tracking here what needs to happen on the production infrastructure to happen for thumbor:
- hardware provisioning
- LVS setup
- modify rewrite.py to duplicate a fraction of thumbnail requests to thumbor (some of it already in mediawiki-vagrant) T139484
- thumbor puppetization (includes module, role, etc)
- grant thumbor-admins access https://gerrit.wikimedia.org/r/#/c/302471/
- provision swift account for thumbor and provide write access to relevant containers
- monitoring and alarming
- setup firejail for thumbor, similar to imagescaler
HW provisioning
thumbor is expected to be purely CPU/network bound. With ideally less, but at least similar, requirements as the current image scalers. We can order dedicated hardware and in the mean time re-use some of recently decommissioned hardware.
rewrite.py integration
Implementation is part of [[https://phabricator.wikimedia.org/rMWVA9971189bbc715e7df2d7f19a5ad5edb6ca4c2399 | mediawiki-vagrant ]] and should be ported to production and its configuration puppetized: T139484