We need a Ganeti test cluster to test invasive changes (such as OS updates) without production impact.
New hardware to be procured via https://phabricator.wikimedia.org/T284954, but with current lead times, two servers from the current codfw capex will be initially repurposed for this.