Why can't I access Koji builds?

When I access koji.fedoraproject.org/koji/rpminfo?rpmID=42997615, I see: [1]

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>403 Forbidden</title>
</head><body>
<h1>Forbidden</h1>
<p>You don't have permission to access this resource.</p>
<hr>
<address>Apache Server at koji.fedoraproject.org Port 443</address>
</body></html>


  1. view-source: ↩︎

Me too. I don’t remember when this started but I know I have looked the info of built packages this year without any issues.

I check the infra ticket place (it’s name slips my mind at the moment), but I didn’t find anything.

Here’s a build that happened today, and I get 403’s when clicking on the noarch rpm info link: https://koji.fedoraproject.org/koji/rpminfo?rpmID=43224174.

1 Like

@allenhewes, thanks for the confirmation. I’ll file an issue at RHBZ, GH, GL or Pagure tomorrow.

1 Like

Some koji endpoints are currently blocked due to excessive ai scaping
activity. ;(

Sorry for the hassle. You can use the koji command line client to get
all that info. After the datacenter move next week, we will likely
deploy more mitigations and re-open those web endpoints if we can.

2 Likes

Some koji endpoints are currently blocked due to excessive ai scaping
activity. ;(

@kevin ,
Can you elaborate more? I have had the same IP since 2013. Of course, it’s in a large block (/12 or /16), but I’d still like to understand what’s going if it’s a dynamic “thing” happening on the server side. My IP should not be getting into a dynamic RBLs… :sweat_smile:

If infra is “just blocking large CIDRs” then not much for me to learn there…

You can use the koji command line client to get
all that info.

Is this the Fedora dev tool that requires a FAS setup? I think it was fedup or fedpkg (or something)? It’s been a very long time for me…

1 Like

@kevin ,
Can you elaborate more? I have had the same IP since 2013. Of course, it’s in a large block (/12 or /16), but I’d still like to understand what’s going if it’s a dynamic “thing” happening on the server side. My IP should not be getting into a dynamic RBLs… :sweat_smile:

If infra is “just blocking large CIDRs” then not much for to learn there…

This has nothing to do with your IP, the entire enpoint is blocked on
the web site for every ip. :frowning:

LWN did a nice writeup a while back:

You can use the koji command line client to get
all that info.

Is this the Fedora dev tool that requires a FAS setup? I think it was fedup or fedpkg (or something)? It’s been a very long time for me…

It shouldn’t need much setup to just query things.

1 Like