An tag for all tasks concerning automation of SRE tasks that are currently done manually (e.g. SSL, MediaWiki and extension upgrades, etc.)
Details
Aug 3 2023
May 29 2023
Please note that a similar task is currently being worked on by @Universal_Omega.
Apr 26 2023
Since there's already extensions with similar names, we should probably call ours MaintenanceScripts.
Apr 3 2023
Mar 30 2023
Noting that this would be done in a similar way to https://github.com/miraheze/DataDump/blob/master/includes/jobs/DataDumpGenerateJob.php but would require additional security
Mar 27 2023
Mar 18 2023
Mar 14 2023
https://github.com/Reception123/RequestSSL has been created based on ImportDump. Things that are required to make it operational
- Add a method so that $oldstatus and $newstatus is known in order for the updateManageWiki function to be executed only when the status is changed from something else to completed
- Implement logging (can be copied from ManageWiki) so that when RemoteWiki is executed it logs it as if someone had changed managewiki on wiki
- Fix issues with timestamp (might just be a problem with the SQL implemented on beta)
Due to limited knowledge on my part, it would be preferable if someone else had a go at this.
- Check if all i18n messages make sense (can be done by anyone) [DONE!]
Feb 10 2023
I wrote some scripts, and am currently doing mass renewals in batches a few times per day.
Feb 8 2023
Closing, since mirahezerenewssl works again (which this task is for) but it does seem all currently missed certs still need redone again.
Works now.
Hmm, an alert came in about 20 minutes ago, and a renewal should have happened but it didn’t which means there is still something going on. That above change was deployed.
Regarding the failure, I'm not sure ssl-acme failed, but rather the logging for mirahezerenewssl.py filled the disk space causing the entire process to fail. See https://github.com/miraheze/puppet/pull/3145
Man, robots extensions really are stealing our jobs volunteer positions. I have to ask though, what's so bad about SSH? It's more secure than regular web browsers, at least in my opinion.
My script won't work for the new version of ssl-certificate, but should be able to make a new one for it.
I think @Universal_Omega might have had a script or some way to do this. What I'd recommend is now that we have this opportunity to manually renew is to separate renewals so that next time they don't all attempt to be renewed in the same day (so a batch tomorrow, a batch Friday, etc.)
Feb 1 2023
Just so we don't forget, the current idea would be to try using https://github.com/wikimedia/acme-chief and have an API backend for ManageWiki with the web app being MediaWiki.
Jan 20 2023
Jan 2 2023
Dec 15 2022
While this hasn't been fully tested yet here is my not-so-perfect version of step 3 which I unfortunately didn't integrate into the ssl-certificate script due to lack of knowledge on how to do so properly and not wanting to make things too messy. Here is the current script that can be used in the meantime (not 100% sure if DNS works yet): https://phabricator.miraheze.org/P474 and hopefully be integrated into the main one soon so that step 4 can follow.
Nov 26 2022
Nov 11 2022
Nov 10 2022
Sep 19 2022
Per T8691#197415 and the same goes for that. If it reliably comes back online, this task should be reopened. Thank you!
For now, declining, it should be reopened if WikiApiary ever comes back online, reliably. Thank you!
Sep 14 2022
At the last month, Mark A. Hershberger said:
I recently re-deployed the WikiApiary site, so we're in the process of ensuring it is correctly set up.
On second thought I will leave this open for a bit longer, feel free to decline it yourself if you think it should be, but otherwise for at least a few more weeks, we can wait if you want.
I am going to go ahead and mark this as declined since WikiApiary has been down off and on for months, if it comes back online, and reliable, this can definitely be reopened. Thanks!
Sep 12 2022
FYI: WikiApiary.com appears down https://phabricator.wikimedia.org/T304558
I don't forget this but there is no significant progress. My last work is here: https://gitlab.com/mwbot-rs/contrib/-/merge_requests/2
Any progress on this?
Jul 4 2022
_construct_l10n_command was added with https://github.com/miraheze/puppet/pull/2456/commits/ef8aaa8cf37f335dfa64f4fbb3588bd802626202 and will be merged with v4
Jun 18 2022
I also created https://www.mediawiki.org/wiki/Extension:ImportDump about a week ago. It needs a bit better documentation but about as much as our other extensions for now. I'll improve it later.