FYI .. in case you didn't see this. Sanjiva. ----- Original Message ----- From: "Brian Behlendorf" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Monday, July 16, 2001 12:40 AM Subject: CVS moved to new machine > > I've moved the CVS tree to a new machine. Here is WHAT YOU NEED TO DO TO > USE IT: > > - It is on a new machine, called "cvs.apache.org" officially, unofficially > "icarus.apache.org". Please use "cvs.apache.org" in all your CVSROOT > calls and SSH tunnels. I will set up something that will allow for port > 2401 on the other *.apache.org hosts to forward to port 2401 on > cvs.apache.org so anoncvs to old hostnames will work, but for now let's > focus on using cvs.apache.org. > > Note that cvs.apache.org should be "64.208.42.42" - if your DNS server > is not seeing that IP address for that hostname, then try > "icarus.apache.org" until it does. > > - You may get an "invalid ssh key" if you've previously been using > cvs.apache.org. Delete your old one, get a new one. The DSA > fingerprint of the new one is > 79:7c:cb:6a:44:47:b2:ef:5c:66:28:d7:40:0d:b1:f9. > > - You all now have two accounts, one on daedalus and one on icarus. All > new committer accounts will *ONLY* be on cvs.apache.org unless otherwise > asked. I will gradually be REMOVING accounts from daedalus, as more and > more of the reasons for having accounts on the live server are reduced. > If anyone here KNOWS they only need shell access for CVS commits, please > let me know and I'll delete your account on daedalus. Gradually, I want > to get the # of accounts there down to the bare minimum. > > Keep in mind those two accounts are *not* synchronized - right now they > have the same passwords & SSH keys, but there's nothing enforcing that. > I would appreciate it if you moved *all* your shell-based activities to > the new box, and logged into daedalus as little as possible. > > So that's where we are now. Things to do: > > a) get the from-cvs script working > b) get viewcvs working > c) set up port bouncer for port 2401 on daedalus to port 2401 on icarus so > that old CVSROOT's work. > d) consider moving mail to that new box, or a third. > e) anything else? > > Did this make a difference? Testing from a machine outside our firewall > but on a well-connected net (about 4ms from apache.org): > > [taz3] 9:33pm ~/ap > time cvs checkout jakarta-turbine > [... fresh checkout ...] > 0.313u 2.713s 1:43.45 2.9% 587+501k 912+13077io 0pf+0w > [taz3] 9:35pm ~/ap > time cvs update jakarta-turbine > [... checking every dir ...] > 0.088u 0.505s 0:52.99 1.0% 571+438k 224+880io 0pf+0w > > Jon Stevens can attest to whether this is an improvement or not. =) > > FYI, here's exactly what I did: > > a) copied /etc/passwd, /etc/master.passwd, and /etc/group to the new > machine. > > b) copied every /home/*/.ssh dir as well as a basic collection of dotfiles > over from everyone's home dir on daedalus to the new box. > > c) copied over /usr/local/bin/remote-cvs*, /usr/local/etc/inetd, and > /usr/local/etc/rc.d/30.inetd.sh, and invoked 30.inetd.sh. > > d) killed cvsupd on old box - started it up on new box. > > e) closed down all CVS access on daedalus by doing a chmod 000 /home/cvs, > sent note to committers & infrastructure. > > f) tar'd up, copied, untarred /home/cvs, /home/cvspublic, and > /home/cvs-prehack to the new box. Compared du's to make sure all files > were copied. > > g) changed cvs.apache.org to point to new box. > > h) mail! I forgot to set up an MTA on icarus. OK, fixed (by copying over > what was on daedalus, and tweaking the configs). > > Das' it. > > Brian > > > > >
