Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | gitlab-bot: Enable for freedesktop-sdk projects | Pedro Alvarez | 2017-11-06 | 1 | -0/+14 | |
| | ||||||
* | frontend: Add rule to redirect Gitlab IRC bot requestspedro/gitlab-bot-fixes-2 | Pedro Alvarez Piedehierro | 2017-11-06 | 1 | -1/+10 | |
| | ||||||
* | Use gitlab-bot security group in webserver | Pedro Alvarez | 2017-11-06 | 1 | -1/+1 | |
| | ||||||
* | Create sercurity group for Gitlab IRC bot | Pedro Alvarez | 2017-11-06 | 1 | -0/+16 | |
| | ||||||
* | baserock_ostree: Add 'releases' repo | Sam Thursfield | 2017-10-27 | 7 | -7/+72 | |
| | | | | | | | | | | | | | | | | This is different from the existing 'cache' repo in that we should be careful what we push to it, and we should never delete things from it once they have been made public. Pushing to the releases repo should be done with ostree-push/receive rather than BuildStream. I've set up the receive hook on the server. The upstream repo of ostree-push/receive seems abandoned so I have been using a fork: https://github.com/ssssam/ostree-push See also: https://listmaster.pepperfish.net/pipermail/baserock-dev-baserock.org/2017-September/013811.html https://gitlab.com/baserock/definitions/merge_requests/58 | |||||
* | Fix comment in instance-hastebin-config.yml | Sam Thursfield | 2017-10-24 | 1 | -1/+1 | |
| | ||||||
* | baserock_frontend: Add rules for paste subdomain | Pedro Alvarez | 2017-10-24 | 1 | -0/+6 | |
| | ||||||
* | firewall: Add rules for haste server | Pedro Alvarez | 2017-10-24 | 2 | -1/+17 | |
| | ||||||
* | baserock_webserver: Install Haste server | Pedro Alvarez | 2017-10-24 | 3 | -0/+72 | |
| | ||||||
* | firewall: Allow morph-cache-server traffic on port 8080sam/git.baserock.org-port-8080 | Sam Thursfield | 2017-10-24 | 1 | -0/+10 | |
| | | | | This is still really useful to speed up YBD builds. | |||||
* | baserock_ostree: Update version of BuildStream that we installsam/ostree-update | Sam Thursfield | 2017-10-23 | 1 | -2/+4 | |
| | | | | | | | | | The version listed there was too old, modern BuildStream versions would fail to push with this error: Exception: Unsupported protocol version 1 Also make sure we don't put root-owned stuff into `/home/fedora`. | |||||
* | README.md: Remove some more cruft | Sam Thursfield | 2017-10-23 | 1 | -54/+4 | |
| | | | | We don't have any Ubuntu systems at the moment. | |||||
* | baserock_webserver: Update Cherokee to serve irclogs.baserock.org | Sam Thursfield | 2017-10-23 | 1 | -0/+18 | |
| | ||||||
* | Move brlogger bot into the webserver machine | Sam Thursfield | 2017-10-23 | 12 | -145/+52 | |
| | ||||||
* | Move the Gitlab bot into the baserock_webserver machine | Sam Thursfield | 2017-10-23 | 6 | -10/+27 | |
| | | | | A few changes required to get it running on Fedora, but nothing major. | |||||
* | baserock_ostree: Note that we're on Fedora 26 now. | Sam Thursfield | 2017-10-23 | 2 | -2/+2 | |
| | ||||||
* | Update hosts and haproxy to point to the new webserver | Sam Thursfield | 2017-10-23 | 2 | -14/+3 | |
| | ||||||
* | baserock_webserver: Update after redeployment | Sam Thursfield | 2017-10-23 | 5 | -63/+68 | |
| | | | | | | | It now only serves download.baserock.org; the docs are hosted on GitLab pages. It will also serve paste, IRC logging and IRC bots soon! | |||||
* | Remove Mason definitions | Sam Thursfield | 2017-10-23 | 6 | -127/+0 | |
| | ||||||
* | baserock_ostree: Update and fix the Ansible scripts | Sam Thursfield | 2017-10-23 | 1 | -5/+4 | |
| | ||||||
* | baserock_frontend: Update for new OSTree host | Sam Thursfield | 2017-10-23 | 1 | -2/+2 | |
| | ||||||
* | baserock_frontend: Remove obsolete servers from haproxy configuration | Sam Thursfield | 2017-10-23 | 1 | -36/+5 | |
| | ||||||
* | Remove obsolete hosts from list | Sam Thursfield | 2017-10-23 | 1 | -8/+0 | |
| | ||||||
* | Update baserock_ostree deployment instructions | Sam Thursfield | 2017-10-23 | 2 | -8/+8 | |
| | ||||||
* | ansible.cfg: Route SSH traffic to internal hosts through new frontend IP | Sam Thursfield | 2017-10-23 | 1 | -1/+1 | |
| | ||||||
* | README: Update IP of git.baserock.org | Sam Thursfield | 2017-10-23 | 1 | -1/+1 | |
| | | | | | | This machine wasn't redeployed since the tool to do that (Morph) is obsolete. We just copied the root disk and /home volume across to the new provider. | |||||
* | Redeployment of baserock_frontend at CityCloud | Sam Thursfield | 2017-10-23 | 3 | -50/+12 | |
| | | | | | The backup user's SSH public key was unnecessarily encrypted. I've decrypted it for convenience. | |||||
* | firewall: Remove obsolete security groups | Sam Thursfield | 2017-10-23 | 1 | -99/+1 | |
| | ||||||
* | README: Fix CA cert generation instructionssam/update-ca-certs | Sam Thursfield | 2017-10-20 | 1 | -2/+2 | |
