decomission storm / bracteata on February 11, 2020

Trac:
Parent Ticket: legacy/trac#32267 (moved)

added component::internal services/service - sandstorm in Legacy / Trac owner::anarcat in Legacy / Trac parent::32267 in Legacy / Trac priority::medium in Legacy / Trac resolution::fixed in Legacy / Trac severity::normal in Legacy / Trac status::closed in Legacy / Trac tpa-roadmap-february in Legacy / Trac type::task in Legacy / Trac labels

Trac:
Parent: N/A to legacy/trac#32267 (moved)

hum. it seems we're getting dangerously close to this deadline, maybe we want to send an announcement here?

I sent it a few days ago.

Trac:
Keywords: gaba deleted, tpa-roadmap-february added

Let's give it more time. I will follow with people.

Trac:
Summary: decomission storm / bracteata on February 4, 2020 to decomission storm / bracteata on February 11, 2020
Cc: N/A to gaba

taking this on now, storm is going down!

Trac:
Status: new to accepted
Owner: hiro to anarcat

host retirement checklist:

announced long ago, here, another announcement sent today to tor-internal@
shutdown scheduled for now +5min
undefined
done:

root@unifolium:~# echo rm -r /srv/vmstore/bracteata.torproject.org | at now + 7 days warning: commands will be executed using /bin/sh job 1 at Wed Feb 19 20:04:00 2020

 5. removed the following blob from LDAP:
    ```
346 host=bracteata,ou=hosts,dc=torproject,dc=org
host: bracteata
hostname: bracteata.torproject.org
objectClass: top
objectClass: debianServer
l: Falkenstein, Saxony, Germany
distribution: Debian
access: restricted
admin: torproject-admin@torproject.org
architecture: amd64
sshRSAHostKey: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDgSK0VMFXxG4tM2+4qPlTQ3MLPW0OrGS1JWubOEOrv6T1XAM/X4TTtL7b8ck3/WNivqz5FicZLEIVKMlz7hRL4JjoAG1G5GdHNFqlHtqG0+ZQCHCUOmWkRQeapHHYwHo9IkXl5beotmzN22a/nJHnfASWPEZbfsI2rVWLAarNL16YbXx5AZtT+ztN8qhLFqp7vo17YezG1c6cYI9ONwy/dxOEvRjgJe7E9KtJefMkuTmpHmekqHeHoesCCaq0yiLKH2Qjo9JyWVgKs1lrbS9TfftUS8KeZjWZ0JQnZFUpddOVjcCFMhx0cLn34zDwgeN3M+2zGQ9ymeqhf3jf3y7sl root@bracteata
sshRSAHostKey: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDs+Dct1Bn+VheKwB1ztfoytFKKV7t01EYk5vuDAcFl8 root@bracteata
physicalHost: unifolium.torproject.org
description: sandstorm
purpose: sandstorm
ipHostNumber: 78.47.38.231
ipHostNumber: 2a01:4f8:211:6e8:0:823:7:1
allowedGroups: storm

also removed the storm user and group (UID/GID 1559), and the sudo password for the host for a few people

removed storm and *.storm from domains (IPs 78.47.38.231 and 2a01:4f8:211:6e8:0:823:7:1)
revoked from puppet:

root@pauli:/home/anarcat# puppet node clean $host.torproject.org && puppet node deactivate $host.torproject.org Notice: Revoked certificate with serial 6 Notice: Removing file Puppet::SSL::Certificate bracteata.torproject.org at '/var/lib/puppet/ssl/ca/signed/bracteata.torproject.org.pem' bracteata.torproject.org Submitted 'deactivate node' for bracteata.torproject.org with UUID af1cf582-45b6-4223-8be9-5175ddd0ddb5

 8. removed from puppet code (fa41d98c)
 9. remove from tor-passwords
 10. removed from spreadsheet
 11. removed from nagios
 12. scheduled backup deletion:
     ```
root@bungei:/srv/backups/bacula# echo rm -rf /srv/backups/bacula/bracteata.torproject.org-OLD | at now + 30 days
warning: commands will be executed using /bin/sh
job 19 at Fri Mar 13 20:40:00 2020