Discussions about non-technical issues in the Gentoo project ()

*.overlays.gentoo.org gets a new home

Hello everybody,

while overlays.gentoo.org was down today/yesterday we decided to give it a new
home.
Interestring for you, the new server will be more powerful, it is also located
in the EU.

The migration will begin around 4-5PM, today Wed Feb 8 2012 UTC.
The expected downtime is around 2-3 hours but it *may* take up to 24 hours
because of the DNS change.
We will try to keep read-only access up as long as possible.
That means git:// and svn:// may be available all the time.

Old host:
pelican.gentoo.org aka *.overlays.gentoo.org - 66.219.59.40
RSA f0:11:07:30:1a:04:06:7c:16:a6:a8:1c:7b:7e:45:9e
DSA 8b:af:c7:76:93:23:24:c1:8d:b4:4d:cb:0f:df:70:84
ECDSA 54:5b:d3:c9:84:95:13:8a:a6:93:1d:d4:fe:2d:cb:f6

New host:
hornbill.gentoo.org - 94.100.119.163
RSA cc:f7:ac:e3:a7:43:fb:b1:ed:80:ed:44:b9:58:fd:c3
DSA ca:76:82:94:02:59:42:81:34:89:2d:4f:84:23:97:91
ECDSA 90:b8:da:ae:f6:e0:d5:8f:07:71:01:f4:38:72:ab:95

We apologize for any inconvenience this may cause.

--

-- 
Regards,
Christian Ruppert

(Continue reading)

headers

Francisco Blas Izquierdo Riera (klondike | 8 Feb 04:50

Re: *.overlays.gentoo.org gets a new home

El 08/02/12 02:38, Christian Ruppert escribió:
> Hello everybody,
Hi idl0r,
> Old host:
> pelican.gentoo.org aka *.overlays.gentoo.org - 66.219.59.40
> RSA f0:11:07:30:1a:04:06:7c:16:a6:a8:1c:7b:7e:45:9e
> DSA 8b:af:c7:76:93:23:24:c1:8d:b4:4d:cb:0f:df:70:84
> ECDSA 54:5b:d3:c9:84:95:13:8a:a6:93:1d:d4:fe:2d:cb:f6
>
> New host:
> hornbill.gentoo.org - 94.100.119.163
> RSA cc:f7:ac:e3:a7:43:fb:b1:ed:80:ed:44:b9:58:fd:c3
> DSA ca:76:82:94:02:59:42:81:34:89:2d:4f:84:23:97:91
> ECDSA 90:b8:da:ae:f6:e0:d5:8f:07:71:01:f4:38:72:ab:95
Just out of curiosity: why have this keys been changed?

I'm also wondering how can I find a trust path for these new keys given
that a user can't find  any reference to your key id anywhere except on
http://www.gentoo.org/proj/en/devrel/roll-call/userinfo.xml which can't
be accessed with https and only provides 32 bit keyids which are easily
forgeable.

Thanks in advance for any answers.

headers

Robin H. Johnson | 8 Feb 07:32

Re: *.overlays.gentoo.org gets a new home

On Wed, Feb 08, 2012 at 04:50:30AM +0100, Francisco Blas Izquierdo Riera (klondike) wrote:
> El 08/02/12 02:38, Christian Ruppert escribió:
> > Hello everybody,
> Hi idl0r,
> > Old host:
> > pelican.gentoo.org aka *.overlays.gentoo.org - 66.219.59.40
> > RSA f0:11:07:30:1a:04:06:7c:16:a6:a8:1c:7b:7e:45:9e
> > DSA 8b:af:c7:76:93:23:24:c1:8d:b4:4d:cb:0f:df:70:84
> > ECDSA 54:5b:d3:c9:84:95:13:8a:a6:93:1d:d4:fe:2d:cb:f6
> >
> > New host:
> > hornbill.gentoo.org - 94.100.119.163
> > RSA cc:f7:ac:e3:a7:43:fb:b1:ed:80:ed:44:b9:58:fd:c3
> > DSA ca:76:82:94:02:59:42:81:34:89:2d:4f:84:23:97:91
> > ECDSA 90:b8:da:ae:f6:e0:d5:8f:07:71:01:f4:38:72:ab:95
> Just out of curiosity: why have this keys been changed?
These are the SSH keys, not GPG keys. They are documented on:
http://www.gentoo.org/proj/en/infrastructure/server-specs.xml

And there is a known-good copy of the ssh_known_hosts that infra
manages.

I assert they are correct as well.

--

-- 
Robin Hugh Johnson
Gentoo Linux: Developer, Trustee & Infrastructure Lead
E-Mail     : robbat2 <at> gentoo.org
GnuPG FP   : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85

(Continue reading)

headers

Christian Ruppert | 8 Feb 21:07

Re: *.overlays.gentoo.org gets a new home

On Wed, Feb 08, 2012 at 02:38:59AM +0100, Christian Ruppert wrote:
> Hello everybody,
> 
> while overlays.gentoo.org was down today/yesterday we decided to give it a new
> home.
> Interestring for you, the new server will be more powerful, it is also located
> in the EU.
> 
> The migration will begin around 4-5PM, today Wed Feb 8 2012 UTC.
> The expected downtime is around 2-3 hours but it *may* take up to 24 hours
> because of the DNS change.
> We will try to keep read-only access up as long as possible.
> That means git:// and svn:// may be available all the time.
> 
> Old host:
> pelican.gentoo.org aka *.overlays.gentoo.org - 66.219.59.40
> RSA f0:11:07:30:1a:04:06:7c:16:a6:a8:1c:7b:7e:45:9e
> DSA 8b:af:c7:76:93:23:24:c1:8d:b4:4d:cb:0f:df:70:84
> ECDSA 54:5b:d3:c9:84:95:13:8a:a6:93:1d:d4:fe:2d:cb:f6
> 
> New host:
> hornbill.gentoo.org - 94.100.119.163
> RSA cc:f7:ac:e3:a7:43:fb:b1:ed:80:ed:44:b9:58:fd:c3
> DSA ca:76:82:94:02:59:42:81:34:89:2d:4f:84:23:97:91
> ECDSA 90:b8:da:ae:f6:e0:d5:8f:07:71:01:f4:38:72:ab:95
> 
> We apologize for any inconvenience this may cause.

Everything should work again.

(Continue reading)