On Wed, 2018-12-12 at 14:39 +0100, Derk-Jan Hartman wrote: (and those Quick grep for "MediaWiki:Wikiminiatlas" in gadgets across sites lists 209 matches. (A good number might be wrapped in 'if' clauses though or could be false positives.) https://phabricator.wikimedia.org/P7911 Problem might welcome a heads-up on technical village pumps to reach a broader audience (and reduce surprise if this wasn't working anymore)? andre -- Andre Klapper | Bugwrangler / Developer Advocate https://blogs.gnome.org/aklapper/ _______________________________________________ Wikitech-l mailing list Wikitech-l(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l

On Thu, Dec 13, 2018 at 9:24 AM Derk-Jan Hartman < d.j.hartman+wmf_ml(a)gmail.com&gt; wrote: "Hey folks, this might not work in the future" could be reason enough to include it in Tech News, yes.

I have some free time this December and I could manually create the new vm's and replicate the configs/installs by hand on newly created Ubuntu 18 vm's ( after figuring out how the old ones are installed and configured and if given access, of course .. ). Keep in mind that I'm new to wikimedia and don't know much about the infrastructure or procedures, so what do I need to do to be given access and volunteer to do this? alexander(a)vassilevski.com ‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ On Thursday, 13 December 2018 12:09, Johan Jönsson &lt;jjonsson(a)wikimedia.org&gt; wrote: maybe Tech to --------------------------------------------------------------------------------------------------------------------------- _______________________________________________ Wikitech-l mailing list Wikitech-l(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Hi Alexander,

I haven't forgotten about your request... Please don't take this the wrong way, but lately there has been quite a LOT of malicious activity at several Wikimedia systems and your account is brand new.. I can't find any history of your activity with the projects or any other projects in any public form... Especially in light of the recent event-stream compromise for instance (https://medium.com/intrinsic/compromised-npm-package-event-stream-d47d08605…), I think it is wise of us to be extra careful and take some more time to make sure your enthusiasm is exactly what it is pure enthousiasme to become part of this. But at this time that makes me uncomfortable to give you access to this set of servers as one of them is actually rather critical and could allow a person to do a lot of potential harm to Wikimedians. It is sad that we have to consider these kinds of things nowadays. I'm considering how we should approach this and how I can gain enough confidence to help you along.

DJ

On Fri, Dec 14, 2018 at 7:50 PM Alexander Vassilevski &lt;alexander(a)vassilevski.com&gt; wrote:

> OK. Thanks for letting me know that. It looks like I've been declined but at least I'm getting some idea on how things work around here... >

> alexander(a)vassilevski.com >

> ‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ > On Friday, 14 December 2018 10:35, Brian Wolff &lt;bawolff(a)gmail.com&gt; wrote: >

