860626 - [cab-request] Mailman Upgrade

Status: RESOLVED FIXED

(Infrastructure & Operations :: Change Requests, task)

Description

[Michael Burns [:mburns]]

* Reason for Upgrade

This fixes a security hole in mailman, provides missing Themes for non-english lists, and fixes a nntp-header (only relevant to mailman2.mail.corp.phx1) bug that can break threading in some cases.

* date, time, duration of maintenance

Date/Time is To Be Determined, given the user impact involved

~30 minutes per host to upgrade, confirm the new upgrade applied as expected with live tests, and revert if needed.

* system(s) affected

mailman1.mail.corp.phx1.mozilla.com (mail.m.o)
mailman2.mail.corp.phx1.mozilla.com (lists.m.o)
mailman3.mail.corp.phx1.mozilla.com
mailman4.mail.corp.phx1.mozilla.com (bugzilla mailman)

* end-user impact

Mailing lists associated to these servers will not deliver mail for the <=30 minutes that host is under maintenance. No lost data or email should occur.

* maintenance plan and timeline (link to a wiki or etherpad is fine)

https://infra.etherpad.mozilla.org/mailman-2-1-15-upgrade

* rollback plan / rollback point (at which point will you determine to roll back)

Downgrade the version in the puppet manifest, and downgrade on the host with:
`yum downgrade -vh mailman-2.1.14-3mozilla10.el6.x86_64`

On disk file formats are compatible with both versions, and no schema-like changes are involved, so downgrading is smooth. If at T=20minutes, mail is not flowing correctly, we can revert versions.

* notification mechanisms

Email to all@, (and mozilla.general?), @mozillaIT, and a Yammer announcement.

* who will be point, who else will be involved 

mburns will take point. limed, justdave or rbryce may be available to assist.

Comment 1

[Shyam Mani [:fox2mike]]

On hold for now.

Comment 2

[Shyam Mani [:fox2mike]]

Can be visited later. Closing for now.

Comment 3

[Ed Lim [:limed]]

I'll be taking point on this process, I currently have this running on the stage mailman server.

I verified that the package looks good and the steps indicated in comment 1 is a good plan to get things upgraded. I'm pushing this in and hope to get this done ASAP as requested by opsec. See bug https://bugzilla.mozilla.org/show_bug.cgi?id=765289#c18

Comment 4

[Ed Lim [:limed]]

Approved, scheduled for 6/27/2013 at 6PM