User:Southparkfan/prod9Labs
//TO DO
Small list
- File issue on GitHub:
Done
- Get approval to use prod9: in progress
- Get approval of used software/config: in progress
This plan describes how to set up prod9 for the proposed Labs environment.
Webserver/PHP
For user directories. Apache knows the mod_userdir module. Nginx has an unofficial workaround (http://wiki.nginx.org/UserDir).
SSH
Users can have their own SSH accounts, created via a special labswiki (an extension will run code like "exec("adduser escapeshellarg($user)");"), attach the public keys to it, etc. We can also look at the Wikimedia Labs extension, or a better/safer method for this. Allowing the shell_exec functions is dangerous anyway.
MariaDB
- I don't have any knowledge about which software Wikimedia uses, how it works, how to do this, how to do anything.
A MariaDB instance should fetch the data from prod3/5, censore the private data (centralauth.globaluser/localuser.<pass column>, the oversighted users, <anydb>.user.email/password, oversighted revisions etc), and then stream it to all prod9 users.