- Notifications
You must be signed in to change notification settings - Fork6.2k
install-deps: Replace apt-mirror#66656
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to ourterms of service andprivacy statement. We’ll occasionally send you account related emails.
Already on GitHub?Sign in to your account
base:main
Are you sure you want to change the base?
Conversation
apt-mirror.front.sepia.ceph.com has happened to always work because we set up CNAMEs to gitbuilder.ceph.com.That host is making its way to a new home upstate (literally and figuratively) so we'll get rid of the front subdomain since it's publicly accessible anyway and add TLS while we're at it.Signed-off-by: David Galloway <david.galloway@ibm.com>
dmick left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others.Learn more.
this should not be necessary; I fixed up DNS
vxtls commentedDec 17, 2025
so, why we use http but not https |
dmick commentedDec 17, 2025
Ok, so, the problem is, the external access to http:// anything can't work, because DNS can't redirect http to https, and we can't get http into the nginx to allow it to redirect. Sorry it took me this long to come to the conclusion David probably had done hours ago. Approving/merging. |
dmick left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others.Learn more.
Unfortunate, but we can't easily do better. We could add a hack to try to sense where we're running, I suppose, but it doesn't seem like would save enough.
becauseceph/ceph#66656 (comment)Signed-off-by: Nizamudeen A <nia@redhat.com>
apt-mirror.front.sepia.ceph.com has happened to always work because we set up CNAMEs to gitbuilder.ceph.com.
That host is making its way to a new home upstate (literally and figuratively) so we'll get rid of the front subdomain since it's publicly accessible anyway and add TLS while we're at it.