Portal:Cloud VPS/Admin/Runbooks/LabstoreSlowGetent

Cloud VPS

• Cloud VPS technical documentation
• Cloud Services, Cloud VPS, and Toolforge overview
• Cloud VPS project
• Cloud VPS user roles and rights
• Help and communication
• Glossary
• Technical documentation resources

Instances and access

• Set up a Cloud VPS Instance
• Set up a Cloud VPS Instance using MediaWiki-Vagrant
• Set up a Cloud VPS Instance using LAMP stack
• Access Cloud Services Instances
• Access Cloud Services Instances with PuTTY and WinSCP

Security and policies

• Security groups and firewall settings
• Configure sudo policies
• Server groups

Horizon, proxies and puppet

• About Horizon
• Manage floating IP addresses
• Proxy to reach Cloud VPS server
• Puppet on Cloud VPS
• Standalone puppetmaster

Additional documentation

• Resize root partition
• Adding Disk Space to Cloud VPS instances
• Development recommendations for easily moving to production

Programmatic usage

• OpenStack APIs
• Terraform

Administration

• Cloud VPS infrastructure
• Administrator documentation
• Administrator runbooks

[]

Overview

The procedures in this runbook require admin permissions to complete.

Error / Incident

Getent (querying for a user on ldap) was too slow or failed completely from one of the labstore nodes.

LDAP is a core service used by many (toolforge, CloudVPS, dumps, ...) so this potentially means that all those could be unusable.

Debugging

You cant try sshing to the host with errors (might not work with you user if LDAP is completely down, you might to have to use root) and checking there the logs (journalctl).

You can try running the same command that the script uses, see if there's any logs:

/usr/bin/useldap /usr/bin/getent group tools.admin

TODO: Fill up with more debugging steps the next time this happens

Common issues

Add here any issues you encounter.

Related information

• Portal:Data_Services/Admin/Shared_storage for labstore and related general info.
• SRE/LDAP fol LDAP info.
• Portal:Cloud_VPS/Admin/Testing_deployment#LDAP for info specific to WMCS ldap on codfw.

Support contacts

Communication and support

Support and administration of the WMCS resources is provided by the Wikimedia Foundation Cloud Services team and Wikimedia Movement volunteers. Please reach out with questions and join the conversation:

Discuss and receive general support

• Chat in real time in the IRC channel #wikimedia-cloud ^connect, the bridged Telegram group, or the bridged Mattermost channel
• Discuss via email after you subscribed to the cloud@ mailing list

Receive mail announcements about critical changes

Subscribe to the cloud-announce@ mailing list (all messages are also mirrored to the cloud@ list)

Track work tasks and report bugs

Use a subproject of the #Cloud-Services Phabricator project to track confirmed bug reports and feature requests about the Cloud Services infrastructure itself

Learn about major near-term plans

Read the News wiki page

Read news and stories about Wikimedia Cloud Services

Read the Cloud Services Blog (for the broader Wikimedia movement, see the Wikimedia Technical Blog)

Old incidents

Provide a list of phabricator tasks of previous incidents to be able to more review previous instances of the issue.