On Mon, Sep 25, 2017 at 01:54:49PM -0700, Kevin Fenzi wrote:
This morning pkgs02 stopped answering to git:// clone urls from
koji,
breaking builds.
Could we make koji also use https:// nowadays? I remember that there was
a ticket about this.
systemd was happy after that, but load was still very very high.
Looking
I found a number of git clones from external ip's. Since there's no
reason for this (external people should use https:// clone urls or
ssh://) I blocked those except from 10.0.0.0/8.
Since this was outage causing for builds I went ahead and did all this,
but would like to get retroactive +1s or any adjustments I might have
missed.
+1 (for no unencrypted services)
Kind regards
Till