Re: help wanted, standing up mirroring sync proxies on public cloud
Hi Julien,
On Mon, Jan 23, 2023 at 05:24:51PM +0100, Julien Cristau wrote:
> On Tue, Jan 17, 2023 at 22:22:59 -0800, Ross Vandegrift wrote:
> > It probably makes sense for the cloud team to own the cloud
> > infrastructure, and DSA to own the OS config and ongoing operations. Is
> > this what you were thinking?
> >
> I'm not sure what that means to be honest.
I meant that the coud team can provide the VM (and other things the
cloud provider will require), but won't handle ongoing operations inside
of the VM.
> > You mentioned doing two hosts in North America, did you have specific
> > regions in mind? The most natural choices are probably Virginia and
> > Oregon in the US, and Quebec in Canada. Info on other choices at [1].
> >
> I think Virginia and Oregon would work. (The immediate need is to
> replace syncproxy2.wna.debian.org (currently in California) and
> syncproxy.cna.debian.org (in Minnesota).)
We'd like to start with one host. We want to use your use-case to make
hosting project infrastructure easier for us. We'll focus on getting
this case how we want it, so hopefully it's easier to add a second one
later.
> > Do you care about the architecture? arm64 would be a bit cheaper. But
> > not so much cheaper that it'd be worth any DSA time.
> >
> I don't *think* this matters much to us. We haven't run a mirror on
> arm64 yet, and syncs can be both cpu and io hungry, so we'll have to
> see, but I'm happy to try it out.
Okay, great. We're going to go ahead and work on deploying this.
Here's what we're going to deploy, please let us know if anything sounds
wrong:
- 8 cpu arm64, 16G of RAM (in AWS-speak: c6g.2xlarge)
- two disks:
- root volume for the OS
- data volume that can persist the data if the VM needs to be replaced
- ssh public keys for DSA configured for root
- prometheus-node-exporter to expose system metrics
- we want to be able to monitor performance of hosted VMs, and
will do the install with cloud-init when it's launched.
Do you have a list of hosts that should be permitted ssh access?
Thanks,
Ross
Reply to: