[tor-bugs] #32179 [Internal Services/Tor Sysadmin Team]: retire orestis

[Tor Bug Tracker & Wiki]

#32179: retire orestis
-------------------------------------------------+------------------------
 Reporter:  weasel                               |          Owner:  weasel
     Type:  defect                               |         Status:  closed
 Priority:  Medium                               |      Milestone:
Component:  Internal Services/Tor Sysadmin Team  |        Version:
 Severity:  Normal                               |     Resolution:  fixed
 Keywords:                                       |  Actual Points:
Parent ID:  #31659                               |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+------------------------
Changes (by anarcat):

 * status:  accepted => closed
 * resolution:   => fixed


Comment:

 scheduled backups removal, revoked puppet:

 {{{
 $ ./retire -v -H orestis.torproject.org retire-all
 starting tasks at 2020-05-25 17:37:03.873529
 not wiping instance orestis.torproject.org data: no parent host
 scheduling orestis.torproject.org backup disks removal on host
 bungei.torproject.org
 checking for path "/srv/backups/bacula/orestis.torproject.org/" on
 bungei.torproject.org
 scheduling rm -rf "/srv/backups/bacula/orestis.torproject.org/" to run on
 bungei.torproject.org in 30 days
 warning: commands will be executed using /bin/sh
 job 32 at Wed Jun 24 21:37:00 2020
 Notice: Revoked certificate with serial 50
 Notice: Removing file Puppet::SSL::Certificate orestis.torproject.org at
 '/var/lib/puppet/ssl/ca/signed/orestis.torproject.org.pem'
 orestis.torproject.org
 Submitted 'deactivate node' for orestis.torproject.org with UUID 2484e196
 -707a-42f6-91a2-ef0c46654d16
 completed tasks, elasped: 0:00:10.723336 (user 2.13 system 0.09 chlduser
 0.03 chldsystem 0.03 RSS 42.4 MB)
 }}}

 removed from LDAP:

 {{{
 367 host=orestis,ou=hosts,dc=torproject,dc=org
 host: orestis
 hostname: orestis.torproject.org
 objectClass: top
 objectClass: debianServer
 distribution: Debian
 access: restricted
 admin: torproject-admin at torproject.org
 architecture: amd64
 physicalHost: cloud.ipnett.se
 description: onionoo
 purpose: onionoo.torproject.org
 allowedGroups: onionoo
 allowedGroups: onionoo-unpriv
 l: Sweden
 ipHostNumber: 2001:6b0:5a:5000::4
 ipHostNumber: 89.45.235.19
 sshRSAHostKey: ssh-ed25519
 AAAAC3NzaC1lZDI1NTE5AAAAIGrDQvHxq6hpRz47n2MOUm0ylhPfCO0BtEtb5FjdaWXL
 root at orestis
 sshRSAHostKey: ssh-rsa
 AAAAB3NzaC1yc2EAAAADAQABAAABAQDAmeNHl4EMYDLtK/O8MxdllXX8Vf7Ryjo+7WwPmssCe1bWpUn5BbT7pJALTirF2Su7QB3iEQeVI/RBp7rsG5LKi7itJ4CaEuD8i/wKnl/paUeHIAGgg/zsvpwBAg96GloFpUeMUSVMaWfDYIwfDXB2Z0zkPU1ctQVMLXnLftHTGKn0ZUpjxXCBpC1E5gee2AHqnfR3vFRhe+xpMS/9PsOeOjaACl0aNmNQJaWqRVreM3HewxLP2LgdQlqzsSr5ukj9prhf3+265+yQf9fNStHRIXzk4RsEBGYx3gAmme9qJJ+/nh0JSqhSXHRt1Squx0u+pmUV/XsyRUm0dvdahLP3
 root at orestis
 rebootPolicy: rotation
 }}}

 removed from tor-passwords.

 deleted instance from sunet as well, which reminds me we have some spare
 capacity there now.

 all done.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/32179#comment:9>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online