Physical movement of machines preparation

['Sandro Santilli']

On Mon, Sep 15, 2025 at 10:47:36AM -0400, Regina Obe wrote:

> 1) Containerize current osgeo6 (which is already done on osgeo9)

I understand this step is not completed until the IP (or hostnames?)
that currently points to osgeo6 start pointing to the new
containerized machine.

I actually wonder what "containerize" really meant, other than having
the ability to have a container that can be fully accessed via its own
IP address (currently done with network forward which is one of the
possible options, is my understanding).

> 2) Confirm all is working on osgeo9 (we did not test the MTA too much but we did test mailing lists), and sending mail via new osgeo6

We'll need other testing ONCE the IP (or hostnames) are repointed.

> 3) Production Switch to containerized osgeo6 on osgeo9

Is this the point in which you would assign 140.211.15.3 to osgeo9 ?
Or do you think we should ONLY point the hostnames mail.osgeo.org and
lists.osgeo.org and tilecache.org and www.tilecache.org ?)

> 4) shut off osgeo6, make sure everything is still working

I'll not think about the next steps until the previous steps
(up to "production switch") are clear.

> DNS wise I think our downtime is pretty low.  I've noticed it only takes like an hour or so.

The mail.osgeo.org and lists.osgeo.org DNS records have a TTL of
300 seconds (5 minutes), way less than an hour. And we can now change
them easily via Ansible, if we want, see:

  https://gitea.osgeo.org/sac/ansible-deployment/src/branch/master/deployment/roles/dns-records/tasks/mail.yml
  https://gitea.osgeo.org/sac/ansible-deployment/src/branch/master/deployment/roles/dns-records/tasks/mx.yml

> Though we can't account for dns servers caching for longer than they should or client pcs caching.

If we cannot account for DNS timing, how do we deal with mail queues ?

Should we configure the current mail server to forward ALL incoming mail to the new mail
server, thus keeping 2 separate IP addresses and 2 hostnames, and refuse to  work as a mail
submission agent (block all outgoing mail) ?

Or do we keep the SAME IP and thus the same DNS records while just
assigning them to osgeo9 instead of osgeo6 ?

--strk;

  Libre GIS consultant/developer 🎺
  https://strk.kbt.io/services.html
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 659 bytes
Desc: not available
URL: <http://lists.osgeo.org/pipermail/sac/attachments/20250915/a7214463/attachment.sig>