X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/141871be7be50fe092cef6c84cfc84f2393c3545..200f486870c88f3916ede7bcb36b47b374a63901:/cookbooks/mediawiki/resources/site.rb diff --git a/cookbooks/mediawiki/resources/site.rb b/cookbooks/mediawiki/resources/site.rb index 472e8c3d8..0bbddfe81 100644 --- a/cookbooks/mediawiki/resources/site.rb +++ b/cookbooks/mediawiki/resources/site.rb @@ -17,12 +17,13 @@ # limitations under the License. # +unified_mode true + default_action :create property :site, :kind_of => String, :name_property => true property :aliases, :kind_of => [String, Array] -property :directory, :kind_of => String -property :version, :kind_of => String, :default => "1.33" +property :version, :kind_of => String, :default => "1.39" property :database_name, :kind_of => String, :required => true property :database_user, :kind_of => String, :required => [:create, :update] property :database_password, :kind_of => String, :required => [:create, :update] @@ -40,10 +41,15 @@ property :admin_user, :kind_of => String, :default => "Admin" property :admin_password, :kind_of => String, :required => [:create] property :private_accounts, :kind_of => [TrueClass, FalseClass], :default => false property :private_site, :kind_of => [TrueClass, FalseClass], :default => false -property :recaptcha_public_key, :kind_of => String -property :recaptcha_private_key, :kind_of => String +property :hcaptcha_public_key, :kind_of => String, :default => "" +property :hcaptcha_private_key, :kind_of => String, :default => "" property :extra_file_extensions, :kind_of => [String, Array], :default => [] property :fpm_max_children, :kind_of => Integer, :default => 5 +property :fpm_start_servers, :kind_of => Integer, :default => 2 +property :fpm_min_spare_servers, :kind_of => Integer, :default => 1 +property :fpm_max_spare_servers, :kind_of => Integer, :default => 3 +property :fpm_request_terminate_timeout, :kind_of => Integer, :default => 300 +property :fpm_prometheus_port, :kind_of => Integer property :reload_apache, :kind_of => [TrueClass, FalseClass], :default => true action :create do @@ -52,10 +58,9 @@ action :create do :version => new_resource.version } - secret_key = persistent_token("mediawiki", new_resource.site, "wgSecretKey") - mysql_user "#{new_resource.database_user}@localhost" do password new_resource.database_password + reload true end mysql_database new_resource.database_name do @@ -64,34 +69,6 @@ action :create do mediawiki_directory = "#{site_directory}/w" - ruby_block "rename-installer-localsettings" do - action :nothing - block do - ::File.rename("#{mediawiki_directory}/LocalSettings.php", "#{mediawiki_directory}/LocalSettings-install.php") - end - end - - execute "#{mediawiki_directory}/maintenance/install.php" do - action :nothing - # Use metanamespace as Site Name to ensure correct set namespace - command "php maintenance/install.php --server '#{name}' --dbtype 'mysql' --dbname '#{new_resource.database_name}' --dbuser '#{new_resource.database_user}' --dbpass '#{new_resource.database_password}' --dbserver 'localhost' --scriptpath /w --pass '#{new_resource.admin_password}' '#{new_resource.metanamespace}' '#{new_resource.admin_user}'" - cwd mediawiki_directory - user node[:mediawiki][:user] - group node[:mediawiki][:group] - not_if do - ::File.exist?("#{mediawiki_directory}/LocalSettings-install.php") - end - notifies :run, "ruby_block[rename-installer-localsettings]", :immediately - end - - execute "#{mediawiki_directory}/maintenance/update.php" do - action :nothing - command "php maintenance/update.php --quick" - cwd mediawiki_directory - user node[:mediawiki][:user] - group node[:mediawiki][:group] - end - declare_resource :directory, site_directory do owner node[:mediawiki][:user] group node[:mediawiki][:group] @@ -104,26 +81,13 @@ action :create do mode "775" end - mediawiki_reference = "REL#{new_resource.version}".tr(".", "_") - git mediawiki_directory do action :sync - repository "https://gerrit.wikimedia.org/r/p/mediawiki/core.git" + repository "https://gerrit.wikimedia.org/r/mediawiki/core.git" revision mediawiki_reference depth 1 user node[:mediawiki][:user] group node[:mediawiki][:group] - notifies :run, "execute[#{mediawiki_directory}/composer.json]", :immediately - notifies :run, "execute[#{mediawiki_directory}/maintenance/install.php]", :immediately - notifies :run, "execute[#{mediawiki_directory}/maintenance/update.php]" - end - - execute "#{mediawiki_directory}/composer.json" do - action :nothing - command "composer update --no-dev" - cwd mediawiki_directory - user node[:mediawiki][:user] - group node[:mediawiki][:group] end template "#{mediawiki_directory}/composer.local.json" do @@ -134,15 +98,22 @@ action :create do mode "664" end - # Safety catch if git doesn't update but install.php hasn't run - ruby_block "catch-installer-localsettings-run" do - action :run - block do - end - not_if do - ::File.exist?