Page MenuHomePhabricator

Upgrade wiki.wikimedia.it from 1.26.4 to latest LTS
Open, MediumPublic6 Estimated Story Points

Description

Actually https://wiki.wikimedia.it/ is running MediaWiki 1.26.4 but some time is passed since 2015 and now this version is no longer supported.

We should upgrade the installation to assure maximum support to latest security patches (some of them were not back-ported) and maximum support for post-2015 features like VisualEditor, the Extension:Thanks and other awesome things that could be appreciated by Wikimedia Italia members.

In short we should take some time to:

  • assure a backup
  • check if upgrade is feasible on the same server
  • upgrade from 1.26.4 to latest LTS 1.35
  • eventually adopt the cute Debian mediawiki package maintained by User:Legoktm
  • bonus point: track A/B configuration changes of our LocalSettings.php in Wikimedia Gerrit or whatever code hosting the community is discussing now between Phabricator and/or GitLab and/or GitHub and/or a nextCloud directory called wikina-final-version-really-really-final-ok-really-ok-ok-2020.zip asd

Also after the upgrade we could wait some time (few days?) before installing our new extensions, in order to test the fresh upgrade as-is and be sure that everything works without regressions.


(This was imported from here)

Event Timeline

valerio.bozzolan renamed this task from Upgrade wiki.wikimedia.it from to latest LTS to Upgrade wiki.wikimedia.it from 1.26.4 to latest LTS.Nov 23 2020, 7:03 PM
valerio.bozzolan triaged this task as Medium priority.
valerio.bozzolan updated the task description. (Show Details)
valerio.bozzolan set the point value for this task to 6.

gvf already did most of the work here; the upgrade is blocked on https://mailman.wikimedia.it/private/tech/2020-October/000642.html pending debugging.

gvf already did most of the work here; the upgrade is blocked on https://mailman.wikimedia.it/private/tech/2020-October/000642.html pending

To be honest with that bug I really got the feeling it's better to conclude our upgrade. Now we have PHP 7.3 (year 2018) while running MediaWiki 1.26.4 (year 2015). That's not unlikely to be a bug related to this combination. I would avoid investing time in troubleshooting 1.26.4 and instead I would just upgrade to 1.35 to eventually draw a line on this bug... or further investigate otherwise.

I forgot to mention that yesterday I made some progresses here playing with a private/dummy MediaWiki instance based on the Wikimedia Italia's production LocalSettings.php (configuration that was kindly shared by @Nemo_bis and Gvf some days ago).

First of all. The good news. Few explosions, guys! Yeeh!

Precisely I tried the MediaWiki 1.35 packaged for Debian GNU/Linux buster-backports. I mean the one packaged by User:Legoktm, my hero.

I was able to adapt our configuration file and see a MediaWiki 1.35 running. The Extension:Lockdown works. VisualEditor works!

For the record, note that now VisualEditor is a MediaWiki core extension so we don't need to maintain another fancy stuff or NodeJS services. There's a Wikimedia Foundation blog post about this topic:

What to do now:

  1. audit the Lockdown extension a little bit
    1. verify all the MediaWiki's known security vulnerabilities just to tighten our panties
  2. play with VisualEditor
    1. whooooa *click* *click* VisualEditor whoa!
    2. VisualEditor go brrr!
    3. etc.
  3. plan the real migration in production
  4. proceed with the other stuff

we don't need to maintain another fancy stuff or NodeJS services

That makes things easier, but T260201 remains a blocker for T268529 until confirmed fixed.

As for the upgrade itself, the question is whether MediaWiki 1.35 can support basic functionalities such as wikitext editing (however degraded) while the API is disabled.

So we're running in good old T16944 / https://bugs.php.net/bug.php?id=45132 but it's unclear why. The UTF-8 locales are installed in the OS and configured on MediaWiki's side, safe mode is not enabled, nothing changed in PHP on this front https://3v4l.org/DrhCK , everything works fine in a PHP shell on latest Devuan.

We've not confirmed that the it_IT.UTF-8 locale was available when Apache was last (re)started.

Recent versions of MediaWiki moved from wfShellExec() to the Shellbox library.