763876 - Set up calendar mini in community network

Status: RESOLVED FIXED

(Infrastructure & Operations :: DCOps, task)

Description

[Philipp Kewisch [:Fallen] [:📆][:🧩]]

The mini ordered in bug 761259 needs to be set up and placed somewhere in the community network.

It needs connectivity to its master, either through its
external IP: 63.245.223.165 (calendar-master.mozillalabs.com)
or the internal one: 10.22.112.142 (momo-cal-master-01.vm.labs.scl3.mozilla.com)

It also needs access to symbolpush (63.245.216.248:tcp/22).

See bug 763389 for similar network flow setup. Quote from that bug:

> If going out via the external IP of the calendar master, that would have to be 
> tcp/80, to keep things the way they are.
>
> If instead, going into the private IP of the calendar master, that would be
>  63.245.223.105 -> 10.22.112.142:tcp/9030
>
> But I don't know if that's even possible.

Comment 1

[Philipp Kewisch [:Fallen] [:📆][:🧩]]

I'd appreciate if this could be taken care of within the next 2 days. We have been without a mac box for quite some time, and we have the loaner from Seamonkey only for about 2 days.

Comment 2

[Phong Tran [:phong]]

Where is this physically located now?

Comment 3

[Philipp Kewisch [:Fallen] [:📆][:🧩]]

Salvador might be able to tell you as he mentioned the machine has arrived.

Comment 4

[Derek Moore [:dmoore]]

Phong, it just arrived and is in SCL3 storage. We should be able to get it racked and cabled tomorrow.

Comment 5

[Salvador Espinoza [:sal]]

Phong: Derek: 

We can get the mini online today. But is it going on a sonnet chassis by itself, or is it getting paired off with another mini?

Comment 6

[Phong Tran [:phong]]

Punt it back over our way once it's racked.

Comment 7

[Salvador Espinoza [:sal]]

Phong:

Here it is:

https://inventory.mozilla.org/en-US/systems/show/6593/


Let me know if you need anything else.

Comment 8

[Philipp Kewisch [:Fallen] [:📆][:🧩]]

Whats the status of this bug? I really need this working asap, we have been missing nightly builds sine mid may.

Comment 9

[Dustin J. Mitchell [:dustin] (he/him)]

It looks like this will need someone to set up the OS on this system, along with DNS updates and inventory updates.  It should be

63.245.223.33
cal-mini-osx64-1.community.scl3.mozilla.com.
 (the community network is getting full..)

Specops is all offsite this week, so we can't be much help.

Comment 10

[Derek Moore [:dmoore]]

Dustin, we'll go ahead and get the IP/DNS/inventory updated. What else is included in "setting up the OS"?

Comment 11

[Dustin J. Mitchell [:dustin] (he/him)]

Not too much:

1) User created with the following details:
   Full Name: Calendar Builder
   User Name: calbld
   Password is in community GPG file

2) VNC and SSH sharing enabled.  This can be done by
   launching System Preferences, going to 'Sharing' and ticking
   the 'Screen Sharing' and 'Remote Login' settings

3) 'calbld' set to automatically log into a console session.  
   This can be done by launching System Preferences, going to 
   'Accounts', clicking the padlock to unlock the preference pane,
   pressing 'Login Options' then selecting "Calendar Builder" from
   the "Automatic Login" list

Comment 12

[Derek Moore [:dmoore]]

Sal, do you have time for this one today? If you don't have access to the community GPG file, just give the user a temporary password and we can change it remotely.

Comment 13

[Salvador Espinoza [:sal]]

Derek: 

Yeah can do it today sometime after lunch, currently at SCL2

Comment 14

[Salvador Espinoza [:sal]]

(In reply to Dustin J. Mitchell [:dustin] from comment #11)
> Not too much:
> 
> 1) User created with the following details:
>    Full Name: Calendar Builder
>    User Name: calbld
>    Password is in community GPG file
> 
> 2) VNC and SSH sharing enabled.  This can be done by
>    launching System Preferences, going to 'Sharing' and ticking
>    the 'Screen Sharing' and 'Remote Login' settings
> 
> 3) 'calbld' set to automatically log into a console session.  
>    This can be done by launching System Preferences, going to 
>    'Accounts', clicking the padlock to unlock the preference pane,
>    pressing 'Login Options' then selecting "Calendar Builder" from
>    the "Automatic Login" list

This is complete, let me know of any issues.

After confirmed please close the bug :D

Comment 15

[Dustin J. Mitchell [:dustin] (he/him)]

Well, I can ping it at that IP, but not login with the calbld password from GPG as any of calbld, administrator, or root.

I added the DNS.  Is inventory up?

Comment 16

[Salvador Espinoza [:sal]]

(In reply to Dustin J. Mitchell [:dustin] from comment #15)
> Well, I can ping it at that IP, but not login with the calbld password from
> GPG as any of calbld, administrator, or root.
> 
> I added the DNS.  Is inventory up?

Dustin: 
We got the password from the community boxes on the GPG file, we can reset the password for you today.


Inventory:
https://inventory.mozilla.org/en-US/systems/show/6593/

Comment 17

[Salvador Espinoza [:sal]]

The password is updated, you should be able to login as calbld.

Comment 18

[Philipp Kewisch [:Fallen] [:📆][:🧩]]

dustin, sal, looks like its accessible now. In the end I will need buildbot and everything needed for a builder set up on this machine. I took a glance at the Mac ReferencePlatform and it seems most things are done via puppet these days. Is this a viable route for this machine? Should I file another bug to set up everything on the reference platform list?

Comment 19

[Philipp Kewisch [:Fallen] [:📆][:🧩]]

As discussed with dustin, I will have to take care of the builder setup myself. Therefore this bug is FIXED.