Box-Admins October 2016

box-admins@lists.squeakfoundation.org

6 participants
18 discussions

Access to the new server(s)
by Tobias Pape 05 Apr '19

05 Apr '19

Dear all [ACTIONS AT END] with retroactive blessing of Levente, I have now prepared eight VMs on Rackspace. Here's the overview: ======================================================================================================================= Name Name (ext) intended use Unix Users Public Ports Private Ports Public IPv4 Private IPv4 ----------------------------------------------------------------------------------------------------------------------- ian ssh.squeak.org ssh-gateway ssh 1022 22 104.130.6.82 10.208.225.29 alan *.squeak.org webserver webteam 80, 443 22 104.239.229.92 10.176.200.8 adele lists.... mailinglists (tbd) 25, 587, 465 22, 8080 162.242.237.43 10.208.160.56 andreas -------- source.squeak chrismuller* -------- 22, 8080 irrelevant 10.208.161.222 dan -------- squeaksource davidlewis* -------- 22, 8080 irrelevant 10.176.197.150 ted -------- squeak wiki+map (tbd) -------- 22, 8080, 8081 irrelevant 10.176.130.111 david -------- jenkins (tbd) -------- 22, 8080 irrelevant 10.208.194.45 scott -------- misc (tbd) -------- 22, 8080, 8081 irrelevant 10.176.199.169 ======================================================================================================================= Currently, Levente and me have sudo on all these machines. Users with * also do. Note that _no_ server exposes SSH on port 22 on a public IP. This is intentional to narrow attack vectors for script kiddies. How to login? Ian is the ssh gateway so you have to connect to ian _first_ and use (1) local forwarding or (2) proxy jumping. I have installed the Public keys from most of you for the 'ssh' user on ian. Please verify by ssh -p1022 -lssh 104.130.6.82 you should see restrict shell, no commands # (you get out with crtl-d, ctrl-c, or killing ssh) How to reach the other servers? Example for 'andreas' variant (1): Do a local forward by ssh -AN -L22221:10.176.200.8:22 -p1022 -lssh 104.130.6.82 and then ssh -lYOURNAME -p22221 localhost (-N maybe optional, but then you see 'restrict shell, no commands #') Or in your .ssh/config you can put Host ian.squeak.org User ssh Hostname 104.130.6.82 Port 1022 LocalForward 222221 10.176.200.8:22 Host andreas.squeak.org User YOURNAME Hostname localhost Port 222221 And then say 'ssh -AN ian.squeak.org' and then 'ssh andreas.squeak.org' variant (2): (a) You have OpenSSH >= 7.3 Do a Jump with ssh -J ssh@104.130.6.82:1022 YOURNAME(a)10.176.200.8 Or in your .ssh/config you can put Host ian.squeak.org User ssh Hostname 104.130.6.82 Port 1022 Host andreas.squeak.org User YOURNAME Hostname 10.176.200.8 ProxyJump ian.squeak.org And then say 'ssh andreas.squeak.org' (b) You have OpenSSH >= 5.4 Do a Jump via ssh -o ProxyCommand="ssh -lssh -p1022 -W %h:%p 104.130.6.82" YOURNAME(a)10.176.200.8 Or in your .ssh/config you can put Host ian.squeak.org User ssh Hostname 104.130.6.82 Port 1022 Host andreas.squeak.org User YOURNAME Hostname 10.176.200.8 ProxyCommand ssh -W %h:%p ian.squeak.org And then say 'ssh andreas.squeak.org' (c) You have OpenSSH < 5.4 Use variant (1) We will shortly start RSYNC-ing over data from box3 and box4 as well as replicatiing DNS entries before switching over. [ACTION REQUIRED] - Who needs access to which servers? - Do we need Jenkins anymore? As always, questions appreciated. Best regards -Tobias

8 36

commit mails ok again Fwd: [Vm-dev] VM Maker: VMMaker.oscog-eem.1965.mcz
by Tobias Pape 26 Oct '16

