0/+2
| | |
* | | Use the full name here.Ralph Bean2016-03-291-1/+1
| | |
* | | Add selinux rule to allow git repos to work on fedorapeople. Ticket #5107Kevin Fenzi2016-03-281-0/+1
| | |
* | | add aikidouke to tahrir.adminaikidouke2016-03-281-1/+2
| | |
* | | Fix issue with mirrormanager rotate patchKevin Fenzi2016-03-241-1/+1
| | |
* | | blacklist containerbuild from being created in fasDennis Gilmore2016-03-241-1/+1
| | | | | | | | | | | | Signed-off-by: Dennis Gilmore <ausil@fedoraproject.org>
* | | Switch nagios checks for bodhi to look for apache instead of masher user.Kevin Fenzi2016-03-242-2/+2
| | |
* | | Add a logrotate file for /var/log/mirrormanager/*.log files.Kevin Fenzi2016-03-242-0/+14
| | |
* | | bodhi: Disable the pshell 'db' variable, which doesn't work at the momentLuke Macken2016-03-241-1/+1
| | |
* | | bodhi: comment out the chowning for now, while we do the initial upgradeLuke Macken2016-03-241-9/+9
| | |
* | | GNOME Backups: make sure the rdiff-backup package gets installedAndrea Veri2016-03-241-0/+3
| | |
* | | GNOME Backups: move playbooks/hosts/gnome-backups01.phx2.fp.org to its own ↵Andrea Veri2016-03-241-0/+50
| | | | | | | | | | | | role file
* | | copr: increase the timeout to 86400Miroslav Suchý2016-03-241-1/+1
| | | | | | | | | | | | this is what koji use too.
* | | HyperKitty: remove deprecation warningAurélien Bompard2016-03-241-1/+3
| | |
* | | copr: this should not be neededMiroslav Suchý2016-03-241-0/+2
| | |
* | | copr: upgrade to latest packagesMiroslav Suchý2016-03-244-0/+12
| | |
* | | openqa/server: disable hard disk image generation temporarilyAdam Williamson2016-03-231-7/+7
| | | | | | | | | | | | | | | https://bugzilla.redhat.com/show_bug.cgi?id=1320754 is messing it up. Disable for now so I can get other changes through.
* | | remove unneeded namedStephen Smoogen2016-03-231-216/+0
| | |
* | | Original consumer.py for the autocloud hotfixKushal Das2016-03-231-0/+14
| | |
* | | HyperKitty: update the Django settings fileAurélien Bompard2016-03-231-93/+66
|/ /
* | Remove +1 requirement from wiki, leaving CLAPatrick Uiterwijk2016-03-221-1/+3
| | | | | | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* | You would think I'd know by now that this is ownerPatrick Uiterwijk2016-03-221-1/+1
| | | | | | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* | Also add authz for stagingPatrick Uiterwijk2016-03-221-0/+5
| | | | | | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* | Add ACL for basset frontendPatrick Uiterwijk2016-03-222-0/+15
| | | | | | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* | Enable mediawiki basset pluginPatrick Uiterwijk2016-03-222-0/+13
| | | | | | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* | Add collectd SOP to appsKevin Fenzi2016-03-221-3/+1
| |
* | bodhi: recursively set perms on /var/run/fedmsg on the backendLuke Macken2016-03-211-0/+1
| |
* | bodhi: Create /var/cache/fedmsg and have apache own itLuke Macken2016-03-211-0/+11
| |
* | bodhi: Have apache own /mnt/koji/mash/{atomic,updates}Luke Macken2016-03-211-0/+10
| |
* | bodhi: Configure the backend to run as apache instead of the masher user.Luke Macken2016-03-212-25/+30
| |
* | and we have some fixes to the caching nameserverStephen Smoogen2016-03-211-21/+9
| |
* | woopsStephen Smoogen2016-03-211-90/+0
| |
* | and we have a bunchStephen Smoogen2016-03-212-0/+318
| |
* | and we are now monday to push changeStephen Smoogen2016-03-212-4/+4
| |
* | Merge branch 'master' of /git/ansibleStephen Smoogen2016-03-2110-25/+48
|\ \
| * | Remove archive.org from planet global configPatrick Uiterwijk2016-03-211-5/+0
| | | | | | | | | | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
| * | hmm, jinja indents with nested ifs seem weird. try this?Adam Williamson2016-03-211-3/+3
| | |
| * | Tags for this role.Ralph Bean2016-03-211-0/+5
| | |
| * | openqa_dispatcher: enable fedmsg-based result wiki reportingAdam Williamson2016-03-213-4/+11
| | | | | | | | | | | | | | | ...by extending the fedmsg consumer config file. Requires the latest openqa_fedora_tools to work.
| * | selinux tags for this role.Ralph Bean2016-03-211-0/+5
| | |
| * | Tell selinux to allow git-daemon to follow symlinks, please.Ralph Bean2016-03-212-4/+4
| | |
| * | Update the apps.yaml file to point to the nuancier SOPPierre-Yves Chibon2016-03-211-4/+2
| | |
| * | openqa/server: make geekotest static UID/GID optionalAdam Williamson2016-03-191-8/+9
| | | | | | | | | | | | | | | | | | | | | | | | I'm still kinda trying to make the openqa roles usable outside of infra, so now I have a minute, let's do this: it makes the static UID/GID for geekotest optional and configurable, instead of hard coding it. For infra we set the value to 601, as we are already using, in the openqa and openqa-stg group config.