Feature #15500

Update Puppet modules: 2018Q4 → 2019Q2 edition

Added by intrigeri 2018-04-08 12:51:57 . Updated 2019-08-11 11:20:10 .

Status:
Resolved
Priority:
Elevated
Assignee:
groente
Category:
Infrastructure
Target version:
Tails_3.16
Start date:
2018-04-09
Due date:
% Done:

100%

Feature Branch:
Type of work:
Sysadmin
Blueprint:

Starter:
Affected tool:
Deliverable for:

Description

Subtasks

Feature #15510: Switch to the puppetlabs/apt module Resolved groente

100
Feature #15511: Switch to another Puppet module to manage Postfix Resolved groente

100
Feature #15513: Switch to the puppetlabs/mysql module Resolved groente

100
Bug #16172: Upgrade the puppet-concat module Resolved

100

Related issues

Related to Tails - Feature #15499: Update Puppet modules: 2018Q2 → 2018Q3 edition Resolved 2018-04-09
Blocks Tails - Feature #13284: Core work: Sysadmin (Adapt our infrastructure) Confirmed 2017-06-30

History

#1 Updated by intrigeri 2018-04-08 12:55:25

  • related to Feature #15499: Update Puppet modules: 2018Q2 → 2018Q3 edition added

#2 Updated by intrigeri 2018-04-08 12:59:19

  • blocks Feature #13284: Core work: Sysadmin (Adapt our infrastructure) added

#3 Updated by intrigeri 2018-11-29 21:04:37

Already up-to-date: vim, user, templatewlv, sudo, smartmontools, reprepro, puppet, mysql, loginrecords, mollyguard, libvirt, gitolite, etckeeper, cron, bitcoind, bash

Upgraded: vcsrepo, tor, timezone, sysctl, stdlib, sshkeys, sshd, shorewall, postfix, nfs, nginx, munin, mumble, letsencrypt, intrigeri, inifile, augeas, archive, apt

Removed (unused): lsb

To upgrade: icingaweb2

Ignored with good reasons: jenkins (see Feature #15155#note-3), icinga2 (see Bug #15153#note-8)

#4 Updated by intrigeri 2018-11-29 22:12:44

  • Status changed from Confirmed to In Progress
  • Assignee changed from intrigeri to groente
  • QA Check set to Ready for QA

Only module left to upgrade: icingaweb2. It’ll require some work (no idea how much) since the API we’re using has changed a bit => filed Feature #16173. So the only work left here is now tracked by subtasks.

groente, please review the changes I’ve pushed in the last few hours. Most of them are “upgrade module X” but in some cases I had to adjust our own code, and while I was at it I did a little bit of linting.

#5 Updated by intrigeri 2018-12-11 10:10:44

One more thing I’ll want to do: try to merge immerda’s changes on the user module (they tend to run a newer Puppet than us so this would avoid us duplicating their work, see e.g. Bug #16213#note-4).

#6 Updated by groente 2018-12-24 14:50:49

  • Assignee changed from groente to intrigeri
  • QA Check changed from Ready for QA to Dev Needed

puppet-nfs still seems broken, when trying to clone i get:

error: object c5dad6edfac36f2c86aa0ae4cd51d3525e2397a0: zeroPaddedFilemode: contains zero-padded file modes

#7 Updated by intrigeri 2019-01-02 05:00:14

  • Target version changed from Tails_3.12 to Tails_3.13

Next step: book some time for the next iteration.

#8 Updated by intrigeri 2019-01-02 20:04:16

  • Assignee changed from intrigeri to groente
  • QA Check changed from Dev Needed to Ready for QA

> puppet-nfs still seems broken, when trying to clone i get:
> error: object c5dad6edfac36f2c86aa0ae4cd51d3525e2397a0: zeroPaddedFilemode: contains zero-padded file modes

Reproduced with our own repo and with the upstream one (git clone https://github.com/camptocamp/puppet-nfs.git).
As a workaround, one can pass the --config transfer.fsckObjects=false option for the initial clone.
AFAIK the only way to fix that is to rewrite the Git history, which I doubt upstream will be happy to do, given transfer.fsckObjects is false by default so most people are not affected by this problem.

#9 Updated by groente 2019-01-04 12:37:55

  • Assignee changed from groente to intrigeri
  • QA Check changed from Ready for QA to Dev Needed

that indeed did the trick, i’m fine with leaving it like that.

#10 Updated by intrigeri 2019-02-16 06:24:18

  • QA Check deleted (Dev Needed)

#11 Updated by intrigeri 2019-03-11 09:34:10

  • Subject changed from Update Puppet modules: 2018Q4 → 2019Q1 edition to Update Puppet modules: 2018Q4 → 2019Q2 edition
  • Target version changed from Tails_3.13 to Tails_3.14

Best case I’ll handle the apt module during the 3.13 dev cycle but everything else will have to wait.

#12 Updated by intrigeri 2019-05-02 17:23:45

  • Target version changed from Tails_3.14 to Tails_3.15

#13 Updated by intrigeri 2019-05-02 17:23:59

  • Priority changed from Normal to Elevated

#14 Updated by intrigeri 2019-06-19 10:43:19

  • Status changed from In Progress to Needs Validation
  • Assignee changed from intrigeri to groente

I’ve done much more than planned here (replacing a bunch of deprecated modules with totally different, maintained ones) and am vastly overclocked so I’ve moved the remaining subtasks to Feature #16827. Let’s close this as resolved at the same time as Feature #15510.

#15 Updated by CyrilBrulebois 2019-07-10 10:34:05

  • Target version changed from Tails_3.15 to Tails_3.16

#16 Updated by groente 2019-08-11 11:20:10

  • Status changed from Needs Validation to Resolved

intrigeri wrote:
> I’ve done much more than planned here (replacing a bunch of deprecated modules with totally different, maintained ones) and am vastly overclocked so I’ve moved the remaining subtasks to Feature #16827. Let’s close this as resolved at the same time as Feature #15510.

Closed \o/