26 Oct '16

see: :) Begin forwarded message: > From: commits(a)source.squeak.org > Subject: [Vm-dev] VM Maker: VMMaker.oscog-eem.1965.mcz > Date: 26. Oktober 2016 21:05:09 MESZ > To: vm-dev(a)lists.squeakfoundation.org > Reply-To: vm-dev(a)lists.squeakfoundation.org > Delivered-To: vm-dev(a)mail.squeak.org > > > Eliot Miranda uploaded a new version of VMMaker to project VM Maker: > http://source.squeak.org/VMMaker/VMMaker.oscog-eem.1965.mcz > > ==================== Summary ==================== > > Name: VMMaker.oscog-eem.1965 > Author: eem > Time: 26 October 2016, 12:04:22.700073 pm > UUID: e173d891-126a-4db1-a8ba-fdfa64bfc28c > Ancestors: VMMaker.oscog-eem.1964 > > Oops. Put the x64 implementation of literalBeforeInlineCacheTagAt: in the right place. > > =============== Diff against VMMaker.oscog-eem.1964 =============== > > Item was removed: > - ----- Method: CogObjectRepresentationFor64BitSpur>>literalBeforeInlineCacheTagAt: (in category 'in-line cacheing') ----- > - literalBeforeInlineCacheTagAt: callSiteReturnAddress > - "Answer a literal loaded before the inline cache tag load for the return address of a send." > - ^self literalBeforeFollowingAddress: callSiteReturnAddress - 12 "5 for the call plus 7 for the selectorIndex/classIndex load"! > > Item was added: > + ----- Method: CogX64Compiler>>literalBeforeInlineCacheTagAt: (in category 'inline cacheing') ----- > + literalBeforeInlineCacheTagAt: callSiteReturnAddress > + "Answer a literal loaded before the inline cache tag load for the return address of a send." > + ^self literalBeforeFollowingAddress: callSiteReturnAddress - 12 "5 for the call plus 7 for the selectorIndex/classIndex load"! >

1 0

Re: [Box-Admins] Moving box3 off Gandi hosting
by Tobias Pape 21 Oct '16

21 Oct '16

On 17.10.2016, at 16:03, Brett Smith <brett(a)sfconservancy.org> wrote: > On 10/14/2016 02:27 PM, Tobias Pape wrote: > > > >> But Since we do not have the matching rights to review billing information (which I do not question), >> I'd like to ask you how much of the provided 2k/month we're using currently. I lost accurate tally somehow >> and don't trust my simple maths. >> > > > Tobias, > > No problem. Last month you used $153.56. About half of that was the virtual servers themselves, and the rest spread among databases, backups, and basic account overhead. Right now the next bill is estimated to be pretty similar. So you have plenty more space to work with. Ok, thanks for this information :) Best regards -Tobias

1 0

Moving lists | server suggestions
by Tobias Pape 21 Oct '16

21 Oct '16

Dear all I need an opinion. It seems infeasible to retain qmail as the mail-server for our mailing lists. That's because implementing SPF (required by major domains, eg google and such) _REQUIRES_ us to implement SRS, which is not compiled into qmails by default. Postfix is reasonably easy to configure and with postsrs, an SRS solution exists. And it works, I use it on my private server. Also, we'd get the benefit of being able to use more advances spam filtering, because viable solutions that don't need a Ph.D. in configure-by-source-code-patching-and-editing exists. Does this sound sane or should I make an effort to retain qmail? (The quicker the responses are, the quicker I can make the move). Best regards -Tobias

3 4

Move Status
by Tobias Pape 21 Oct '16

21 Oct '16

Dear all as of today, more than half of the services, especially the squeaksourcen have been moved: OK - move DNS OK - move main web server - move mailing lists (quite some of them) OK - move main application (source.squeak.org) OK - move squeaksource.com OK - move mantis - move squeak wiki + squeak map - move jenkins OK - move codespeed If jenkins has been moved, box3 will have been vacated (yay). I'm onto the MLs but its painful. December is quite doable. Best regards -Tobias

