search

openshift / verification-tests

Blackbox test suite for OpenShift.
GNU General Public License v3.0
50 stars 170 forks source link

OCPQE-22529: Pin down epel repository location #3634

Closed liangxia closed 2 months ago

liangxia commented 2 months ago

Even though Fedora EPEL repository's configuration points to an HTTPS location, the default location of mirrors.fedoraproject.org is a redirect service that redirects to a close-by but non-deterministic mirror. It's hard to define the ingress/egress rules for a non-deterministic url. Since most of the mirrors urls are Denied by default, it loops though those mirrors which take a long time (more than an hour) to get repo/packages info. This PR aims to help in pinning down the repository location to a known FQDN mirrors.edge.kernel.org, so it can be set in the allowlists, without affecting the performance of downloads.

I've tested this, with another change in the gitlab (merge_requests/2244 in the jcasc repo), the time cost in command dnf install xxx from epel decreased from hours to seconds.

openshift-ci-robot commented 2 months ago

@liangxia: This pull request references OCPQE-22529 which is a valid jira issue.

In response to [this](https://github.com/openshift/verification-tests/pull/3634): >Even though Fedora EPEL repository's configuration points to an HTTPS location, the default location of `mirrors.fedoraproject.org` is a redirect service that redirects to a close-by but non-deterministic mirror. It's hard to define the ingress/egress rules for a non-deterministic url. Since most of the mirrors urls are Denied by default, it loops though those mirrors which take a long time (more than an hour) to get repo/packages info. >This PR aims to help in pinning down the repository location to a known FQDN `mirrors.edge.kernel.org`, so it can be set in the allowlists, without affecting the performance of downloads. > >I've tested this, with another change in the gitlab repo, the time cost in command `dnf install xxx` from epel decreased from hours to seconds. Instructions for interacting with me using PR comments are available [here](https://prow.ci.openshift.org/command-help?repo=openshift%2Fverification-tests). If you have questions or suggestions related to my behavior, please file an issue against the [openshift-eng/jira-lifecycle-plugin](https://github.com/openshift-eng/jira-lifecycle-plugin/issues/new) repository.
liangxia commented 2 months ago

/cc @JianLi-RH @dis016 @pruan-rht @jhou1

openshift-ci[bot] commented 2 months ago

@liangxia: all tests passed!

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available [here](https://git.k8s.io/community/contributors/guide/pull-requests.md). If you have questions or suggestions related to my behavior, please file an issue against the [kubernetes-sigs/prow](https://github.com/kubernetes-sigs/prow/issues/new?title=Prow%20issue:) repository. I understand the commands that are listed [here](https://go.k8s.io/bot-commands).
openshift-ci-robot commented 2 months ago

@liangxia: This pull request references OCPQE-22529 which is a valid jira issue.

In response to [this](https://github.com/openshift/verification-tests/pull/3634): >Even though Fedora EPEL repository's configuration points to an HTTPS location, the default location of `mirrors.fedoraproject.org` is a redirect service that redirects to a close-by but non-deterministic mirror. It's hard to define the ingress/egress rules for a non-deterministic url. Since most of the mirrors urls are Denied by default, it loops though those mirrors which take a long time (more than an hour) to get repo/packages info. >This PR aims to help in pinning down the repository location to a known FQDN `mirrors.edge.kernel.org`, so it can be set in the allowlists, without affecting the performance of downloads. > >I've tested this, with another change in the gitlab (merge_requests/2244 in the jcasc repo), the time cost in command `dnf install xxx` from epel decreased from hours to seconds. Instructions for interacting with me using PR comments are available [here](https://prow.ci.openshift.org/command-help?repo=openshift%2Fverification-tests). If you have questions or suggestions related to my behavior, please file an issue against the [openshift-eng/jira-lifecycle-plugin](https://github.com/openshift-eng/jira-lifecycle-plugin/issues/new) repository.
pruan-rht commented 2 months ago

/lgtm

openshift-ci[bot] commented 2 months ago

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: pruan-rht

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files: - ~~[OWNERS](https://github.com/openshift/verification-tests/blob/master/OWNERS)~~ [pruan-rht] Approvers can indicate their approval by writing `/approve` in a comment Approvers can cancel approval by writing `/approve cancel` in a comment