| | ||||||
* | Update SSL certificates | Sam Thursfield | 2017-10-20 | 10 | -1478/+1463 | |
| | | | | Old ones had expired | |||||
* | Merge branch 'sam/readme-in-gitlab' into 'master' | Ben Brown | 2017-10-13 | 1 | -0/+0 | |
|\ | | | | | | | | | Rename README so it gets displayed in GitLab See merge request baserock/infrastructure!10 | |||||
| * | Rename README so it gets displayed in GitLab | Sam Thursfield | 2017-10-13 | 1 | -0/+0 | |
|/ | ||||||
* | README.mdwn: Fix SSL certificate instructions | Sam Thursfield | 2017-10-04 | 1 | -0/+6 | |
| | | | | I mangled these in 7018cd6011afda6afca722719465538e63f00a6a. | |||||
* | Merge branch 'document-ci' into 'master' | Sam Thursfield | 2017-10-04 | 1 | -22/+33 | |
|\ | | | | | | | | | Document how the Baserock runners for GitLab CI are set up See merge request baserock/infrastructure!9 | |||||
| * | README.mdwn: Document GitLab CI runners setupdocument-ci | Sam Thursfield | 2017-10-04 | 1 | -0/+36 | |
| | | ||||||
| * | README.mdwn: No need to update SSL certificates for the obsolete services | Sam Thursfield | 2017-10-04 | 1 | -26/+1 | |
| | | ||||||
* | | Merge branch 'kill-obsolete' into 'master' | Pedro Alvarez Piedehierro | 2017-10-04 | 95 | -3827/+8 | |
|\ \ | |/ | | | | | | | Kill obsolete system definitions See merge request baserock/infrastructure!8 | |||||
| * | README.mdwn: Remove "creating new repos" sectionkill-obsolete | Sam Thursfield | 2017-10-04 | 1 | -33/+0 | |
| | | | | | | | | | | We now use GitLab for Git hosting, so it's pretty obvious how to create repos. | |||||
| * | README.mdwn: Update intro | Sam Thursfield | 2017-10-04 | 1 | -8/+8 | |
| | | | | | | | | We no longer want everything to be hosted on Baserock eventually. | |||||
| * | Remove vestigial Opengrok system | Sam Thursfield | 2017-10-04 | 8 | -261/+0 | |
| | | | | | | | | This never got finished. Try http://codesearch.debian.net/ :-) | |||||
| * | Remove definitions for obsolete systems | Sam Thursfield | 2017-10-04 | 86 | -3216/+0 | |
| | | | | | | | | | | | | | | Some of these systems are still up for now, but their demise has ben announced: https://listmaster.pepperfish.net/pipermail/baserock-dev-baserock.org/2017-September/013812.html | |||||
| * | README.mdwn: Remove documentation for obsolete systems | Sam Thursfield | 2017-10-04 | 1 | -309/+0 | |
|/ | ||||||
* | Merge branch 'sam/jonathanmaw-ostree-access' into 'master' | Pedro Alvarez Piedehierro | 2017-09-29 | 2 | -0/+2 | |
|\ | | | | | | | | | Give Jonathan Maw push access to ostree.baserock.org See merge request baserock/infrastructure!7 | |||||
| * | Give Jonathan Maw push access to ostree.baserock.org | Sam Thursfield | 2017-09-29 | 2 | -0/+2 | |
|/ | | | | | Jonathan has done an armv8l64 bootstrap with BuildStream and I want to get all of those artifacts into our cache. | |||||
* | Merge branch 'sam/update-ostree' into 'master' | Sam Thursfield | 2017-07-21 | 4 | -1/+34 | |
|\ | | | | | | | | | baserock_ostree: Update for changes in BuildStream See merge request !6 | |||||
| * | baserock_ostree: Update for changes in BuildStreamsam/update-ostree | Sam Thursfield | 2017-07-21 | 4 | -1/+34 | |
|/ | | | | | | | | | We now need a timer job to update the summary file, see: https://buildstream.gitlab.io/buildstream/artifacts.html#summary-file-updates I also updated BuildStream which changes the artifact push protocol. Sadly the protocol isn't versioned yet so old versions will now fail to push with weird errors. | |||||
* | Merge branch 'sam/ostree' into 'master' | Pedro Alvarez Piedehierro | 2017-07-13 | 18 | -1150/+1360 | |
|\ | | | | | | | | | Add ostree.baserock.org definitions See merge request !5 | |||||
| * | baserock_ostree: Add the private GitLab CI key (encrypted)sam/ostree | Sam Thursfield | 2017-07-13 | 1 | -0/+167 | |
| | | ||||||
| * | baserock_ostree: Enable write access | Sam Thursfield | 2017-07-13 | 7 | -2/+37 | |
| | | | | | | | | | | | | | | | | | | | | | | So far this is limited to the existing Baserock ops team, and a new key that I will try to install into our GitLab CI configuration so that build runners can push artifacts. We don't to hand out access too widely because we currently don't do any verification that the submitted artifacts actually corresponds to the cache key that it's supposed to. This is fine as long as access is limited to autobuilders that we control and trusted developers. | |||||
| * | firewall.yml: Open morph-cache-server port on git-server security group | Sam Thursfield | 2017-07-13 | 1 | -1/+11 | |
| | | | | | | | | | | | | This is used by YBD for resolving remote Git commit SHA1s to tree SHA1s. Previously the port was opened by the shared-artifact-cache security group, but it no longer is. |