D4Science Infrastructure

Can we move the postgresql databases on node7.d.d4science.research-infrastructures.eu to postgresql-srv-dev.d4science.org?

yes

This is a 14 days old ticket (before new rules). I think other info aren't needed because the playbook is already done and I'm ready to run it.

Could you please indicate which are the databases that we have to move or copy
from node7.d.d4science.research-infrastructures.eu to postgresql-srv-dev.d4science.org?

the dbs are Tabulardata and Tabularmetadata

How did you run the playbook?

I just run it with the tag d4science to only run the tasks that configure sudo and the security limits, and the following tasks were executed:

TASK [../library/roles/d4s_user_services_perms : Install the sudoers config that permits the tomcat user to restart the service] ***
changed: [tabulardata-devsec.d4science.org]

TASK [../library/roles/d4s_user_services_perms : Install the README file that explains where the options files are placed and how start/stop the service] ***
changed: [tabulardata-devsec.d4science.org] => (item=[{u'jmx_auth_enabled': False, u'java_opts': u'', u'servername': u'tabulardata-devsec.d4science.org', u'jmx_controlpass
': u'__omit_place_holder__64a7dfe99b5445cbb80765b27732334a07abf631', u'jmx_auth_dir': u'/var/lib/tomcat_instances/8000/conf', u'app_contexts': [u'whn-manager', u'tabular-d
ata-manager'], u'restart_timeout': 300, u'other_java_opts': u'', u'http_port': 8000, u'user_home': u'/home/gcube', u'jmx_enabled': False, u'log_rotation_freq': u'daily', u
'instance_path': u'/home/gcube/tomcat', u'shutdown_port': u'-1', u'jmx_use_ssl': False, u'java_home': u'/usr/lib/jvm/java-8-oracle', u'ajp_address': u'127.0.0.1', u'ajp_po
rt': u'8109', u'max_threads': 500, u'log_retain': 30, u'jmx_port': 8186, u'java_gc_opts': u'-XX:+UseConcMarkSweepGC', u'access_log_enabled': True, u'skip_smartgears': Fals
e, u'ajp_enabled': False, u'user_shell': u'/bin/bash', u'remote_debugging_port': u'8100', u'unpack': True, u'remote_debugging': False, u'http_address': u'0.0.0.0', u'defau
lt_conf': True, u'jmx_monitorpass': u'__omit_place_holder__64a7dfe99b5445cbb80765b27732334a07abf631', u'allowed_hosts': [u'0.0.0.0/0'], u'autodeploy': False, u'jmx_disable
_additional_ports': True, u'http_enabled': True, u'user': u'gcube'}, u'README'])

TASK [../library/roles/d4s_user_services_perms : Set the read/write permissions on the tomcat default options files] ***
changed: [tabulardata-devsec.d4science.org] => (item={u'jmx_auth_enabled': False, u'java_opts': u'', u'servername': u'tabulardata-devsec.d4science.org', u'jmx_controlpass'
: u'__omit_place_holder__64a7dfe99b5445cbb80765b27732334a07abf631', u'jmx_auth_dir': u'/var/lib/tomcat_instances/8000/conf', u'app_contexts': [u'whn-manager', u'tabular-da
ta-manager'], u'restart_timeout': 300, u'other_java_opts': u'', u'http_port': 8000, u'user_home': u'/home/gcube', u'jmx_enabled': False, u'log_rotation_freq': u'daily', u'
instance_path': u'/home/gcube/tomcat', u'shutdown_port': u'-1', u'jmx_use_ssl': False, u'java_home': u'/usr/lib/jvm/java-8-oracle', u'ajp_address': u'127.0.0.1', u'ajp_por
t': u'8109', u'max_threads': 500, u'log_retain': 30, u'jmx_port': 8186, u'java_gc_opts': u'-XX:+UseConcMarkSweepGC', u'access_log_enabled': True, u'skip_smartgears': False
, u'ajp_enabled': False, u'user_shell': u'/bin/bash', u'remote_debugging_port': u'8100', u'unpack': True, u'remote_debugging': False, u'http_address': u'0.0.0.0', u'defaul
t_conf': True, u'jmx_monitorpass': u'__omit_place_holder__64a7dfe99b5445cbb80765b27732334a07abf631', u'allowed_hosts': [u'0.0.0.0/0'], u'autodeploy': False, u'jmx_disable_
additional_ports': True, u'http_enabled': True, u'user': u'gcube'})

TASK [../library/roles/d4s_user_services_perms : Change the default security limits] ***
changed: [tabulardata-devsec.d4science.org] => (item={u'l_item': u'nofile', u'domain': u'gcube', u'type': u'soft', u'value': 16000})
changed: [tabulardata-devsec.d4science.org] => (item={u'l_item': u'nofile', u'domain': u'gcube', u'type': u'hard', u'value': 16000})

When a new node is deployed no tags must be listed, otherwise the provisioning will be partial. If this is the case please run it again.