> > That is the process for getting shell access on production [e.g. servees directly running Wikipedia]. Which is rather different (and much harder) than getting access to an abandoned tool. > > > > -- > > brian > > > > On Friday, December 14, 2018, Alexander Vassilevski &lt;alexander(a)vassilevski.com&gt; wrote: > >> I created a task in phab to be added to NDA ldap, so I can sign the NDA and get shell access: > >> https://phabricator.wikimedia.org/T211996 > >> One of the subtasks (from https://wikitech.wikimedia.org/wiki/Volunteer_NDA#Privileged_LDAP_or_shell_… ) on this is to get > >> > >> [ ] At least one comment of support from a Wikimedia Foundation employee, explaining why it is a good idea to accept your request > >> [ ] A comment of approval from one Wikimedia Foundation manager (usually the manager of an employee supporting you). > >> [ ] (Have someone with access double-check which mediawiki.org account that the manager's Phabricator account is linked to, where the SUL account was created, and how it was created on that wiki.) > >> > >> Can someone do this? If you need to see some qualifications I can try to get some code of  mine to you from some old puppet stuff I've done and I can show you my github, where you can see some of my code. > >> If I'm making a rookie mistake here and this type of access is not needed, let me know. I'm also sasheto +i on IRC #wikimedia-tech, so you can message me there too, I check it from time to time. > >> alexander(a)vassilevski.com > >> > >> ‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ > >> On Thursday, 13 December 2018 12:33, Alex Monk &lt;krenair(a)gmail.com&gt; wrote: > >> > >>> You'll basically need to create a wikitech account (if you don't already have one) and convince one of the existing project admins (listed at https://tools.wmflabs.org/openstack-browser/project/maps) to add you. > >>> Please use Puppet instead of manually setting up servers by hand. > >>> > >>> On Thu, 13 Dec 2018 at 20:21, Alexander Vassilevski &lt;alexander(a)vassilevski.com&gt; wrote: > >>> > >>>> I have some free time this December and I could manually create the new vm's and replicate the configs/installs by hand on newly created Ubuntu 18 vm's ( after figuring out how the old ones are installed and configured and if given access, of course .. ). > >>>> > >>>> Keep in mind that I'm new to wikimedia and don't know much about the infrastructure or procedures, so what do I need to do to be given access and volunteer to do this? > >>>> > >>>> alexander(a)vassilevski.com > >>>> > >>>> ‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ > >>>> On Thursday, 13 December 2018 12:09, Johan Jönsson &lt;jjonsson(a)wikimedia.org&gt; wrote: > >>>> > >>>>> On Thu, Dec 13, 2018 at 9:36 AM Johan Jönsson jjonsson(a)wikimedia.org > >>>>> wrote: > >>>>> > >>>>> > On Thu, Dec 13, 2018 at 9:24 AM Derk-Jan Hartman < > >>>>> > [[d.j.hartman+wmf_ml@gmail.com](mailto:d.j.hartman%2Bwmf_ml@gmail.com)](mailto:[d.j.hartman%2Bwmf_ml@gmail.com](mailto:d.j.hartman%252Bwmf_ml@gmail.com))> wrote: > >>>>> > > >>>>> > > Yeah might be wise to at least reach out to en.wp and de.wp. Or maybe Tech > >>>>> > > News even ? > >>>>> > > >>>>> > "Hey folks, this might not work in the future" could be reason enough to > >>>>> > include it in Tech News, yes. > >>>>> > >>>>> Included inhttps://meta.wikimedia.org/wiki/Tech/News/2018/51 which is > >>>>> going out to the wikis on Monday. > >>>>> > >>>>> //Johan Jönsson > >>>>> > >>>>> --------------------------------------------------------------------------------------------------------------------------- > >>>>> > >>>>> Wikitech-l mailing list > >>>>> Wikitech-l(a)lists.wikimedia.org > >>>>> https://lists.wikimedia.org/mailman/listinfo/wikitech-l > >>>> > >>>> _______________________________________________ > >>>> Wikitech-l mailing list > >>>> Wikitech-l(a)lists.wikimedia.org > >>>> https://lists.wikimedia.org/mailman/listinfo/wikitech-l > >> _______________________________________________ > >> Wikitech-l mailing list > >> Wikitech-l(a)lists.wikimedia.org > >> https://lists.wikimedia.org/mailman/listinfo/wikitech-l > _______________________________________________ > Wikitech-l mailing list > Wikitech-l(a)lists.wikimedia.org > https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Hi DJ, Out of curiosity, what all would be involved in the OS change? The bike layers could be a nontrivial loss for some folks. If no regular WMF staff are available for the OS changes and ongoing maintenance, and if the use of bike lanes (or other features) is significant in the opinion of the community, then I think that WMF contractor time should be an option for the changes and maintenance, although I would like to know how much that would cost before supporting that option, along with how strongly bike lanes (and other features supported by these servers) are wanted by the community. If the community has no strong feelings regarding the loss of these features and the contactor time would cost $30,000 in the first year then maybe the loss of these features is acceptable, but if there is significant community desire to maintain these features and the contractor time would cost $1,000 in the first year then I would probably support spending the money for contractor time for at least one year of additional service while WMF tries to recruit volunteers for future years. In the context of a $100 million annual budget, I am fairly confident that WMF could find $1,000 for an additional year of service. On Wed, Dec 12, 2018, 5:39 AM Derk-Jan Hartman < d.j.hartman+wmf_ml(a)gmail.com&gt; wrote: those I of -- Pine ( https://meta.wikimedia.org/wiki/User:Pine ) _______________________________________________ Wikitech-l mailing list Wikitech-l(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l

On Thu, 2018-12-13 at 07:46 -0800, Pine W wrote: See https://wikitech.wikimedia.org/wiki/News/Trusty_deprecation Cheers, andre -- Andre Klapper | Bugwrangler / Developer Advocate https://blogs.gnome.org/aklapper/ _______________________________________________ Wikitech-l mailing list Wikitech-l(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l