Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/293710
Change subject: Install firejail profile for convert
......................................................................
Install firejail profile for convert
It is also used by the Score extension which is installed on all app servers
and not only on the image scalers.
Bug: T135111
Change-Id: I10b00b97333345b78eabf77aab54ca050c57ae4d
---
M modules/mediawiki/manifests/init.pp
1 file changed, 11 insertions(+), 0 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/10/293710/1
diff --git a/modules/mediawiki/manifests/init.pp
b/modules/mediawiki/manifests/init.pp
index 3751fc7..1da537b 100644
--- a/modules/mediawiki/manifests/init.pp
+++ b/modules/mediawiki/manifests/init.pp
@@ -33,6 +33,17 @@
include ::mediawiki::hhvm
+ # This profile is used to contain the convert command of imagemagick using
firejail
+ # Profiles specific to the image/video scalers are handled via
mediawiki::firejail,
+ # but imagemagick is also used on the general purpose appscalers for
scaling musical
+ # typesheets in the Score extension
+ file { '/etc/firejail/mediawiki-imagemagick.profile':
+ source => 'puppet:///modules/mediawiki/mediawiki-imagemagick.profile',
+ owner => 'root',
+ group => 'root',
+ mode => '0644',
+ }
+
file { '/usr/local/bin/mediawiki-firejail-convert':
source => 'puppet:///modules/mediawiki/mediawiki-firejail-convert',
owner => 'root',
--
To view, visit https://gerrit.wikimedia.org/r/293710
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: I10b00b97333345b78eabf77aab54ca050c57ae4d
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Muehlenhoff <mmuhlenh...@wikimedia.org>
_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
