[Jenkins-infra] Confluence migration planning

[R. Tyler Croy]

(replies inline)

On Sun, 05 Apr 2015, Kohsuke Kawaguchi wrote:

> I've successfully run the confluence container on lettuce (albeit with
> temporary throw-away database), so now it's time to plan for the actual
> migration.

I'll definitely be around next weekend, hooray!

> My current goal is to get this migration done in the next weekend. Here's
> the step-by-step description of what I think I'm going to do. Your review
> is appreciated.
> 
>    - Disable puppet run on eggplant by manually commenting out puppet run
>    with "crontab -e"
>    - Switch http://wiki.jenkins-ci.org/ to maintenance by having
>    /etc/apache2/sites-enabled/wiki.jenkins-ci.org to
>    /etc/apache2/sites-available/wiki.jenkins-ci.org.maintenance. This blocks
>    traffic from getting to Confluence
>    - Verify from my local browser that http://wiki.jenkins-ci.org/ is
>    showing maintenance screen
>    - Shutdown Confluence via kill ("/etc/init.d/confluence shutdown" never
>    work)
>    - Take full backup of confluence DB dump & home
>    - Disable puppet agent on lettuce by "puppet agent --disable"

Why does the agent on lettuce need to be disabled?


>    - Stop all docker container services on lettuce (wikidb, confluence, and
>    confluence-cache)
>    - Wipe out /srv/wiki/home on lettuce, rsync /srv/wiki/home from eggplant
>    to lettuce.

Why is the rsyncing of /srv/wiki/home necessary? Isn't everything already going
to come through either the database or through Puppet? I'm curious about what
state is here that we have not in one of those two systems of record


>    - adjust file permissions on the lettuce's new wiki home (chown -R
>    1000:1001 /srv/wiki/home)

I asked in PR 89 about this, and just checked on lettuce. This UID/GID is
surely wrong and is already used by "osuadmin" on the host.


>    - merge PR #90 <https://github.com/jenkins-infra/jenkins-infra/pull/90>
>    to production. This change shuts down temporary mariadb for testing, and
>    switch Confluence to talk to the production DB
>    - Re-enable puppet agent on lettuce by "puppet agent --enable"
>    - Manually run "puppet agent -t" on lettuce to get Confluence going
>    - Manually sanity check Confluence on lettuce by using browser and
>    looking around, making edits
>    - "service docker-confluence restart" on lettuce and make sure it comes
>    back up all right
>    - merge PR #91 <https://github.com/jenkins-infra/jenkins-infra/pull/91>
>    to make lettuce production. "puppet agent -t" manually on edamame and
>    spinach to speed up the propagation of DNS change
>    - merge PR #71 <https://github.com/jenkinsci/infra-puppet/pull/71> to
>    make sure eggplant won't run Confluence.
>    - Enable puppet run on eggplant by editing "crontab -e". run
>    /root/infra-puppet/run.sh immediately and manully inspect the result. In
>    particular, make sure confluence won't run on eggplant.
>    - Update datadog dashboard so that it picks up metrics from lettuce.
>    tweak monitoring.


This mostly looks good other than the comments above


- R. Tyler Croy

------------------------------------------------------
     Code: <https://github.com/rtyler>
  Chatter: <https://twitter.com/agentdero>

  % gpg --keyserver keys.gnupg.net --recv-key 3F51E16F
------------------------------------------------------
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: Digital signature
URL: <http://lists.jenkins-ci.org/pipermail/jenkins-infra/attachments/20150406/a330eaea/attachment.asc>