PR#1687: Fedora 37 is EOL - fedora-infra/ansible

fedora-infra / ansible

#1687 Fedora 37 is EOL

Merged 2 years ago by humaton. Opened 2 years ago by humaton.

fedora-infra/ humaton/ansible f37_eol into main

Fedora 37 is EOL

Tomas Hrcka • 2 years ago

2d4220c

roles/bodhi2/backend/files/new-updates-sync

file modified

-50

		`@@ -124,56 +124,6 @@`
		`'dest': os.path.join(FEDORAALTDEST, 'testing', '38', 'Modular')}`
		`]}}`
		`},`
		`- 'f37': {'topic': 'fedora',`
		`- 'version': '37',`
		`- 'modules': ['fedora', 'fedora-secondary'],`
		`- 'repos': {'updates': {`
		`- 'from': 'f37-updates',`
		`- 'ostrees': [{'ref': 'fedora/37/%(arch)s/updates/silverblue',`
		`- 'dest': OSTREEDEST,`
		`- 'arches': ['x86_64', 'ppc64le', 'aarch64']},`
		`- {'ref': 'fedora/37/%(arch)s/updates/kinoite',`
		`- 'dest': OSTREEDEST,`
		`- 'arches': ['x86_64', 'ppc64le', 'aarch64']}],`
		`- 'to': [{'arches': ['x86_64', 'aarch64', 'source'],`
		`- 'dest': os.path.join(FEDORADEST, '37', 'Everything')},`
		`- {'arches': ['ppc64le', 's390x'],`
		`- 'dest': os.path.join(FEDORAALTDEST, '37', 'Everything')}`
		`- ]},`
		`- 'updates-testing': {`
		`- 'from': 'f37-updates-testing',`
		`- 'ostrees': [{'ref': 'fedora/37/%(arch)s/testing/silverblue',`
		`- 'dest': OSTREEDEST,`
		`- 'arches': ['x86_64', 'ppc64le', 'aarch64']},`
		`- {'ref': 'fedora/37/%(arch)s/testing/kinoite',`
		`- 'dest': OSTREEDEST,`
		`- 'arches': ['x86_64', 'ppc64le', 'aarch64']}],`
		`- 'to': [{'arches': ['x86_64', 'aarch64', 'source'],`
		`- 'dest': os.path.join(FEDORADEST, 'testing', '37', 'Everything')},`
		`- {'arches': ['ppc64le', 's390x'],`
		`- 'dest': os.path.join(FEDORAALTDEST, 'testing', '37', 'Everything')}`
		`- ]}}`
		`- },`
		`- 'f37m': {'topic': 'fedora',`
		`- 'version': '37m',`
		`- 'modules': ['fedora', 'fedora-secondary'],`
		`- 'repos': {'updates': {`
		`- 'from': 'f37-modular-updates',`
		`- 'ostrees': [],`
		`- 'to': [{'arches': ['x86_64', 'aarch64', 'source'],`
		`- 'dest': os.path.join(FEDORADEST, '37', 'Modular')},`
		`- {'arches': ['ppc64le', 's390x'],`
		`- 'dest': os.path.join(FEDORAALTDEST, '37', 'Modular')}`
		`- ]},`
		`- 'updates-testing': {`
		`- 'from': 'f37-modular-updates-testing',`
		`- 'ostrees': [],`
		`- 'to': [{'arches': ['x86_64', 'aarch64', 'source'],`
		`- 'dest': os.path.join(FEDORADEST, 'testing', '37', 'Modular')},`
		`- {'arches': ['ppc64le', 's390x'],`
		`- 'dest': os.path.join(FEDORAALTDEST, 'testing', '37', 'Modular')}`
		`- ]}}`
		`- },`
		`'epel9': {'topic': 'epel',`
		`'version': '9',`
		`'modules': ['epel'],`

