Re: FBR: Add proxy101/proxy110 to the OSBS whitelsit
On Tue, Sep 25, 2018 at 07:36:32PM -, Patrick マルタインアンドレアス Uiterwijk wrote: > Hi all, > > Can I get +1s for the patch underneath? > This adds proxy101/proxy110 to the whitelist for OSBS for candidate-registry > pushing. > > Patrick > > > commit ef9fa10389a6a60843c96e4855dbdcb604583baa (HEAD -> master) > Author: Patrick Uiterwijk > Date: Tue Sep 25 21:34:39 2018 +0200 > > Whitelist proxy101/proxy110 for OSBS > > It turns out that these were never added to the OSBS whitelist, breaking > about > 50% of all builds Interesting idea, let's try to improve this percentage, +1 Pierre > Signed-off-by: Patrick Uiterwijk > > diff --git a/files/osbs/fix-docker-iptables.production > b/files/osbs/fix-docker-iptables.production > index ee03776a5..f1a50781c 100644 > --- a/files/osbs/fix-docker-iptables.production > +++ b/files/osbs/fix-docker-iptables.production > @@ -46,6 +46,8 @@ iptables -A FILTER_FORWARD -p udp -m udp -d 10.5.126.21 > --dport 53 -j ACCEPT > iptables -A FILTER_FORWARD -p udp -m udp -d 10.5.126.22 --dport 53 -j ACCEPT > > # mirrors.fp.o > +iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.8 --dport 443 -j ACCEPT > +iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.9 --dport 443 -j ACCEPT > iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.51 --dport 443 -j ACCEPT > iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.52 --dport 443 -j ACCEPT > > @@ -53,6 +55,8 @@ iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.52 > --dport 443 -j ACCEPT > iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.23 --dport 443 -j ACCEPT > > # Kerberos > +iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.8 --dport 1088 -j ACCEPT > +iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.9 --dport 1088 -j ACCEPT > iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.51 --dport 1088 -j > ACCEPT > iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.52 --dport 1088 -j > ACCEPT > ___ > infrastructure mailing list -- infrastructure@lists.fedoraproject.org > To unsubscribe send an email to infrastructure-le...@lists.fedoraproject.org > Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedoraproject.org/archives/list/infrastructure@lists.fedoraproject.org pgpxPGWI30Cx5.pgp Description: PGP signature ___ infrastructure mailing list -- infrastructure@lists.fedoraproject.org To unsubscribe send an email to infrastructure-le...@lists.fedoraproject.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/infrastructure@lists.fedoraproject.org
Re: FBR: Add proxy101/proxy110 to the OSBS whitelsit
On 09/25/2018 09:36 PM, Patrick マルタインアンドレアス Uiterwijk wrote: > Hi all, > > Can I get +1s for the patch underneath? > This adds proxy101/proxy110 to the whitelist for OSBS for candidate-registry > pushing. +1 definitely > > Patrick > > > commit ef9fa10389a6a60843c96e4855dbdcb604583baa (HEAD -> master) > Author: Patrick Uiterwijk > Date: Tue Sep 25 21:34:39 2018 +0200 > > Whitelist proxy101/proxy110 for OSBS > > It turns out that these were never added to the OSBS whitelist, breaking > about > 50% of all builds > > Signed-off-by: Patrick Uiterwijk > > diff --git a/files/osbs/fix-docker-iptables.production > b/files/osbs/fix-docker-iptables.production > index ee03776a5..f1a50781c 100644 > --- a/files/osbs/fix-docker-iptables.production > +++ b/files/osbs/fix-docker-iptables.production > @@ -46,6 +46,8 @@ iptables -A FILTER_FORWARD -p udp -m udp -d 10.5.126.21 > --dport 53 -j ACCEPT > iptables -A FILTER_FORWARD -p udp -m udp -d 10.5.126.22 --dport 53 -j ACCEPT > > # mirrors.fp.o > +iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.8 --dport 443 -j ACCEPT > +iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.9 --dport 443 -j ACCEPT > iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.51 --dport 443 -j ACCEPT > iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.52 --dport 443 -j ACCEPT > > @@ -53,6 +55,8 @@ iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.52 > --dport 443 -j ACCEPT > iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.23 --dport 443 -j ACCEPT > > # Kerberos > +iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.8 --dport 1088 -j ACCEPT > +iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.9 --dport 1088 -j ACCEPT > iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.51 --dport 1088 -j > ACCEPT > iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.52 --dport 1088 -j > ACCEPT > ___ > infrastructure mailing list -- infrastructure@lists.fedoraproject.org > To unsubscribe send an email to infrastructure-le...@lists.fedoraproject.org > Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedoraproject.org/archives/list/infrastructure@lists.fedoraproject.org > -- Mikolaj Izdebski Senior Software Engineer, Red Hat IRC: mizdebsk ___ infrastructure mailing list -- infrastructure@lists.fedoraproject.org To unsubscribe send an email to infrastructure-le...@lists.fedoraproject.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/infrastructure@lists.fedoraproject.org
FBR: Add proxy101/proxy110 to the OSBS whitelsit
Hi all, Can I get +1s for the patch underneath? This adds proxy101/proxy110 to the whitelist for OSBS for candidate-registry pushing. Patrick commit ef9fa10389a6a60843c96e4855dbdcb604583baa (HEAD -> master) Author: Patrick Uiterwijk Date: Tue Sep 25 21:34:39 2018 +0200 Whitelist proxy101/proxy110 for OSBS It turns out that these were never added to the OSBS whitelist, breaking about 50% of all builds Signed-off-by: Patrick Uiterwijk diff --git a/files/osbs/fix-docker-iptables.production b/files/osbs/fix-docker-iptables.production index ee03776a5..f1a50781c 100644 --- a/files/osbs/fix-docker-iptables.production +++ b/files/osbs/fix-docker-iptables.production @@ -46,6 +46,8 @@ iptables -A FILTER_FORWARD -p udp -m udp -d 10.5.126.21 --dport 53 -j ACCEPT iptables -A FILTER_FORWARD -p udp -m udp -d 10.5.126.22 --dport 53 -j ACCEPT # mirrors.fp.o +iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.8 --dport 443 -j ACCEPT +iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.9 --dport 443 -j ACCEPT iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.51 --dport 443 -j ACCEPT iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.52 --dport 443 -j ACCEPT @@ -53,6 +55,8 @@ iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.52 --dport 443 -j ACCEPT iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.23 --dport 443 -j ACCEPT # Kerberos +iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.8 --dport 1088 -j ACCEPT +iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.9 --dport 1088 -j ACCEPT iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.51 --dport 1088 -j ACCEPT iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.52 --dport 1088 -j ACCEPT ___ infrastructure mailing list -- infrastructure@lists.fedoraproject.org To unsubscribe send an email to infrastructure-le...@lists.fedoraproject.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/infrastructure@lists.fedoraproject.org
