[Labs-l] Bots project is too permissive, let's discuss options

[Damian Zaremba]

On 15/12/2012 00:29, Ryan Lane wrote:
> This really sucks. I think it's time we started a more formalized bots 
> project.
>
> Petr mentioned that we should likely keep the current bots project 
> as-is as a development project for bots, then have a bots-production 
> project that's locked down. In bots-production no one would have root, 
> and bots would be deployed to the instances.
>
> I've been writing a new deployment system for production. We may be 
> able to use it for this as well. It uses git, which means all bots 
> would need to be in a git repo, likely in gerrit. We could deploy all 
> bot code to all instances, and have configuration for which instances 
> bots run on.
>
> We really need to start pulling together a list of requirements for 
> bots. I think we have a puppet manifest that Damian has been working 
> on, which should be a good starting point.
>
> Does this sound like a good plan? Anyone have alternative ideas?
>
> - Ryan
>
Puppet stuff is @ https://gerrit.wikimedia.org/r/#/c/26441/ and seems to 
work. Main problem is we need to decide what we're supporting at the 
base (crond,git,mysql,apache, etc) and what should go in bot specific 
requirements.