Skip to content
Snippets Groups Projects

decomission build-x86-07

    • Closed (moved) Issue created by anarcat @anarcat

    this buildbox is not worth a migration procedure. decomission instead.

    we might want to create a new buildbox in the gnt-fsn cluster later, however, if the current ones get overloaded?

    To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information

    Child items 0

    • No child items are currently assigned. Use child items to break down this issue into smaller parts.

    Activity

    • Trac
      Trac @tracbot ·

      Trac:
      Parent Ticket: #33085 (moved)

    • anarcat added component::internal services/tor sysadmin team owner::anarcat parent::33085 priority::medium resolution::fixed severity::normal status::closed tpa-roadmap-february type::task labels

      added component::internal services/tor sysadmin team owner::anarcat parent::33085 priority::medium resolution::fixed severity::normal status::closed tpa-roadmap-february type::task labels

    • anarcat
      anarcat @anarcat ·
      Author Owner

      Trac:
      Description: this buildbox is not worth a migration procedure. decomission instead.

      to

      this buildbox is not worth a migration procedure. decomission instead.

      we might want to create a new buildbox in the gnt-fsn cluster later, however, if the current ones get overloaded?

    • anarcat
      anarcat @anarcat ·
      Author Owner

      decom checklist:

      1. decom suggested by service admin (weasel), nothing to warn about?
      2. removed from nagios
      3. host shutdown

      waiting to see if things break before moving on to step 4 and later.

    • anarcat
      anarcat @anarcat ·
      Author Owner

      checklist completed:

      1. decom suggested by service admin (weasel), nothing to warn about?
      2. removed from nagios
      3. host shutdown
      4. Domain build-x86-07.torproject.org has been undefined
      5. scheduled VM removal:

      job 3 at Tue Mar 3 21:57:00 2020

       6. removed this chunk:
    ```
341 host=build-x86-07,ou=hosts,dc=torproject,dc=org
host: build-x86-07
hostname: build-x86-07.torproject.org
objectClass: top
objectClass: debianServer
access: restricted
admin: torproject-admin@torproject.org
architecture: amd64
purpose: buildbox
description: build box
distribution: Debian
l: Falkenstein, Saxony, Germany
sshRSAHostKey: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD6aNeaFqFZ5j2uFL2TOCEbjesS2TgMd2t91ERDEMDVbmaWSQIVSbdCFLZvPkyKaPILSEtiTpIQFWan5FB7fJl54yiJzYxkV1SO8hxIajTsPY+an0D1qaTH6bMMXxXIpwVHVFdtI0osdsNch6sqf9FsUUDUvodPqq7BrRkqbn83ulMSguHzoEDuCpXLamY2P0JOjRYeaqe/PLJamfLQxNqgyq+z5LEPVaqr2zjRTwm5hsgGdSVXIcEmJOROToQeJBh7ER05Q8INJ6ZkbUlD4ug/XYnRtTBjn3CeTI+F5un8370lTYXVq9i/DaLN1PlyisdodmdQc/oV3ubOyeMPEcHR root@build-x86-07
sshRSAHostKey: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIP/16AdbfM143zTB49R/MeBU3OUieENdVXfv6pxP9juM root@build-x86-07
physicalHost: unifolium.torproject.org
ipHostNumber: 78.47.38.230
ipHostNumber: 2a01:4f8:211:6e8:0:823:6:1
allowedGroups: buildusers
allowedGroups: jenkins
      1. done, not in DNS
      2. done:

      Notice: Revoked certificate with serial 13 Notice: Removing file Puppet::SSL::Certificate build-x86-07.torproject.org at '/var/lib/puppet/ssl/ca/signed/build-x86-07.torproject.org.pem' build-x86-07.torproject.org Submitted 'deactivate node' for build-x86-07.torproject.org with UUID 0421c112-3061-4c9b-9e03-e10e33346fa4

       9. removed in puppet in `6f7bc82e decom build-x86-07 (#33442)`
 10. remove from tor-passwords
 11. nothing in let's encrypt
 12. not in dnswl (no mail)
 13. done:
     ```
job 21 at Thu Mar 26 21:57:00 2020

      steps 4, 5, 8 and 13 were done with a fabfile in tsa-misc. hopefully next decom will be easier to automate.

      all done. (yesterday, just forgot to submit this form until today, oops!)

      Trac:
      Status: assigned to closed
      Resolution: N/A to fixed

    • Trac closed

      closed

    • Trac mentioned in issue #33085 (moved)

      mentioned in issue #33085 (moved)

    Please register or sign in to reply