Dear Trevor, Aric,

Thanks for the early notice.

I had reported to Aric some issue with access to the repo tree in Gerrit (see 
attached email). Did you have a chance to investigate on this? Is it a bug or 
has this feature been removed? It would be great if that functionality could be 
brought back in the upcoming Gerrit maintenance.

Best regards,
Gerald

-----Original Message-----
From: opnfv-tech-discuss-boun...@lists.opnfv.org 
[mailto:opnfv-tech-discuss-boun...@lists.opnfv.org] On Behalf Of Jonas Bjurel
Sent: Donnerstag, 13. Oktober 2016 00:44
To: Trevor Bramwell <tbramw...@linuxfoundation.org>; 
it-infrastructure-ale...@linuxfoundation.org; 
opnfv-tech-discuss@lists.opnfv.org; infra-steer...@lists.opnfv.org; 
infra...@lists.opnfv.org; Heather Kirksey <hkirk...@linuxfoundation.org>; 
Raymond Paik <rp...@linuxfoundation.org>; Aric Gardner 
<agard...@linuxfoundation.org>
Subject: Re: [opnfv-tech-discuss] [Infra-steering] OPNFV Maintainance: 
2016-10-16 @ 08:00 PDT (14:00 UTC)

Trevor - Thanks for the early heads-up, some SLA/sanity requests from me below:

I require that there will be a pre-staging environment that we can test prior 
to shifting this change into production environment. This is to avoid OPNFV 
production discontinuity as experienced before.
If you could provide a pre-staging dummy area - which the community could 
evaluate before the production upgrade is exercised we could likely out-rule 
issues with upgrades we have seen in the past.
Me - Jonas Bjurel, and others in my team: Stefan Berg, Fatih Degirmency - would 
be happy to smoke-test the pre-staging environment!
Other obvious things around change-management: Complete back-up, 24/7 
preparedness on roll-back, communication on the changes and any measures needed 
by the consumers of the service, and of course logging of everything 
performed/issues during the evaluation of the change, and from the change it 
self.

Me and others are happy to help such that these changes flow seamlessly work - 
going forward.

Hope this helps!
BR/Jonas  

-----Original Message-----
From: infra-steering-boun...@lists.opnfv.org 
[mailto:infra-steering-boun...@lists.opnfv.org] On Behalf Of Trevor Bramwell
Sent: Wednesday, October 12, 2016 11:05 PM
To: it-infrastructure-ale...@linuxfoundation.org; 
opnfv-tech-discuss@lists.opnfv.org; infra-steer...@lists.opnfv.org; 
infra...@lists.opnfv.org
Subject: [Infra-steering] OPNFV Maintainance: 2016-10-16 @ 08:00 PDT (14:00 UTC)

Hello,

The Linux Foundation will be performing maintenance on the following
services: Gerrit

When: 

  2016-10-16 @ 08:00 - 09:00 PDT (14:00 - 15:00 UTC)

Why:

  The OPNFV Gerrit server configuration needs to be updated to fix the
  following issues:

   - Automatic Stale Patchset (> 6 months) Abandonment
   - Login names with uppercase characters required to be typed in all
     lowercase

  These changes requires a restart of Gerrit.

Who:

  Trevor Bramwell <tbramw...@linuxfoundation.org>
  Aric Gardner <agard...@linuxfoundation.org>

Impact:

  Gerrit (https://gerrit.opnfv.org) will experience a brief outage as it
  is restarted.
_______________________________________________
opnfv-tech-discuss mailing list
opnfv-tech-discuss@lists.opnfv.org
https://lists.opnfv.org/mailman/listinfo/opnfv-tech-discuss
--- Begin Message ---
Hi Aric,

In the previous version of Gerrit, I could reach the project repo/tree from the 
"branches" tab: https://gerrit.opnfv.org/gerrit/#/admin/projects/doctor,branches

It seems this option is not available anymore. Is it a bug? Does anyone know 
another way to access the code through gerrit?

Best regards,
Gerald

-----Original Message-----
From: opnfv-tech-discuss-boun...@lists.opnfv.org 
[mailto:opnfv-tech-discuss-boun...@lists.opnfv.org] On Behalf Of Aric Gardner
Sent: Montag, 3. Oktober 2016 01:20
To: infra-steer...@lists.opnfv.org; OPNFV Tech 
<opnfv-tech-discuss@lists.opnfv.org>; Fatih Degirmenci 
<fatih.degirme...@ericsson.com>
Subject: [opnfv-tech-discuss] [announce] Upgrade of Gerrit report. (ssh host 
key changed)

Hello,

The upgrade of gerrit to 2.13.1 is complete.
And jenkins has been restarted to give it more memory.

There is an unfortunate caveat. I did not consider the rsa keys on the old 
gerrit server would not be compatible with java on the new server

the old gerrit server has only one key.

ssh_host_key

the new gerrit server has

ssh_host_dsa_key
ssh_host_dsa_key.pub
ssh_host_rsa_key
ssh_host_rsa_key.pub

I tried to copy over the old ssh_host_key and use it as the rsa key on the new 
server, but it is in MINA SSHD custom format. Both the public and private 
halves are stored in the "ssh_host_key" file using a Java serialization format. 
I searched online, and did not find any utilities to convert this.

Gerrit failed to start like so:
[2016-10-02 22:32:38,226] [main] WARN
org.apache.sshd.common.util.SecurityUtils$BouncyCastleFileKeyPairProvider
: Failed (IOException) to load key
resource=/opt/gerrit/etc/ssh_host_rsa_key: Failed to read 
/opt/gerrit/etc/ssh_host_rsa_key - unknown result object: null

18:56 < AlexAvadanii> aricg-: given the time, we could fix this, but it's 
probably not
                      that easy as converting one file to another using a cli 
tool ...
                      or if there is such a tool, I can't find it

I agree with Alex, but we can't stop using gerrit while we try to fix this 
unforeseen problem.

So going forward, everything works excepting the host key change. Any machine 
or developer that clones over ssh will see this warning.

git clone ssh://jenkins...@gerrit.opnfv.org:29418/releng
Initialized empty Git repository in /tmp/releng/.git/ 
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that the RSA host key has just been changed.
The fingerprint for the RSA key sent by the remote host is 
46:3a:c5:80:58:7e:24:9e:88:d3:83:29:6c:9a:80:17.
Please contact your system administrator.
Add correct host key in /home/agardner/.ssh/known_hosts to get rid of this 
message.
Offending key in /home/agardner/.ssh/known_hosts:1 RSA host key for 
[gerrit.opnfv.org]:29418 has changed and you have requested strict checking.
Host key verification failed.

you will need to remove the specified line in /home/"Your 
user"/.ssh/known_hosts:"The line number to delete"
and then re-accept the new key.

Apologies in advance and best regards,
-Aric
_______________________________________________
opnfv-tech-discuss mailing list
opnfv-tech-discuss@lists.opnfv.org
https://lists.opnfv.org/mailman/listinfo/opnfv-tech-discuss
_______________________________________________
opnfv-tech-discuss mailing list
opnfv-tech-discuss@lists.opnfv.org
https://lists.opnfv.org/mailman/listinfo/opnfv-tech-discuss

--- End Message ---
_______________________________________________
opnfv-tech-discuss mailing list
opnfv-tech-discuss@lists.opnfv.org
https://lists.opnfv.org/mailman/listinfo/opnfv-tech-discuss

Reply via email to