branch master updated: hydra: bayfront: Use the new ns1.gnu.org IP address.

[Christopher Baines]

This is an automated email from the git hooks/post-receive script.

cbaines pushed a commit to branch master
in repository maintenance.

The following commit(s) were added to refs/heads/master by this push:
     new cd52cab  hydra: bayfront: Use the new ns1.gnu.org IP address.
cd52cab is described below

commit cd52cab28592c92b9fb244502bfd4c7c7660bb41
Author: Christopher Baines <mail@cbaines.net>
AuthorDate: Thu May 18 10:38:30 2023 +0100

    hydra: bayfront: Use the new ns1.gnu.org IP address.
    
    As announced on guix-sysadmin (06/05/23), in addition to the old
    one. This will enable the FSF sysadmins to migrate ns1 to the new IP.
    
    * hydra/bayfront.scm (gnu-ns1-ip4): Rename to gnu-ns1-ip4/old.
    (gnu-ns1-ip4/new): New variable.
    (operating-system)[services]: Change knot configuration to use both
    new and old nameserver remotes.
---
 hydra/bayfront.scm | 29 +++++++++++++++++++++--------
 1 file changed, 21 insertions(+), 8 deletions(-)

diff --git a/hydra/bayfront.scm b/hydra/bayfront.scm
index 99cf2c1..b5a6c18 100644
--- a/hydra/bayfront.scm
+++ b/hydra/bayfront.scm
@@ -109,10 +109,14 @@ Best practices:
 
 Happy hacking!\n"))
 
-(define gnu-ns1-ip4
-  ;; IPv4 address of "ns1.gnu.org".
+(define gnu-ns1-ip4/old
+  ;; Old IPv4 address of "ns1.gnu.org".
   "198.27.68.225")
 
+(define gnu-ns1-ip4/new
+  ;; New IPv4 address of "ns1.gnu.org".
+  "192.99.37.66")
+
 (define %build-node-keys
   ;; Signing keys of the build nodes.
   (list (local-file "keys/guix/harbourfront.guix.info-export.pub")
@@ -1049,20 +1053,29 @@ add_header Content-Type text/plain;")))
                             (journal-content ''all) ;XXX: needed for 
difference-no-serial
                             ;; (dnssec-policy "default")
                             (acl '("transfer-allow"
-                                   "gnu-transfer"))
-                            (notify '("gnu-master")))))
+                                   "gnu-transfer-old"
+                                   "gnu-transfer-new"))
+                            (notify '("gnu-master-old"
+                                      "gnu-master-new")))))
               (acls (list (knot-acl-configuration
                            (id "transfer-allow")
                            (address (list berlin-ip4))
                            (action '(transfer)))
                           (knot-acl-configuration
-                           (id "gnu-transfer")
-                           (address (list gnu-ns1-ip4))
+                           (id "gnu-transfer-old")
+                           (address (list gnu-ns1-ip4/old))
+                           (action '(transfer)))
+                          (knot-acl-configuration
+                           (id "gnu-transfer-new")
+                           (address (list gnu-ns1-ip4/new))
                            (action '(transfer)))))
 
               (remotes (list (knot-remote-configuration
-                              (id "gnu-master")
-                              (address (list gnu-ns1-ip4)))))))
+                              (id "gnu-master-old")
+                              (address (list gnu-ns1-ip4/old)))
+                             (knot-remote-configuration
+                              (id "gnu-master-new")
+                              (address (list gnu-ns1-ip4/new)))))))
 
     ;; Runnning hpc.guix.info.
     (simple-service 'guix-hpc-web-site