Page MenuHomePhabricator

Create SFTP keypair for MediaWiki donor export
Closed, ResolvedPublic

Description

Create an SFTP keypair for the mediawiki_donor_export job to upload files to the MediaWiki side.

  • Generate an SSH keypair for the export job
  • Deploy the private key to the tools host config (/etc/fundraising/mediawiki_donor_export.yaml, sftp.private_key)

Details

Other Assignee
jgleeson

Event Timeline

Once complete, we need to send the public key over to @CDanis

@CDanis Here is the pubkey we will be using. I'll work with Jack to get it in our config and out to the proper places for us.

ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKrGmE+WjSvy5BaHXY8vSFuXyvDrHyI7gGi44Ggk6Upi FR Tech Donor Export <fr-tech@wikimedia.org>

Secrets initially populated from private::passwords::donor_export but currently only has the hostname and private key. Still need the username, remote root, and possibly the host key. They are being written to /etc/fundraising/mediawiki_donor_export.yaml on the civi hosts and contained in the sftp section.

This should be working now:
deployment.eqiad.wmnet
user fundraising-data-uploader
/var/lib/fundraising-data-uploader (the user's homedir)

Dwisehaupt moved this task from Triage to Done on the fundraising-tech-ops board.

Thanks @CDanis. User added to config and connections tested successfully from the command line. @jgleeson is working through the full testing process but this is complete from the system side. Closing.