yum: source AlmaLinux RPM repos from artifactapi, drop legacy unkin repo #496

Merged
benvin merged 2 commits from benvin/artifactapi-yum-repos into develop 2026-07-28 21:42:59 +10:00
Owner

AlmaLinux hosts still pulled in-house RPMs from the legacy unkin repo hosted on Gitea (git.query.consul), and a second legacy Gitea repo unkinben was enabled fleet-wide. This moves AlmaLinux hosts fully onto the artifactapi local rpm repos so all hosts get the in-house/vendored set for their EL release, matching the artifactapi-is-the-real-registry model already used for baseos/epel/etc., and removes both legacy Gitea yum repos.

Depends on unkin/terraform-artifactapi#15 (creates the general rpm-vendor local repo); that should apply before this reaches hosts.

RPM source migration

  • retarget rpm-vendor to the distribution-agnostic local/rpm-vendor repo
  • add rpm-internal-release/rpm-vendor-release, resolved from os.release.major so el8 hosts pull -el8, el9 hosts -el9, etc.
  • remove the legacy unkin yumrepo definition (its content now comes from rpm-internal/rpm-vendor)

unkinben removal

  • remove the unkinben yumrepo definition from AlmaLinux/all_releases.yaml
  • remove the unkinben ensure: present override from the jellyfin media role (its only consumer)
  • purge => true on the yum profile then cleans /etc/yum.repos.d/unkin.repo from hosts

Heads-up for reviewer: the jellyfin role installs jellyfin-web, jellyfin-server, and jellyfin-ffmpeg-bin from unkinben. These packages exist only in unkinben, so once it is removed they will remain installed but stop receiving updates until they are republished into artifactapi (e.g. rpm-internal-elN). Jellyfin's other deps (SDL2, ffmpeg, ffmpeg-devel) come from rpmfusion and are unaffected. The unkinben generic archive downloads used by the *arr modules (sonarr/radarr/prowlarr/lidarr/readarr) and glauth are direct HTTP fetches, not the yum repo, and are untouched.

https://claude.ai/code/session_015ur3i7D2azsMAWTSVABApv

AlmaLinux hosts still pulled in-house RPMs from the legacy `unkin` repo hosted on Gitea (git.query.consul), and a second legacy Gitea repo `unkinben` was enabled fleet-wide. This moves AlmaLinux hosts fully onto the artifactapi local rpm repos so all hosts get the in-house/vendored set for their EL release, matching the artifactapi-is-the-real-registry model already used for baseos/epel/etc., and removes both legacy Gitea yum repos. Depends on unkin/terraform-artifactapi#15 (creates the general `rpm-vendor` local repo); that should apply before this reaches hosts. ### RPM source migration - retarget `rpm-vendor` to the distribution-agnostic `local/rpm-vendor` repo - add `rpm-internal-release`/`rpm-vendor-release`, resolved from `os.release.major` so el8 hosts pull `-el8`, el9 hosts `-el9`, etc. - remove the legacy `unkin` yumrepo definition (its content now comes from rpm-internal/rpm-vendor) ### unkinben removal - remove the `unkinben` yumrepo definition from `AlmaLinux/all_releases.yaml` - remove the `unkinben` `ensure: present` override from the jellyfin media role (its only consumer) - `purge => true` on the yum profile then cleans `/etc/yum.repos.d/unkin.repo` from hosts **Heads-up for reviewer:** the jellyfin role installs `jellyfin-web`, `jellyfin-server`, and `jellyfin-ffmpeg-bin` from unkinben. These packages exist **only** in unkinben, so once it is removed they will remain installed but **stop receiving updates** until they are republished into artifactapi (e.g. `rpm-internal-elN`). Jellyfin's other deps (`SDL2`, `ffmpeg`, `ffmpeg-devel`) come from rpmfusion and are unaffected. The `unkinben` *generic* archive downloads used by the *arr modules (sonarr/radarr/prowlarr/lidarr/readarr) and glauth are direct HTTP fetches, not the yum repo, and are untouched. https://claude.ai/code/session_015ur3i7D2azsMAWTSVABApv
unkinben added 1 commit 2026-07-26 23:09:25 +10:00
yum: source AlmaLinux RPM repos from artifactapi, drop legacy unkin repo
ci/woodpecker/pr/ruby-validate Pipeline was successful
ci/woodpecker/pr/puppet-lint Pipeline was successful
ci/woodpecker/pr/bolt-validate Pipeline was successful
ci/woodpecker/pr/yamllint Pipeline was successful
ci/woodpecker/pr/erb-validate Pipeline was successful
ci/woodpecker/pr/epp-validate Pipeline was successful
ci/woodpecker/pr/puppet-validate Pipeline was successful
ci/woodpecker/pr/ruby-check Pipeline was successful
ced33ad02f
AlmaLinux hosts still pulled in-house RPMs from the legacy unkin repo on
Gitea (git.query.consul). Point them at the artifactapi local rpm repos
instead, adding both the distribution-agnostic and per-EL-major variants of
rpm-internal and rpm-vendor so hosts get everything published for their
release. The unkinben personal repo is left untouched because the jellyfin
media role still enables it and its content is not on artifactapi yet.

- retarget rpm-vendor to the distribution-agnostic local/rpm-vendor repo
- add rpm-internal-release/rpm-vendor-release, resolved from the host's
  os.release.major (el8 hosts -> -el8, el9 -> -el9, etc.)
- remove the legacy unkin yumrepo definition

Claude-Session: https://claude.ai/code/session_015ur3i7D2azsMAWTSVABApv
unkinben added 1 commit 2026-07-26 23:27:35 +10:00
yum: remove the legacy unkinben personal repo entirely
ci/woodpecker/pr/puppet-lint Pipeline was successful
ci/woodpecker/pr/bolt-validate Pipeline was successful
ci/woodpecker/pr/ruby-validate Pipeline was successful
ci/woodpecker/pr/yamllint Pipeline was successful
ci/woodpecker/pr/erb-validate Pipeline was successful
ci/woodpecker/pr/epp-validate Pipeline was successful
ci/woodpecker/pr/ruby-check Pipeline was successful
ci/woodpecker/pr/puppet-validate Pipeline was successful
4cfc5c964b
Finish the artifactapi migration by dropping the last legacy Gitea-hosted
(git.query.consul) yum repo. The yum profile's purge => true then removes
/etc/yum.repos.d/unkin.repo from hosts. The jellyfin media role was the only
consumer; its jellyfin-* packages (jellyfin-web, jellyfin-server,
jellyfin-ffmpeg-bin) live only in unkinben and will stop receiving updates
until republished into artifactapi (e.g. rpm-internal-elN). Its other deps
(SDL2, ffmpeg, ffmpeg-devel) come from rpmfusion and are unaffected.

- remove the unkinben yumrepo definition from AlmaLinux/all_releases.yaml
- remove the unkinben ensure: present override from the jellyfin role

Claude-Session: https://claude.ai/code/session_015ur3i7D2azsMAWTSVABApv
benvin merged commit 72bcbacddb into develop 2026-07-28 21:42:59 +10:00
benvin deleted branch benvin/artifactapi-yum-repos 2026-07-28 21:42:59 +10:00
Sign in to join this conversation.
No Reviewers
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: unkin/puppet-prod#496