|
Two such events come to mind.
One was an OS upgrade -- VOS (my candidate for The World's Worst Operating System) on a Stratus System 2000, circa 1994, this was (maybe still is) a system that processed student loan bills for like the whole country. We were upgrading (in order to support Ethernet! Whoo hoo!) and over a few months prior, many Consultants had checked out the existing system to ensure that everything would go smoothly, nothing would go wrong. I was tasked with performing the upgrade. The Boss had said to call him every two hours, or immediately if there was a problem.
On that fated Friday evening I entered the server room, performed a full backup, and began the upgrade. At the end of the upgrade a reboot (of course). Then nothing. Nothing? Just a blinking cursor on the terminus (VT-100 clone). Turn-it-off-turn-it-back-on, jiggle-the-connector. Nothing. Check the baud, bits, parity, etc. Nothing. Call the Boss. Couldn't even restore the backup without console access. Nothing. Call our friendly neighborhood Stratus tech who was also on-call. Tech arrives. Nothing. Calls others. Burns incense, etc. I don't know how they got it going again, but eventually, more than a day later, it was working just fine.
As I understand it, the previous version of VOS allowed the console to connect with 9600,8,N,1 (same as my cherished DEC systems), but the new version required that the console settings be set specifically in the startup script (WTF?!) -- our startup script didn't contain such a statement. Had this been detected by the consultants during the months of validation, one could have been added.
Without it, the system simply refused to communicate with the console. I don't know how they got it working, but I'll always remember the night I spent twenty-eight hours in the server room.
Two was an OS licensing boondoggle -- QNX on custom hardware (let's call them Point Of Sale Systems for simplicity), late 90s. We provided a bunch of hardware to a client. The hard drives had all been cloned, so they all had the same QNX license. We had a Big Box of Licenses (each on a 3.5" floppy) that had been purchased for the hardware, but expediency meant we shipped the systems as they were (in a working state) and we'd see about applying the licenses at some time later.
Later, I was tasked with providing a script to the tech who would take the Big Box of Licenses and apply them. I wrote the script, I tested the script, it worked just fine. Several times. In the lab. I shipped the Big Box of Licenses, script, and instructions to the tech and forgot about it.
Later, I got into work after spending New Years out in the desert. Not in pager range. Everyone's in an uproar. The tech had decided to try the script on New Year's Day. Nice, quiet, no one around, not much to do. He tried it on one system, it failed. He tried another, it failed. He tried a whole bunch of them, they all failed. The systems were left in non-working states. If you can imagine a large busy department store with no working cash registers, you can imagine the problem. (Why didn't he stop after the first two failures?)
Fortunately the problem was resolved by the time I got in, but I had to spend New Years 1999-2000 in the office.
|
|
|
|
|
We're about to deploy a major major upgrade to the new system.
I'm IT manager, and paranoid, so everything is being tested, tested, then tested again.
This involves using various test pre-deployment databases to run the various update scripts against, then doing a system test against the updated database.
There were a lot of database schema changes. A lot. Somewhat more of a conversion than an update in some cases.
And the Address table was particularly problematic -as we were introducing encoding using the Post Office's Unique Postal ID system - so as it converted the address to the new schema, it used the P.O. software to try to find the matching address.
The ones thrown out were being manually cleaned by a team of cannon fodder - then the conversion run again - we'd agreed not to do a final convert until we could get 95% hit rate.
A contractor was assigned the job of tweaking and testing the conversion.
Everything else was ready, and we still had 2 days before the rollout.
So there was a relaxed atmosphere.
I'm sitting, chatting to one of the devs, and I notice the contractor standing at the end of my desk. I finish the chat, turn to the contractor, who says "Maxxx. I just truncated the Address table"
"That's OK" quoth I, "it's just the pre-deployment database, we can recreate it easy enou.." That's when I noticed his head was shaking, slowly, from side to side.
"Production" he croaked.
That's when my phone rang. 150 phone operators had suddenly lost every address in the system.
During the next 48 hours the contractor, myself, and one of the contractors friends, managed (just) to restore the address table from a backup. Let me tell you, that was not in the least bit easy! And scary! Using undocumented features of Oracle.
After I had bought beers I suggested to the contractor that he might want to make the background colour of his Live vs Pre-Deployment windows a different shade - maybe FLASHING RED for the live database!
