Verified Commit be9a2719 authored by anarcat's avatar anarcat
Browse files

remove the /etc/hosts hack, we can talk directly to node (team#40972)

parent 1879218b

howto/ganeti.md

+3 −13
Original line number Diff line number Diff line
@@ -1719,17 +1719,7 @@ migrate a VM. In this example, we migrate a VM named 


 5. disable Puppet, as we'll be messing with files it manages:

 

        puppet agent --disable "messing with RAPI and /etc/hosts, see issue tpo/tpa/team#40972"



 6. bypass the local DNS records for the "API" names on the

    destination node (dal-node-01):

 

        echo 38.229.82.104   chignt.torproject.org >> /etc/hosts

        echo 204.8.99.101    dalgnt.torproject.org >> /etc/hosts



    TODO: maybe those records should point at the public IP addresses

    in the normal torproject.org zonefile? Right now it points at the

    private IP space, but I'm not sure why.

        puppet agent --disable "messing with RAPI, see issue tpo/tpa/team#40972"



 7. make RAPI listen on the public network, on both master nodes:
@@ -1770,8 +1760,8 @@ to the `dalgnt` cluster: 
 2. move the VM to the new cluster:



        /usr/lib/ganeti/tools/move-instance  \

            chignt.torproject.org \

            dalgnt.torproject.org \

            chi-node-01.torproject.org \

            dal-node-01.torproject.org \

            test-01.torproject.org \

            --src-ca-file=chignt.crt \

            --dest-ca-file=/var/lib/ganeti/rapi.pem \