("#{mediawiki_directory}/LocalSettings-install.php") - end - notifies :run, "execute[#{mediawiki_directory}/maintenance/install.php]", :immediately + execute "#{mediawiki_directory}/composer.json" do + command "composer update --no-dev" + cwd mediawiki_directory + user node[:mediawiki][:user] + group node[:mediawiki][:group] + environment "COMPOSER_HOME" => site_directory + not_if { ::File.exist?("#{mediawiki_directory}/composer.lock") } + end + + execute "#{mediawiki_directory}/maintenance/install.php" do + # Use metanamespace as Site Name to ensure correct set namespace + command "php maintenance/install.php --server '#{name}' --dbtype 'mysql' --dbname '#{new_resource.database_name}' --dbuser '#{new_resource.database_user}' --dbpass '#{new_resource.database_password}' --dbserver 'localhost' --scriptpath /w --pass '#{new_resource.admin_password}' '#{new_resource.metanamespace}' '#{new_resource.admin_user}'" + cwd mediawiki_directory + user node[:mediawiki][:user] + group node[:mediawiki][:group] + not_if { ::File.exist?("#{mediawiki_directory}/LocalSettings.php") } end declare_resource :directory, "#{mediawiki_directory}/images" do @@ -174,53 +145,21 @@ action :create do :database_params => database_params, :mediawiki => mediawiki_params, :secret_key => secret_key - notifies :run, "execute[#{mediawiki_directory}/maintenance/update.php]" end - cron_d "mediawiki-#{cron_name}-sitemap" do - comment "Generate sitemap.xml daily" - minute "30" - hour "0" - user node[:mediawiki][:user] - command "/usr/bin/nice /usr/bin/php -d memory_limit=2048M -d error_reporting=22517 #{site_directory}/w/maintenance/generateSitemap.php --server=https://#{new_resource.site} --urlpath=https://#{new_resource.site}/ --fspath=#{site_directory} --quiet --skip-redirects" + service "mediawiki-sitemap@#{new_resource.site}.timer" do + action [:enable, :start] + only_if { ::File.exist?("#{mediawiki_directory}/LocalSettings.php") } end - cron_d "mediawiki-#{cron_name}-jobs" do - comment "Run mediawiki jobs" - minute "*/3" - user node[:mediawiki][:user] - command "/usr/bin/nice /usr/bin/php -d memory_limit=2048M -d error_reporting=22517 #{site_directory}/w/maintenance/runJobs.php --server=https://#{new_resource.site} --maxtime=160 --memory-limit=2048M --procs=8 --quiet" + service "mediawiki-jobs@#{new_resource.site}.timer" do + action [:enable, :start] + only_if { ::File.exist?("#{mediawiki_directory}/LocalSettings.php") } end - cron_d "mediawiki-#{cron_name}-email-jobs" do - comment "Run mediawiki email jobs" - user node[:mediawiki][:user] - command "/usr/bin/nice /usr/bin/php -d memory_limit=2048M -d error_reporting=22517 #{site_directory}/w/maintenance/runJobs.php --server=https://#{new_resource.site} --maxtime=30 --type=enotifNotify --memory-limit=2048M --procs=4 --quiet" - end - - cron_d "mediawiki-#{cron_name}-refresh-links" do - comment "Run mediawiki refresh links table weekly" - minute "5" - hour "0" - weekday "0" - user node[:mediawiki][:user] - command "/usr/bin/nice /usr/bin/php -d memory_limit=2048M -d error_reporting=22517 #{site_directory}/w/maintenance/refreshLinks.php --server=https://#{new_resource.site} --memory-limit=2048M --quiet" - end - - cron_d "mediawiki-#{cron_name}-cleanup-gs" do - comment "Clean up imagemagick garbage" - minute "10" - hour "2" - user node[:mediawiki][:user] - command "/usr/bin/find /tmp/ -maxdepth 1 -type f -user www-data -mmin +90 -name 'gs_*' -delete" - end - - cron_d "mediawiki-#{cron_name}-cleanup-magick" do - comment "Clean up imagemagick garbage" - minute "20" - hour "2" - user node[:mediawiki][:user] - command "/usr/bin/find /tmp/ -maxdepth 1 -type f -user www-data -mmin +90 -name 'magick-*' -delete" + service "mediawiki-email-jobs@#{new_resource.site}.timer" do + action [:enable, :start] + only_if { ::File.exist?("#{mediawiki_directory}/LocalSettings.php") } end template "/etc/cron.daily/mediawiki-#{cron_name}-backup" do @@ -232,12 +171,14 @@ action :create do variables :name => new_resource.site, :directory => site_directory, :database_params => database_params + only_if { ::File.exist?