It's funny, but although at the time it was very stressful, looking back it was actually bloody good fun!
time is a great healer!
PooperPig - Coming Soon
|
|
|
|
|
When I read the first couple of lines, I thought this story was current... 
|
|
|
|
|
_Maxxx_ wrote: he might want to make the background colour of his Live vs Pre-Deployment windows a different shade
Reminds me of a time when a Dell sales manager came and bitched at me that my system was not storing his data, we implemented a 2cm bright orange border on all UAT forms after that. And I still do 15 years later!
Never underestimate the power of human stupidity
RAH
|
|
|
|
|
_Maxxx_ wrote: "Production" he croaked
Been there, done that.
That feeling of icy chill that goes down your back is one you never forget.
cheers
Chris Maunder
|
|
|
|
|
_Maxxx_ wrote: everything is being tested, tested, then tested again
In my experience, that's generally not worth the trouble. Something will always go wrong, fix it when it does and move on.
|
|
|
|
|
Ah Yes, different colors for different systems.
We had terminals and a switch box. I was working on Dev, ran out for a printout.
My tests were great, I entered the command to DELETE my test data.
The phones started ringing. I picked up, the ENTIRE list of GMAC Car loans were missing from Florida. Strange, I thought. That is the account I just deleted on Dev.
Let me turn my Switch box over to production Florida... Oh, strange, why is it ALREADY on Florida. OMG, run into bosses office, call emergency meeting. Contract operations, start the restore process from last night. Gather all work done for the day, and set aside to be re-processed. OMG, what a mistake.
Later, someone else killed Texas with the same command. I ultimately patched the operating systems so that command would FAIL on production, a strange version of the command would have to be used! Never happened again.
|
|
|
|
|
Yep, I trashed the Inspections system for a property management company once that way. And I had my systems color coded and everything.
I was at the tail end of a 32-hour shift, had just finished my God-only-knows-what-number cup of break-room coffee, and hit execute before I really had checked the command well. Only thing that saved me there was that I realized immediately what I had done and broke the backup-imaging process so I didn't lose the same tables in the backup system. Then copied the data back over and restored the process. Twelve minute outage, and enough adrenaline to light up a city block...
There are lies, there are damned lies and then there are statistics. But if you want to beat them all, you'll need to start running some aggregate queries...
|
|
|
|
|
It doesn't happened to me, but a mate from the office...
Those days we had no direct connection to customers so deployment involved going to the site physically...
We had a set of 18 1.44 floppy disks we were preparing for deployment.
My mate prepared the disks, took them and went home. At the morning he went on for a 3 hour driving to get to the customer, just to find, that the last floppy still in the PC at the office...
After some thinking over phone we send him to buy a modem (28.8 was the best back then), install it on one of the customers PCs and set up a connection to transfer the file...
After an other hour and half he had all the material at hand and with a 3 hours delay started the deployment...
And we got our ever first online customer!!!
Skipper: We'll fix it.
Alex: Fix it? How you gonna fix this?
Skipper: Grit, spit and a whole lotta duct tape.
|
|
|
|
|
What is until today still known as the "Ghent Crisis". A bug that creeped up after roll-out and eluded us on trying to reproduce it. There was a severe political deadline (and thus media attention upon failure). Me and my entire team of about 5 people had to go on site from 08:00-23:00 every day (including weekends) until the bug was fixed. My boss finally managed to reproduce the bug, but it still took us several days to fix it due to it's complexity.
At least we all got a small bonus for it. 
([EDIT]The entire crisis lasted for two weeks and we managed in not having a roll back.[/EDIT])
|
|
|
|
|
When you set up a retail banking system, it is imperative that you test ALL the posting possibilities of the General Ledger BEFORE deploying.
I was working at a rather large bank and we were going live with the new retail system. Friday night, unbeknown to us, the back office team in charge of config and data make an itsie teeny weeny change to one of the GL posting rules.
Data migration flew past over the weekend as it had been properly tested and we were good to go for Monday morning's go live.
Then.
Things.
Happened.
Luckily we had a couple of guys in branch to watch what was happening and we got a call that the first transactions where going through. So to be sure, we checked everything was going okay. Cash books - check, account balances - check, client [GL] accounts - check, bank's ledgers - FAARRRKKKK!!!!! what should be impossible - mismatched entries - where all over the GL. Feck, feck, feckity. We couldn't shut down to investigate, so a couple of poor sods from back office start manually entering corrections.
