Closed Bug 785462 Opened 13 years ago Closed 13 years ago

db's copy slow logs using scp as root

Categories

(Data & BI Services Team :: DB: MySQL, task)

Product:
Data & BI Services Team
Component:
DB: MySQL
Type:
task
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED FIXED

People

(Reporter: dustin, Assigned: dustin)

Details

(Whiteboard: root-migration-exception)

The shell script that copies slow logs around for developer analysis uses root on the destination. This can probably be fixed with a role-based account in LDAP.
We might not need ldap, the mysql user might be sufficient. (but then we'd need to resurrect the .ssh directories we're trying to kill....but only for the servers affected).
LDAP users are pretty easy, and they offer good isolation.
I should be able to get this done by next week.
Whiteboard: root-migration-exception
I'm OK with the LDAP users, whatever makes sense. I'd prefer there not be a .ssh directory in /var/lib/mysql, if we can avoid that (if we can't, we'll live with it).
While I'm at it, I should add some splay to the crontasks so they're not all beating the heck out of their target machine at the EXACT SAME INSTANT.
Bug 787402 sets up flows for addons db's to webdev1. I've got a slowlogs user on webdev1, with access limited by key and ID. Documented on Mana. I'll fix up the script in a subsequent commit.
Depends on: 787402
Splay is in. This doesn't actually depend on the flow - the script works.
Status: NEW → RESOLVED
Closed: 13 years ago
No longer depends on: 787402
Resolution: --- → FIXED
Some of the failures over the weekend were due to missing host_keys entries. I added -oStrictHostKeyChecking=no so that the first connect will cache the host key without asking.
Right, and the script still said "root@..", not "slowsync@.." like it should. I'm a dummy. So this still isn't working..
Status: RESOLVED → REOPENED
Resolution: FIXED → ---
What I meant was "slowlogs@.." geez
This seems to be fine now. There are a few stragglers I'm handling one by one.
Status: REOPENED → RESOLVED
Closed: 13 years ago → 13 years ago
Resolution: --- → FIXED
Product: mozilla.org → Data & BI Services Team
You need to log in before you can comment on or make changes to this bug.