You are browsing a read-only backup copy of Wikitech. The live site can be found at wikitech.wikimedia.org

User:Majavah/Deployment-prep notes

From Wikitech-static
< User:Majavah
Revision as of 08:42, 23 April 2021 by imported>Majavah (→‎New instances)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigation Jump to search

New instances

All

taavi@deployment-newinstance01:~$ # Remove cloud-wide puppetmaster SSL to use local puppetmaster
taavi@deployment-newinstance01:~$ sudo rm -rf /var/lib/puppet/ssl
taavi@deployment-newinstance01:~$ sudo run-puppet-agent
taavi@deployment-puppetmaster04:~$ sudo puppet cert sign deployment-newinstance01.deployment-prep.eqiad1.wikimedia.cloud
taavi@deployment-newinstance01:~$ sudo run-puppet-agent
taavi@deployment-newinstance01:~$ # After Puppet run has completed, fix CA: (see https://phabricator.wikimedia.org/T278677)
taavi@deployment-newinstance01:~$ sudo ln -s /usr/local/share/ca-certificates/Puppet_Internal_CA.crt /etc/ssl/certs/$(openssl x509 -noout -hash -in /usr/local/share/ca-certificates/Puppet_Internal_CA.crt).0 && sudo update-ca-certificates

mediawiki and friends

  • first puppet run will take ages as it will run a scap pull

logging

  • mwlog
    • seems to be fairly stable and easy to set up
  • logstash
    • horrible, breaks easily

etcd

  • not really used (yet)

app servers

apache logs

taavi@deployment-mediawiki12:~$ sudo tail -f /var/log/apache2/other_vhosts_access.log