Then a bright spark asks "Where have the other postings gone? They have to be 'somewhere'?"
All the missing postings where found in a back drawer correction ledger and we had to manually back out all the earlier corrections and correct the original incorrect postings all while not knowing where the hell the mismatches where being generated from.
When the bad rule was found the guy who changed it was castigated some what. This then became a near standard feature of any roll out for them, at the eleventh hour someone would add in a little spice and it all go boom. 
|
|
|
|
|
Many years ago I worked for a company that had over a hundred Linux servers around the country running Progress DB and application. Each of these servers where connected by a dial up modem that we could also dial into (providing they were still plugged into the same phone line that we had installed them on). We needed to make a schema change to each of the DBs which were all identical.
We had no way of making such changes, although we did for code and data.
We came up with a script that could be deployed, pulled down by each server when it made a routine connection, and then run to make the schema change.
We tested it, it worked.
I released it at 6 o'clock on a Saturday morning when I was the only person in the office and sat back to watch the monitor software for signs of the change being successfully applied.
One by one the updates failed, then people started to phone up because they could no longer use their system.
I phoned up the big boss man, we had a quick chat, we worked out what had gone wrong and how to fix it.
The fix involved me dialing into each server, running a few commands against the DB, then starting it back up again.
In just over a hundred servers three applied the patch correctly.
By the time I had done fixing the rest I went to go home, locked up the warehouse I was in, set the alarm (I was the only person working in it on that Saturday), then went to leave the site. When I got to the gate I found them padlocked and the the site empty. I had to phone the big boss man back who made a few calls and found someone to come down with some bolt cutters to set me free.
There then followed a comprehensive review of the company's lone working procedures (of which there had been none before).
Some men are born mediocre, some men achieve mediocrity, and some men have mediocrity thrust upon them.
|
|
|
|
|
LOL, you can clock out anytime you want but you can never leave 
|
|
|
|
|
While it's not specifically related to software deployment, the first thought that came to my mind is that anyone in the business of launching satellites and people into space have truly the worst deployment stories.
Marc
|
|
|
|
|
Yeah. They win this game.
cheers
Chris Maunder
|
|
|
|
|
"Oh, you guys were using metric units?"
|
|
|
|
|
agolddog wrote: "Oh, you guys were using metric units?"
Yup. I remember that one.
Marc
|
|
|
|
|
In the last '80s, I was working for a company that was running two production systems on PDP 11/73's in a manufacturing environment. We had maxed out the memory and had code that would work in test, but not in production because of the memory issues.
The first system was product routing in the plant; the second was a storage system for receipt/delivery from/to the first system.
A project was created to rewrite the first system to run on a MicroVAX; similar technology, language, etc. The rewrite took a year with a team of people.
When implemented (and there was no go back, only go forward), it was discovered the code had not been complied with array bound check. It wasn't done in the old version because that would use to much memory and overlooked in the new system. Production ground to a halt for January and most of February. Changes had to be described on a paper form and signed off by on site support before being implemented.
The next year, the second system was rewritten with lessons learned. On implementation, around the clock support. Management asked when it was going to be installed; we said it was installed - two weeks ago. Much better.
I am a firm proponent to a post mortem on all projects; see what worked, what didn't and learn from it. No finger pointing, just learning.
Tim
|
|
|
|
|
Great Thread.
I love ghost stories.
|
|
|
|
|
But I dread failed Ghost stories
|
|
|
|
|
Oh, and not a deployment story, but...
There was a system I wrote that involved communication with a third-party product via a socket connection. I had a table in the database to contain all the messages to and from the socket. It quickly became rather large so I decided to trim it down a bit, something along the lines of DELETE FROM messages WHERE timestamp<amonthago in SSMS, and I sat there wondering when it would finish. Then the phone rang, it's the President of the Company, "the system is unresponsive, the call center is at a stand-still, are you doing anything that might be causing trouble?" Oops.  Try terminating the DELETE, no go.  Shut down my PC, reboot, get back into database, see that everything is working again.
I then wrote a feature that would delete a thousand messages then sleep and repeat until there were no more messages to delete. It took several days for the process to get the old messages cleaned out.
|
|
|
|
|
I've two that vie for worst ever:
First one was a server system upgrade. We were dropping in a new SAN, changing from the old switch to a iSCSI fabric and doing a major OS upgrade. All in the same night.
