Gerrit
Gerrit is installed on formey in the prefix /var/lib/gerrit2.
It is a Java daemon which listens for HTTP connections (port 8080) and SSH connections (port 29418). Apache on formey proxies the relevant URLs on port 80 and 443 through to Gerrit. The SSH port provides a restricted shell for Git checkouts and administrative commands.
It uses the misc DB server (db9/db10), database name "reviewdb", for most storage.
It uses the LDAP instance shared with subversion and labs, possibly on virt0.wikimedia.org, for authentication. Accounts under ou=people,dc=wikimedia,dc=org and groups under ou=groups,dc=wikimedia,dc=org are exposed to Gerrit. The Gerrit account name is the "cn" field in LDAP.
Gerrit shells out to GitWeb, a Perl application which is installed using the stock package.
To find out what version of Gerrit is running, you can use:
java -jar /var/lib/gerrit2/gerrit.war version
It is 2.2.1 at the time of writing.
Giving users Labs access, if they already have an SVN account
In order to log in to Gerrit, a user needs to already have a Labs account.
Collect the following information from the user:
- Preferred wiki username
- Preferred email address
- Their svn account name
On formey, run the following command:
add-labs-user --wikiname="<wikiusername>" --mail="<email address>" <svnusername>
Then go to Special:NovaProject and add the user, by wiki username, to the bastion project.
Then the user must do the following:
- Go to the password reset form at labs console
- Use the temporary password to set a password
- Log into gerrit
- Add their SSH key
If they are an ops team member, they should also be added to the ops group:
modify-ldap-group --addmembers=<svnusername> ops
If they are WMF staff, they should also be added to the wmf group:
modify-ldap-group --addmembers=<svnusername> wmf
Using gerrit
This is documented on the labsconsole wiki and [[mw:Git/Workflow|on mediawiki.org].
