- Feb 03, 2020
- Jan 29, 2020
-
-
anarcat authored
The rationale here is we don't want to extend trust from the old machine, which we do by giving them root access on the new server. By giving root access to the *old* server, we don't give it access to anything it already has (or will have, in the case of the ganeti nodes).
- Jan 28, 2020
-
-
anarcat authored
we could have also used the new swap UUID and edited the fstab, but that would have required more steps: 1. mount the filesystem 2. edit fstab 3. unmount ... and another thing to redo after the last resync. By enforcing a UUID from the start, we don't need to edit the fstab at all. I can't think of a compelling reson why reusing the UUID might be a problem.
- Jan 27, 2020
-
- Jan 23, 2020
-
- Jan 17, 2020
-
-
anarcat authored
I added that TODO based on a misunderstanding of the function of the private network between the Ganeti nodes. It's not there to provide a private network between *instances*, but really just the nodes, for DRBD and Ganeti traffic. So it makes no sense to allocate private IPs to the instances in that context.
- Jan 16, 2020
-