Page MenuHomePhabricator

fundraising jessie build/puppet integration outstanding issues for payments servers
Closed, ResolvedPublic

Description

  • pxeboot->tftp->preseed->install isn't functional for debian/jessie

    had some trouble finding a kernel/initrd that would pxeboot in virtualbox, this was helpful: https://wiki.debian.org/PXEBootInstall

    Release.gpg is missing on all debian ISOs, so local repo based on a mounted ISO can't be used to install
    • could do horrible nginx rewrite/redirect stuff to use local when possible, otherwise remote repo
    • could host/sign locally and modify pxe initrd to include our public key
    • could punt and simply reverse-proxy to a debian mirror (the winner)

      solution: punt on local repo, just use reverse proxy pxeboot install like this https://wiki.debian.org/PXEBootInstall many small tftp, preseed, puppet config changes for jessie
  • mysql puppet config is ubuntu specific

    solution: 721a0e4abfd3dc8c48f73defdd67970e48f922e8 Author: Jeff Green <jgreen@wikimedia.org> Date: Thu Jun 9 11:21:53 2016 -0400

    retool mysql/mariadb config to include jessie
  • apparmor is missing

    solution: commit 3d6dd821e5fd92e66db769728d828261fbc17d7d commit f1e3e41e656f085c465f1c2ab5a79b6f274b82b8
  • freshclam won't start
  • automate security package update alerts
  • timezone is wrong after install
  • switch to systemd's sntp instead of standard ntpd?
  • figure out local systemd vs syslog log centralization

Event Timeline

Jgreen renamed this task from fundraising jessie build/puppet integration outstanding issues to fundraising jessie build/puppet integration outstanding issues for payments servers.Jun 9 2016, 4:27 PM
switch to systemd's sntp instead of standard ntpd?

decided against. ntp::client adds this: timedatectl set-ntp false

freshclam won't start

"AllowSupplementaryGroups false" isn't supported, and doesn't appear to be needed for precise/trusty since the default is to disable

timezone is wrong after install

UTC isn't an option during manual install (?), but it's fixed fixed via preseed for automatic installs

figure out local systemd vs syslog log centralization

this is already working.