Decommission beaubourg as a production hypervisor
Plan:
- merge this
- pergamon: deploy on pergamon
beaubourg: activate back puppet & puppet agent run on beaubourgbeaubourg: deactivate puppet- pergamon: puppet agent run on pergamon
- pergamon: decommission beaubourg as puppet node (this will drop collected icinga checks if any left)
octodiff
diff origin/production/beaubourg.softwareheritage.org current/beaubourg.softwareheritage.org
*******************************************
Apt::Setting[list-backports] =>
parameters =>
content =>
@@ -1,3 +1,3 @@
# This file is managed by Puppet. DO NOT EDIT.
# backports
-deb http://deb.debian.org/debian/ bullseye-backports main contrib non-free
+deb http://deb.debian.org/debian/ bullseye-backports main
*******************************************
Apt::Setting[list-debian-security] =>
parameters =>
content =>
@@ -1,3 +1,3 @@
# This file is managed by Puppet. DO NOT EDIT.
# debian-security
-deb http://deb.debian.org/debian-security/ bullseye-security main contrib non-free
+deb http://deb.debian.org/debian-security/ bullseye-security main
*******************************************
Apt::Setting[list-debian-updates] =>
parameters =>
content =>
@@ -1,3 +1,3 @@
# This file is managed by Puppet. DO NOT EDIT.
# debian-updates
-deb http://deb.debian.org/debian/ bullseye-updates main contrib non-free
+deb http://deb.debian.org/debian/ bullseye-updates main
*******************************************
Apt::Setting[list-debian] =>
parameters =>
content =>
@@ -1,3 +1,3 @@
# This file is managed by Puppet. DO NOT EDIT.
# debian
-deb http://deb.debian.org/debian/ bullseye main contrib non-free
+deb http://deb.debian.org/debian/ bullseye main
*******************************************
Apt::Source[backports] =>
parameters =>
repos =>
- main contrib non-free
+ main
*******************************************
Apt::Source[debian-security] =>
parameters =>
repos =>
- main contrib non-free
+ main
*******************************************
Apt::Source[debian-updates] =>
parameters =>
repos =>
- main contrib non-free
+ main
*******************************************
Apt::Source[debian] =>
parameters =>
repos =>
- main contrib non-free
+ main
*******************************************
Concat::Fragment[global config] =>
parameters =>
content =>
@@ -4,5 +4,5 @@
AcceptEnv LANG LC_*
ChallengeResponseAuthentication no
-PermitRootLogin yes
+PermitRootLogin without-password
PrintMotd no
Subsystem sftp /usr/lib/openssh/sftp-server
*******************************************
- Concat_file[profile::cron::borgmatic]
*******************************************
Concat_fragment[global config] =>
parameters =>
content =>
@@ -4,5 +4,5 @@
AcceptEnv LANG LC_*
ChallengeResponseAuthentication no
-PermitRootLogin yes
+PermitRootLogin without-password
PrintMotd no
Subsystem sftp /usr/lib/openssh/sftp-server
*******************************************
- Concat_fragment[profile::cron::borgmatic-create]
*******************************************
- Concat_fragment[profile::cron::borgmatic-full]
*******************************************
- Concat_fragment[profile::cron::borgmatic::_header]
*******************************************
- Exec[ssh-keygen -t ed25519 -f /root/.ssh/id_ed25519.borg -N '']
*******************************************
File[/etc/apt/sources.list.d/backports.list] =>
parameters =>
content =>
@@ -1,3 +1,3 @@
# This file is managed by Puppet. DO NOT EDIT.
# backports
-deb http://deb.debian.org/debian/ bullseye-backports main contrib non-free
+deb http://deb.debian.org/debian/ bullseye-backports main
*******************************************
File[/etc/apt/sources.list.d/debian-security.list] =>
parameters =>
content =>
@@ -1,3 +1,3 @@
# This file is managed by Puppet. DO NOT EDIT.
# debian-security
-deb http://deb.debian.org/debian-security/ bullseye-security main contrib non-free
+deb http://deb.debian.org/debian-security/ bullseye-security main
*******************************************
File[/etc/apt/sources.list.d/debian-updates.list] =>
parameters =>
content =>
@@ -1,3 +1,3 @@
# This file is managed by Puppet. DO NOT EDIT.
# debian-updates
-deb http://deb.debian.org/debian/ bullseye-updates main contrib non-free
+deb http://deb.debian.org/debian/ bullseye-updates main
*******************************************
File[/etc/apt/sources.list.d/debian.list] =>
parameters =>
content =>
@@ -1,3 +1,3 @@
# This file is managed by Puppet. DO NOT EDIT.
# debian
-deb http://deb.debian.org/debian/ bullseye main contrib non-free
+deb http://deb.debian.org/debian/ bullseye main
*******************************************
- File[/etc/borgmatic/config.yaml]
*******************************************
- File[/etc/borgmatic]
*******************************************
- File[/etc/cron.d/puppet-borgmatic]
*******************************************
- File[/etc/pve-exporter/pve-exporter.yml]
*******************************************
- File[/etc/pve-exporter]
*******************************************
- File[/etc/systemd/system/prometheus-pve-exporter.service]
*******************************************
- File[/var/lib/borg]
*******************************************
Icinga2::Object::Host[beaubourg.softwareheritage.org] =>
parameters =>
vars =>
load =>
- hypervisor
*******************************************
- Node[__node_regexp__beaubourghypervisordbranlymucem.internal.softwareheritage.org]
*******************************************
+ Node[default]
*******************************************
- Package[borgbackup]
*******************************************
- Package[borgmatic]
*******************************************
- Package[intel-microcode]
*******************************************
- Package[python3-prometheus-pve-exporter]
*******************************************
- Profile::Cron::D[borgmatic-create]
*******************************************
- Profile::Cron::D[borgmatic-full]
*******************************************
- Profile::Cron::File[borgmatic]
*******************************************
- Profile::Prometheus::Export_scrape_config[ceph-mgr]
*******************************************
- Profile::Prometheus::Export_scrape_config[pve-exporter_beaubourg.softwareheritage.org]
*******************************************
- Service[prometheus-pve-exporter.service]
*******************************************
- Systemd::Unit_file[prometheus-pve-exporter.service]
*******************************************
*** End octocatalog-diff on beaubourg.softwareheritage.org
Edited by Antoine R. Dumont