927199 - two new instances like vcssync{1,2}, puppetized

Status: RESOLVED WONTFIX

(Release Engineering :: General, defect)

Description

[Aki Sasaki (not active)]

I don't need these right away, and aiui we still have work to do to puppetize these boxes, so I thought I'd file a bug for vcssync{3,4} before I need them.

l10n and hg.m.o/build/ repos could switch over soonish, if I get these boxes, or we could move the gecko-dev/gecko-projects jobs over to puppet-managed boxen or whatever.

Comment 1

[Dustin J. Mitchell [:dustin] (he/him)]

I've disabled puppet on vcssync{1,2}, revoked their certs, removed them from moco-nodes.pp, and added notes to their motd's.

Comment 2

[Aki Sasaki (not active)]

bug 924716 has details on the previous setup.

Comment 3

[John O'Duinn [:joduinn] (please use "needinfo?" flag)]

Found in triage. Dep bug#924716 is fixed. 

Whats left to do here?

Comment 4

[Aki Sasaki (not active)]

Everything.  Nothing has been done.

Comment 5

[Chris Cooper [:coop] (he/him)]

Aki: does this need to be linked more directly with Pete's work on the new vcssync dependency-wise?

Comment 6

[Aki Sasaki (not active)]

Coop: this blocks bug 799719, which is assigned to Pete.  What dependency changes did you want to make?
Also not sure if we should dup 847651 against this bug.

Comment 8

[Dustin J. Mitchell [:dustin] (he/him)]

"HAND-BUILT - to be rebuilt with puppet in bug 927199"
  y u make squirrels cry??
(in other words, ping?)

Comment 9

[Pete Moore [:pmoore][:pete]]

I'm on build duty next week, and have some other work stacked up - but "taking" this bug so I don't lose track that I want to do it. Hopefully sometime in August.

Comment 10

[Pete Moore [:pmoore][:pete]]

Braindumped with Callek over vidyo here: https://releng.etherpad.mozilla.org/vcs-sync-puppetizing

Comment 11

[Pete Moore [:pmoore][:pete]]

Updated braindump with:

~/.gitconfig
~/.passwords

Comment 12

[Pete Moore [:pmoore][:pete]]

Also some key entries needed in ~vcs2vcs/.ssh/known_hosts!

For example:

git.mozilla.org,63.245.215.69 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwwdyRY+XDBzVy/XBwdlgu3cD7JZGWJZ+Mxgq3+sgZCigb9Dkpg1rgf9II8EntDdvC086GMWKqL2aVVQ79fTaze5ENaxTOl3Qhlcvj3GigFm+yRaLWXwtYz8+mVNCKADi76UzUU/8viQBZnZGZ0K48W3w71msRSHu0q7b4aBkkqMonO+czFpt+4Bjx5eZ/kTb/dAuJdNxLwrUEHkEHL/fSioOn26DZtLXp3mgzG+UtRcefxkRWuwDABP2hSXGQeoLkLe0xTYrsXySA6+81aW3CI7JtFLeVSnKqJ4HTLVQL/6ZqqcIvQrnmRSoKWGPAKx/xvUNpINrlzmIXqwQTY66yQ==

You might want to aggregate them all across the various vcs sync machines...

Comment 13

[Pete Moore [:pmoore][:pete]]

And there are some private keys too in ~/.ssh used for pushing to git repos (both a key for github repos, and a key for git.mozilla.org repos)

Comment 14

[Pete Moore [:pmoore][:pete]]

See bug 1112262 above - we need plenty of inodes when setting up the disk partitions...

Comment 15

[Dustin J. Mitchell [:dustin] (he/him)]

At this point, these should be set up in AWS, not onsite.  I don't know if that affects the inode question.

Comment 16

[Justin Wood (:Callek)]

Hal says dev services are taking over vcs-sync.

Comment 17

[Hal Wine [:hwine] use NI!]

dev services is handling in other bugs, no puppet involved.