## Servers to upgrade
- T3771 Proxmox hypervisors
- [x] beaubourg.softwareheritage.org
- [x] branly.internal.softwareheritage.org
- [x] hypervisor3.internal.softwareheritage.org
- [x] pompidou.internal.softwareheritage.org
- [x] uffizi.softwareheritage.org
(!) Proxmox/Ceph upgrade ?
- [x] riverside.internal.softwareheritage.org
sentry is deployed with docker, should not be too hard to upgrade
- [ ] mirror-test.internal.staging.swh.network
sandbox server used by ddouarda to test the mirroring
no swh packages are installed on it
- kafka
- [X] kafka[1-4].internal.staging.swh.network (T3762)
- [X] ~~journal0.internal.staging.swh.network~~ decomissioned
- log cluster
- [X] esnode[1-3].internal.softwareheritage.org
- [X] kibana0.internal.softwareheritage.org
- [X] logstash0.internal.softwareheritage.org (ELK stack upgrade to 7.15.2)
[1] https://www.elastic.co/guide/en/elasticsearch/reference/current/deb.html
- search elasticsearch
- [X] search-esnode[4-6].internal.softwareheritage.org
- [X] esnode0.internal.staging.swh.network
(!) elasticsearch package availability for buster?
If not schedule an elasticsearch upgrade before
-> We can do as mentioned in the previous point for elasticsearch
- Postgresql databases
- [ ] belvedere.internal.softwareheritage.org
- [ ] db1.internal.staging.swh.network
- [ ] somerset.internal.softwareheritage.org
schedule a postgresql upgrade?
-> pending task about upgrade (T2581)
- Postgresql database replica (to decomission)
- [ ] ~~dbreplica0.euwest.azure.internal.softwareheritage.org~~
failing main database replica (T2581)
Probably simpler to rebuild from scratch
- [ ] ~~dbreplica1.euwest.azure.internal.softwareheritage.org~~
indexer replica db (postgresql 11)
- [x] hedgedoc.softwareheritage.org (bardo.internal.admin.swh.network)
-> simple migration
- bojimans.internal.softwareheritage.org (netbox)
-> simple migration
- kelvingrove.internal.softwareheritage.org (keycloak)
-> pending task about upgrade (T3171)
- Admin / DNS
- [ ] ns0.euwest.azure.internal.softwareheritage.org
- [ ] (!) (!) pergamon.softwareheritage.org
Distribute the services to several servers (T1166)?
-> That'd definitely help to split that frankennode.
## Delayed migrations
//Need some actions to separate swh services from the raw storage or
a bullseye version of the swh packages//
- counters
- [ ] counters0.internal.staging.swh.network
- [ ] counters1.internal.softwareheritage.org
redis needs storage, we could separate the search services / journal client from redis
- Object storage / Storage
- [ ] saam.internal.softwareheritage.org
- [ ] storage1.internal.staging.swh.network
- [ ] banco.softwareheritage.org
need to generate a swh-storage package for bullseye / don't use the debian package deployment
need to generate an obj-storage package for bullseye / don't use the debian package deployment
checkup backup compatibility
- graph
- [ ] granet.internal.softwareheritage.org
need to check the dependencies / installed packages (-> one is python3-swh.graph.client)
possibility to deploy the graph service dynamically ?
- [ ] getty.internal.softwareheritage.org
- used as a sandbox
- CMAK compatibility ?
- scheduler
- [ ] scheduler0.internal.staging.swh.network
- [ ] saatchi.internal.softwareheritage.org
Need to separate rabbitmq from the swh services and journal clients
(!) rabbitmq version has changed, 3.7.8 in debian10, 3.8.9 in debian 11.
The puppet module seems broken due to wrong dependencies when installing rabbitmqadmin
- [ ] tate.softwareheritage.org
phabricator should be migrated to gitlab
mediawiki should be migrated
jenkins and keycloak RP should be kept / migrated
- T3770: CI servers
- [x] jenkins-debian1.internal.softwareheritage.org
- [x] thyssen.internal.softwareheritage.org
Need to check the impact on the build jobs running on master without containers
## Servers left in busters
//services will be migrated to a new deployment system//
- [ ] worker[0-3].internal.staging.swh.network
- [ ] worker[01-13].euwest.azure.internal.softwareheritage.org
- [ ] worker[01-17].softwareheritage.org
- [ ] search0.internal.staging.swh.network
- [ ] search1.internal.softwareheritage.org
- [ ] deposit.internal.staging.swh.network
- [ ] vault.internal.staging.swh.network
- [ ] vangogh.euwest.azure.internal.softwareheritage.org
- [ ] webapp.internal.staging.swh.network
- [ ] webapp1.internal.softwareheritage.org
- [ ] moma.softwareheritage.org
- [ ] rp0.internal.staging.swh.network
- [x] rp1.internal.admin.swh.network
- [ ] objstorage0.internal.staging.swh.network
expose the objstorage service to the mirrors
- [ ] storage01.euwest.azure.internal.softwareheritage.org
r/o storage
## Services to upgrade
- build
- ci images
- base swh image
- debian packages
- librdkafka ?
- monitoring-plugins-systemd
- prometheus-statsd-exporter
- python3-elasticsearch
- python3-amqp
- python3-confluent-kafka
- python3-importlib-metadata
- python3-kombu
- <to be continued>
## Desktop
We need to double check with their owner for the upgrade whether they want to do it or not (questions asked on irc, awaiting response)
- [x] grouss: giverny.softwareheritage.org (currently from jessie to buster)
- [x] seirl: grand-palais.softwareheritage.org (migrated to bullseye)
## Firewalls
Upgrade opnsense, not a bullseye migration since those are bsds
- [x] glyptotek.internal.softwareheritage.org
- [x] pushkin.internal.softwareheritage.org
## to decommission
- [x] louvre.internal.softwareheritage.org
- [ ] boatbucket.internal.softwareheritage.org
Note:
Update the inventory once the migration is done [1]
[1] https://inventory.internal.softwareheritage.org/