Grant Georg DocTor permissions

Hi lovely sysadmins. Our new network health team (and Georg in particular) are subsuming ownership of DocTor. This service only has a few resources...

• Git repository (https://gitweb.torproject.org/doctor.git/)
• Cron jobs hosted on carinatum
• tor-consensus-health@ email list

Could we please grant him permission to push and sudo as the doctor user?

Thanks!

added component::internal services/service - git owner::tor-gitadm priority::medium resolution::fixed severity::normal status::closed type::enhancement labels

Trac:
Description: Hi lovely sysadmins. Our new network health team (and Georg in particular) are subsuming ownership of DocTor. This service only has a couple resources...

• Git repository (https://gitweb.torproject.org/doctor.git/)
• Cron jobs hosted on carinatum

Could we please grant him permission to push and sudo as the doctor user?

Thanks!

to

Hi lovely sysadmins. Our new network health team (and Georg in particular) are subsuming ownership of DocTor. This service only has a few resources...

• Git repository (https://gitweb.torproject.org/doctor.git/)
• Cron jobs hosted on carinatum
• tor-consensus-health@ email list

Could we please grant him permission to push and sudo as the doctor user?

Thanks!

Trac:
Cc: N/A to gk

Yes please!

This ticket is blocking a key fix for consensus-health (#33067 (moved)). Because of the dir auth ddos (#33018 (moved)), and the defenses deployed against it (#33029 (moved)), fetching the vanilla consensus over the dirport from the consensus-health server has become inconsistent.

Replying to atagar:

• tor-consensus-health@ email list

I've added gk as a moderator for the list, and sent him the moderation password.

Replying to atagar:

• Cron jobs hosted on carinatum

I believe I have now added gk to the doctor group. Woo.

But atagar, it looks like there is a doctor user too? And crontab -u doctor -l seems to think that it's the doctor user that is running the cron tasks.

Is this a separate user that you log in as? Do you sudo to it from your atagar ldap login?

Seems like it might be really useful to have a "crash course on being the doctor maintainer" written up at https://trac.torproject.org/projects/tor/wiki/org/operations/services Maybe gk already knows these things and he can help write it. :)

Seems like it might be really useful to have a "crash course on being the doctor maintainer" written up

Yup. See the "DocTor Handoff" email I sent on 1/21/20 to dir-auth@. Maybe turning that into a readme would be a handy first commit for Georg?

Replying to atagar:

Seems like it might be really useful to have a "crash course on being the doctor maintainer" written up

Yup. See the "DocTor Handoff" email I sent on 1/21/20 to dir-auth@. Maybe turning that into a readme would be a handy first commit for Georg?

Yes, I plan doing some public documentation of the whole setup, not sure where yet.

For what it is worth given the original requests in this ticket only the access to the git repo still needs someone to act upon. All the other related tasks got sorted out.

Git stuff done

Thanks. We should be good here then.

Trac:
Resolution: N/A to fixed
Status: new to closed

closed

mentioned in issue #33067 (moved)