Gerrit

Revision as of 06:21, 31 January 2012

Gerrit is installed on formey in the prefix /var/lib/gerrit2.

It is a Java daemon which listens for HTTP connections (port 8080) and SSH connections (port 29418). Apache on formey proxies the relevant URLs on port 80 and 443 through to Gerrit. The SSH port provides a restricted shell for Git checkouts.

It uses the misc DB server (db9/db10), database name "reviewdb", for most storage.

It uses the LDAP instance shared with subversion and labs, possibly on virt0.wikimedia.org, for authentication. Accounts under ou=people,dc=wikimedia,dc=org and groups under ou=groups,dc=wikimedia,dc=org are exposed to Gerrit.

Gerrit shells out to GitWeb, a Perl application which is installed using the stock package.

Giving users Labs access, if they already have an SVN account

Collect the following information from the user:

• Preferred wiki username
• Preferred email address
• Their svn account name

On formey, run the following command:

add-labs-user --wikiname="<wikiusername>" --mail="<email address>" <svnusername>

Then go to Special:NovaProject and add the user, by wiki username, to the bastion project.

Then the user must do the following:

1. Go to the password reset form at labs console
2. Use the temporary password to set a password
3. Log into gerrit
4. Add their SSH key

If they are an ops team member, they should also be added to the ops group:

modify-ldap-group --addmembers=<svnusername> ops

If they are WMF staff, they should also be added to the wmf group:

modify-ldap-group --addmembers=<svnusername> wmf

Using gerrit

This is documented on labs console.