Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Playbook stalls when switching from SSH-over-Tor to SSH-over-LAN. #4779

Closed
zenmonkeykstop opened this issue Sep 10, 2019 · 1 comment · Fixed by #4794
Closed

Playbook stalls when switching from SSH-over-Tor to SSH-over-LAN. #4779

zenmonkeykstop opened this issue Sep 10, 2019 · 1 comment · Fixed by #4794
Labels
QA: Release release blocker
Projects
SecureDrop Team Board
Milestone
1.0.0

Comments

@zenmonkeykstop
Copy link
Contributor

zenmonkeykstop commented Sep 10, 2019 •
edited

Description

During the 1.0.0-rc2 QA case:

- [ ] Now disable SSH over Tor, rerun `securedrop-admin install` and `./securedrop-admin tailsconfig`:

The install playbook stalls on the task "Force a reboot conditionally, when tor_over_ssh status changed". The reboot happens, but afterward the servers are still accessible over Tor and not via Direct IP.

Steps to Reproduce

  • installed a v2 production system
  • enabled v2+v3 via a second ./securedrop-admin install
  • disabled ssh-over-tor via sdconfig and a third install

Expected Behavior

install completes successfully and servers are available via direct IP after tailsconfig has run.

Actual Behavior

  • install stalls at task mentioned above.
  • if admin runs install a second time, SSH-over-Tor is also disabled, locking them out of the servers (because the listen address for sshd changes and the ssh/sshv3 hidden services are not added in sshd_config and torrc respectively.)
@zenmonkeykstop zenmonkeykstop added this to the 1.0.0 milestone Sep 10, 2019
@eloquence eloquence added this to SD 1.0.0 Release Sprint - 9/4-/9/18 in SecureDrop Team Board Sep 10, 2019
@eloquence eloquence moved this from SD 1.0.0 Release Sprint - 9/4-/9/18 to In Development in SecureDrop Team Board Sep 10, 2019
@eloquence eloquence assigned rmol and unassigned rmol Sep 10, 2019
@emkll emkll mentioned this issue Sep 11, 2019
Merged
9 tasks
@zenmonkeykstop zenmonkeykstop mentioned this issue Sep 11, 2019
Closed
23 tasks
@emkll
Copy link
Contributor

emkll commented Sep 11, 2019

I believe this is fixed in #4794, due the changes to the reboot task

SecureDrop Team Board automation moved this from In Development to Done Sep 11, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
QA: Release release blocker
Projects
No open projects
SecureDrop Team Board
Done
Milestone
1.0.0
Development

Successfully merging a pull request may close this issue.

Remove v3 onion secrets when transitioning to ssh over local freedomofpress/securedrop
3 participants
@zenmonkeykstop @emkll @rmol