Skip to content

Decommission

⚠ This process is changing because of TPA-RFC-73: Tails infra merge roadmap and this page is being updated meanwhile.

To decommission a host, one should in general follow TPA's retire a host procedure. But, because Tails VMs are Libvirt guests (instead of Ganeti instances) and their backups are based on Borg (instead of Bacula), some parts of the retirement procedure are different:

  • The fabric task that should be used is puppet.retire, for example:

    fab -H pauli.torproject.org puppet.retire --instance bittorrent.lizard
    
  • Consider deleting backups

    If you decide to delete backups, see "Deleting backups of a decommissioned system" in Backups.

  • Delete the VM definition in libvirt.

    For example, for a VM hosted on mtl-libvirt-01.tails.net, run:

      ssh mtl-libvirt-01.tails.net virsh undefine "${HOSTNAME:?}"
    
  • Delete the storage volumes formerly used by this VM.