Configuration for Mercurial module policy
- Dec 14, 2020
-
-
Georges Racinet authored
Example: mercurial['invocation']['module_policy'] = 'rust+c'
-
Georges Racinet authored
For Heptapod 0.18.0rc1, we'll have the Rust extensions built by default. We need to be able to reconfigure at any time to disable them. Leaving them disabled looks like the prudent option for now The Rails and Shell YaML configuration files are rendered with the whole `invocation` block, the `module_policy` key being also the one for those files, there was nothing to do for them once it got defined.
-
- Dec 11, 2020
-
-
Georges Racinet authored
This is already using the 0.18.0rc1 sources, but we lack the Mercurial module policy configurability.
-
- Dec 14, 2020
-
-
Georges Racinet authored
Just a Gitaly server version bump
-
- Dec 13, 2020
-
-
Georges Racinet authored
We thought for a while a version mismatch *before* the landmark 20.3 could have been the cause of the problems with the `gunicorn` console script, but it turned out to be somewhat independent. Anyway, pip 20.3 provides better version conflict analysis. Once our setup works with it, it will have gained more robustness and maintainability.
-
Georges Racinet authored
This should unbreak the `gunicorn` console script in current pre-rc1 Heptapod 0.18.0 images, hence our `hg-inner-http` service. These files are important for basic distribution functionality to work as expected. For instance, without them, this won't work: >>> from pkg_resources import working_set as ws, Requirement >>> ws.find(Requirement.parse('gunicorn')) The problem encountered with Gunicorn is that in our builds for the future Heptapod 0.18, its starter script changed to use the importlib/pkg_resource metadata (entry_points etc.), whereas in the Heptapod 0.17 package, it defaulted to the more direct: ``` #!/opt/gitlab/embedded/bin/python3.8 # -*- coding: utf-8 -*- import re import sys from gunicorn.app.wsgiapp import run if __name__ == '__main__': sys.argv[0] = re.sub(r'(-script\.pyw|\.exe)?$', '', sys.argv[0]) sys.exit(run()) ``` This is also what one gets if Gunicorn is reinstalled after the fact. The reason why it changed is obscure (could be a side effect of splitting the requirements file) and should be considered irrelevant, even if such non-determinism is irritative: Removing `dist-info` and `egg-info`, as 8591d0de6505 did, can only cause harm. We're still keeping the exclusion for `__pycache__` although Debian (hence the Ubuntu we're using) has tools for that. Consider for UPSTREAM, this is a drop in the ocean in terms of weight (less than 1MB, easily compressed).
-
Georges Racinet authored
Notably, builds can't work on most machines if they don't trust the Heptapod internal CACERT.
-
- Dec 12, 2020
-
-
Georges Racinet authored
Thankfully, Mercurial's `setup.py` does not trim unknown environment variables. Hoping the baked `env` is suitable. Otherwise we'd have to do the copy/update dance from `ENV`.
-
Georges Racinet authored
-
Georges Racinet authored
of course that's needed here as well, and in fact, both for the Kaniko script (if needed for S3 layers) and in the Docker build itself (to grab the .deb from download.heptapod.net). We avoid installing the authority during the build, so that we don't depend on a removal script to be sure that it's not trusted after this single download. It is even removed from /assets to avoid creating doubt.
-
Georges Racinet authored
As with other projects, download.heptapod.net is often just a local cache, whereas upload.heptapod.net is the primary that accepts SFTP connections.
-
Georges Racinet authored
Recent builds (yet on a different Omnibus branch) have shown a tendency to fail because of incompatibilities between header files of boringssl (vendored by grpcio) and openssl. It seems that preinstalling it independently has a tendency to just grab a wheel. Would be good enough to unblock us, and then we'll see.
-
- Dec 11, 2020
-
-
Georges Racinet authored
-
Georges Racinet authored
-
- Dec 12, 2020
-
-
Georges Racinet authored
The merge with 13.5.4 reverted it back to the internal GitLab development mirror. As with 8b1c53ac3585, this changes many versions. What matters for us is that: - it works, giving us a reliable build - running in the build environment with ALTERNATIVE_SOURCES=true (of course) does not create a local modification. These are refused by the checks.
