Bohrium is a Ganeti VM so we'd need a new one to properly upgrade to Debian Stretch. A high level plan would be:
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | elukey | T192642 Upgrade Analytics infrastructure to Debian Stretch | |||
| Resolved | elukey | T202962 Upgrade bohrium (piwik/matomo) to Debian Stretch | |||
| Resolved | elukey | T202963 eqiad (1) - VM request for Piwik/Matomo | |||
| Resolved | elukey | T206315 Decommission bohrium |
There seems to be a new upstream version - 3.6.0 - that contains some security fixes but it is not available via debian.matomo.org's mirror. https://github.com/matomo-org/matomo-package/issues/81 was opened to track the issue. It would be great to deploy on the new VM 3.6.0 directly to avoid more downtime for the upgrade.
Change 463762 had a related patch set uploaded (by Elukey; owner: Elukey):
[operations/puppet@production] Add matomo1001 to puppet
Change 463762 merged by Elukey:
[operations/puppet@production] Add matomo1001 to puppet
Change 463781 had a related patch set uploaded (by Elukey; owner: Elukey):
[operations/puppet@production] profile::piwik: move to mariadb
Change 463783 had a related patch set uploaded (by Elukey; owner: Elukey):
[operations/puppet@production] profile::piwik: move to mariadb
Change 463783 merged by Elukey:
[operations/puppet@production] profile::piwik: move to mariadb
Change 463797 had a related patch set uploaded (by Elukey; owner: Elukey):
[operations/puppet@production] profile::piwik::webserver: install php7.0-mbstring on Stretch
Change 463797 merged by Elukey:
[operations/puppet@production] profile::piwik::webserver: install php7.0-mbstring on Stretch
Change 463810 had a related patch set uploaded (by Elukey; owner: Elukey):
[operations/puppet@production] matomo: replace last piwik occurrences
Change 463810 merged by Elukey:
[operations/puppet@production] matomo: replace last piwik occurrences
Change 463906 had a related patch set uploaded (by Elukey; owner: Elukey):
[operations/puppet@production] Add prometheus mysql exporter for analytics-meta and matomo
Change 463906 merged by Elukey:
[operations/puppet@production] Add prometheus mysql exporter for analytics-meta and matomo
Change 463915 had a related patch set uploaded (by Elukey; owner: Elukey):
[operations/puppet@production] role::prometheus::analytics: add mysqld exporter references
Change 463915 merged by Elukey:
[operations/puppet@production] role::prometheus::analytics: add mysqld exporter references
Change 463918 had a related patch set uploaded (by Elukey; owner: Elukey):
[operations/puppet@production] role::prometheus::analytics: add mysql jobs to the config
Change 463918 merged by Elukey:
[operations/puppet@production] role::prometheus::analytics: add mysql jobs to the config
Change 463919 had a related patch set uploaded (by Elukey; owner: Elukey):
[operations/puppet@production] role::prometheus::analytics: fix mysql exporter config
Change 463919 merged by Elukey:
[operations/puppet@production] role::prometheus::analytics: fix mysql exporter config
Change 463920 had a related patch set uploaded (by Elukey; owner: Elukey):
[operations/puppet@production] profile::piwik::database: deploy the mysql exporter on jessie
Change 463920 merged by Elukey:
[operations/puppet@production] profile::piwik::database: deploy the mysql exporter on jessie
Change 463944 had a related patch set uploaded (by Elukey; owner: Elukey):
[operations/puppet@production] profile::piwik: increase innodb buffer pool
Change 463944 merged by Elukey:
[operations/puppet@production] profile::piwik: tune mariadb configs
Change 463947 had a related patch set uploaded (by Elukey; owner: Elukey):
[operations/puppet@production] matomo: remove plugin not compatible with 3.5.1
Change 463952 had a related patch set uploaded (by Elukey; owner: Elukey):
[operations/puppet@production] profile::piwik::webserver: deploy php7.0-xml
Change 463947 merged by Elukey:
[operations/puppet@production] matomo: remove plugin not compatible with 3.5.1
Change 463952 merged by Elukey:
[operations/puppet@production] profile::piwik::webserver: deploy php7.0-xml
Change 463957 had a related patch set uploaded (by Elukey; owner: Elukey):
[operations/puppet@production] role::cache::text: add matomo1001 backend for piwik.wikimedia.org
matomo1001 is ready to take traffic! The switch procedure should be:
Change 463957 abandoned by Elukey:
role::cache::text: add matomo1001 backend for piwik.wikimedia.org
Reason:
Going to split the change in two parts as suggested by Brandon
Change 464110 had a related patch set uploaded (by Elukey; owner: Elukey):
[operations/puppet@production] role::cache::text: add a backed for matomo1001
Change 464112 had a related patch set uploaded (by Elukey; owner: Elukey):
[operations/puppet@production] Replace bohrium with matomo1001 in cache text configuration
Change 464113 had a related patch set uploaded (by Elukey; owner: Elukey):
[operations/puppet@production] Clean up bohrium's references in cache text
Mentioned in SAL (#wikimedia-operations) [2018-10-04T07:31:17Z] <elukey> move Piwik/Matomo from bohrium to matomo1001 - T202962
Change 464110 merged by Elukey:
[operations/puppet@production] role::cache::text: add a backend for matomo1001
Change 464112 merged by Elukey:
[operations/puppet@production] Replace bohrium with matomo1001 in cache text configuration
Change 464113 merged by Elukey:
[operations/puppet@production] Clean up bohrium's references in cache text
Change 464799 had a related patch set uploaded (by Elukey; owner: Elukey):
[operations/dns@master] Add matomo1001's IPv6 PTR