roles/bodhi2/backend/tasks/main.yml

file modified

+1 -1

		`@@ -106,7 +106,7 @@`
		`# bodhi2/backend/files/koji_sync_listener.py`
		`# This cronjob runs only once a day. The listener script runs reactively.`
		`cron: name="owner-sync" minute="15" hour="4" user="root"`
		`- job="/usr/local/bin/lock-wrapper owner-sync '/usr/local/bin/owner-sync-pagure f40 f39 f39-flatpak f38 f38-container f38-modular f37 f37-container f37-modular epel9 epel9-next epel8 epel8-next epel7 module-package-list modular'"`
		`+ job="/usr/local/bin/lock-wrapper owner-sync '/usr/local/bin/owner-sync-pagure f40 f39 f39-flatpak f38 f38-container f38-modular epel9 epel9-next epel8 epel8-next epel7 module-package-list modular'"`
		`cron_file=update-koji-owner`
		`user=apache`
		`when: env == "production"`

roles/bodhi2/backend/templates/koji_sync_listener.toml

file modified

-4

		`@@ -46,10 +46,6 @@`
		`"f38-container",`
		`"f38-modular",`
		`"f38-flatpak",`
		`- "f37",`
		`- "f37-container",`
		`- "f37-modular",`
		`- "f37-flatpak",`
		`"epel9",`
		`"epel9-next",`
		`"epel8",`

roles/koji_hub/templates/hub.conf.j2

file modified

-1

		`@@ -197,7 +197,6 @@`
		`tag f40-build :: allow`
		`tag f39-build :: allow`
		`tag f38-build :: allow`
		`- tag f37-build :: allow`
		`tag eln-build :: allow`
		`tag epel9-next-build :: allow`
		`tag epel9-build :: allow`

roles/mbs/common/files/default-modules.production/platform-f37.yaml

file removed

-28

		`@@ -1,28 +0,0 @@`
		`- data:`
		`- description: Fedora 37 traditional base`
		`- license:`
		`- module: [MIT]`
		`- name: platform`
		`- profiles:`
		`- buildroot:`
		`- rpms: [bash, bzip2, coreutils, cpio, diffutils, fedora-release, findutils, gawk,`
		`- glibc-minimal-langpack, grep, gzip, info, make, patch, redhat-rpm-config,`
		`- rpm-build, sed, shadow-utils, tar, unzip, util-linux, which, xz]`
		`- srpm-buildroot:`
		`- rpms: [bash, fedora-release, fedpkg-minimal, glibc-minimal-langpack, gnupg2,`
		`- redhat-rpm-config, rpm-build, shadow-utils]`
		`- stream: f37`
		`- summary: Fedora 37 traditional base`
		`- context: 00000000`
		`- version: 1`
		`- xmd:`
		`- mbs:`
		`- buildrequires: {}`
		`- commit: f37`
		`- requires: {}`
		`- koji_tag: module-f37-build`
		`- mse: TRUE`
		`- virtual_streams: [fedora]`
		`- document: modulemd`
		`- version: 1`
		`-`
		`\ No newline at end of file`

roles/releng/files/cloud-updates

file modified

+2 -2

		`@@ -7,5 +7,5 @@`
		15 7 * * * root TMPDIR=`mktemp -d /tmp/CloudF38.XXXXXX` && chmod 755 $TMPDIR && pushd $TMPDIR && git clone -n https://pagure.io/pungi-fedora.git && cd pungi-fedora && git checkout f38 && LANG=en_US.UTF-8 ./cloud-nightly.sh RC-$(date "+\%Y\%m\%d").0 && popd && rm -rf $TMPDIR

		`# Fedora 37 Cloud nightly compose`
		`- MAILTO=releng-cron@lists.fedoraproject.org`
		- 15 8 * * * root TMPDIR=`mktemp -d /tmp/CloudF37.XXXXXX` && chmod 755 $TMPDIR && pushd $TMPDIR && git clone -n https://pagure.io/pungi-fedora.git && cd pungi-fedora && git checkout f37 && LANG=en_US.UTF-8 ./cloud-nightly.sh RC-$(date "+\%Y\%m\%d").0 && popd && rm -rf $TMPDIR
		`\ No newline at end of file`
		`+ #MAILTO=releng-cron@lists.fedoraproject.org`
		+ #15 8 * * * root TMPDIR=`mktemp -d /tmp/CloudF37.XXXXXX` && chmod 755 $TMPDIR && pushd $TMPDIR && git clone -n https://pagure.io/pungi-fedora.git && cd pungi-fedora && git checkout f37 && LANG=en_US.UTF-8 ./cloud-nightly.sh RC-$(date "+\%Y\%m\%d").0 && popd && rm -rf $TMPDIR
		`\ No newline at end of file`