("#{mediawiki_directory}/LocalSettings.php") } end # MobileFrontend extension is required by MinervaNeue skin mediawiki_extension "MobileFrontend" do site new_resource.site template "mw-ext-MobileFrontend.inc.php.erb" + update_site false end # MobileFrontend extension is required by MinervaNeue skin @@ -291,8 +232,8 @@ action :create do mediawiki_extension "ConfirmEdit" do site new_resource.site template "mw-ext-ConfirmEdit.inc.php.erb" - variables :public_key => new_resource.recaptcha_public_key, - :private_key => new_resource.recaptcha_private_key + variables :public_key => new_resource.hcaptcha_public_key, + :private_key => new_resource.hcaptcha_private_key update_site false end end @@ -380,6 +321,11 @@ action :create do update_site false end + mediawiki_extension "CategoryTree" do + site new_resource.site + update_site false + end + mediawiki_extension "cldr" do site new_resource.site template "mw-ext-cldr.inc.php.erb" @@ -392,10 +338,10 @@ action :create do update_site false end + # Extension has been archived: https://www.mediawiki.org/wiki/Extension:LocalisationUpdate mediawiki_extension "LocalisationUpdate" do site new_resource.site - template "mw-ext-LocalisationUpdate.inc.php.erb" - update_site false + action :delete end # mediawiki_extension "Translate" do @@ -446,34 +392,18 @@ action :create do mediawiki_extension "osmtaginfo" do site new_resource.site - template "mw-ext-osmtaginfo.inc.php.erb" - repository "https://github.com/Firefishy/osmtaginfo.git" - tag "live" - update_site false - end - - mediawiki_extension "SimpleMap" do - site new_resource.site - template "mw-ext-SimpleMap.inc.php.erb" - repository "https://github.com/Firefishy/SimpleMap.git" + repository "https://github.com/openstreetmap/osmtaginfo.git" tag "live" update_site false end - mediawiki_extension "SlippyMap" do + mediawiki_extension "OSMCALWikiWidget" do site new_resource.site - template "mw-ext-SlippyMap.inc.php.erb" - repository "https://github.com/Firefishy/SlippyMap.git" + repository "https://github.com/thomersch/OSMCALWikiWidget.git" tag "live" update_site false end - mediawiki_extension "Mantle" do - site new_resource.site - update_site false - action :delete - end - mediawiki_extension "DisableAccount" do site new_resource.site template "mw-ext-DisableAccount.inc.php.erb" @@ -483,6 +413,7 @@ action :create do mediawiki_extension "VisualEditor" do site new_resource.site template "mw-ext-VisualEditor.inc.php.erb" + variables :version => new_resource.version update_site false end @@ -491,6 +422,19 @@ action :create do update_site false end + if new_resource.commons + mediawiki_extension "QuickInstantCommons" do + site new_resource.site + update_site false + end + else + mediawiki_extension "QuickInstantCommons" do + site new_resource.site + update_site false + action :delete + end + end + cookbook_file "#{site_directory}/cc-wiki.png" do cookbook "mediawiki" owner node[:mediawiki][:user] @@ -521,11 +465,16 @@ action :create do php_fpm new_resource.site do pm_max_children new_resource.fpm_max_children + pm_start_servers new_resource.fpm_start_servers + pm_min_spare_servers new_resource.fpm_min_spare_servers + pm_max_spare_servers new_resource.fpm_max_spare_servers + request_terminate_timeout new_resource.fpm_request_terminate_timeout php_admin_values "open_basedir" => "#{site_directory}/:/usr/share/php/:/dev/null:/tmp/" php_values "memory_limit" => "500M", "max_execution_time" => "240", "upload_max_filesize" => "70M", "post_max_size" => "100M" + prometheus_port new_resource.fpm_prometheus_port end apache_site new_resource.site do @@ -550,6 +499,14 @@ end action :update do mediawiki_directory = "#{site_directory}/w" + execute "#{mediawiki_directory}/composer.json" do + command "composer update --no-dev" + cwd mediawiki_directory + user node[:mediawiki][:user] + group node[:mediawiki][:group] + environment "COMPOSER_HOME" => site_directory + end + template "#{mediawiki_directory}/LocalSettings.php" do cookbook "mediawiki" source "LocalSettings.php.erb" @@ -559,8 +516,8 @@ action :update do variables :name => new_resource.site, :directory => mediawiki_directory, :database_params => database_params, - :mediawiki => mediawiki_params - notifies :run, "execute[#{mediawiki_directory}/maintenance/update.php]" + :mediawiki => mediawiki_params, + :secret_key => secret_key end execute "#{mediawiki_directory}/maintenance/update.php" do @@ -569,6 +526,7 @@ action :update do cwd mediawiki_directory user node[:mediawiki][:user] group node[:mediawiki][:group] + timeout 86400 end end @@ -593,10 +551,21 @@ action :delete do end action_class do - include Chef::Mixin::PersistentToken + include OpenStreetMap::Mixin::PersistentToken def site_directory - new_resource.directory || "/srv/#{new_resource.site}" + "/srv/#{new_resource.site}" + end + + def mediawiki_reference + shell_out!("git", "ls-remote", "--refs", "--sort=-version:refname", + "https://gerrit.wikimedia.org/r/mediawiki/core.git", + "refs/tags/#{new_resource.version}.*") + .stdout + .split("\n") + .first + .split("/") + .last end def cron_name @@ -629,8 +598,13 @@ action_class do :private_site => new_resource.private_site } end + + def secret_key + persistent_token("mediawiki", new_resource.site, "wgSecretKey") + end end def after_created + notifies :update, "mediawiki_site[#{site}]" notifies :reload, "service[apache2]" if reload_apache end