On 08/06/2022 07:24, Fabian Arrotin wrote: > Due to a scheduled pagure upgrade, we'll have to move the existing > Pagure instance (aka https://git.centos.org) to a new node. > > Migration is scheduled for """"Monday June 13rd, 7:00 am UTC time"""". > You can convert to local time with $(date -d '2022-06-13 07:00 UTC') > > The expected "downtime" is estimated to ~60 minutes , time needed to : > - backup/restore last DB dump > - import and convert DB schema for newer pagure version > - last data (sources in lookaside cache and git repositories) sync > - verify service and switch public IP to new host. > > Important note wrt that migration is that we're moving from pagure 5.8 > running on CentOS 7 to pagure 5.13 on RHEL 8. > It means it's a new host and so sshd host keys will change (we didn't > want to import older host keys to comply with newer algo) > The new fingerprint will be displayed at usual place > (https://git.centos.org/ssh_info) but it only matters for SIGs users > pushing to specific projects/branches over ssh. > For people pulling through https, nothing changes. > > Here are in advance the new fingerprints : > > rsa=3072 SHA256:qeSehpwh3X7HI0D/jF7N4qZcergdr9tUCdaZ2EIdiLc (RSA) > rsa_md5=3072 MD5:a9:a1:ba:83:96:71:28:ca:86:19:c0:5d:4f:48:9f:63 (RSA) > ecdsa=256 SHA256:vIRsg5g/t/7ucYP4NKTkcPJdE7CWbFQVInscthHKihU (ECDSA) > ecdsa_md5=256 MD5:8f:40:35:4f:b9:43:60:d9:09:c0:5f:80:52:69:c8:8d (ECDSA) > > Also worth knowing that we also present a signed cert for sshd host > keys, so if you already trust our CA > (https://github.com/CentOS/ansible-role-sshd/blob/master/defaults/main.yml#L33) > in your ~/.ssh/known_hosts file, you'll not even have to accept new key > > Thanks for your understanding and patience. > > on behalf of the Infra team, > Just to let you know that migration is now complete and total downtime was ~25min. Kind Regards, -- Fabian Arrotin The CentOS Project | https://www.centos.org gpg key: 17F3B7A1 | twitter: @arrfab -------------- next part -------------- A non-text attachment was scrubbed... Name: OpenPGP_0xA25DBAFB17F3B7A1.asc Type: application/pgp-keys Size: 12767 bytes Desc: OpenPGP public key URL: <http://lists.centos.org/pipermail/centos-devel/attachments/20220613/0d32a72b/attachment-0002.bin> -------------- next part -------------- A non-text attachment was scrubbed... Name: OpenPGP_signature Type: application/pgp-signature Size: 840 bytes Desc: OpenPGP digital signature URL: <http://lists.centos.org/pipermail/centos-devel/attachments/20220613/0d32a72b/attachment-0002.sig>