(I still do not understand why nginx and ssl have been disabled).

Andrea Dell'Amico wrote:

How did you run the playbook?

I just run it with the tag d4science to only run the tasks that configure sudo and the security limits, and the following tasks were executed:

TASK [../library/roles/d4s_user_services_perms : Install the sudoers config that permits the tomcat user to restart the service] ***
changed: [tabulardata-devsec.d4science.org]

TASK [../library/roles/d4s_user_services_perms : Install the README file that explains where the options files are placed and how start/stop the service] ***
changed: [tabulardata-devsec.d4science.org] => (item=[{u'jmx_auth_enabled': False, u'java_opts': u'', u'servername': u'tabulardata-devsec.d4science.org', u'jmx_controlpass
': u'__omit_place_holder__64a7dfe99b5445cbb80765b27732334a07abf631', u'jmx_auth_dir': u'/var/lib/tomcat_instances/8000/conf', u'app_contexts': [u'whn-manager', u'tabular-d
ata-manager'], u'restart_timeout': 300, u'other_java_opts': u'', u'http_port': 8000, u'user_home': u'/home/gcube', u'jmx_enabled': False, u'log_rotation_freq': u'daily', u
'instance_path': u'/home/gcube/tomcat', u'shutdown_port': u'-1', u'jmx_use_ssl': False, u'java_home': u'/usr/lib/jvm/java-8-oracle', u'ajp_address': u'127.0.0.1', u'ajp_po
rt': u'8109', u'max_threads': 500, u'log_retain': 30, u'jmx_port': 8186, u'java_gc_opts': u'-XX:+UseConcMarkSweepGC', u'access_log_enabled': True, u'skip_smartgears': Fals
e, u'ajp_enabled': False, u'user_shell': u'/bin/bash', u'remote_debugging_port': u'8100', u'unpack': True, u'remote_debugging': False, u'http_address': u'0.0.0.0', u'defau
lt_conf': True, u'jmx_monitorpass': u'__omit_place_holder__64a7dfe99b5445cbb80765b27732334a07abf631', u'allowed_hosts': [u'0.0.0.0/0'], u'autodeploy': False, u'jmx_disable
_additional_ports': True, u'http_enabled': True, u'user': u'gcube'}, u'README'])

TASK [../library/roles/d4s_user_services_perms : Set the read/write permissions on the tomcat default options files] ***
changed: [tabulardata-devsec.d4science.org] => (item={u'jmx_auth_enabled': False, u'java_opts': u'', u'servername': u'tabulardata-devsec.d4science.org', u'jmx_controlpass'
: u'__omit_place_holder__64a7dfe99b5445cbb80765b27732334a07abf631', u'jmx_auth_dir': u'/var/lib/tomcat_instances/8000/conf', u'app_contexts': [u'whn-manager', u'tabular-da
ta-manager'], u'restart_timeout': 300, u'other_java_opts': u'', u'http_port': 8000, u'user_home': u'/home/gcube', u'jmx_enabled': False, u'log_rotation_freq': u'daily', u'
instance_path': u'/home/gcube/tomcat', u'shutdown_port': u'-1', u'jmx_use_ssl': False, u'java_home': u'/usr/lib/jvm/java-8-oracle', u'ajp_address': u'127.0.0.1', u'ajp_por
t': u'8109', u'max_threads': 500, u'log_retain': 30, u'jmx_port': 8186, u'java_gc_opts': u'-XX:+UseConcMarkSweepGC', u'access_log_enabled': True, u'skip_smartgears': False
, u'ajp_enabled': False, u'user_shell': u'/bin/bash', u'remote_debugging_port': u'8100', u'unpack': True, u'remote_debugging': False, u'http_address': u'0.0.0.0', u'defaul
t_conf': True, u'jmx_monitorpass': u'__omit_place_holder__64a7dfe99b5445cbb80765b27732334a07abf631', u'allowed_hosts': [u'0.0.0.0/0'], u'autodeploy': False, u'jmx_disable_
additional_ports': True, u'http_enabled': True, u'user': u'gcube'})

TASK [../library/roles/d4s_user_services_perms : Change the default security limits] ***
changed: [tabulardata-devsec.d4science.org] => (item={u'l_item': u'nofile', u'domain': u'gcube', u'type': u'soft', u'value': 16000})
changed: [tabulardata-devsec.d4science.org] => (item={u'l_item': u'nofile', u'domain': u'gcube', u'type': u'hard', u'value': 16000})

When a new node is deployed no tags must be listed, otherwise the provisioning will be partial. If this is the case please run it again.

I had run it without tag but the first run was fail because there was a problem with snapshot repository. After that I've run it again with the tag "ssh_keys" and not "d4science": this is my mistake. Thanks.

Andrea Dell'Amico wrote:

(I still do not understand why nginx and ssl have been disabled).

nginx should be enabled... it is running on 80 port while the container is running on 8000 port