From 6abea25563d2e83f3400907c50b905c307eb425a Mon Sep 17 00:00:00 2001 From: Kevin Fenzi Date: Oct 31 2023 20:46:57 +0000 Subject: proxies: registry: let ppc64le builders directly access registry f39 adds flatpaks for ppc64le, so we need to allow ppc64le builders to access the registry directly so they can install flatpaks in the ostree install images. Without this they try and get them from the cdn and the builder firewall blocks them and it times out and the image fails to compose. Signed-off-by: Kevin Fenzi --- diff --git a/roles/httpd/reverseproxy/templates/reversepassproxy.registry-generic.conf b/roles/httpd/reverseproxy/templates/reversepassproxy.registry-generic.conf index 39ff7db..24b8dde 100644 --- a/roles/httpd/reverseproxy/templates/reversepassproxy.registry-generic.conf +++ b/roles/httpd/reverseproxy/templates/reversepassproxy.registry-generic.conf @@ -21,6 +21,7 @@ RewriteCond %{REMOTE_HOST} !^osbs-*$ # builders shouldn't use the cdn for flatpak building. RewriteCond expr "! -R '10.3.169.0/24'" RewriteCond expr "! -R '10.3.170.0/24'" +RewriteCond expr "! -R '10.3.171.0/24'" RewriteRule ^/v2/(.*)/blobs/([a-zA-Z0-9:]*) https://cdn.registry.fedoraproject.org/v2/$1/blobs/$2 [R] {% endif %}