Page MenuHomePhabricator

decommission es1018.eqiad.wmnet
Closed, ResolvedPublicRequest


This task will track the decommission-hardware of server es1018.eqiad.wmnet

With the launch of updates to the decom cookbook, the majority of these steps can be handled by the service owners directly. The DC Ops team only gets involved once the system has been fully removed from service and powered down by the decommission cookbook.


Steps for service owner:

  • - all system services confirmed offline from production use
  • - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place. (likely done by script)
  • - remove system from all lvs/pybal active configuration
  • - any service group puppet/hiera/dsh config removed
  • - remove site.pp, replace with role(spare::system) recommended to ensure services offline but not 100% required as long as the decom script is IMMEDIATELY run below.
  • - login to cumin host and run the decom cookbook: cookbook sre.hosts.decommission <host fqdn> -t <phab task>. This does: bootloader wipe, host power down, netbox update to decommissioning status, puppet node clean, puppet node deactivate, debmonitor removal.
  • - run homer on cumin host to update switch stack
  • - remove all remaining puppet references (include role::spare) and all host entries in the puppet repo
  • - remove ALL dns entries except the asset tag mgmt entries via netbox, run sre dns cookbook.
  • - reassign task from service owner to DC ops team member depending on site of servee.

End service owner steps / Begin DC-Ops team steps:

  • - system disks removed (by onsite)
  • - determine system age, under 5 years are reclaimed to spare, over 5 years are decommissioned.
  • - IF DECOM: system unracked and decommissioned (by onsite), update netbox with result and set state to offline
  • - IF DECOM: mgmt dns entries removed.
  • - IF RECLAIM: set netbox state to 'inventory' and hostname to asset tag

Event Timeline

Change 644401 had a related patch set uploaded (by Marostegui; owner: Marostegui):
[operations/puppet@production] es1018: Remove it from dbctl

Change 644401 merged by Marostegui:
[operations/puppet@production] es1018: Remove it from dbctl

Mentioned in SAL (#wikimedia-operations) [2020-12-01T06:13:22Z] <marostegui@cumin1001> dbctl commit (dc=all): 'Remove es1018 from dbctl T269069', diff saved to and previous config saved to /var/cache/conftool/dbconfig/20201201-061321-marostegui.json

Change 644459 had a related patch set uploaded (by Marostegui; owner: Marostegui):
[operations/puppet@production] mariadb: Decommission es1018

Change 644459 merged by Marostegui:
[operations/puppet@production] mariadb: Decommission es1018

cookbooks.sre.hosts.decommission executed by volans@cumin2001 for hosts: es1018.eqiad.wmnet

  • es1018.eqiad.wmnet (PASS)
    • Downtimed host on Icinga
    • Found physical host
    • Downtimed management interface on Icinga
    • Wiped bootloaders
    • Powered off
    • Set Netbox status to Decommissioning and deleted all non-mgmt interfaces and related IPs
    • Removed from DebMonitor
    • Removed from Puppet master and PuppetDB

Home was run successfully:

# homer asw2-d-eqiad* commit "T269069"
INFO:homer.devices:Initialized 35 devices
INFO:homer:Committing config for query asw2-d-eqiad* with message: T269069
INFO:homer:Gathering global Netbox data
INFO:homer.devices:Matched 1 device(s) for query 'asw2-d-eqiad*'
INFO:homer:Generating configuration for asw2-d-eqiad.mgmt.eqiad.wmnet
Configuration diff for asw2-d-eqiad.mgmt.eqiad.wmnet:

[edit interfaces interface-range disabled]
     member ge-1/0/21 { ... }
+    member ge-1/0/22;
     member ge-1/0/24 { ... }
[edit interfaces interface-range vlan-private1-d-eqiad]
-    member ge-1/0/22;
[edit interfaces]
-   ge-1/0/22 {
-       description "es1018:eno1 {#}";
-   }

Type "yes" to commit, "no" to abort.
> yes
INFO:homer.transports.junos:Committing the configuration on asw2-d-eqiad.mgmt.eqiad.wmnet
INFO:homer:Homer run completed successfully on 1 devices: ['asw2-d-eqiad.mgmt.eqiad.wmnet']
Marostegui updated the task description. (Show Details)
Marostegui edited projects, added DC-Ops, ops-eqiad; removed Patch-For-Review, DBA.

Ready for DC Ops!

wiki_willy moved this task from Backlog to Decommission on the ops-eqiad board.
wiki_willy added a subscriber: wiki_willy.

removed from rack, updated netbox and ran the script, confirmed network ports were already removed.