summaryrefslogtreecommitdiffstats
path: root/roles/koji_builder/templates/kojid.conf
blob: bf3232c2aff6fe758116831ab28e41af35f5be57 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
[kojid]
; The number of seconds to sleep between tasks
; sleeptime=15

{% if host in groups['buildvm_s390x'] and host in groups['runroot'] %}
; The maximum number of jobs that kojid will handle at a time
maxjobs=1
{% else %}
; The maximum number of jobs that kojid will handle at a time
maxjobs=25
{% endif %}

; The minimum amount of free space (in MBs) required for each build root
; minspace=8192

; The directory root where work data can be found from the koji hub
; topdir=/mnt/koji

; Disable keepalive for now since it's not working in f23.
keepalive=False

rpmbuild_timeout=172800

; Set oz timeout higher to allow aarch64, ppc64{le} and s390x to finish.
; Install timeout(seconds) for image build
; if it's unset, use the number in /etc/oz/oz.cfg, supported since oz-0.16.0
oz_install_timeout=14400
use_createrepo_c=True

; The default time to clean up a failed buildroot is 4 hours. 
; We find that it's sometimes helpfull to have it available the next day
; especially for hard to reproduce jobs that run as part of the composes.
; So, up this to 24 hours so we have time to look at failures.
failed_buildroot_lifetime=86400

{% if host in groups['buildvm_s390x'] %}
# s390x builders use a local varnish cache
topurl = http://kojipkgs-cache01.s390.fedoraproject.org https://kojipkgs01.fedoraproject.org https://kojipkgs02.fedoraproject.org
{% elif host in groups['buildvm_s390x_stg'] %}
# s390x staging builder uses a local varnish cache
topurl = http://kojipkgs-cache01.stg.s390.fedoraproject.org {{koji_topurl}}
{% elif koji_topurl == 'https://kojipkgs.fedoraproject.org/' %}
; add some additional urls for failover
topurl = {{koji_topurl}} https://kojipkgs01.fedoraproject.org https://kojipkgs02.fedoraproject.org
{% else %}
;url of package download site
topurl = {{koji_topurl}}

{% endif %}
; The directory root for temporary storage
; workdir=/tmp/koji

; The directory root for mock
; mockdir=/var/lib/mock

; The user to run as when doing builds
; mockuser=kojibuilder

; The vendor to use in rpm headers
vendor=Fedora Project

; The packager to use in rpm headers
packager=Fedora Project

; the distribution to use in rpm headers
distribution=Fedora Project

; The _host string to use in mock
mockhost=redhat-linux-gnu

; The URL for the xmlrpc server
server={{koji_server_url}}

{% if env == 'staging' %}
; The URL for the packages tree
pkgurl=http://kojipkgs.stg.fedoraproject.org/packages
{% endif %}

{% if env == 'staging' %}
; A whitespace-separated list of hostname:repository pairs that kojid is authorized to checkout from (no quotes)
allowed_scms=
    !src.stg.fedoraproject.org:/pagure/fork/*
    !src.stg.fedoraproject.org:/pagure/forks/*
    !pkgs.stg.fedoraproject.org:/pagure/fork/*
    !pkgs.stg.fedoraproject.org:/pagure/forks/*
    !src.stg.fedoraproject.org:/fork/*
    !src.stg.fedoraproject.org:/forks/*
    !src.stg.fedoraproject.org:/cgit/*
    src.stg.fedoraproject.org:/container/*:false
    src.stg.fedoraproject.org:/flatpaks/*:false
    src.stg.fedoraproject.org:/git/rpms/*:false:fedpkg,sources
    !src.stg.fedoraproject.org:/git/*
    !pkgs.stg.fedoraproject.org:/fork/*
    !pkgs.stg.fedoraproject.org:/forks/*
    !pkgs.stg.fedoraproject.org:/cgit/*
    !pkgs.stg.fedoraproject.org:/git/*
    pkgs.stg.fedoraproject.org:/container/*:false
    pkgs.stg.fedoraproject.org:/flatpaks/*:false
    pkgs.stg.fedoraproject.org:/rpms/*:false:fedpkg,sources
    pkgs.stg.fedoraproject.org:/*:false:fedpkg,sources
    src.stg.fedoraproject.org:/*:false:fedpkg,sources
    pkgs.fedoraproject.org:/rpms/*:false:fedpkg,sources
    pkgs.fedoraproject.org:/*:false:fedpkg,sources
    pagure.io:/fedora-kickstarts.git:false
    src.fedoraproject.org:/*:false:fedpkg,sources
{% else %}
; A whitespace-separated list of hostname:repository pairs that kojid is authorized to checkout from (no quotes)
allowed_scms=
    !src.fedoraproject.org:/pagure/fork/*
    !src.fedoraproject.org:/pagure/forks/*
    !pkgs.fedoraproject.org:/pagure/fork/*
    !pkgs.fedoraproject.org:/pagure/forks/*
    !src.fedoraproject.org:/fork/*
    !src.fedoraproject.org:/forks/*
    !src.fedoraproject.org:/cgit/*
    !src.fedoraproject.org:/git/*
    !pkgs.fedoraproject.org:/fork/*
    !pkgs.fedoraproject.org:/forks/*
    !pkgs.fedoraproject.org:/cgit/*
    !pkgs.fedoraproject.org:/git/*
    pkgs.fedoraproject.org:/*:false:fedpkg,sources
    pagure.io:/fedora-kickstarts.git:false
    src.fedoraproject.org:/*:false:fedpkg,sources
    pagure.io:/fork/*/fedora-kickstarts.git:false
{% endif %}

; allow tasks to continue to completion if a sibling fails
; the parent task will fail but all child tasks will complete
build_arch_can_fail = true

; The mail host to use for sending email notifications
smtphost=bastion.phx2.fedoraproject.org

; The From address used when sending email notifications
from_addr=Fedora Koji Build System <buildsys@fedoraproject.org>

;configuration for SSL athentication
serverca = /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem

; Kerberos configuration
krb_principal = compile/{{ inventory_hostname }}@{{ ipa_realm }}
keytab = /etc/kojid/kojid.keytab
krbservice = host
krb_rdns = false

{% if 'runroot' in group_names %}
; Config for it lives in /etc/kojid/runroot.conf
plugins = runroot

{% else %}

{% if ansible_architecture == 'x86_64' and not inventory_hostname.startswith('bkernel') %}
plugins = builder_containerbuild
{% else %}
plugins =
{% endif %}

{% endif %}