EC2

From Kautepedia
Jump to navigation Jump to search

Background[edit | edit source]

This page outlines some info about our use of EC2 instances.

Active instances[edit | edit source]

mediawiki i-0209038e1d6c87347[edit | edit source]

Serves mediawiki instance at https://wiki.kautepasifika.com/mediawiki/

superset-public i-04f3784257d9d9c89[edit | edit source]

Interim host for KPT Superset.[1]

Currently at http://ec2-13-210-78-199.ap-southeast-2.compute.amazonaws.com:8088/

bastion host i-03e24808113ccd8fa[edit | edit source]

Bastion host for RDS access.

OS & configuration[edit | edit source]

superset-public and bastion host are running Ubuntu 24.04.2 LTS.[2]

<mediawiki> currently runs Ubuntu 22.04.5 LTS, which has standard LTS support until June 2027. OS upgrade to 24.04.2 LTS should be scheduled in good time.

Maintenance[edit | edit source]

Instances are subject to a few automated jobs.

Uptime[edit | edit source]

Instance uptime is managed by AWS Systems Manager on a schedule. Instance bastion host is not currently in scope of this due to its use during business hours (db access for query/dev) and out of hours (ETL/ingestion jobs).

Updates[edit | edit source]

System updates are automated using unattended-upgrades.

A modified file is created at /etc/apt/apt.conf.d/52unattended-upgrades-local and contains the following entries:

// Automatically reboot *WITHOUT CONFIRMATION* if
//  the file /var/run/reboot-required is found after the upgrade
Unattended-Upgrade::Automatic-Reboot "true";

// Automatically reboot even if there are users currently logged in
// when Unattended-Upgrade::Automatic-Reboot is set to true
Unattended-Upgrade::Automatic-Reboot-WithUsers "true";

// If automatic reboot is enabled and needed, reboot at the specific
// time instead of immediately
//  Default: "now"
Unattended-Upgrade::Automatic-Reboot-Time "13:00";

The above permits automated reboot where necessary, and will occur at 13:00 UTC.

Instance bastion host has Automatic-Reboot-Time 0800 due to its use in overnight ETL/ingestion jobs.

References[edit | edit source]

  1. To be moved to production using EKS/Fargate pending approval.
  2. Standard support until June 2029.