My approach is the obvious taking a big outage window especially at work we
are using 1.2 and is using token range. I am generally a believer that (1)
patches should be applied, but (2) routinely we replace each host with a
new EC2, so (1) I know my infrastructure code (puppet/chef/ansible/salt
This is in fact an interesting security practice that makes sense. It
assumes the existing ami had security holes that WERE ALREADY exploited.
See if you can negotiate moving the hdfs volumes to persistent storage. Fyi
two major banks I have worked with did much the same, but as the storage
was
Hi Surbhi,
Please see my comment inline below.
On 28 May 2017 at 12:11, Jeff Jirsa wrote:
>
>
> On 2017-05-27 18:04 (-0700), Surbhi Gupta
> wrote:
> > Thanks a lot for all of your reply.
> > Our requirement is :
> > Our company releases AMI almost
I understand that, but I'm not sure your point.
If you used ebs, you could stop one instance at a time, swap out your OS drive
via new AMI, and start it again attached to your existing data drive, and
bounce a whole cluster in a rolling manner, perhaps 5 minutes per node.
If you don't want to
On 05/27/2017 09:13 PM, Surbhi Gupta wrote:
> We get the new AMI release with the new OS updates and we are not
> allowed to use the old AMI .
Neither of Jeff's suggestions use the old AMI - that was my suggestion :)
> On Sat, May 27, 2017 at 7:11 PM Jeff Jirsa
We get the new AMI release with the new OS updates and we are not allowed
to use the old AMI .
On Sat, May 27, 2017 at 7:11 PM Jeff Jirsa wrote:
>
>
>
>
> On 2017-05-27 18:04 (-0700), Surbhi Gupta
> wrote:
>
> > Thanks a lot for all of your reply.
On 2017-05-27 18:04 (-0700), Surbhi Gupta wrote:
> Thanks a lot for all of your reply.
> Our requirement is :
> Our company releases AMI almost every month where they have some or the
> other security packages.
> So as per our security team we need to move our
Just OS security updates? This sounds far more complicated than a simple
`apt-get upgrade` or `yum update` every month. If there happens to be
new kernel that month, throw in a `reboot`, too. I'd argue that OS
updates should be done when needed, sometimes in a much faster cycle
than monthly, in
Thanks a lot for all of your reply.
Our requirement is :
Our company releases AMI almost every month where they have some or the
other security packages.
So as per our security team we need to move our cassandra cluster to the
new AMI .
As this process happens every month, we would like to
Hi Surbhi,
The only time I've heard of restacking, it was a specific term a financial
services company used internally to describe a security related procedure
specific to them.
If this sounds like you/the company you work for, send me a PM because I
don't believe I can share those details in a
What is restacking?
*Daemeon C.M. ReiydelleUSA (+1) 415.501.0198London (+44) (0) 20 8144 9872*
*“All men dream, but not equally. Those who dream by night in the dusty
recesses of their minds wake up in the day to find it was vanity, but the
dreamers of the day are dangerous men, for they
Hi,
Wanted to understand, how do you do automatic restacking of cassandra nodes
on AWS?
Thanks
Surbhi
12 matches
Mail list logo