[SAC] [OSGeo] #2283: download-testing server

#2283: download-testing server
---------------------------+--------------------------------------
Reporter: robe | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone: Sysadmin Contract 2019-I
Component: Systems Admin | Keywords:
---------------------------+--------------------------------------
I have the new download setup on osgeo7. I plan to make it live
at

https://download-testing.osgeo.org

In next couple of days so that people can check out and make sure
everything is there and permissions are fine.

I already had jef, neteler, darkblue_b provide some feedback on things
many of which are now fixed.

As noted, in the new system it's still ldap based, but we now require ssh
keys. I replicated the home drives from old server, so anyone with ssh
keys should be able to get in. Those who didn't will have to put them in
on old server before the move.

The ssh port is currently osgeo7.osgeo.org -p 50023

If people have issue with the non-standard port I can change back to 22
before we go live.

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2283&gt;
OSGeo <https://osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#2283: download-testing server
---------------------------+---------------------------------------
Reporter: robe | Owner: sac@…
     Type: task | Status: closed
Priority: normal | Milestone: Sysadmin Contract 2019-I
Component: Systems Admin | Resolution: fixed
Keywords: |
---------------------------+---------------------------------------
Changes (by robe):

* status: new => closed
* resolution: => fixed

Comment:

Looks like jef did much of the work for me, so all I had left - now done

1) take out the localhost -> download in the /etc/hosts (I assume this was
put in for testing)

2) Remarked out the ssl in the config file
3) Setup a proxy config on the nginx container
4) Regiater cname

So everyone should be able to test things out now

https://download-testing.osgeo.org

http://download-testing.osgeo.org #for non-ssl

{{{
ssh username@download-testing.osgeo.org -p 50023
}}}

I initiated an rsyc (hopefully that doesn't mess anyone up) and it looks
like it's putting in all the download6 files - which is fine since we have
a 10 TB on this server.

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2283#comment:1&gt;
OSGeo <https://osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#2283: download-testing server
---------------------------+---------------------------------------
Reporter: robe | Owner: sac@…
     Type: task | Status: closed
Priority: normal | Milestone: Sysadmin Contract 2019-I
Component: Systems Admin | Resolution: fixed
Keywords: |
---------------------------+---------------------------------------

Comment (by jef):

Replying to [comment:1 robe]:
> Looks like jef did much of the work for me, so all I had left - now done

yes.

* cron
* a mta is setup (exim4, relaying through osgeo6)
* cgi-bin for osgeo4w
* rsync works (used for osgeo4w mirrors)

> I initiated an rsyc (hopefully that doesn't mess anyone up) and it looks
like it's putting in all the download6 files - which is fine since we have
a 10 TB on this server.

which it already did before. we should move it's contents where the
symlinks point in after the last sync.

> The ssh port is currently osgeo7.osgeo.org -p 50023

This temporary right? Finally it'll be {download,upload}.osgeo.org:22
again? Because that's where at least the ssh uploads go (including
nightlies).

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2283#comment:2&gt;
OSGeo <https://osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#2283: download-testing server
---------------------------+---------------------------------------
Reporter: robe | Owner: sac@…
     Type: task | Status: closed
Priority: normal | Milestone: Sysadmin Contract 2019-I
Component: Systems Admin | Resolution: fixed
Keywords: |
---------------------------+---------------------------------------

Comment (by robe):

Yes I was planning to make it 22 again (perhaps reusing the same ip so I
don't have to change the bacula setup and other things that go by IP.

I just added in 22. Can you test and confirm you can ssh via download-
testing.osgeo.org

The below should work as well (I kept the 50023 as well cause bottle uses
that)
{{{
ssh username@download-testing.osgeo.org
}}}

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2283#comment:3&gt;
OSGeo <https://osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#2283: download-testing server
---------------------------+---------------------------------------
Reporter: robe | Owner: sac@…
     Type: task | Status: closed
Priority: normal | Milestone: Sysadmin Contract 2019-I
Component: Systems Admin | Resolution: fixed
Keywords: |
---------------------------+---------------------------------------

Comment (by jef):

Replying to [comment:3 robe]:
> I just added in 22. Can you test and confirm you can ssh via download-
testing.osgeo.org

Confirmed. Thanks.

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2283#comment:4&gt;
OSGeo <https://osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#2283: download-testing server
---------------------------+---------------------------------------
Reporter: robe | Owner: sac@…
     Type: task | Status: closed
Priority: normal | Milestone: Sysadmin Contract 2019-I
Component: Systems Admin | Resolution: fixed
Keywords: |
---------------------------+---------------------------------------

Comment (by jef):

Replying to [comment:2 jef]:
> * rsync works (used for osgeo4w mirrors)

also added 873 in ufw and added proxyrsync.

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2283#comment:5&gt;
OSGeo <https://osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.