Sepia Lab Wiki services

services:apt-mirror

Anonymous (anonymous@undisclosed.example.com) — 2022-06-28T14:25:58+0000

apt-mirror Summary Serves as DEB and RPM repo mirrors. See apt-mirror's project page Lives on gitbuilder-archive. apt-mirror.sh Called by root's crontab every day at 4PM Pacific time. # cat /home/apt-mirror/apt-mirror.sh #!/bin/bash echo > /var/spool/apt-mirror/var/cron.log for file in /etc/apt/mirrors/*.list do cp -avf $file /etc/apt/mirror.list sleep 5 /usr/bin/apt-mirror >> /var/spool/apt-mirror/var/cron.log done

services:ceph-cm-ansible

Anonymous (anonymous@undisclosed.example.com) — 2016-08-30T20:44:56+0000

Ansible Summary Ansible is used to automate configuration of many lab services. Since the list is ever-growing, see for details. The secrets repo is a private repo containing vars for things we want to keep secret (duh). Most information one would need is in the READMEs of

services:cephfs

Anonymous (anonymous@undisclosed.example.com) — 2025-12-17T14:53:21+0000

CephFS There are a few CephFS file systems available in the sepia lab. These reside on the Long Running Cluster. Access to this Ceph cluster is available for any machine on the sepia VPN. You can and should mount these file systems on your laptop or development machine. This reduces load on some shared machines, like

services:cobbler

Anonymous (anonymous@undisclosed.example.com) — 2022-11-22T11:49:38+0000

Cobbler Summary Cobbler is used to reimage testnodes in the lab. The Cobbler host is cobbler.front.sepia.ceph.com and is managed by Ansible. It's a bare metal machine that used to be mira065. Access the Web UI at Reimaging/Reinstalling a host See testnodereimage Creating a new user for Web UI access

services:conserver

Anonymous (anonymous@undisclosed.example.com) — 2016-10-10T22:35:56+0000

conserver Summary conserver is a centralized serial server that keeps a persistent serial session open and allows multiple users to access the same console at a time. See The service is running on a VM in RHEV on conserver.front.sepia.ceph.com. It is configured to allow passwordless access to any IP on the 172.21.0.0/20 network. (This includes VPN clients since they are routed through gw.front.sepia.ceph.com)

services:dccmirrors

Anonymous (anonymous@undisclosed.example.com) — 2017-06-13T15:58:33+0000

WIP - download.ceph.com mirrors Summary We have two RHCS clusters running on mira that serve as mirrors for download.ceph.com. Purpose/Background The goal of this project is to use/dogfood downstream RHCS software, docs, and ceph-ansible to uncover difficulties in installing and maintaining the product.

services:dhcp

Anonymous (anonymous@undisclosed.example.com) — 2018-04-06T16:56:47+0000

DHCP Summary The DHCP daemon is currently running on store01.front.sepia.ceph.com primarily because it used to be the main infra host. There's nothing special about the setup. It serves the front and ipmi VLANs. To move the service to another host, IT can change the “DHCP helper

services:docker-mirror

Anonymous (anonymous@undisclosed.example.com) — 2021-01-20T15:50:58+0000

docker-mirror.front.sepia.ceph.com Summary This is a VM in RHEV that is a caching mirror for docker.io. We were being rate-limited by docker.io (). I was originally going to create an Ansible playbook to set this up but it was easy enough it wasn't worth the time.

services:fog

Anonymous (anonymous@undisclosed.example.com) — 2024-08-18T20:27:43+0000

FOG Summary FOG is in use in the Sepia lab. It enables us to reimage baremetal testnodes before every job. Our instance is currently hosted at . Username: fog Password: Standard root password How-Tos Adding a new distro The Jenkins job does this automatically now.

services:gitbuilders

Anonymous (anonymous@undisclosed.example.com) — 2018-04-06T18:35:41+0000

Gitbuilders - RETIRED Summary Gitbuilders were VMs (QEMU or LXC) typically found on the irvingi or senta nodes. They ran autobuild-ceph and were maintained using fabric. They're in the process of being phased out in favor of CI infra being built by Alfredo and Andrew so I won't go into a ton of detail on them.

services:ibmc_opensearch

Anonymous (anonymous@undisclosed.example.com) — 2025-11-11T12:45:16+0000

IBMC opensearch Centralized dashboard-based solution to analysis the teutholgoy runs. See The service running in container mode. Scheduler is the main service running the cron based solution to fetch the result from paddle and send the data to Opensearch.

services:longrunningcluster

Anonymous (anonymous@undisclosed.example.com) — 2024-08-23T00:36:12+0000

LONG_RUNNING_CLUSTER Summary A small subset of mira systems and all of the reesi and ivan systems are used in a permanent Ceph cluster. It is managed using cephadm. Here's a rundown of what this cluster stores * teuthology run logs * quay.ceph.io containers

services:nagios

Anonymous (anonymous@undisclosed.example.com) — 2022-06-29T17:25:58+0000

Nagios Summary We have a nagios instance at nagios.front.sepia.ceph.com. Alerts for testnodes are sent to ceph-infra AT redhat DOT com while alerts for production services are sent to dmick and dgalloway. Alfredo and Andrew also get alerts for the Jenkins CI stuff.