-
- Dec 11, 2020
-
-
Georges Racinet authored
-
- Dec 07, 2020
-
-
GitLab Release Tools Bot authored
-
GitLab Release Tools Bot authored
-
GitLab Release Tools Bot authored
[ci skip]
-
- Dec 04, 2020
-
-
John Skarbek authored
This reverts merge request !59
-
GitLab Release Tools Bot authored
Patch bundler to not use temp directory as home See merge request gitlab-org/security/omnibus-gitlab!59
-
GitLab Release Tools Bot authored
Update libxml2 to version 2.9.10 See merge request gitlab-org/security/omnibus-gitlab!57
-
DJ Mountney authored
-
GitLab Release Tools Bot authored
Update GnuPG to version 2.2.23 See merge request gitlab-org/security/omnibus-gitlab!54
-
GitLab Release Tools Bot authored
Update GraphicsMagick to 1.3.35 and patch PNG vulnerability See merge request gitlab-org/security/omnibus-gitlab!62
-
- Nov 13, 2020
-
-
GitLab Release Tools Bot authored
-
GitLab Release Tools Bot authored
-
GitLab Release Tools Bot authored
-
GitLab Release Tools Bot authored
[ci skip]
-
- Nov 03, 2020
-
-
Balasankar "Balu" C authored
Adapting the patch from https://sourceforge.net/p/graphicsmagick/code/ci/50395430a37188d0d197e71bd85ed6dd0f649ee3/
-
- Nov 06, 2020
-
-
DJ Mountney authored
Patch for CVE-2019-3881
-
- Sep 28, 2020
-
-
Hossein Pursultani authored
-
- Nov 03, 2020
-
-
GitLab Release Tools Bot authored
-
GitLab Release Tools Bot authored
-
GitLab Release Tools Bot authored
-
GitLab Release Tools Bot authored
[ci skip]
-
John Skarbek authored
Prepare 13.5.3 release See merge request gitlab-org/omnibus-gitlab!4716
-
- Oct 26, 2020
-
-
Ian Baum authored
Set net.core.somaxconn kernel parameter for Puma Closes #5752 See merge request gitlab-org/omnibus-gitlab!4688 (cherry picked from commit 0cb950d318743f6641d7b56b72d64be4a302bb72) 59885c60 Set net.core.somaxconn kernel parameter for Puma
-
- Oct 28, 2020
-
-
Ian Baum authored
Implementation of PITR recovery before promotion Closes gitlab#225173 See merge request gitlab-org/omnibus-gitlab!4636 (cherry picked from commit 9ae9fcf7d55b1416dfa009e2c944f1a9672bd28a) 691a1fa5 Geo: Implement PITR recovery before promotion of secondary node 1171279d Apply 1 suggestion(s) to 1 file(s) 402e18c6 Apply suggestion. Better lsn file check fe0c04a3 Merge branch 'master' of gitlab.com:gitlab-org/omnibus-gitlab into pitr e3f99908 Apply 1 suggestion(s) to 1 file(s) 1d5781dc Merge branch 'pitr' of gitlab.com:gitlab-org/omnibus-gitlab into pitr 7a34d0da Apply 1 suggestion(s) to 1 file(s) 3e9c8592 Apply suggestions dbbccdee Merge branch 'pitr' of gitlab.com:gitlab-org/omnibus-gitlab into pitr 2ff5b783 Apply suggestions 8b9163ac Add suggestions 565f96c6 Apply suggestions 39b2465d Apply suggestions c8f5d0ab Merge remote-tracking branch 'origin/master' into pitr 0ba306f4 Fix part of Geo::PromoteToPrimaryNode specs 90c50385 Make recovery_to_point_in_time tio return true 8dd17632 Merge remote-tracking branch 'origin/master' into pitr 1af3bf5a Separate Promote DB task 8a521139 Update specs for the command split f068dfc3 Merge remote-tracking branch 'origin/master' into pitr 175a4efd Apply 1 suggestion(s) to 1 file(s) b1af4039 Remove io/console
-
- Nov 02, 2020
-
-
GitLab Release Tools Bot authored
-
GitLab Release Tools Bot authored
-
GitLab Release Tools Bot authored
-
GitLab Release Tools Bot authored
-
GitLab Release Tools Bot authored
[ci skip]
-
- Oct 22, 2020
-
-
GitLab Release Tools Bot authored
-
GitLab Release Tools Bot authored
-
GitLab Release Tools Bot authored
-
GitLab Release Tools Bot authored
[ci skip]
-
Robert Speicher authored
Prepare 13.5.1 release See merge request gitlab-org/omnibus-gitlab!4678
-
- Oct 20, 2020
-
-
DJ Mountney authored
Merge branch '5728-qa-tests-failing-after-group-was-explicitly-set-for-repositories_storages' into 'master' Resolve "QA tests failing after group was explicitly set for repositories_storages" Closes #5728 See merge request gitlab-org/omnibus-gitlab!4661 (cherry picked from commit f5f77eb1848f2b61cb884441c79dc2f02ec62b85) 84e0939c Ensure group is set before mode in storage_directory db3854c7 Wrong mr number in changelog
-
- Oct 21, 2020
-
-
GitLab Release Tools Bot authored
-
GitLab Release Tools Bot authored
-
GitLab Release Tools Bot authored
-
GitLab Release Tools Bot authored
[ci skip]
-
GitLab Release Tools Bot authored
-
GitLab Release Tools Bot authored
-
Marin Jankovski authored
Revert "Merge branch '5688-opensuse-15.1-deprecation' into 'master'" See merge request gitlab-org/omnibus-gitlab!4675 (cherry picked from commit eb4fce1e2ebd9bc76eaf2d4d4306ab8b8a66a119) 455450a5 Revert "Merge branch '5688-opensuse-15.1-deprecation' into 'master'"
-
Marin Jankovski authored