roles/releng/files/container-updates

file modified

+2 -6

		`@@ -7,9 +7,5 @@`
		45 6 * * * root TMPDIR=`mktemp -d /tmp/containerF38.XXXXXX` && chmod 755 $TMPDIR && pushd $TMPDIR && git clone -n https://pagure.io/pungi-fedora.git && cd pungi-fedora && git checkout f38 && LANG=en_US.UTF-8 ./container-nightly.sh RC-$(date "+\%Y\%m\%d").0 && popd && rm -rf $TMPDIR

		`#Fedora 37 Container Updates nightly compose`
		`- MAILTO=releng-cron@lists.fedoraproject.org`
		- 45 5 * * * root TMPDIR=`mktemp -d /tmp/containerF37.XXXXXX` && chmod 755 $TMPDIR && pushd $TMPDIR && git clone -n https://pagure.io/pungi-fedora.git && cd pungi-fedora && git checkout f37 && LANG=en_US.UTF-8 ./container-nightly.sh RC-$(date "+\%Y\%m\%d").0 && popd && rm -rf $TMPDIR
		`-`
		`- # Fedora 36 Container Updates nightly compose`
		`- # MAILTO=releng-cron@lists.fedoraproject.org`
		- # 45 7 * * * root TMPDIR=`mktemp -d /tmp/containerF36.XXXXXX` && chmod 755 $TMPDIR && pushd $TMPDIR && git clone -n https://pagure.io/pungi-fedora.git && cd pungi-fedora && git checkout f36 && LANG=en_US.UTF-8 ./container-nightly.sh RC-$(date "+\%Y\%m\%d").0 && popd && rm -rf $TMPDIR
		`+ #MAILTO=releng-cron@lists.fedoraproject.org`
		+ #45 5 * * * root TMPDIR=`mktemp -d /tmp/containerF37.XXXXXX` && chmod 755 $TMPDIR && pushd $TMPDIR && git clone -n https://pagure.io/pungi-fedora.git && cd pungi-fedora && git checkout f37 && LANG=en_US.UTF-8 ./container-nightly.sh RC-$(date "+\%Y\%m\%d").0 && popd && rm -rf $TMPDIR

roles/robosignatory/templates/robosignatory.toml.j2

file modified

-82

		`@@ -114,16 +114,6 @@`
		`keyid = "{{ (env == 'production')\|ternary('47dd8ef9', 'd300e724') }}"`

		`[[consumer_config.koji_instances.primary.tags]]`
		`- from = "f37-infra-candidate"`
		`- to = "f37-infra-stg"`
		`- key = "{{ (env == 'production')\|ternary('fedora-infra', 'testkey') }}"`
		`- keyid = "{{ (env == 'production')\|ternary('47dd8ef9', 'd300e724') }}"`
		`- {% if env == "production" %}`
		`- # ima file signing - enabled in f37`
		`- file_signing_key = "fedora-37-ima"`
		`- {% endif %}`
		`-`
		`- [[consumer_config.koji_instances.primary.tags]]`
		`from = "f38-infra-candidate"`
		`to = "f38-infra-stg"`
		`key = "{{ (env == 'production')\|ternary('fedora-infra', 'testkey') }}"`
		`@@ -156,16 +146,6 @@`
		`# Gated coreos-pool tag`

