Opened 7 months ago

Closed 7 months ago

#33442 closed task (fixed)

decomission build-x86-07

Reported by: anarcat Owned by: anarcat
Priority: Medium Milestone:
Component: Internal Services/Tor Sysadmin Team Version:
Severity: Normal Keywords: tpa-roadmap-february
Cc: Actual Points:
Parent ID: #33085 Points:
Reviewer: Sponsor:

Description (last modified by anarcat)

this buildbox is not worth a migration procedure. decomission instead.

we might want to create a new buildbox in the gnt-fsn cluster later, however, if the current ones get overloaded?

Child Tickets

Change History (3)

comment:1 Changed 7 months ago by anarcat

Description: modified (diff)

comment:2 Changed 7 months ago by anarcat

decom checklist:

  1. decom suggested by service admin (weasel), nothing to warn about?
  2. removed from nagios
  3. host shutdown

waiting to see if things break before moving on to step 4 and later.

comment:3 Changed 7 months ago by anarcat

Resolution: fixed
Status: assignedclosed

checklist completed:

  1. decom suggested by service admin (weasel), nothing to warn about?
  2. removed from nagios
  3. host shutdown
  4. Domain build-x86-07.torproject.org has been undefined
  5. scheduled VM removal:
    job 3 at Tue Mar  3 21:57:00 2020
    
  6. removed this chunk:
    341 host=build-x86-07,ou=hosts,dc=torproject,dc=org
    host: build-x86-07
    hostname: build-x86-07.torproject.org
    objectClass: top
    objectClass: debianServer
    access: restricted
    admin: torproject-admin@torproject.org
    architecture: amd64
    purpose: buildbox
    description: build box
    distribution: Debian
    l: Falkenstein, Saxony, Germany
    sshRSAHostKey: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD6aNeaFqFZ5j2uFL2TOCEbjesS2TgMd2t91ERDEMDVbmaWSQIVSbdCFLZvPkyKaPILSEtiTpIQFWan5FB7fJl54yiJzYxkV1SO8hxIajTsPY+an0D1qaTH6bMMXxXIpwVHVFdtI0osdsNch6sqf9FsUUDUvodPqq7BrRkqbn83ulMSguHzoEDuCpXLamY2P0JOjRYeaqe/PLJamfLQxNqgyq+z5LEPVaqr2zjRTwm5hsgGdSVXIcEmJOROToQeJBh7ER05Q8INJ6ZkbUlD4ug/XYnRtTBjn3CeTI+F5un8370lTYXVq9i/DaLN1PlyisdodmdQc/oV3ubOyeMPEcHR root@build-x86-07
    sshRSAHostKey: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIP/16AdbfM143zTB49R/MeBU3OUieENdVXfv6pxP9juM root@build-x86-07
    physicalHost: unifolium.torproject.org
    ipHostNumber: 78.47.38.230
    ipHostNumber: 2a01:4f8:211:6e8:0:823:6:1
    allowedGroups: buildusers
    allowedGroups: jenkins
    
  7. done, not in DNS
  8. done:
    Notice: Revoked certificate with serial 13
    Notice: Removing file Puppet::SSL::Certificate build-x86-07.torproject.org at '/var/lib/puppet/ssl/ca/signed/build-x86-07.torproject.org.pem'
    build-x86-07.torproject.org
    Submitted 'deactivate node' for build-x86-07.torproject.org with UUID 0421c112-3061-4c9b-9e03-e10e33346fa4
    
  9. removed in puppet in 6f7bc82e decom build-x86-07 (#33442)
  10. remove from tor-passwords
  11. nothing in let's encrypt
  12. not in dnswl (no mail)
  13. done:
    job 21 at Thu Mar 26 21:57:00 2020
    

steps 4, 5, 8 and 13 were done with a fabfile in tsa-misc. hopefully next decom will be easier to automate.

all done. (yesterday, just forgot to submit this form until today, oops!)

Note: See TracTickets for help on using tickets.