SPICE | MAPA Maintenence Procedure - UMCST/SPICE-user-info GitHub Wiki

To begin work on anything physical on MAPA, for example changing out the power supply, it first must be powered off. Powering off MAPA will also disable the Admin VPN, because of this you will need to warn users in advance when you are powering MAPA down as well as give a time-frame of how long it will take. To begin you will need to be physically present with MAPA.

  1. You will begin by plugging Nutmeg 06 into the attached ethernet cable labeled (TO NUTMEG FOR PATCHING) into Nutmeg 06
  2. Plug the other end of the ethernet cable labeled (TO CINNAMON FOR PATCHING) into one of the ports on VLAN 40
  3. Log into vSphere on the nutmeg with the address vcenter0.dcp.spicelab.org using your spice credentials
  4. Connect to an ssh session on juniper using the same workstation with the spiceadmin credentials
  5. Verify no users are connected to the Admin vpn using the (wg show)command and verify no one has made a handshake in past 30 minutes
  6. Verify no users are connected to Juniper using the (w) and (who) to verify no one is connected to the jump box
  7. Powerdown non essential Virtual Machines, everything but DNS0 and MAPA-VPN0, for example GNN-guac using Shut Down Guest OS on vSphere
  8. Powerdown the jumpbox using the command (sudo shutdown now) command
  9. Powerdown the MAPA-VPN0 guest using Shut Down Guest OS power setting on vSphere
  10. Powerdown the DNS0 guest using the Shut Down Guest OS power setting on vSPhere
  11. Put Cinnamon in maintentce mode right clicking its entry and entering maintence mode
  12. Power down Cinnamon using the vSphere client shut down host and provide a reason for your shut down
  13. Contact Ben to put the gateway in maintenance mode
  14. Complete your work on MAPA
  15. Power on GW1 and CS2
  16. Power Cinnamon on and connect to vSphere using cinnamons ip (192.168.20.50) using the spiceadmin login
  17. Take Cinnamon out of maintenance mode by right clicking host at the top left
  18. Power DNS0 and verify that it works by re-connecting to vSphere using its host name, this might take some time give it 5 or so minutes
  19. Power on MAPA-VPN0 and verify the admin vpn works by reconnecting to the admin vpn, logging into wasabi and running the (sudo wg show) command
  20. Reconnect nutmeg to the previous ethernet cable
  21. Send out an announcement that you have completed your work on MAPA!
  22. ????
  23. Profit

The most important services running on MAPA are the admin VPN aswell as the DNS server for MAPA