#31515 closed task (fixed)

Update colchicifolium's SSH config to accept polyanthum's bridge pool assignments

Reported by: karsten Owned by: tpa
Priority: Medium Milestone:
Component: Internal Services/Tor Sysadmin Team Version:
Severity: Normal Keywords:
Cc: metrics-team, phw Actual Points:
Parent ID: Points:
Reviewer: Sponsor:


Hi! phw and I are trying to rsync bridge pool assignment files from polyanthum to colchicifolium. This worked a couple years back, but then we disabled it. We want to re-enable it now.

Quoting phw from a discussion on #29480 with what he tried so far:

I just updated our script sync-to-colchicifolium to make this happen. You should see assignments.log files in this directory in less than two hours. Please let me know if that's not the case, or if anything else went wrong.

I just noticed an error message in the logs:

1566241638:descriptors:<36>Aug 19 19:07:18 collector-ssh-wrap[23644]: The SSH_ORIGINAL_COMMAND ('rsync --server -logDtpre.iLsfxC . /srv/collector.torproject.org/collector/in/bridge-pool-assignments/polyanthum/') is not on the whitelist

This seems like an issue on colchicifolium's side. Do we need an update in its SSH configuration?


Child Tickets

Change History (2)

comment:1 Changed 12 months ago by weasel

This ssh key is command-locked to run /srv/collector.torproject.org/collector/bin/ssh-wrap, see /etc/ssh/userkeys/collector.

Just update that script?

comment:2 Changed 11 months ago by karsten

Resolution: fixed
Status: newclosed

Thanks, that worked. Closing!

Note: See TracTickets for help on using tickets.