739728 - audit services (both incoming and outgoing) on cruncher

Status: RESOLVED FIXED

(Infrastructure & Operations Graveyard :: CIDuty, task, P2)

Description

[Mike Taylor [:bear]]

We need to get a firm list of cronjobs and services being run on cruncher to prepare for it's move to scl3.

The move involves changing of hostnames.

Comment 1

[Dustin J. Mitchell [:dustin] (he/him)]

Bear, how's this going?

I think we're going to run into some sticky spots with compatibility -- e.g. the dirty-profiles stuff seems to depend on particular versions of sqlite.  Expect this to be thorny and sadness-inducing, and don't defer :)

Comment 2

[Mike Taylor [:bear]]

Active services running on Cruncher:

Apache
   public_html being used by a couple users
   wsgi being used by two users actively
   BuildAPI (via paster run from catlee's home dir)
   Talos dirty-profiles

Ganglia Monitor
NRPE
SMTP

Quite a few RelEng folk have user crontabs that are running various reports and scripts.

Redis and RMQ are currently running, but they can be shut down as they are no longer actively required. 

A few users should be archived and not recreated:
  anamaria
  anodelman
  aravind
  dustin

Comment 3

[Mike Taylor [:bear]]

BuildAPI has the following persistent outbound connections:

  tm-b01-slave01.mozilla.org (mysql)
  rabbit2.build.scl1.mozilla.com
  redis01.build.scl1.mozilla.com

briar-patch runs a cronjob in bear's home dir that makes a connection to redis on releng-dashboard-sandbox1.vm1.labs.sjc1.mozilla.com

gmond and nrpe are also active

Comment 4

[Dustin J. Mitchell [:dustin] (he/him)]

(In reply to Mike Taylor [:bear] from comment #3)
>   rabbit2.build.scl1.mozilla.com
and rabbit3

Comment 5

[Dustin J. Mitchell [:dustin] (he/him)]

Let's call this done, since we're building it based on the audit, now :)

incidentally, it's got flows to the following db servers:
 b1
 stage
 bouncer
 buildbot