About pwstore
Passwords to store:
- Selenium user passwords
- Github + Gerrit role accounts for replication management
- mediawiki-announce admin password
- ...
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | Xqt | T186206 Misleaded tests and maintenance pages after renaming of github repository (tracking) | |||
| Resolved | Xqt | T183860 AppVeyor test not running since months | |||
| Resolved | Xqt | T104306 Share Appveyor account credentials with Release Engineering | |||
| Resolved | • thcipriani | T139093 Use pwstore (a shared gpg-encrypted password store) for Release Engineering related passwords |
For the Selenium related passwords we went with officewiki. It is not ideal but the credentials have low value and it is was way easier than to have them handled via gpg.
If we go to gpg / pwstore. I would definitely need some kind of training as to how to setup a gpg key, keep it secure and make sure it has a backup. The last one I had years ago ended up lost when both my computers had full disk :-(
We now have rRELSECRETS as our pwstore behind #acl*releng .
4 people are in the .users file, we'll close this task when the whole team is in there and verified working.