TODO: 1. Add dev (staging) ssh keys to authorized_keys for the following users on preproduction-stage: cltbld ffxbld symbols(cltbld key) trybld xrbld I appended the corresponding keys from staging-stage to /N/production/centos5-i686/stage/local/home/*/.ssh/authorized_keys on production-puppet and synced them to scl and mv puppet servers. 2. Ask IT to add ffxbld_dsa.pub key to prepr-ffxbld account on hg.m.o 3. Sync slave list in build/builbot-configs/mozilla/{preproduction,staging}_config.py. Moving the list to a separate file and importing it would be a problem, because the config files are being execfiled by automation. 4. Replace ssh keys on old preproduction slaves (*slave10*) 5. Remove old keys from authorized_keys. Anything else?

> 2. Ask IT to add ffxbld_dsa.pub key to prepr-ffxbld account on hg.m.o Bug 650226

Arguably, staging_config.py should be empty by default, and folks setting up a dev environment should add the slaves they grab to it locally. That will make the sync easier. Do we need to add more sendchanges to the preproduction masters? I don't see a lot of activity on the (now much larger) pool of preproduction slaves.

> 4. Replace ssh keys on old preproduction slaves (*slave10*) # copied dev keys to my laptop rsync -a linux64-ix-slave02.build.mozilla.org:.ssh/ .ssh_dev/ for h in moz2-darwin10-slave10 moz2-darwin9-slave10 moz2-linux-slave10 moz2-linux64-slave10; do ssh $h.build.mozilla.org rsync -a .ssh/ .ssh_pp/ rsync -a .ssh_dev/ $h.build.mozilla.org:.ssh/ done

(In reply to comment #0) > 3. Sync slave list in > build/builbot-configs/mozilla/{preproduction,staging}_config.py. Moving the > list to a separate file and importing it would be a problem, because the config > files are being execfiled by automation. "Somehow" they are already in sync :)

(In reply to comment #0) > 5. Remove old keys from authorized_keys. * Removed old keys from authorized_keys for the following users: cltbld ffxbld symbols trybld xrbld (/N/production/centos-i686/stage/local/home/$user/.ssh/authorized_keys) * Synced files to all puppet masters * preproduction-stage got the files All done here!