Opened 8 months ago

Closed 8 months ago

#33022 closed enhancement (fixed)

Grant Georg DocTor permissions

Reported by: atagar Owned by: tor-gitadm
Priority: Medium Milestone:
Component: Internal Services/Service - git Version:
Severity: Normal Keywords:
Cc: gk Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description (last modified by atagar)

Hi lovely sysadmins. Our new network health team (and Georg in particular) are subsuming ownership of DocTor. This service only has a few resources...

Could we please grant him permission to push and sudo as the doctor user?

Thanks!

Child Tickets

Change History (9)

comment:1 Changed 8 months ago by atagar

Description: modified (diff)

comment:2 Changed 8 months ago by gk

Cc: gk added

comment:3 Changed 8 months ago by arma

Yes please!

This ticket is blocking a key fix for consensus-health (#33067). Because of the dir auth ddos (#33018), and the defenses deployed against it (#33029), fetching the vanilla consensus over the dirport from the consensus-health server has become inconsistent.

comment:4 in reply to:  description Changed 8 months ago by arma

Replying to atagar:

I've added gk as a moderator for the list, and sent him the moderation password.

comment:5 in reply to:  description Changed 8 months ago by arma

Replying to atagar:

  • Cron jobs hosted on carinatum

I believe I have now added gk to the doctor group. Woo.

But atagar, it looks like there is a doctor *user* too? And crontab -u doctor -l seems to think that it's the doctor user that is running the cron tasks.

Is this a separate user that you log in as? Do you sudo to it from your atagar ldap login?

Seems like it might be really useful to have a "crash course on being the doctor maintainer" written up at
https://trac.torproject.org/projects/tor/wiki/org/operations/services
Maybe gk already knows these things and he can help write it. :)

comment:6 Changed 8 months ago by atagar

Seems like it might be really useful to have a "crash course on being the doctor maintainer" written up

Yup. See the "DocTor Handoff" email I sent on 1/21/20 to dir-auth@. Maybe turning that into a readme would be a handy first commit for Georg?

comment:7 in reply to:  6 Changed 8 months ago by gk

Replying to atagar:

Seems like it might be really useful to have a "crash course on being the doctor maintainer" written up

Yup. See the "DocTor Handoff" email I sent on 1/21/20 to dir-auth@. Maybe turning that into a readme would be a handy first commit for Georg?

Yes, I plan doing some public documentation of the whole setup, not sure where yet.

For what it is worth given the original requests in this ticket only the access to the git repo still needs someone to act upon. All the other related tasks got sorted out.

comment:8 Changed 8 months ago by Sebastian

Git stuff done

comment:9 Changed 8 months ago by gk

Resolution: fixed
Status: newclosed

Thanks. We should be good here then.

Note: See TracTickets for help on using tickets.