1 0

please delay usage of source.squeak.org
by Tobias Pape 20 Oct '16

20 Oct '16

Dear all, we're about to switch over source.squeak.org to the new infrastructure, safe a few minor adjustments. Please cease commit to source.squeak.org until Chris or a Box-admin says we're go again :) Thanks and best regards -Tobias (Somehow managing the infrastructure switch)

1 0

source.squeak.org is ready to switch
by Chris Muller 20 Oct '16

20 Oct '16

Hi Levente and Tobias, source.squeak.org is finally ready to make the switch to the andreas box at Rackspace. I've imported the new data.obj as of a couple of days ago, and watched it running. Everything is fine, let's pull the trigger! I suggest we: 1) notify the community of outage. 2) stop source.squeak.org on box4. 3) run one last rsync from box4:/srv/box2/home/sqeueaksource/ss to: andreas:/srv/sourcesqueakorg/box4/squeaksource/webserver/ss *Important: Please do not rsync above this directory! 4) bounce the server on andreas. (sudo svc -k /service/squeaksource). 5) Wait a few minutes. Make sure all is well. I can help with this. 6) Tobias or Levente switch the DNS + whatever else is needed. 7) Notify community, back up. I suggest we do it ASAP. Please let me know your thoughts. - Chris

2 5

Re: [Box-Admins] Moving box3 off Gandi hosting
by Tobias Pape 14 Oct '16

14 Oct '16

Hi Bret On 13.10.2016, at 15:52, Brett Smith <brett(a)sfconservancy.org> wrote: > Hi Tobias, > > I just wanted to check in real quick and see how the migration is going. Gandi actually specifically reached out to us this week about the datacenter shutdown on 1 December. We assured them solutions are in the works. Yes, everything is in the works. We have 2,5 services + our Mailinglist-Server to migrate. > If there’s anything slowing you down that I can help address, please let me know. I’m more than happy to help. Technically, not really. But Since we do not have the matching rights to review billing information (which I do not question), I'd like to ask you how much of the provided 2k/month we're using currently. I lost accurate tally somehow and don't trust my simple maths. Best regards -Tobias > > Thanks again, > > -- > Brett Smith

1 0

source.squeak.org move to Rackspace
by Chris Muller 13 Oct '16

13 Oct '16

After making some adjustments to have a configurable run directory, the new server for source.squeak.org is now up and running on andreas on port 8080. The RFB port is listening on 5901. It came right up the first time, correctly performed its recovery routine, and I was able to connect through a ssh tunnel to its RFB port, and interact with the image. I was able to interact with its webserver through an ssh tunnel to its webPort and interact with the web app. I tested graceful daemontools shutdown and restart. Logging through the multilog utility appears to be working. All looks well. ======= assistance needed here ======= However, I need to import the latest data.obj from production one more time. To do that, I need to get into the image to export it first, but cannot seem to get it to come up. I thought I've done it before, but for whatever reason, just can't get it to work. My steps are: "log in with X forwarding, right?" ssh -X chrismuller(a)box4.squeak.org "start vnc server as specified in /srv/box2/home/squeaksource/service/run" tightvncserver :2 "verify $VNCDISPLAY will be assigned, simply '2' (without quotes)." ps x -u squeaksource -ocmd | grep '^Xtightvnc :' | sed 's/.*://;s/ .*//' "2" "okay, kill existing process to force a restart" kill <pid> "kill existing process to force restart" "No window appears. ps still reports a new pid, but still as -vm display=none" 1006 15721 4564 4 22:59 ? 00:01:51 /usr/local/lib/squeak/3.11.3-2135/squeakvm -vm-display-none /home/squeaksource/Squeak3.11-8824-SS.image ================================= If no one knows how to do this I suppose I can download the image and changes files to my local computer and get it that way..

1 0

www.squeak.org move to rackspace
by Tobias Pape 13 Oct '16

13 Oct '16

Hi all the main web server has been moved. The dns for squeak.org www.squeak.org now point to alan The files have been moved. The dns-change for squeak.org might be delicate. Please report IMMEDIATELY if you notice any flakyness or problems. Best regards -Tobias

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Box-Admins October 2016