Scheduled - On Tuesday 2021-05-04 between 6 to 8 am UTC, we are going to switch the next batch of clusters to our upgraded server infrastructure, as announced in our recent blog post on https://www.freistil.it/infrastructure-wide-os-upgrades/.

In this batch, we're going to upgrade the following clusters:

- c53
- c63
- c74
- c80
- c86
- c93
- c96
- c99
- c104
- c113
- c114
- c116
- c119
- c137
- c146
- c151
- c153
- c158
- c163
- c167
- c172
- c173
- c182
- c189
- c190
- c191
- c192

During this maintenance window, we will deactivate all cron jobs on these clusters, then switch to the new infrastructure, and finally reactivate cron jobs. We don't expect this change to affect website uptime.

We will not transfer any contents of user home directories between the old and new shell boxes. For that reason, please back up all files stored in user home directories on your cluster's shell box that you will need in the future in advance of this maintenance. You can either download them or move them into the cluster's shared storage.

This change will not require any DNS changes for your websites.

However, please note that IP addresses of the individual boxes (Varnish, memcached, web application and shell) making up your cluster are going to change. Should you rely on individual IP addresses to access these services, we urge you to instead use the configuration snippets we provide and keep updated for you.

The only change that you are going to notice for sure is the changed SSH host key for the new shell box. Your SSH client will display an error message similar to this:

-------✂--------✂--------✂--------✂---------✂--------✂--------✂--------

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that a host key has just been changed.
The fingerprint for the RSA key sent by the remote host is
e5:72:51:dc:9e:19:37:fb:26:2c:2f:8a:09:02:e5:e4.
Please contact your system administrator.
Add correct host key in /Users/username/.ssh/known_hosts to get rid of this message.
Offending RSA key in /Users/username/known_hosts:1
remove with: ssh-keygen -f "/Users/username/.ssh/known_hosts" -R c61s.freistilbox.net
Password authentication is disabled to avoid man-in-the-middle attacks.
Keyboard-interactive authentication is disabled to avoid man-in-the-middle attacks.

-------✂--------✂--------✂--------✂---------✂--------✂--------✂--------

Simply remove the conflicting old host key. In the terminal, you can do this via `ssh-keygen -R `. The new key will be stored once you approve it at your next login.

We will notify you of the completed maintenance under this maintenance announcement. Once we're done, please take a minute to make sure the changes did not affect your website operation.

----

If you have any questions or want to make special arrangements for your cluster upgrade, feel free to get in touch with us via the freistilbox dashboard. We're here to help!

----

Documentation links:
Shared storage: https://docs.freistilbox.com/how_it_works/filesystem/#shared-storage
Configuration snippets: https://docs.freistilbox.com/how_it_works/includes/
Apr 26, 15:48 UTC