FBR: Add proxy101/proxy110 to the OSBS whitelsit

[Patrick マルタインアンドレアス Uiterwijk]

Hi all,

Can I get +1s for the patch underneath?
This adds proxy101/proxy110 to the whitelist for OSBS for candidate-registry pushing.

Patrick


commit ef9fa10389a6a60843c96e4855dbdcb604583baa (HEAD -> master)
Author: Patrick Uiterwijk <patrick(a)puiterwijk.org&gt;
Date:   Tue Sep 25 21:34:39 2018 +0200

    Whitelist proxy101/proxy110 for OSBS
    
    It turns out that these were never added to the OSBS whitelist, breaking about
    50% of all builds....
    
    Signed-off-by: Patrick Uiterwijk <patrick(a)puiterwijk.org&gt;

diff --git a/files/osbs/fix-docker-iptables.production
b/files/osbs/fix-docker-iptables.production
index ee03776a5..f1a50781c 100644
--- a/files/osbs/fix-docker-iptables.production
+++ b/files/osbs/fix-docker-iptables.production
@@ -46,6 +46,8 @@ iptables -A FILTER_FORWARD -p udp -m udp -d 10.5.126.21 --dport 53 -j
ACCEPT
 iptables -A FILTER_FORWARD -p udp -m udp -d 10.5.126.22 --dport 53 -j ACCEPT
 
 # mirrors.fp.o
+iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.8 --dport 443 -j ACCEPT
+iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.9 --dport 443 -j ACCEPT
 iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.51 --dport 443 -j ACCEPT
 iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.52 --dport 443 -j ACCEPT
 
@@ -53,6 +55,8 @@ iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.52 --dport 443 -j
ACCEPT
 iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.23 --dport 443 -j ACCEPT
 
 # Kerberos
+iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.8 --dport 1088 -j ACCEPT
+iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.9 --dport 1088 -j ACCEPT
 iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.51 --dport 1088 -j ACCEPT
 iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.52 --dport 1088 -j ACCEPT

[Mikolaj Izdebski]

On 09/25/2018 09:36 PM, Patrick  マルタインアンドレアス  Uiterwijk wrote:
>  Hi all,
>  
>  Can I get +1s for the patch underneath?
>  This adds proxy101/proxy110 to the whitelist for OSBS for candidate-registry pushing.
+1 definitely

>  
>  Patrick
>  
>  
>  commit ef9fa10389a6a60843c96e4855dbdcb604583baa (HEAD -> master)
>  Author: Patrick Uiterwijk <patrick(a)puiterwijk.org&gt;
>  Date:   Tue Sep 25 21:34:39 2018 +0200
>  
>      Whitelist proxy101/proxy110 for OSBS
>      
>      It turns out that these were never added to the OSBS whitelist, breaking about
>      50% of all builds....
>      
>      Signed-off-by: Patrick Uiterwijk <patrick(a)puiterwijk.org&gt;
>  
>  diff --git a/files/osbs/fix-docker-iptables.production
> b/files/osbs/fix-docker-iptables.production
>  index ee03776a5..f1a50781c 100644
>  --- a/files/osbs/fix-docker-iptables.production
>  +++ b/files/osbs/fix-docker-iptables.production
>  @@ -46,6 +46,8 @@ iptables -A FILTER_FORWARD -p udp -m udp -d 10.5.126.21 --dport 53 -j
> ACCEPT
>   iptables -A FILTER_FORWARD -p udp -m udp -d 10.5.126.22 --dport 53 -j ACCEPT
>   
>   # mirrors.fp.o
>  +iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.8 --dport 443 -j ACCEPT
>  +iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.9 --dport 443 -j ACCEPT
>   iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.51 --dport 443 -j ACCEPT
>   iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.52 --dport 443 -j ACCEPT
>   
>  @@ -53,6 +55,8 @@ iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.52 --dport 443 -j
> ACCEPT
>   iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.23 --dport 443 -j ACCEPT
>   
>   # Kerberos
>  +iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.8 --dport 1088 -j ACCEPT
>  +iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.9 --dport 1088 -j ACCEPT
>   iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.51 --dport 1088 -j ACCEPT
>   iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.52 --dport 1088 -j ACCEPT
>  _______________________________________________
>  infrastructure mailing list -- infrastructure(a)lists.fedoraproject.org
>  To unsubscribe send an email to infrastructure-leave(a)lists.fedoraproject.org
>  Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
>  List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>  List Archives:
> https://lists.fedoraproject.org/archives/list/[e-mail]...
>   
-- 
Mikolaj Izdebski
Senior Software Engineer, Red Hat
IRC: mizdebsk

[Pierre-Yves Chibon]

On Tue, Sep 25, 2018 at 07:36:32PM -0000, Patrick  マルタインアンドレアス  Uiterwijk wrote:
>  Hi all,
>  
>  Can I get +1s for the patch underneath?
>  This adds proxy101/proxy110 to the whitelist for OSBS for candidate-registry pushing.
>  
>  Patrick
>  
>  
>  commit ef9fa10389a6a60843c96e4855dbdcb604583baa (HEAD -> master)
>  Author: Patrick Uiterwijk <patrick(a)puiterwijk.org&gt;
>  Date:   Tue Sep 25 21:34:39 2018 +0200
>  
>      Whitelist proxy101/proxy110 for OSBS
>      
>      It turns out that these were never added to the OSBS whitelist, breaking about
>      50% of all builds.... 
Interesting idea, let's try to improve this percentage, +1

Pierre
     
>      Signed-off-by: Patrick Uiterwijk <patrick(a)puiterwijk.org&gt;
>  
>  diff --git a/files/osbs/fix-docker-iptables.production
> b/files/osbs/fix-docker-iptables.production
>  index ee03776a5..f1a50781c 100644
>  --- a/files/osbs/fix-docker-iptables.production
>  +++ b/files/osbs/fix-docker-iptables.production
>  @@ -46,6 +46,8 @@ iptables -A FILTER_FORWARD -p udp -m udp -d 10.5.126.21 --dport 53 -j
> ACCEPT
>   iptables -A FILTER_FORWARD -p udp -m udp -d 10.5.126.22 --dport 53 -j ACCEPT
>   
>   # mirrors.fp.o
>  +iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.8 --dport 443 -j ACCEPT
>  +iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.9 --dport 443 -j ACCEPT
>   iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.51 --dport 443 -j ACCEPT
>   iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.52 --dport 443 -j ACCEPT
>   
>  @@ -53,6 +55,8 @@ iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.52 --dport 443 -j
> ACCEPT
>   iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.23 --dport 443 -j ACCEPT
>   
>   # Kerberos
>  +iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.8 --dport 1088 -j ACCEPT
>  +iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.9 --dport 1088 -j ACCEPT
>   iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.51 --dport 1088 -j ACCEPT
>   iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.5.126.52 --dport 1088 -j ACCEPT
>  _______________________________________________
>  infrastructure mailing list -- infrastructure(a)lists.fedoraproject.org
>  To unsubscribe send an email to infrastructure-leave(a)lists.fedoraproject.org
>  Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
>  List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>  List Archives:
> https://lists.fedoraproject.org/archives/list/[e-mail]...