1. 07 Feb, 2025 1 commit
    • Łukasz Nowak's avatar
      XXX software/monitor: Make promises readable · 09b2427e
      Łukasz Nowak authored
      Using hashes for promises is safe, but it makes monitoring fully unreadable.
      
      XXX: In theory it works, but in real deployments for some unknown reason there
           is a problem like:
      
      Process http-query-COMMON-302-http---something-example-com.py:
      Traceback (most recent call last):
        File "<SHARED>/lib/python3.9/multiprocessing/process.py", line 315, in _bootstrap
          self.run()
        File "<SOFTWARE>/eggs/slapos.core-1.14.3-py3.9.egg/slapos/grid/promise/__init__.py", line 179, in run
          promise_module = self._loadPromiseModule()
        File "<SOFTWARE>/eggs/slapos.core-1.14.3-py3.9.egg/slapos/grid/promise/__init__.py", line 215, in _loadPromiseModule
          promise_module = importlib.import_module(os.path.splitext(self.name)[0])
        File "<SHARED>/lib/python3.9/importlib/__init__.py", line 127, in import_module
          return _bootstrap._gcd_import(name[level:], package, level)
        File "<frozen importlib._bootstrap>", line 1030, in _gcd_import
        File "<frozen importlib._bootstrap>", line 1007, in _find_and_load
        File "<frozen importlib._bootstrap>", line 986, in _find_and_load_unlocked
        File "<frozen importlib._bootstrap>", line 691, in _load_unlocked
      KeyError: 'http-query-COMMON-302-http---something-example-com'
      09b2427e
  2. 05 Feb, 2025 1 commit
    • Łukasz Nowak's avatar
      rapid-cdn: Drop dependece on slave-log-directory-dict · 0a2e149f
      Łukasz Nowak authored
      If slave section depend on slave-log-directory-dict they are being reinstalled
      on each change in this section, so instead directly provide a path.
      
      slave-log-directory-dict is only used to pass directory information about all
      slaves to slave introsection mechnism, write it down in the comment.
      0a2e149f
  3. 04 Feb, 2025 3 commits
    • Łukasz Nowak's avatar
      rapid-cdn: Implement expert SSL downgrade · 498e3ad1
      Łukasz Nowak authored
      expert-backend-allow-downgrade-ssl allows to configure each node to downgrade
      SSL negotiation with the backends to insecure, OpenSSL 1 style, ciphers and
      algorithms.
      
      It's implemented only per node as it shall be only used in some specific
      circumstances and the cluster default (by default) is false. Such separation
      allows to setup each node independently, as it requires node restart.
      
      backend-haproxy is hashing backend-haproxy-wrapper:output in order to be
      reactive on applied change to the configuration; this will result with node
      restart after the configuration.
      
      Note that the special test backend has been moved to different file in order
      to start it with subprocess with altered environment; using multiprocessing
      with spawn context didn't worked out, as it altered test process and thus
      supervisord environment.
      498e3ad1
    • Thomas Gambier's avatar
      component/firewalld: fix the rpath of pygobject3 · b4e7c0a6
      Thomas Gambier authored
      This is a fixup of 61c13f54.
      b4e7c0a6
    • Thomas Gambier's avatar
      component/slapos: fix the OBS compilation · 0d6674bb
      Thomas Gambier authored
      We need LD_LIBRARY_PATH only during OBS compilation (since the rpath is
      not correctly set during compilation because it already points to final
      /opt/slapos path).
      
      This is a fixup of 61c13f54.
      0d6674bb
  4. 03 Feb, 2025 5 commits
  5. 01 Feb, 2025 1 commit
  6. 31 Jan, 2025 5 commits
  7. 30 Jan, 2025 4 commits
  8. 28 Jan, 2025 2 commits
  9. 27 Jan, 2025 6 commits
  10. 24 Jan, 2025 7 commits
  11. 23 Jan, 2025 2 commits
  12. 22 Jan, 2025 1 commit
  13. 21 Jan, 2025 2 commits