[tor-bugs] #33442 [Internal Services/Tor Sysadmin Team]: decomission build-x86-07

[Tor Bug Tracker & Wiki]

#33442: decomission build-x86-07
-------------------------------------------------+-------------------------
 Reporter:  anarcat                              |          Owner:  anarcat
     Type:  task                                 |         Status:  closed
 Priority:  Medium                               |      Milestone:
Component:  Internal Services/Tor Sysadmin Team  |        Version:
 Severity:  Normal                               |     Resolution:  fixed
 Keywords:  tpa-roadmap-february                 |  Actual Points:
Parent ID:  #33085                               |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------
Changes (by anarcat):

 * status:  assigned => closed
 * resolution:   => fixed


Comment:

 checklist completed:

  1. decom suggested by service admin (weasel), nothing to warn about?
  2. removed from nagios
  3. host shutdown
  4. `Domain build-x86-07.torproject.org has been undefined`
  5. scheduled VM removal:
     {{{
 job 3 at Tue Mar  3 21:57:00 2020
 }}}
  6. removed this chunk:
     {{{
 341 host=build-x86-07,ou=hosts,dc=torproject,dc=org
 host: build-x86-07
 hostname: build-x86-07.torproject.org
 objectClass: top
 objectClass: debianServer
 access: restricted
 admin: torproject-admin at torproject.org
 architecture: amd64
 purpose: buildbox
 description: build box
 distribution: Debian
 l: Falkenstein, Saxony, Germany
 sshRSAHostKey: ssh-rsa
 AAAAB3NzaC1yc2EAAAADAQABAAABAQD6aNeaFqFZ5j2uFL2TOCEbjesS2TgMd2t91ERDEMDVbmaWSQIVSbdCFLZvPkyKaPILSEtiTpIQFWan5FB7fJl54yiJzYxkV1SO8hxIajTsPY+an0D1qaTH6bMMXxXIpwVHVFdtI0osdsNch6sqf9FsUUDUvodPqq7BrRkqbn83ulMSguHzoEDuCpXLamY2P0JOjRYeaqe/PLJamfLQxNqgyq+z5LEPVaqr2zjRTwm5hsgGdSVXIcEmJOROToQeJBh7ER05Q8INJ6ZkbUlD4ug/XYnRtTBjn3CeTI+F5un8370lTYXVq9i/DaLN1PlyisdodmdQc/oV3ubOyeMPEcHR
 root at build-x86-07
 sshRSAHostKey: ssh-ed25519
 AAAAC3NzaC1lZDI1NTE5AAAAIP/16AdbfM143zTB49R/MeBU3OUieENdVXfv6pxP9juM
 root at build-x86-07
 physicalHost: unifolium.torproject.org
 ipHostNumber: 78.47.38.230
 ipHostNumber: 2a01:4f8:211:6e8:0:823:6:1
 allowedGroups: buildusers
 allowedGroups: jenkins
 }}}
  7. done, not in DNS
  8. done:
     {{{
 Notice: Revoked certificate with serial 13
 Notice: Removing file Puppet::SSL::Certificate build-x86-07.torproject.org
 at '/var/lib/puppet/ssl/ca/signed/build-x86-07.torproject.org.pem'
 build-x86-07.torproject.org
 Submitted 'deactivate node' for build-x86-07.torproject.org with UUID
 0421c112-3061-4c9b-9e03-e10e33346fa4
 }}}
  9. removed in puppet in `6f7bc82e decom build-x86-07 (#33442)`
  10. remove from tor-passwords
  11. nothing in let's encrypt
  12. not in dnswl (no mail)
  13. done:
      {{{
 job 21 at Thu Mar 26 21:57:00 2020
 }}}

 steps 4, 5, 8 and 13 were done with a fabfile in tsa-misc. hopefully next
 decom will be easier to automate.

 all done. (yesterday, just forgot to submit this form until today, oops!)

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/33442#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online