Hashar has uploaded a new change for review. https://gerrit.wikimedia.org/r/214055
Change subject: Turn off sshd MAC and KEX hardening for Jenkins slaves ...................................................................... Turn off sshd MAC and KEX hardening for Jenkins slaves When restarting the Jenkins master, the labs slaves were no more reacheable over ssh. That is due to the hardened sshd MAC and KEX setup not being supported by Jenkins/Java7/Precise on gallium. Just like for Gerrit (c34bc58ee), disable KEX/MAC on the integration labs project. Tested via Hiera:integration on wikitech. Bug: T100509 Change-Id: I55cbea6beea325dda6e9d0e2cb7f3152a914e40f --- A hieradata/labs/integration/common.yaml 1 file changed, 5 insertions(+), 0 deletions(-) git pull ssh://gerrit.wikimedia.org:29418/operations/puppet refs/changes/55/214055/1 diff --git a/hieradata/labs/integration/common.yaml b/hieradata/labs/integration/common.yaml new file mode 100644 index 0000000..87af200 --- /dev/null +++ b/hieradata/labs/integration/common.yaml @@ -0,0 +1,5 @@ +--- +# T100509 Java7 on gallium does not support the hardned sshd MAC and KEX setup +# causing slaves to be unreacheable. +ssh::server::disable_nist_kex: false +ssh::server::explicit_macs: false -- To view, visit https://gerrit.wikimedia.org/r/214055 To unsubscribe, visit https://gerrit.wikimedia.org/r/settings Gerrit-MessageType: newchange Gerrit-Change-Id: I55cbea6beea325dda6e9d0e2cb7f3152a914e40f Gerrit-PatchSet: 1 Gerrit-Project: operations/puppet Gerrit-Branch: production Gerrit-Owner: Hashar <[email protected]> _______________________________________________ MediaWiki-commits mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
