Page MenuHomePhabricator

Test openjdk 8 package upgrades on eqiad stretch hosts
Closed, ResolvedPublic


Per email with @MoritzMuehlenhoff , security updates are available for OpenJDK 8.

Will test these package updates on eqiad hosts using the following restrictions:

  • One host per row
  • No masters


  • Announce start of work in #wikimedia-operations
  • Depool host and wait 2 minutes for traffic to cease.
  • Apply package updates
  • Restart Elastic services
  • Wait for all clusters to go back to green.

Repeat 2 more times.

Once I have successfully upgraded 3 hosts, I will consider this a success, and will fold in the upgrade to the larger operation described in T309720 .

Event Timeline

Hosts chosen for upgrade:
elastic1048 (Row A)
elastic1065 (Row D)
elastic1080 (Row C)

Mentioned in SAL (#wikimedia-operations) [2022-06-03T14:14:42Z] <inflatador> patching and restarting a few eqiad elastic hosts T309868

Commands run:

sudo depool
sudo apt-get install --only-upgrade openjdk-8-jre-headless
sudo systemctl restart elasticsearch_6*

(wait for cluster to get back to green, verify restarted host is in the list of cluster nodes)

sudo pool

All canary hosts successfully, rolled out the package to all eqiad hosts via cumin:
sudo cumin "A:stretch and P{elastic*.eqiad.wmnet}" 'sudo apt-get install -y --only-upgrade openjdk-8-jre-headless'