		`[[consumer_config.koji_instances.primary.tags]]`
		`- from = "f37-coreos-signing-pending"`
		`- to = "coreos-pool"`
		`- key = "{{ (env == 'production')\|ternary('fedora-37', 'testkey') }}"`
		`- keyid = "{{ (env == 'production')\|ternary('5323552a', 'd300e724') }}"`
		`- {% if env == "production" %}`
		`- # ima file signing - enabled in f37`
		`- file_signing_key = "fedora-37-ima"`
		`- {% endif %}`
		`-`
		`- [[consumer_config.koji_instances.primary.tags]]`
		`from = "f38-coreos-signing-pending"`
		`to = "coreos-pool"`
		`key = "{{ (env == 'production')\|ternary('fedora-38', 'testkey') }}"`
		`@@ -305,58 +285,6 @@`
		`keyid = "{{ (env == 'production')\|ternary('eb10b464', 'd300e724') }}"`
		`type = "modular"`

		`- [[consumer_config.koji_instances.primary.tags]]`
		`- from = "f37-signing-pending"`
		`- to = "f37-updates-testing-pending"`
		`- key = "{{ (env == 'production')\|ternary('fedora-37', 'testkey') }}"`
		`- keyid = "{{ (env == 'production')\|ternary('5323552a', 'd300e724') }}"`
		`- {% if env == "production" %}`
		`- # ima file signing - disable for now per fesco`
		`- file_signing_key = "fedora-37-ima"`
		`- {% endif %}`
		`-`
		`- [consumer_config.koji_instances.primary.tags.sidetags]`
		`- pattern = 'f37-build-side-<seq_id>'`
		`- from = '<sidetag>-signing-pending'`
		`- to = '<sidetag>-testing-pending'`
		`- trusted_taggers = ['bodhi']`
		`- {% if env == "production" %}`
		`- # ima file signing - disable for now per fesco`
		`- file_signing_key = "fedora-37-ima"`
		`- {% endif %}`
		`-`
		`- [[consumer_config.koji_instances.primary.tags]]`
		`- from = "f37-pending"`
		`- to = "f37"`
		`- key = "{{ (env == 'production')\|ternary('fedora-37', 'testkey') }}"`
		`- keyid = "{{ (env == 'production')\|ternary('5323552a', 'd300e724') }}"`
		`- {% if env == "production" %}`
		`- # ima file signing - disable for now per fesco`
		`- file_signing_key = "fedora-37-ima"`
		`- {% endif %}`
		`-`
		`- [[consumer_config.koji_instances.primary.tags]]`
		`- from = "f37-modular-pending"`
		`- to = "f37-modular"`
		`- key = "{{ (env == 'production')\|ternary('fedora-37', 'testkey') }}"`
		`- keyid = "{{ (env == 'production')\|ternary('5323552a', 'd300e724') }}"`
		`- type = "modular"`
		`- {% if env == "production" %}`
		`- # ima file signing - disable for now per fesco`
		`- file_signing_key = "fedora-37-ima"`
		`- {% endif %}`
		`-`
		`- [[consumer_config.koji_instances.primary.tags]]`
		`- from = "f37-modular-signing-pending"`
		`- to = "f37-modular-updates-testing-pending"`
		`- key = "{{ (env == 'production')\|ternary('fedora-37', 'testkey') }}"`
		`- keyid = "{{ (env == 'production')\|ternary('5323552a', 'd300e724') }}"`
		`- type = "modular"`
		`- {% if env == "production" %}`
		`- # ima file signing - disable for now per fesco`
		`- file_signing_key = "fedora-37-ima"`
		`- {% endif %}`
		`-`
		`# Gated bodhi updates`

		`[[consumer_config.koji_instances.primary.tags]]`
		`@@ -481,16 +409,6 @@`
		`file_signing_key = "fedora-38-ima"`
		`{% endif %}`

		`- [[consumer_config.koji_instances.primary.tags]]`
		`- from = "f37-openh264"`
		`- to = "f37-openh264"`
		`- key = "{{ (env == 'production')\|ternary('fedora-37', 'testkey') }}"`
		`- keyid = "{{ (env == 'production')\|ternary('5323552a', 'd300e724') }}"`
		`- {% if env == "production" %}`
		`- # ima file signing - enabled in f37`
		`- file_signing_key = "fedora-37-ima"`
		`- {% endif %}`
		`-`
		`# f38 resigning`
		`[[consumer_config.koji_instances.primary.tags]]`
		`from = "f38"`