Some forge[-stage] discussions

[Claudio Bantaloukas]

On 11/7/2025 2:00 PM, Mark Wielaard wrote:
> Hi,
Hellos! :)

> 
> We (Frank, Claudio and I) had some discussion off-list about the forge-
> stage setup. And possible moving the production forge to the new
> server1 too. Let me post them to the public list too.
> 
> I have added some extra details about the servers, services to be
> migrated and VM resources to the migration wiki page
> https://sourceware.org/sourceware-wiki/Migration2025/
> But I propose we only move the main forge after December 1st when the
> other services should have been migrated (if we can make that date).
> 
> I have disabled password access through ssh by setting
> PasswordAuthentication in /etc/ssh/sshd_config to no. So the only way
> to access the server is through the special setup account which has
> authorized keys setup for Frank, Claudio and me.
> 
> Should this have been setup through Ansible?
It can certainly be done. I've added 
https://forge.sourceware.org/forge/forge/issues/7 for me to remember.


> Frank said he liked to have console root access for some overseers. I
> assume that is through virsh console on the host running the VMs?
> Then we have to enable/start the serial-getty@ttyS0.service
> 
> This VM is setup with one big root / volume. For the forge VM I have it
> setup with a small / (7G, 4.6G used) and a bigger /srv (60G, 28G
> used). The idea being all the / setup/configury can be replicated
> (either through the SETUP or Ansible) and so doesn't need any
> backups. And /srv contains all the forge data, postgresql data, git
> repos, etc. where we do need backups.
> 
> How are we doing backups of the VM volumes? And how do we set them
> back? I assume we need to dump the database regularly, every 4 hours?
> 
I would be very keen to hear what the fedora folks are doing in this 
area. I see in 
https://docs.fedoraproject.org/cs/infra/sysadmin_guide/sop_forgejo_backups/ 
that there are procedures in place.
I followed the breadcrumbs to
https://pagure.io/fedora-infra/ansible/blob/main/f/roles/openshift-apps/forgejo/tasks/call-helm.yaml
and eventually to
https://codeberg.org/fedora/forgejo-helm
But I still haven't found where the backup scripts are kept!

> Cheers,
> 
> Mark

-- 
Claudio Bantaloukas