Fixes <https://bugs.gnu.org/36299>.
Reported by Ryan Prior <ryanprior@gmail.com>
and Danny Milosavljevic <dannym@scratchpost.org>.
* hydra/nginx/hydra.gnu.org-locations.conf: Use "location /" instead of
a regexp because regexps are matched before anything else, and thus
/nar/guix would also be redirected.
* hydra/nginx/hydra.gnu.org-locations.conf (/, /api, /eval)
(/evals, /jobset, /build, /status, ^/nar/(.*)$): Remove.
(/nix-cache-info): Pass on to port 9999.
(.): New location.
Ipse dixit: there’s no “i686” platform in QEMU, but most importantly
any x86_64 machine can transparently build for i686, so there’s no
need for QEMU in this case.
* hydra/milano-guix-1.scm: (qemu-binfmt-service-type) remove i686 platform
Milano will transparently build for i686, arm and aarch64 platforms,
other than native x86_64
* hydra/milano-guix-1.scm: Add qemu-binfmt-service-type for i686, arm
and aarch64 platforms
* hydra/modules/sysadmin/dns.scm (guix.gnu.org.zone) <ci>: Change this
CNAME record's value to d1aw3orh0yrgph.cloudfront.net.
(guix.gnu.org-zone) <serial>: Increment it.
* hydra/modules/sysadmin/dns.scm (guix.gnu.org.zone) <ci>: Change this
to an A record with berlin's address.
(guix.gnu.org-zone) <serial>: Increase it.
This is necessary because we registered a separate Let's Encrypt
certificate instead of expanding the certificate we used for
guix.info.
* hydra/nginx/berlin.scm (%berlin-servers): Separate server
configurations for guix.info and guix.gnu.org.
This is necessary because we registered a separate Let's Encrypt
certificate instead of expanding the certificate we used for
issues.guix.info.
* hydra/nginx/berlin.scm (%berlin-servers): Separate server
configurations for issues.guix.info and issues.guix.gnu.org.
* hydra/machines-for-berlin.scm (x86_64->qemu-armhf,
x86_64->qemu-aarch64): New procedures; use them to add five virtual
build nodes for both architectures.
Now that ci.guix.info points directly to berlin, we can avoid
depending on the guixsd.org zone by using ci.guix.info as the origin.
* cdn/terraform/cloudfront.tf (locals) <default_behavior>
<do_not_cache_behavior>: Change target_origin_id to "ci.guix.info".
The berlin-mirror-certificate ACM certificate is safe to delete, since
it was only used by the berlin-mirror CloudFront distribution, which
has already been removed.
* cdn/terraform/acm.tf (berlin-mirror-certificate): Remove it.
The berlin-mirror CloudFront distribution is safe to delete because it
is not currently being used. The charlie-distribution CloudFront
distribution has replaced it.
* cdn/terraform/cloudfront.tf (berlin-mirror, berlin-mirror-id)
(berlin-mirror-enabled, berlin-mirror-status)
(berlin-mirror-domain-name): Remove these.
* doc/refcard/guix-refcard.lout (Managing the Operating System)
(Building and Running Containers, Building Virtual Machines)
(Building Operating System Images)
(Inspecting an Operating System, Declaring an Operating System): New
sections.
