[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Savannah-cvs] [326] MigrationChecklist: remove completed items
From: |
assafgordon |
Subject: |
[Savannah-cvs] [326] MigrationChecklist: remove completed items |
Date: |
Mon, 27 Feb 2017 16:41:12 -0500 (EST) |
Revision: 326
http://svn.sv.gnu.org/viewvc/?view=rev&root=administration&revision=326
Author: agn
Date: 2017-02-27 16:39:04 -0500 (Mon, 27 Feb 2017)
Log Message:
-----------
MigrationChecklist: remove completed items
Modified Paths:
--------------
trunk/sviki/MigrationChecklist.mdwn
Modified: trunk/sviki/MigrationChecklist.mdwn
===================================================================
--- trunk/sviki/MigrationChecklist.mdwn 2017-02-22 01:41:54 UTC (rev 325)
+++ trunk/sviki/MigrationChecklist.mdwn 2017-02-27 21:39:04 UTC (rev 326)
@@ -1,109 +1,23 @@
Migration Check List
====================
-Last-minute tasks before going live
------------------------------------
+### VCS0 + DOWNLOAD0
-### All Servers
+* Decide what to do with the NFS mounting from current vcs,download.
-* After updating DNS entries, update nginx/apache server names,
- and re-issue LetsEncrypt certificates for old names
- (e.g. `frontend.sv.gnu.org`).
-### FrontEnd0
+Remaining setup tasks - vcs0
+----------------------------
-* Copy project-submissions and tracker-attachments from
- `frontend` to `frontend0` one last time, see
- `frontend:/root/agn/sync-sv-uploads-to-frontend0.sh`.
-
-* then set owner on submissions/uploads to `www-data` user,
- see `frontend0:/root/agn/sv-set-uploads-ownership.sh`.
-
-* Update `frontend0:/etc/savane/.savane.conf.php`, remove
- `frontend0.` prefix in domain names:
-
- $sys_default_domain="savannah.gnu.org";
- $sys_brother_domain="savannah.nongnu.org";
-
- Similarly in `frontned0:/etc/savane/nongnu-conf/.savane.conf.php`:
-
- $sys_default_domain="savannah.nongnu.org";
- $sys_brother_domain="savannah.gnu.org";
-
-* Update `frontend0:/etc/savane/.savane.conf.php`, disable email-override
- debug feature, comment-out this line:
-
- $sys_debug_email_override_address = "address@hidden";
-
-
-### Internal0
-
-* Copy MySQL database `savane` from `internal` to `internal0`.
-* Update frontend, vcs, download, and mgt database connectivity.
-* Migrate cron scripts from internal to mgt0.
-
-DONE! The database has been moved to internal0. Other servers have
-been updated to use the new server. The old mysql database on
-internal has been shutdown to prevent anything from accidentally
-working due to accidentally connecting to it.
-
-### VCS0
-
* Disable cronjobs on old vcs, enable them on `vcs0` (such as `sv_groups`
which modified the NFS-shared code repositories. Only one server should
run the at a given time.
-
-### VCS0 + DOWNLOAD0
-
-* Decide what to do with the NFS mounting from current vcs,download.
-
-
-Remaining setup tasks - frontend0
----------------------------------
-
-* Ensure `cgitrepos` is updated on `vcs0`, and copied
- to `frontend0:/etc/savane/cgitrepos`.
- Search for `cgitrepos` in [[SavannahInternals]] for details.
-
-
-* Fix the following PHP issues:
-
- sh: 1: /usr/local/bin/sv_tmpgpg: not found ((appeared in apache's
log, clearly from somewhere in the php code)
- PHP Notice: Undefined offset: 0 in
/home/agn/savannah/savane/frontend/php/include/my/general.php on line 607
-
- # This happens in DEBUG code, not a show stopper:
- Notice: Array to string conversion in
/usr/src/savane/frontend/php/include/trackers/data.php on line 1924
-
- # FIXED
- # PHP Fatal error: Call-time pass-by-reference has been removed in
/home/agn/savannah/etc/savane/content/gnu-content/git/index.txt on line 4
-
- # Deprecated but still works, not a show stopper
- # PHP Deprecated: Function mysql_numrows() is deprecated in
/home/agn/savannah/savane/frontend /php/include/database.php on line 300
-
-* *DONE* - Updated apache configuration by Bob Proulx.
