650224 - Use the same slaves for development and preproduction

Status: RESOLVED FIXED

(Release Engineering :: General, defect, P2)

Description

[Rail Aliiev [:rail]]

TODO:

1. Add dev (staging) ssh keys to authorized_keys for the following users on preproduction-stage:

cltbld  ffxbld  symbols(cltbld key)  trybld  xrbld

I appended the corresponding keys from staging-stage to /N/production/centos5-i686/stage/local/home/*/.ssh/authorized_keys  on production-puppet and synced them to scl and mv puppet servers. 

2. Ask IT to add ffxbld_dsa.pub key to prepr-ffxbld account on hg.m.o

3. Sync slave list in build/builbot-configs/mozilla/{preproduction,staging}_config.py. Moving the list to a separate file and importing it would be a problem, because the config files are being execfiled by automation.

4. Replace ssh keys on old preproduction slaves (*slave10*)

5. Remove old keys from authorized_keys.

Anything else?

Comment 1

[Rail Aliiev [:rail]]

> 2. Ask IT to add ffxbld_dsa.pub key to prepr-ffxbld account on hg.m.o

Bug 650226

Comment 2

[Dustin J. Mitchell [:dustin] (he/him)]

Arguably, staging_config.py should be empty by default, and folks setting up a dev environment should add the slaves they grab to it locally.  That will make the sync easier.

Do we need to add more sendchanges to the preproduction masters?  I don't see a lot of activity on the (now much larger) pool of preproduction slaves.

Comment 4

[Rail Aliiev [:rail]]

> 4. Replace ssh keys on old preproduction slaves (*slave10*)

# copied dev keys to my laptop
rsync -a linux64-ix-slave02.build.mozilla.org:.ssh/ .ssh_dev/

for h in moz2-darwin10-slave10 moz2-darwin9-slave10 moz2-linux-slave10 moz2-linux64-slave10; do
    ssh $h.build.mozilla.org rsync -a .ssh/ .ssh_pp/
    rsync -a .ssh_dev/ $h.build.mozilla.org:.ssh/
done

Comment 5

[Rail Aliiev [:rail]]

(In reply to comment #0)
> 3. Sync slave list in
> build/builbot-configs/mozilla/{preproduction,staging}_config.py. Moving the
> list to a separate file and importing it would be a problem, because the config
> files are being execfiled by automation.

"Somehow" they are already in sync :)

Comment 6

[Rail Aliiev [:rail]]

(In reply to comment #0)
> 5. Remove old keys from authorized_keys.

* Removed old keys from authorized_keys for the following users:
cltbld ffxbld symbols trybld  xrbld

(/N/production/centos-i686/stage/local/home/$user/.ssh/authorized_keys)

* Synced files to all puppet masters

* preproduction-stage got the files

All done here!