Files
computer-playbook/roles/svc-storage-nfs-server/meta/packages.yml
kevinveenbirkenbachandClaude Opus 5 6b5388c091 fix(nfs-server): bootstrap centos ganesha repo
The inline repo definition pinned gpgkey to www.centos.org, a single
non-CDN origin. In run 30937913632 it was unreachable for at least
17m25s and killed 2 of 23 centos ganesha installs; dnf's own retries=5
was already active on the host and did not help.

centos-release-nfs-ganesha11 ships the same repo with metalink failover
and gpgkey=file://, planting the key through Requires:
centos-release-storage-common. Verified end to end against
quay.io/centos/centos:latest and ghcr.io/kevinveenbirkenbach/pkgmgr-centos:stable.

The BOOTSTRAP_BASEURL entry keeps the availability probe verifying both
names instead of degrading them to an inconclusive warning.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
2026-08-06 10:47:38 +02:00

50 lines
1.9 KiB
YAML

---
e2fsprogs:
Archlinux:
- e2fsprogs
Debian:
- e2fsprogs
RedHat:
- e2fsprogs
libntirpc:
Archlinux: [] # nocheck: empty - the AUR build compiles its own ntirpc submodule; TODO: revisit if the AUR build ever links against a system ntirpc
Debian: [] # nocheck: empty - the packaged nfs-ganesha links against a matching libntirpc, only Fedora ships a broken pair; TODO: revisit if Debian ever ships a mismatched nfs-ganesha and libntirpc pair
RedHat: [] # nocheck: empty - only the Fedora override needs the upgrade; the CentOS SIG build is self-consistent; TODO: revisit if the CentOS SIG build ever needs the same upgrade as Fedora
fedora:
names:
- libntirpc
repo:
enable_existing: updates-testing
state: latest
nfs-ganesha:
Archlinux:
source: aur
names:
- nfs-ganesha
Debian:
- nfs-ganesha
- nfs-ganesha-vfs
RedHat:
- nfs-ganesha
- nfs-ganesha-vfs
centos:
names:
- nfs-ganesha
- nfs-ganesha-vfs
repo:
bootstrap_package: centos-release-nfs-ganesha11
nfs-kernel-server:
Archlinux: [] # nocheck: empty - the kernel server ships inside nfs-utils, installed through the nfs-client id; TODO: revisit if the family ever splits the kernel server out of nfs-utils
Debian:
- nfs-kernel-server
RedHat: [] # nocheck: empty - the kernel server ships inside nfs-utils, installed through the nfs-client id; TODO: revisit if the family ever splits the kernel server out of nfs-utils
selinux-python-binding:
Archlinux: [] # nocheck: empty - SELinux is not the mandatory access control on this family; TODO: implement the AppArmor equivalent if this family ever needs export confinement
Debian: [] # nocheck: empty - SELinux is not the mandatory access control on this family; TODO: implement the AppArmor equivalent if this family ever needs export confinement
RedHat:
- python3-libselinux