Muehlenhoff has uploaded a new change for review. (
https://gerrit.wikimedia.org/r/372342 )
Change subject: Add wrapper for firejailed lilypond
......................................................................
Add wrapper for firejailed lilypond
Change-Id: I3402031798ee4064cfac18503cc8a81f430aeaed
---
A modules/mediawiki/files/mediawiki-firejail-lilypond
M modules/mediawiki/manifests/init.pp
2 files changed, 12 insertions(+), 0 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/42/372342/1
diff --git a/modules/mediawiki/files/mediawiki-firejail-lilypond
b/modules/mediawiki/files/mediawiki-firejail-lilypond
new file mode 100755
index 0000000..69e3ff2
--- /dev/null
+++ b/modules/mediawiki/files/mediawiki-firejail-lilypond
@@ -0,0 +1,5 @@
+#! /usr/bin/python
+# -*- coding: utf-8 -*-
+
+import sys, subprocess
+subprocess.call(['/usr/bin/firejail', '--quiet',
'--profile=/etc/firejail/mediawiki-converters.profile', '/usr/bin/lilypond'] +
sys.argv[1:])
diff --git a/modules/mediawiki/manifests/init.pp
b/modules/mediawiki/manifests/init.pp
index 8b54677..5fdc47c 100644
--- a/modules/mediawiki/manifests/init.pp
+++ b/modules/mediawiki/manifests/init.pp
@@ -63,6 +63,13 @@
mode => '0555',
}
+ file { '/usr/local/bin/mediawiki-firejail-lilypond':
+ source => 'puppet:///modules/mediawiki/mediawiki-firejail-lilypond',
+ owner => 'root',
+ group => 'root',
+ mode => '0555',
+ }
+
# /var/log/mediawiki contains log files for the MediaWiki jobrunner
# and for various periodic jobs that are managed by cron.
file { '/var/log/mediawiki':
--
To view, visit https://gerrit.wikimedia.org/r/372342
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: I3402031798ee4064cfac18503cc8a81f430aeaed
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Muehlenhoff <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
