Page MenuHomePhabricator

labstore has multiple unpuppetized files/scripts/configs
Closed, ResolvedPublic

Description

While examining labstore1001, I've found that it is an unpuppetized mess, with lots of scripts and config files having edited/copied locally. What's even worse is that many of these have been copied to labstore1002(!), a fresh jessie installation, as well.

hese need to be fixed ASAP and never happen again, it's entirely unacceptable to have such config locally to the machine (and even more so, copied around to a second machine).

I've found at least the following:

  • /etc/exports.d/ROOT.exports & /etc/exports.d/PUBLIC.exports
  • /etc/default/nfs-kernel-server (the version is puppet does not match what's installed)
  • /etc/replication-rsync.conf
  • /usr/local/sbin/storage-replicate, /usr/local/sbin/storage-snapshot
  • /usr/local/sbin/manage-exports
  • /usr/local/sbin/manage-volumes-daemon (probably obsolete due to manage-nfs-volumes-daemon)?
  • /usr/local/sbin/projectbackup
  • /usr/local/sbin/migrate-to
  • a /root full of test scripts and test output

After this is done, I'd propose to cleanly reformat labstore1002 and do not apply anything manually before putting it in production, to make sure we haven't forgot anything on the old machine.

Event Timeline

faidon assigned this task to coren.
faidon raised the priority of this task from to High.
faidon updated the task description. (Show Details)
faidon subscribed.

Things that are known:

manage-volumes-daemon is old gluster code that probably did not have a ensure => absent

manage-snapshots
replication-rsync.conf
storage-replicate
storage-snapshots
are part of https://gerrit.wikimedia.org/r/#/c/199267/ , and deployed by hand for testing.

Known to need proper puppetization:
ROOT.exports
PUBLIC.exports

Needs investigation:
projectbackup
migrate-to

projectbackup and migrate-to were leftovers from the pmtpa migration and have been deleted, alongside the obsolete manage-volume-daemon.

Change 217861 had a related patch set uploaded (by coren):
Labs: Rewrite of manage-nfs-volumes-daemon

https://gerrit.wikimedia.org/r/217861

Change 218666 had a related patch set uploaded (by coren):
Labs: More puppetization fixes for labstore*

https://gerrit.wikimedia.org/r/218666

coren moved this task from Doing to Code Review / Blocked on the Labs-Sprint-103 board.

Change 221864 had a related patch set uploaded (by Yuvipanda):
labstore: Move stuff into module from ldap module

https://gerrit.wikimedia.org/r/221864

Change 218666 merged by Yuvipanda:
labstore: More puppetization fixes for labstore*

https://gerrit.wikimedia.org/r/218666

Change 221864 merged by Yuvipanda:
labstore: Move stuff into module from ldap module

https://gerrit.wikimedia.org/r/221864

This should be done, or very near completion. As far as I can tell, there is no unpuppetized configuration but I'm not sure yet for packages.

Change 227710 had a related patch set uploaded (by coren):
Add some package requirements for labstore*

https://gerrit.wikimedia.org/r/227710

Change 227710 merged by coren:
labstore: Add some package requirements for labstore*

https://gerrit.wikimedia.org/r/227710

Anything else? /root still has test scripts, but that's presumably ok?

Sounds good to me, although I'd really prefer it if we reinstalled labstore1001 at this point before we switch over to it, to start from a clean slate and be absolutely sure that everything that needs to be there, is puppetized.

Sounds good to me, although I'd really prefer it if we reinstalled labstore1001 at this point before we switch over to it, to start from a clean slate and be absolutely sure that everything that needs to be there, is puppetized.

Creating subticket for this then.

T107574 contains the remaining todo