Files
doc/ks2/decommission.md
T
Julien LutranandClaude Fable 5 79ad1b7179 Document the ks2 decommission plan and the new ks4 backup legs
- ks2/: decommission plan with release gates (rental ends Sep 30),
  nuc-seed and final-decommission runbooks
- ks4/local-backup-cron.md: leg-1 cron re-enabled, ks2 rsync stopgap,
  full-resend caveat when refreshes lapse past snapshots.expiry
- ks4/plakar-s3-data.md: plakar direct-to-S3 leg (auto-discovered DB
  dumps incl. grants/globals, fs sources, exclude list, restore test)
- ks4/plakar-incus-integration.md: design + scaffold status of the
  plakar incus importer
- README.md: index ks2/, update the ks4 durability bullet

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-08-23 08:56:28 +02:00

2.2 KiB

ks2 decommission — final checklist

Status: prepared — execute only when every gate in plan.md is ticked. Rental ends Sep 30, 2026; leave a few days of margin.

Preconditions (the plan's release gates)

  • plakar S3 leg running nightly for ≥ a week, done (rc=0), restore test passed (plakar-s3-data.md §7)
  • nuc pull leg seeded and one instance test-restored (nuc-seed.md)
  • local leg (sdb5) cron green in /var/log/incus-copy.log

1. Cut the last flows to ks2 (root on ks4)

crontab -e   # delete the 04:00 incus-backup.sh line (164.132.173.57)
incus remote list                 # if a "ks2" remote is still defined:
incus remote remove ks2
# drop the rsyncbackup SSH key if it exists only for ks2:
ls /root/.ssh/id_rsyncbackup* && rm -i /root/.ssh/id_rsyncbackup*

2. Last look at ks2 before wiping (root on ks2)

# anything in the rsync tree newer than the plakar cutover?
find /backup/ns3061243 -newermt '2026-08-23' | head
# pre-2023 dirs (catc, mythoughts, qcm, scripts): instances still
# exist stopped on ks4 — spot-check nothing unique remains:
ls /backup/ns3061243/{catc,mythoughts,qcm,scripts}

Archive anything unique to the plakar dump dir on ks4 (it rides the nightly dumps snapshot to S3 for free once it stops changing).

3. Wipe and terminate

# on ks2 — destroy the data (both pools hold copies of personal data):
zpool destroy backup && zpool destroy data
# optional: shred the OS disks via OVH rescue mode / reinstall

Then in the OVH manager: cancel the ks2 (Kimsufi) server before the renewal date.

4. Post-mortem cleanup

  • Update doc/README.md: remove ks2 from the ks4 durability bullet and the index line for ks2/s "being decommissioned" wording (keep the folder as history)
  • Retire scripts/incus-backup.sh + incus-backup.db in the repo (superseded by scripts/plakar-backup.sh) — keep for reference, note the retirement in their headers
  • login container cleanup parked in plakar-s3-data.md: dropdb outline, remove native postgres
  • Mark the ks2 line in plan.md done, date it