[gentoo-project] *.overlays.gentoo.org gets a new home

[gentoo-project] *.overlays.gentoo.org gets a new home

[Christian Ruppert]

[-- Attachment #1: Type: text/plain, Size: 1175 bytes --]

Hello everybody,

while overlays.gentoo.org was down today/yesterday we decided to give it a new
home.
Interestring for you, the new server will be more powerful, it is also located
in the EU.

The migration will begin around 4-5PM, today Wed Feb 8 2012 UTC.
The expected downtime is around 2-3 hours but it *may* take up to 24 hours
because of the DNS change.
We will try to keep read-only access up as long as possible.
That means git:// and svn:// may be available all the time.

Old host:
pelican.gentoo.org aka *.overlays.gentoo.org - 66.219.59.40
RSA f0:11:07:30:1a:04:06:7c:16:a6:a8:1c:7b:7e:45:9e
DSA 8b:af:c7:76:93:23:24:c1:8d:b4:4d:cb:0f:df:70:84
ECDSA 54:5b:d3:c9:84:95:13:8a:a6:93:1d:d4:fe:2d:cb:f6

New host:
hornbill.gentoo.org - 94.100.119.163
RSA cc:f7:ac:e3:a7:43:fb:b1:ed:80:ed:44:b9:58:fd:c3
DSA ca:76:82:94:02:59:42:81:34:89:2d:4f:84:23:97:91
ECDSA 90:b8:da:ae:f6:e0:d5:8f:07:71:01:f4:38:72:ab:95

We apologize for any inconvenience this may cause.

-- 
Regards,
Christian Ruppert
Role: Gentoo Linux developer, Bugzilla administrator and Infrastructure member
Fingerprint: EEB1 C341 7C84 B274 6C59 F243 5EAB 0C62 B427 ABC8

[-- Attachment #2: Type: application/pgp-signature, Size: 490 bytes --]

Re: [gentoo-project] *.overlays.gentoo.org gets a new home

[Francisco Blas Izquierdo Riera (klondike)]

[-- Attachment #1: Type: text/plain, Size: 949 bytes --]

El 08/02/12 02:38, Christian Ruppert escribió:
> Hello everybody,
Hi idl0r,
> Old host:
> pelican.gentoo.org aka *.overlays.gentoo.org - 66.219.59.40
> RSA f0:11:07:30:1a:04:06:7c:16:a6:a8:1c:7b:7e:45:9e
> DSA 8b:af:c7:76:93:23:24:c1:8d:b4:4d:cb:0f:df:70:84
> ECDSA 54:5b:d3:c9:84:95:13:8a:a6:93:1d:d4:fe:2d:cb:f6
>
> New host:
> hornbill.gentoo.org - 94.100.119.163
> RSA cc:f7:ac:e3:a7:43:fb:b1:ed:80:ed:44:b9:58:fd:c3
> DSA ca:76:82:94:02:59:42:81:34:89:2d:4f:84:23:97:91
> ECDSA 90:b8:da:ae:f6:e0:d5:8f:07:71:01:f4:38:72:ab:95
Just out of curiosity: why have this keys been changed?

I'm also wondering how can I find a trust path for these new keys given
that a user can't find  any reference to your key id anywhere except on
http://www.gentoo.org/proj/en/devrel/roll-call/userinfo.xml which can't
be accessed with https and only provides 32 bit keyids which are easily
forgeable.

Thanks in advance for any answers.


[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 262 bytes --]

Re: [gentoo-project] *.overlays.gentoo.org gets a new home

[Robin H. Johnson]

[-- Attachment #1: Type: text/plain, Size: 1141 bytes --]

On Wed, Feb 08, 2012 at 04:50:30AM +0100, Francisco Blas Izquierdo Riera (klondike) wrote:
> El 08/02/12 02:38, Christian Ruppert escribió:
> > Hello everybody,
> Hi idl0r,
> > Old host:
> > pelican.gentoo.org aka *.overlays.gentoo.org - 66.219.59.40
> > RSA f0:11:07:30:1a:04:06:7c:16:a6:a8:1c:7b:7e:45:9e
> > DSA 8b:af:c7:76:93:23:24:c1:8d:b4:4d:cb:0f:df:70:84
> > ECDSA 54:5b:d3:c9:84:95:13:8a:a6:93:1d:d4:fe:2d:cb:f6
> >
> > New host:
> > hornbill.gentoo.org - 94.100.119.163
> > RSA cc:f7:ac:e3:a7:43:fb:b1:ed:80:ed:44:b9:58:fd:c3
> > DSA ca:76:82:94:02:59:42:81:34:89:2d:4f:84:23:97:91
> > ECDSA 90:b8:da:ae:f6:e0:d5:8f:07:71:01:f4:38:72:ab:95
> Just out of curiosity: why have this keys been changed?
These are the SSH keys, not GPG keys. They are documented on:
http://www.gentoo.org/proj/en/infrastructure/server-specs.xml

And there is a known-good copy of the ssh_known_hosts that infra
manages.

I assert they are correct as well.

-- 
Robin Hugh Johnson
Gentoo Linux: Developer, Trustee & Infrastructure Lead
E-Mail     : robbat2@gentoo.org
GnuPG FP   : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85

[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 330 bytes --]

Re: [gentoo-project] *.overlays.gentoo.org gets a new home

[Christian Ruppert]

[-- Attachment #1: Type: text/plain, Size: 1726 bytes --]

On Wed, Feb 08, 2012 at 02:38:59AM +0100, Christian Ruppert wrote:
> Hello everybody,
> 
> while overlays.gentoo.org was down today/yesterday we decided to give it a new
> home.
> Interestring for you, the new server will be more powerful, it is also located
> in the EU.
> 
> The migration will begin around 4-5PM, today Wed Feb 8 2012 UTC.
> The expected downtime is around 2-3 hours but it *may* take up to 24 hours
> because of the DNS change.
> We will try to keep read-only access up as long as possible.
> That means git:// and svn:// may be available all the time.
> 
> Old host:
> pelican.gentoo.org aka *.overlays.gentoo.org - 66.219.59.40
> RSA f0:11:07:30:1a:04:06:7c:16:a6:a8:1c:7b:7e:45:9e
> DSA 8b:af:c7:76:93:23:24:c1:8d:b4:4d:cb:0f:df:70:84
> ECDSA 54:5b:d3:c9:84:95:13:8a:a6:93:1d:d4:fe:2d:cb:f6
> 
> New host:
> hornbill.gentoo.org - 94.100.119.163
> RSA cc:f7:ac:e3:a7:43:fb:b1:ed:80:ed:44:b9:58:fd:c3
> DSA ca:76:82:94:02:59:42:81:34:89:2d:4f:84:23:97:91
> ECDSA 90:b8:da:ae:f6:e0:d5:8f:07:71:01:f4:38:72:ab:95
> 
> We apologize for any inconvenience this may cause.

Everything should work again.

Before you report any issues please make sure to clear your DNS cache first.
nscd -i hosts
Make sure your ssh-master session has been restarted.
Verify that horbill.gentoo.org will be used by trying "ssh -v
git.overlays.gentoo.org" or svn.gentoo.org.
You may need to restart your browser in case your DNS cache is using the new
address already but your browser is still using the old one.

-- 
Regards,
Christian Ruppert
Role: Gentoo Linux developer, Bugzilla administrator and Infrastructure member
Fingerprint: EEB1 C341 7C84 B274 6C59 F243 5EAB 0C62 B427 ABC8

[-- Attachment #2: Type: application/pgp-signature, Size: 490 bytes --]