Why are you groaning?
My part was the (relatively) easy one; I had to make sure the databases were backed up and ready for shut down, wait for the rest of the team to do the physical changes in the colo facility, and then initiate the upgrade/rollout to 800 thin client machines throughout the building. The first part went just fine. The server techs pulled the plug on the switch...
And that is when the magic happened.
They hadn't actually bothered to shut down any of the servers before yanking the switch. We were in a 100% virtualized environment using vSphere and suddenly every server was basically disconnected simultaneously from the control systems. Our CPU on the servers red lined as the poor little VM's tried to figure out what had happened and fix it. Meanwhile, they're trying to dump stack traces and error logs to the database, to disk, to anywhere they can find a place... and nothing is responding. Of course, I have no idea this is happening, and the server techs are too busy trying to map a switch panel and replicate it in the fabric (I am not joking, they hadn't bothered to map this ahead of time) to notice.
Five hours later, the new fabric is in place and the team reconnects the servers. My monitoring systems are the first things back online and they suddenly flood with the best part of 400 GB of error data and stack dumps. It was like getting hit with the biggest DDoS I've ever seen. Everything was screaming for attention, the fabric was actually misconfigured (although we didn't know at the time) and was sending packets in a round-robin loop to non-existent addresses, and the databases, hit with error log write queries, slowed to a crawl.
It took 3 hours to sort it out. Reboot everything. Flush error logs to disk. Kill db threads. You name it. And all of this masked the fabric errors. So when our lead server tech left the colo, he headed straight for vacation. Two hours later, he was somewhere in the air with his cell phone off... and we found the misconfiguration issue when people started arriving for work.
The other one started as a relatively benign little program that ran questionnaires for our call center. Basically, it was a "ask these questions and route through the top 50 most common issues" type of program. Neat little thing. Anyway, we were asked to add a half-dozen additional scenarios to it, which we did. Tested. Retested. Deployed to the test bank. All good.
Our call center was 24-hour, but was split into three "banks," and usually only one would be in operation at a time. So, we planned the upgrade to banks 1 and 2 for 1830, and bank 3 at 0600 the next morning. Because of the nature of the business, all of these upgrades were getting pushed to the machines via central deployment script. We set it up. Sent it to the admins. They confirmed the script was ready. Everything good so far.
I asked my team to stay put for the 1830 rollout, because I've had deployments go pear-shaped in the past, but save for one brand-new (less than one year experience) developer, all of them had "other plans." I had no authority to force them to stay, so I watched them pack up and leave at 1700, leaving me and Newbie to watch the rollout. At 1805 I got a call from the call center supervisor. The system was down.
I logged on remotely to look at the problem. And then called the admin team. The dumb cluck that had set up the push schedule had put in 1800 and all three banks... And the version of the program that was sent for installation was the wrong one. The developer that had packaged it used the one on her local machine, NOT the one in source control. It was a debug version, and at least a week out of date. So, every system in the call center was locked out.
Newbie scrambled to repair the script with the source control version; I had to call the VP of operations to get permission to do an emergency deployment (yes, really), and we managed to rollout the new version with only an hour of downtime. The team meeting that next morning was not a happy one...
This one makes the list because when it happened, we had the big boss (company president) touring the call center. He was actually watching over the shoulder of one of the call center personnel when the system went down. Made for a whole new level of oops.
There are lies, there are damned lies and then there are statistics. But if you want to beat them all, you'll need to start running some aggregate queries...
|
|
|
|
|
My friend was on work experience from college with one of ireland's largest bank about a decade ago.
She was on night shift and was tired and deploying something and mistyped and accidentally shut down every ATM in the country.
Had to wait ages for them all to come back online again.
|
|
|
|
|
wasn't me. Thank goodness.
But at an organization I used to work at. A co-worker upgraded a SAN storage system. on a Tuesday. AFternoon,
Everything crashed.
Had he verified the backups nope, No backup. Everyone lost 3 months worth of work.
two weeks later SAN was finally up.
Not sure whatever became of co-worker. Never saw him again.
To err is human to really mess up you need a computer
|
|
|
|
|
I do a lot our deployments. I have a rule. Never trust anything built after 5pm, or after 3pm on Fridays.
|
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
