Thanks for your patience. So I couldn't figure out how to do it from Horizons, so I ssh'ed to the instance and

vagrant roles enable lockdown
vagrant provision

and that seemed to have worked.

I don't know if that is the right way to do it, but hey, that's where I am.

Now I can go and delete the Spammers, and then I can try to figure out how to do the whole OAuth thing. Step-by-step.

Apologies for my frequent emails.

Thank you,

On Wed, Apr 21, 2021 at 5:10 PM Denny Vrandečić <> wrote:
I logged in to the instance, and ran puppet agent --test --verbose, and I get the following error message:

Error: Could not retrieve catalog from remote server: Error 500 on SERVER: Server Error: Could not find class role::lockdown for on node

I also used codesearch to search for any other use of lockdown in the Puppet files, I am probably addressing the role wrong, but I couldn't find any other example of usage besides mine (and that's wrong)

On Wed, Apr 21, 2021 at 4:53 PM Denny Vrandečić <> wrote:
Thank you so much, Bryan!

So I followed

(which describes a slightly different UX than what I see, in particular, there is nothing to browse but just an edit window) to add 


to my Puppet file. But that seems to have no effect on the Annotation wiki.

Here are my puppet role files:

and, trying to repeat it on the instance, here:

But my Wiki hasn't changed.

Is there an additional step required after editing the role file in Horizon? When using vagrant, I would need to provision that - but the Help:Puppet page above doesn't mention anything like that.

Thanks for your help!

On Wed, Apr 21, 2021 at 12:09 PM Bryan Davis <> wrote:
On Wed, Apr 21, 2021 at 1:05 PM Denny Vrandečić
<> wrote:
> Hi Alex,
> thank you! Yes, you are absolutely right, that's what I would like to try - but what I don't understand is where and how do I edit the LocalSettings for a MediaWiki instance provisioned on WMCloud via Vagrant?

MediaWiki-Vagrant also has role::lockdown for the lockdown use case:

Gergo may be able to tell you how he has setup with OAuth for account
registration. I have a hunch that is also possible by adding the
correct mw-vagrant role and settings.

Bryan Davis              Technical Engagement      Wikimedia Foundation
Principal Software Engineer                               Boise, ID USA
[[m:User:BDavis_(WMF)]]                                      irc: bd808

Wikimedia Cloud Services mailing list (formerly