Changes to IP addresses used used for triggering archive and releases mirrors (Push mirroring)

[Haw Loeung]

Hi,

We would like to inform you of some upcoming changes which will
require changes for mirror administrators participating in push
mirroring. As you know, and documented on the Ubuntu Wiki[1], the IPs
used for triggering archive and releases syncing via SSH are as
follows:

| 91.189.92.172 for Ubuntu Archive
| 91.189.92.173 for Ubuntu Releases

We are in the process of deploying a new host for this and as such,
you will need to update your set up (firewall and SSH authorized_keys
file) to include the following new IPs:

| 91.189.88.154 for Ubuntu Archive
| 91.189.88.156 for Ubuntu Releases

Currently, per the Ubuntu Wiki[1], the SSH authorized_keys file
entries are as follows:

| no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty,command="~/archive-sync &",from="91.189.92.172" ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAt8xHRbCVFT3Uw/B+TavIlDYRoLMxOKlN3HnBeniFUJTto5Im52FbT3ODfMszz5/BIAnXBf1baWDljHErx4huohh9MxyovZ0h8GYCmMy7dZzsrV5eYhLXd2idCOKIl6gr0BTgTlJOKOgVEoZ2YtiU9MnNzRk3gkBeCMDJrnQOCC8Sko0F0RUJnrzLXOdtvDfNu7Ff+tRNb4PwrU3inbm2YJRnOoZI9vIsv/9DwsMm9d+YIIOz/7y5jLGhZ34nXzhmI6cJO92+Ve5ubhbbpKUFQAh2L1PP6A+I7jHvoWHToSaZlt+DCN4Kg+JlZuf2FXk8MeHkEc6qWWHQTFF8/ArKew== archvsync at syowa
| no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty,command="~/releases-sync &",from="91.189.92.173" ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA7l6nWM6Z2KfR4KmwF29Fv9nAgTLwHM5H/TWhinl7DZDG+Jn+TC9kll3cuyGByhwh/mNTwbyvsyiDSXFtbglowQoPSW4rhOEVy6s+/lDjDBGTDsgk8wyBqlNJRlppODsl+kqX0IqAIc3XJ9luDl894tD5rxhiXzqXL3c8r8CuhPkGdUCCMbWU4OUAIjIAs8DClYzjrAZ54IVbk5gTjDYUtlSLNXjm1rZ788h65waKBn4/LV+8nEaFIPA9FxPZI6VLmKGO/RQqZrLPNKOzotmkofV1jV2OmQNHzIwu2seV6HGYqZc3U9jE2+Eat86C6IMYS7KPxVoQd6AnHjRMlhyb6Q== archvsync at syowa

Please update them to the following (with additional IPs in the from=
config):

| no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty,command="~/archive-sync &",from="91.189.92.172,91.189.88.154" ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAt8xHRbCVFT3Uw/B+TavIlDYRoLMxOKlN3HnBeniFUJTto5Im52FbT3ODfMszz5/BIAnXBf1baWDljHErx4huohh9MxyovZ0h8GYCmMy7dZzsrV5eYhLXd2idCOKIl6gr0BTgTlJOKOgVEoZ2YtiU9MnNzRk3gkBeCMDJrnQOCC8Sko0F0RUJnrzLXOdtvDfNu7Ff+tRNb4PwrU3inbm2YJRnOoZI9vIsv/9DwsMm9d+YIIOz/7y5jLGhZ34nXzhmI6cJO92+Ve5ubhbbpKUFQAh2L1PP6A+I7jHvoWHToSaZlt+DCN4Kg+JlZuf2FXk8MeHkEc6qWWHQTFF8/ArKew== archvsync at syowa
| no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty,command="~/releases-sync &",from="91.189.92.173,91.189.88.156" ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA7l6nWM6Z2KfR4KmwF29Fv9nAgTLwHM5H/TWhinl7DZDG+Jn+TC9kll3cuyGByhwh/mNTwbyvsyiDSXFtbglowQoPSW4rhOEVy6s+/lDjDBGTDsgk8wyBqlNJRlppODsl+kqX0IqAIc3XJ9luDl894tD5rxhiXzqXL3c8r8CuhPkGdUCCMbWU4OUAIjIAs8DClYzjrAZ54IVbk5gTjDYUtlSLNXjm1rZ788h65waKBn4/LV+8nEaFIPA9FxPZI6VLmKGO/RQqZrLPNKOzotmkofV1jV2OmQNHzIwu2seV6HGYqZc3U9jE2+Eat86C6IMYS7KPxVoQd6AnHjRMlhyb6Q== archvsync at syowa

Also, update your firewall rules to allow SSH from these two new IPs.


Thanks,

Haw

[1]https://wiki.ubuntu.com/Mirrors/PushMirroring
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/ubuntu-mirrors-announce/attachments/20201214/c41b336c/attachment.sig>