Thanks for your patience. So I couldn't figure out how to do it from Horizons, so I ssh'ed to the instance and
vagrant roles enable lockdown vagrant provision
and that seemed to have worked.
I don't know if that is the right way to do it, but hey, that's where I am.
Now I can go and delete the Spammers, and then I can try to figure out how to do the whole OAuth thing. Step-by-step.
Apologies for my frequent emails.
Thank you, Denny
On Wed, Apr 21, 2021 at 5:10 PM Denny Vrandečić dvrandecic@wikimedia.org wrote:
I logged in to the instance, and ran puppet agent --test --verbose, and I get the following error message:
*Error: Could not retrieve catalog from remote server: Error 500 on SERVER: Server Error: Could not find class role::lockdown for annotate-wiki.annotation.eqiad1.wikimedia.cloud on node annotate-wiki.annotation.eqiad1.wikimedia.cloud*
I also used codesearch to search for any other use of lockdown in the Puppet files, I am probably addressing the role wrong, but I couldn't find any other example of usage besides mine (and that's wrong)
On Wed, Apr 21, 2021 at 4:53 PM Denny Vrandečić dvrandecic@wikimedia.org wrote:
Thank you so much, Bryan!
So I followed
https://wikitech.wikimedia.org/wiki/Help:Puppet
(which describes a slightly different UX than what I see, in particular, there is nothing to browse but just an edit window) to add
role::lockdown
to my Puppet file. But that seems to have no effect on the Annotation wiki.
Here are my puppet role files:
https://gerrit.wikimedia.org/r/plugins/gitiles/cloud/instance-puppet/+/maste...
and, trying to repeat it on the instance, here:
https://gerrit.wikimedia.org/r/plugins/gitiles/cloud/instance-puppet/+/maste...
But my Wiki hasn't changed.
Is there an additional step required after editing the role file in Horizon? When using vagrant, I would need to provision that - but the Help:Puppet page above doesn't mention anything like that.
Thanks for your help! Denny
On Wed, Apr 21, 2021 at 12:09 PM Bryan Davis bd808@wikimedia.org wrote:
On Wed, Apr 21, 2021 at 1:05 PM Denny Vrandečić dvrandecic@wikimedia.org wrote:
Hi Alex,
thank you! Yes, you are absolutely right, that's what I would like to
try - but what I don't understand is where and how do I edit the LocalSettings for a MediaWiki instance provisioned on WMCloud via Vagrant?
https://www.mediawiki.org/wiki/MediaWiki-Vagrant#MediaWiki_settings
MediaWiki-Vagrant also has role::lockdown for the lockdown use case:
https://github.com/wikimedia/mediawiki-vagrant/blob/master/puppet/modules/ro...
Gergo may be able to tell you how he has setup https://wikispore.wmflabs.org/wiki/Main_Page with OAuth for account registration. I have a hunch that is also possible by adding the correct mw-vagrant role and settings.
Bryan
Bryan Davis Technical Engagement Wikimedia Foundation Principal Software Engineer Boise, ID USA [[m:User:BDavis_(WMF)]] irc: bd808
Wikimedia Cloud Services mailing list Cloud@lists.wikimedia.org (formerly labs-l@lists.wikimedia.org) https://lists.wikimedia.org/mailman/listinfo/cloud