Project

General

Profile

Bug #16460

Upgrade puppet-git.lizard to Buster

Added by intrigeri 6 months ago. Updated 22 days ago.

Status:
Resolved
Priority:
Normal
Assignee:
Category:
Infrastructure
Target version:
Start date:
02/12/2019
Due date:
% Done:

0%

Feature Branch:
Type of work:
Sysadmin
Blueprint:
Starter:
Affected tool:

Description

It's getting too hard to run PuppetDB on Stretch.

What we have to do:

  • check release notes & upgrade doc
  • check modules compatibility

This is a rough plan that might work:

  • Move /var/lib/gitolite to its own (virtual) disk. Now we'll have 3 gitolite disks.
  • Clone the current puppet master vm (change its mac address) - creates new master.-
  • Temporarily rename sshd onion service on new VM
  • Follow important part of the doc on creating new vm.
  • Add it as a node to itself.
  • Pin the puppetdb version.
  • Upgrade to buster
  • Ensure PuppetDB data goes through schema migration; run puppetdb upgrade -c /etc/puppetdb/conf.d/config.ini if needed.
  • Make sure we have the pg_trgm PostgreSQL extension enabled.
  • Unpin the puppetdb version and downgrade.
  • Check puppetmaster logs for errors and deprecations and fix them.
  • Point every agent to the new master once with --noop to identify obvious issues.
  • Deal with issues by pushing fixes to new master.
  • Migrate from hiera() to lookup().
  • [until this point we can easily revert]
  • Shutdown old vm and mark as no autostart.
  • Disable Puppet agent on every system.
  • Point the new system drive to the old VM.
  • Merge the fixes in topic branches into master/production branches.
  • Revert 73966287, 0cfcfd7f, 40111d15 and 18f135c4 in the manifests repo.
  • Start puppet-git
  • Push all updated submodules and the main manifests repo.
  • Rename sshd onion service back to its official name on the new VM.
  • Re-enable Puppet agent on every system, one after the other.
  • Move new VM's disks to the correct PV (= the same as the old VM's disks).
  • Delete temporary disks created for puppet-git-buster.

Related issues

Related to Tails - Bug #16927: Upgrade to Hiera 5 Confirmed
Blocks Tails - Feature #13284: Core work: Sysadmin (Adapt our infrastructure) Confirmed 06/30/2017

History

#1 Updated by intrigeri 6 months ago

  • Description updated (diff)

#2 Updated by intrigeri 6 months ago

  • Blocks Feature #13284: Core work: Sysadmin (Adapt our infrastructure) added

#3 Updated by intrigeri 6 months ago

  • Assignee changed from intrigeri to bertagaz
  • QA Check set to Info Needed

I've proposed a course of action on our mailing list => please comment there. (I can't assign to 2 people so I picked the one I've solicited the least recently.)

#4 Updated by CyrilBrulebois 5 months ago

  • Target version changed from Tails_3.13 to Tails_3.14

#5 Updated by intrigeri 5 months ago

As reported on https://bugs.debian.org/926291, the PuppetDB 6.2 release notes say that "puppetdb 6 requires puppet-master to be 6.0.0 or later".

#6 Updated by CyrilBrulebois 3 months ago

  • Target version changed from Tails_3.14 to Tails_3.15

#7 Updated by intrigeri 3 months ago

  • Status changed from Confirmed to Needs Validation
  • Assignee changed from bertagaz to groente
  • QA Check deleted (Info Needed)

groente, maybe?

#8 Updated by intrigeri about 2 months ago

  • Status changed from Needs Validation to Confirmed
  • Assignee changed from groente to intrigeri
  • Target version changed from Tails_3.15 to Tails_3.16

I'll schedule a work session to do it together with zen.

#10 Updated by intrigeri 24 days ago

intrigeri wrote:

Beware of https://bugs.debian.org/932135

We want PuppetDB 6.2.0-4 (currently in sid, maintainer won't file a stable update request yet, he's first waiting for a proper fix on the PostgreSQL side: https://bugs.debian.org/932247) to do the DB schema migration. And then, likely, we can downgrade to the Buster package.

#11 Updated by intrigeri 24 days ago

  • Description updated (diff)

#12 Updated by zen 24 days ago

  • Description updated (diff)

#13 Updated by intrigeri 24 days ago

  • Description updated (diff)

#14 Updated by intrigeri 24 days ago

  • Description updated (diff)

#15 Updated by intrigeri 24 days ago

  • Description updated (diff)

#16 Updated by intrigeri 23 days ago

  • Description updated (diff)

#17 Updated by intrigeri 23 days ago

  • Description updated (diff)

#18 Updated by intrigeri 23 days ago

  • Description updated (diff)

#19 Updated by intrigeri 23 days ago

  • Description updated (diff)

#20 Updated by intrigeri 23 days ago

  • Description updated (diff)
  • Status changed from Confirmed to In Progress

#21 Updated by zen 23 days ago

  • Description updated (diff)

#22 Updated by zen 23 days ago

  • Description updated (diff)

#23 Updated by zen 23 days ago

  • Description updated (diff)

#24 Updated by zen 23 days ago

  • Description updated (diff)

#25 Updated by zen 23 days ago

  • Description updated (diff)

#26 Updated by zen 23 days ago

  • Description updated (diff)

#27 Updated by zen 23 days ago

  • Description updated (diff)

#28 Updated by intrigeri 23 days ago

#29 Updated by intrigeri 23 days ago

  • Description updated (diff)

#30 Updated by intrigeri 23 days ago

  • Description updated (diff)

#31 Updated by zen 22 days ago

  • Description updated (diff)

#32 Updated by intrigeri 22 days ago

  • Description updated (diff)

#33 Updated by zen 22 days ago

  • Description updated (diff)

#34 Updated by intrigeri 22 days ago

  • Description updated (diff)

#35 Updated by zen 22 days ago

  • Description updated (diff)

#36 Updated by zen 22 days ago

  • Description updated (diff)

#37 Updated by intrigeri 22 days ago

  • Description updated (diff)

#38 Updated by intrigeri 22 days ago

  • Description updated (diff)

#39 Updated by intrigeri 22 days ago

  • Description updated (diff)

#40 Updated by intrigeri 22 days ago

  • Description updated (diff)

#41 Updated by intrigeri 22 days ago

  • Status changed from In Progress to Resolved

Also available in: Atom PDF