[tor-bugs] #32802 [Internal Services/Tor Sysadmin Team]: retire kvm4, 8 VMs to migrate

[Tor Bug Tracker & Wiki]

#32802: retire kvm4, 8 VMs to migrate
-------------------------------------------------+-------------------------
 Reporter:  anarcat                              |          Owner:  anarcat
     Type:  project                              |         Status:
                                                 |  accepted
 Priority:  High                                 |      Milestone:
Component:  Internal Services/Tor Sysadmin Team  |        Version:
 Severity:  Major                                |     Resolution:
 Keywords:  tpa-roadmap-april                    |  Actual Points:
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Old description:

> kvm4 is getting fairly old. it's been setup in 2015 and is showing sign
> of old age. for example today it freaked us all out by not returning
> after a reboot right before the holidays (#32801). considering how
> critical that server is (email, puppet, ldap, jenkins, dns, web mirror,
> all the windows buildboxes!) we should start considering a
> decomissionning process.
>
> at the very least, we need to get eugeni the heck out of there.
>
> we have budget to provision another ganeti cluster, so let's use it to
> replace this, and hopefully more. the existing cluster has already taken
> more than its share by taking machines from both kvm1/textile and moly,
> so it's time we provision more hardware for this.
>
> this requires a new ganeti node (fsn-node-06, #33907).
>
> machines to be migrated:
>
>  * [ ] alberti.torproject.org (LDAP) #33908
>  * [ ] build-x86-09.torproject.org (build server) - RETIRE? there's a
> build box on kvm4, kvm5 and two on moly, all of which are scheduled for
> retirement, so we have to keep *some* of those resources
>  * [ ] eugeni.torproject.org (email) #32803
>  * [ ] meronense.torproject.org (metrics) #33909
>  * [ ] neriniflorum.torproject.org (DNS) #33910
>  * [ ] oo-hetzner-03.torproject.org (metrics) #33911
>  * [ ] pauli.torproject.org (puppet) #33912
>  * [ ] rouyi.torproject.org (jenkins) #33913
>  * [ ] web-hetzner-01.torproject.org (static mirror) RETIRE?
>  * [ ] weissii.torproject.org (windows build box) #33914
>  * [ ] winklerianum.torproject.org (windows build box) turned off,
> RETIRE?
>  * [ ] woronowii.torproject.org (windows build box) turned off, RETIRE?

New description:

 kvm4 is getting fairly old. it's been setup in 2015 and is showing sign of
 old age. for example today it freaked us all out by not returning after a
 reboot right before the holidays (#32801). considering how critical that
 server is (email, puppet, ldap, jenkins, dns, web mirror, all the windows
 buildboxes!) we should start considering a decomissionning process.

 at the very least, we need to get eugeni the heck out of there.

 we have budget to provision another ganeti cluster, so let's use it to
 replace this, and hopefully more. the existing cluster has already taken
 more than its share by taking machines from both kvm1/textile and moly, so
 it's time we provision more hardware for this.

 this requires a new ganeti node (fsn-node-06, #33907).

 machines to be migrated:

  * [ ] alberti.torproject.org (LDAP) #33908
  * [ ] build-x86-09.torproject.org (build server) - RETIRE there's a build
 box on kvm4, kvm5 and two on moly, all of which are scheduled for
 retirement, so we have to keep *some* of those resources
  * [ ] eugeni.torproject.org (email) #32803
  * [ ] meronense.torproject.org (metrics) #33909
  * [ ] neriniflorum.torproject.org (DNS) #33910
  * [ ] oo-hetzner-03.torproject.org (metrics) #33911
  * [ ] pauli.torproject.org (puppet) #33912
  * [ ] rouyi.torproject.org (jenkins) #33913
  * [ ] web-hetzner-01.torproject.org (static mirror) RETIRE
  * [ ] weissii.torproject.org (windows build box) #33914
  * [ ] winklerianum.torproject.org (windows build box) turned off, RETIRE?
  * [ ] woronowii.torproject.org (windows build box) turned off, RETIRE?

--

Comment (by anarcat):

 re the build box, weasel says we can retire it, but we will eventually
 need to create build boxes in the gnt-fsn cluster at some point.

 web-hetzner-01 can be retired.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/32802#comment:7>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online