From f0a39fee638b74dd3feccba1c05038c484796b97 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Michal=20Kone=C4=8Dn=C3=BD?= Date: Fri, 10 Sep 2021 14:55:24 +0200 Subject: [PATCH] Review sigul-upgrade SOP MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Michal Konečný --- modules/sysadmin_guide/nav.adoc | 2 +- .../sysadmin_guide/pages/sigul-upgrade.adoc | 30 ++++++++----------- 2 files changed, 14 insertions(+), 18 deletions(-) diff --git a/modules/sysadmin_guide/nav.adoc b/modules/sysadmin_guide/nav.adoc index 32d84e0..684a5dc 100644 --- a/modules/sysadmin_guide/nav.adoc +++ b/modules/sysadmin_guide/nav.adoc @@ -98,7 +98,7 @@ ** xref:retrace.adoc[Retrace - SOP] ** xref:scmadmin.adoc[SCM Admin - SOP] ** xref:selinux.adoc[SELinux Infrastructure - SOP] -** xref:sigul-upgrade.adoc[sigul-upgrade - SOP in review ] +** xref:sigul-upgrade.adoc[Sigul servers upgrades/reboots - SOP] ** xref:simple_koji_ci.adoc[simple_koji_ci - SOP in review ] ** xref:sshaccess.adoc[sshaccess - SOP in review ] ** xref:sshknownhosts.adoc[sshknownhosts - SOP in review ] diff --git a/modules/sysadmin_guide/pages/sigul-upgrade.adoc b/modules/sysadmin_guide/pages/sigul-upgrade.adoc index 242c044..e9c3c36 100644 --- a/modules/sysadmin_guide/pages/sigul-upgrade.adoc +++ b/modules/sysadmin_guide/pages/sigul-upgrade.adoc @@ -18,11 +18,13 @@ Purpose:: == Description -{empty}0. Coordinate with releng on timing. Make sure no signing is +. Coordinate with releng on timing. Make sure no signing is happening, and none is planned for a bit. - ++ +____ Sign-bridge02, secondary-bridge01.qa: - +____ ++ ____ [arabic] . Apply updates or changes @@ -30,18 +32,16 @@ ____ . Once it comes back, start the sigul_bridge service and enter empty password. ____ - ++ +____ Sign-vault03/04: - +____ ++ ____ [arabic] -. {blank} -+ -Determine which server is currently primary. It's the one that has the:: - floating ip address for sign-vault02 on it. -. {blank} -+ -Login to the non primary server via serial or management console.:: +. Determine which server is currently primary. It's the one that has + the floating ip address for sign-vault02 on it. +. Login to the non primary server via serial or management console. (There is no ssh access to these servers) . Take a lvm snapshot: + @@ -51,10 +51,7 @@ lvcreate --size 5G --snapshot --name YYYMMDD /dev/mapper/vg_signvault04-lv_root Replace YYMMDD with todays year, month, day and the vg with the correct name Then apply updates. .... -. {blank} -+ -Confirm the server comes back up ok, login to serial console or -management:: +. Confirm the server comes back up ok, login to serial console or management console and start the sigul_server process. Enter password when prompted. . On the primary server, down the floating ip address: @@ -72,7 +69,6 @@ ip addr add 10.5.125.75 dev eth0 ____ [NOTE] -.Note ==== Changes to database