- SSL Certificates: Ensure shortcut domains (e.g. 'sv.gnu.org') work
- and redirect successfully with HTTPS, and provide unredirected `.well-known`
- directory for HTTP. All domains should be included
- (eg. "frontend0.sv.gnu.org", "frontend.sv.nongnu.org", "sv.gnu.org",
- "sv.nongnu.org", "vcs.sv.gnu.org","git.sv.gnu.org", etc.).
- See [[FrontEndHostRedirection]] for redirection details and apache example.
- See [[https]] for certbot/ssl informaiton.
-
-* *DONE* Sviki - See [[HowToAdminThisWiki]].
-
-
-Remaining setup tasks - vcs0
-----------------------------
-
* CronJobs `vcs0:/etc/cron.d/sv`:
* `sv_groups`,
* `/usr/src/infra/git/refresh-project-list.sh`
* `/usr/src/infra/git/sv_cgit.pl`
-* Setup permissions for webcvs updates on www.gnu.org
- (`new.py` cgi script in the apache's script) - **in progress**:
- FSF admins contacted.
* Check for special permissions for gnu webmasters?
see "GNU webpages repository access for www members"
@@ -110,62 +24,14 @@
section in [[UserAuthentication]] and also here:
<http://lists.gnu.org/archive/html/savannah-hackers-public/2016-05/msg00031.html>
-* *DONE* xinetd daemons:
- * cvs-pserver (+webcvs) - DONE
- * bzr-daemon - DONE
- * git-cvspserver - WONTFIX
- * svn-daemon - DONE
-* *DONE* - rsync access
-* *DONE* - SSH read/write access;
-
-* *DONE* - source-code web browsers:
- * cgit - DONE
- * gitweb - DONE
- * hg - DONE
- * cvs - DONE
- * cvsweb - DONE
- * bzr - DONE
- * svn - DONE
-
-* (*WONTFIX* keeping password access, as we don't have console access)
- disable OpenSSH password method when ssh-pubkey is rejected.
- (`PasswordAuthentication no` in `sshd_config`)
-
-
Remaining setup tasks - Download0
---------------------------------
-* mirmon
-
* cron jobs (see [[SavannahInternals]])
-* *DONE* - ftpmirror0.sv.gnu.org - ftp.gnu.org mirror-multiplexer
-* *DONE* - Ensure TCP ports are open: 22/80/443/873 .
-
-* *DONE* - rsync xinetd daemon
-
-* *DONE* - libnss-mysql access / ssh for savannah users (like on vcs).
- * check savannah user access (e.g. `ssh address@hidden ls` -
- should allow login but reject `ls` command)
- * **TODO**: sftp currently disabled (see
`download0:/etc/membersh-conf.pl`).
-
-* *DONE* - GNU Arch repositories
-* (*WONTFIX* keeping password access, as we don't have console access)
- disable OpenSSH password method when ssh-pubkey is rejected.
- (`PasswordAuthentication no` in `sshd_config`)
-
-* *DONE* - audio-video
-
-* *DONE* - download0.sv.gnu.org (mirror-redirection downloads)
-
-* *DONE* - download-mirror0.sv.gnu.org (non-redirecting downloads)
-
-
-
-
Remaining setup tasks - Internal0 (MySQL + DNS)
-----------------------------------------------
@@ -176,26 +42,9 @@
* Also grant MySQL access to 'downloads' (and other hosts which run perl
backend
scripts from savane).
-* cron jobs (see [[SavannahInternals]]).
-
* verify mailing list creating works (with SSH to lists.gnu.org).
-
-Remaining setup tasks - All Servers
------------------------------------
-
-* The savane git repository on the new VMs is tracking
- the `nextgen` branch, as explained in [[BackEndSetup]].
- The `master` branch contains the 'old' code as running
- on the current `frontend` VM.
- Whent he VMs go live, merge the `nextgen` branch into
- `master`, and ensure `/opt/savannah/savane` is tracking
- `master` branch on all servers.
-
-
-
-
Wiki and Documentation
----------------------
[Prev in Thread] |
Current Thread |
[Next in Thread] |
- [Savannah-cvs] [326] MigrationChecklist: remove completed items,
assafgordon <=