services:networking

Anonymous (anonymous@undisclosed.example.com) — 2021-06-03T03:21:42+0000

Networking Networks The Sepia internal LANs are divided up into four /20 networks (netmask 255.255.240.0) described below. front.sepia.ceph.com back.sepia.ceph.com ipmi.sepia.ceph.com Other

services:openvpn

Anonymous (anonymous@undisclosed.example.com) — 2020-10-27T19:22:52+0000

OpenVPN Summary Users access the sepia lab by tunnelling through an OpenVPN server run at gw.sepia.ceph.com. It's a Highly Available VM living in RHEV. Managed by Ansible using the gateway role in ceph-cm-ansible. The process for requesting lab access is documented here. Ops Tasks

services:paddles

Anonymous (anonymous@undisclosed.example.com) — 2023-08-21T22:20:39+0000

paddles Summary paddles is a very simple JSON-based API used to report teuthology test results. See The service runs on a baremetal host, pulpito.front.sepia.ceph.com, deployed via the ceph-cm-ansible role: It is operated by docker service: , utilizing replication, health checks, and automatic rollbacks.

services:pulpito

Anonymous (anonymous@undisclosed.example.com) — 2020-08-04T17:13:06+0000

pulpito Summary pulpito is a web interface/dashboard that displays teuthology job results. See The service runs on a baremetal host, pulpito.front.sepia.ceph.com from /home/ubuntu. It's also viewable publicly at pulpito.ceph.com via an nginx reverse proxy on gw.sepia.ceph.com.

services:quay.ceph.io

Anonymous (anonymous@undisclosed.example.com) — 2024-03-04T21:29:10+0000

quay.ceph.io Pulling from quay.ceph.io In Quay's web UI, in the “Pull this container with the following Podman command:” fields, you'll see commands like this: podman pull quay-quay-quay.apps.os.sepia.ceph.com/ceph-ci/ceph These will work just fine when connected to the Sepia VPN. A public endpoint is available at

services:rhev

Anonymous (anonymous@undisclosed.example.com) — 2024-08-23T00:41:49+0000

RHEV Summary We have have a RHEV instance running on hv{01..04} as the main hypervisor nodes. They're listed as Hosts in the RHEV Manager. Currently the RHEV Hosts installed version is 4.3.5-1 The RHEV Manager is a Self-Hosted VM inside the cluster. The username for logging in is

services:rook

Anonymous (anonymous@undisclosed.example.com) — 2020-12-09T18:07:19+0000

https://jenkins.rook.io Summary This is the rook Jenkins Jenkins instance used for building rook and running senity tests. hosted on AWS his slaves are created and terminated on every build. Access it using LDAP login credentials. Links Jenkins: AWS Dashboard:

services:rook_jenkins

Anonymous (anonymous@undisclosed.example.com) — 2026-02-11T15:49:01+0000

https://jenkins.rook.io [DEPRECATED] Summary This is the rook Jenkins Jenkins instance used for building rook and running senity tests. hosted on AWS his slaves are created and terminated on every build. Access it using LDAP login credentials. Links Jenkins:

services:satellite

Anonymous (anonymous@undisclosed.example.com) — 2023-11-30T19:57:24+0000

Satellite Summary We have a Red Hat Satellite server running on satellite.front.sepia.ceph.com which is a VM in RHEV. It is configured to sync repos daily. This allows us to subscribe RHEL testnodes to the Satellite to do upstream Ceph testing on RHEL.

services:sentry

Anonymous (anonymous@undisclosed.example.com) — 2021-05-03T14:46:14+0000

sentry This service was moved to a new VM in September 2020. Admin Tasks Reconfigure Sentry If you need to change a setting in the sentry config, ssh sentry.front.sepia.ceph.com sudo su - ubuntu cd sentry vim sentry/config.yml docker-compose down; docker-compose build; docker-compose up -d

services:signer

Anonymous (anonymous@undisclosed.example.com) — 2021-08-08T16:03:47+0000

signer.front.sepia.ceph.com It's used to sign packages and push to download.ceph.com using these scripts: Admin Tasks TBDocumented

services:vpshosts

Anonymous (anonymous@undisclosed.example.com) — 2017-08-15T22:46:05+0000

VPSHOSTS Summary VPSHOSTs are Miras we took out of the testpool to use as hypervisors for testing VMs. See the vps_hosts section of the ansible inventory to see which miras are used as VPSHOSTs. Or query the lock database teuthology-lock --brief -a | grep VPS.

services:wiki

Anonymous (anonymous@undisclosed.example.com) — 2017-08-02T22:26:01+0000

wiki Summary This wiki, running Dokuwiki lives on a VM in RHEV. You can now use Github OAuth to log in! Ask dgalloway, dmick, or zack to add you to the admin group to get full read/write access.