Revert "Merge branch '5689-opensuse-15.2-packages' into 'master'" See merge request gitlab-org/omnibus-gitlab!4674 (cherry picked from commit 11be035307fa1e848603241f16b4f05dda765014) 6f032b23 Revert "Merge branch '5689-opensuse-15.2-packages' into 'master'"
-
GitLab Release Tools Bot authored
-
GitLab Release Tools Bot authored
-
GitLab Release Tools Bot authored
-
- Oct 20, 2020
-
-
Marcel Amirault authored
Use latest docs linting image See merge request gitlab-org/omnibus-gitlab!4662
-
Evan Read authored
-
- Oct 19, 2020
-
-
DJ Mountney authored
Fix libatomic package name for RHEL/CentOS See merge request gitlab-org/omnibus-gitlab!4660
-
Hi Key authored
-
DJ Mountney authored
Add FortiAuthenticator configuration to gitlab.rb See merge request gitlab-org/omnibus-gitlab!4645
-
DJ Mountney authored
Shrink notify slack container See merge request gitlab-org/omnibus-gitlab!4649
-
- Oct 15, 2020
-
-
Imre Farkas authored
-
- Oct 19, 2020
-
-
DJ Mountney authored
Remove extraneous rbtrace files from build See merge request gitlab-org/omnibus-gitlab!4647
-
Balasankar "Balu" C authored
Merge branch '5672-consolidated-form-for-object-storage-does-not-work-in-docker-install-of-gitlab' into 'master' Resolve "Consolidated form for object storage does not work in docker install of GitLab" Closes #5672 See merge request gitlab-org/omnibus-gitlab!4656
-
Hossein Pursultani authored
-
- Oct 16, 2020
-
-
DJ Mountney authored
Add selinux module for gitlab-shell Closes #5694 See merge request gitlab-org/omnibus-gitlab!4598
-
Ian Baum authored
Allow bootstrapping patroni Standby Cluster Closes #5633 See merge request gitlab-org/omnibus-gitlab!4558
-
Ian Baum authored
Don't disable crond, only relevant cronjob See merge request gitlab-org/omnibus-gitlab!4651
-
Andreas Brandl authored
This is, because other recipes might also depend on the presence of the service.
-
Gabriel Mazetto authored
-
Ian Baum authored
Explicitly set group for repositories_storages and improve manage-storage-directories tests See merge request gitlab-org/omnibus-gitlab!4589
-
Ben Bodenmiller authored
-
DJ Mountney authored
Remove EE only note for packages in gitlab.yml.erb See merge request gitlab-org/omnibus-gitlab!4594
-
- Oct 14, 2020
-
-
Gabriel Mazetto authored
-
- Oct 07, 2020
-
-
Gabriel Mazetto authored
-
- Oct 03, 2020
-
-
Gabriel Mazetto authored
Add coverage for existing features and changes related to the standby cluster
-
- Sep 08, 2020
-
-
Gabriel Mazetto authored
-
Gabriel Mazetto authored
-
- Sep 03, 2020
-
-
Gabriel Mazetto authored
We are not relying on `sql_replication_password` as we need it in cleartext here.
-
Gabriel Mazetto authored
-
- Oct 16, 2020
-
-
Balasankar "Balu" C authored
Add support for PostgreSQL certificate authentication See merge request gitlab-org/omnibus-gitlab!4618
-
Ian Baum authored
* Adds postgresql['cert_auth_addresses'] attribute * Updates pg_hba.conf template to add entries in that attribute
-
Ben Bodenmiller authored
-
- Oct 15, 2020
-
-
Robert Marshall authored
- Had removed sockets_directory method from most places, but needed to remove it from the helper and that exposed it being used in one other location Signed-off-by:
Robert Marshall <rmarshall@gitlab.com>
-
Stan Hu authored
This saves about 8 MB of space occupied by the msgpack .tar.gz and source code.
-
Robert Marshall authored
- Restart workhorse if the socket directory changes. In its own commit so it can be reverted by the maintainer if not approved Signed-off-by:
Robert Marshall <rmarshall@gitlab.com>
-
Ian Baum authored
Take "get_ctl_options" methods out of global namespace See merge request gitlab-org/omnibus-gitlab!4646
-
J0WI authored
-
Robert Marshall authored
- Add test to be sure selinux helper sets context when the user configures their own workhorse directory - refactored selinux helper to not use the deprecated helper methods as discovered when the new test failed Signed-off-by:
Robert Marshall <rmarshall@gitlab.com>
-
Robert Marshall authored
- Reduce complexity in workhorse helper rspec tests to reflet the refactor we have made Signed-off-by:
Robert Marshall <rmarshall@gitlab.com>
-
Robert Marshall authored
- fix gitaly spec to match logic Signed-off-by:
Robert Marshall <rmarshall@gitlab.com>
-
Valery Sizov authored
Due to change load order these methods got conflicted
-
Robert Marshall authored
- Define the outlined expected behavior from parse_variable with an rspec that outlines the three cases we outlined for unix sockets and checks to be sure that we get back the TCP socket if set Signed-off-by:
Robert Marshall <rmarshall@gitlab.com>
-
Robert Marshall authored
- Fix the behavior to match what we want, it had been allowing a NIL sockets directory to get passed to the File method Signed-off-by:
Robert Marshall <rmarshall@gitlab.com>
-