I confirmed that anonymous editing is currently enabled by default in our distribution, following MediaWiki’s default permissions model for the * group.

For now I've went ahead and created the tickets suggested above, starting with the Epic at: https://phabricator.wikimedia.org/T421356

For context, see T416236 and my "Implementation Complete" comment there.

Implementation Complete

First extension (Echo), successfully added! Work in progress and relevant notes for each extension or change can be monitored here until completion: https://github.com/wmde/wikibase-release-pipeline/pull/914

Initial investigation has been completed and report handed over to @Leif_WMDE

Final testing of the updated Release Process (ref. T418855) is blocked until this is resolved.

The fix for this is available for review at: https://github.com/wmde/wikibase-release-pipeline/pull/912

@conny-kawohl_WMDE and @Leif_WMDE as a supplement to recent discussions I've had with each of you, I wanted to put my explanation here for reference, and to flag this ticket and the related PR as I think it may be coming into increased relevance with some of the solutions we're currently discussing in T418446 and in general.

@Leif_WMDE I am glad that they offered more for us to look at. Unfortunately not much of what I'm seeing in this analysis moves me from my earlier take: It is likely feasible to reproduce the current Wikibase Suite stack on Upson's architecture to a large degree, but would in fact be a new version of our existing stack that was Upson proprietary. Even if for some reason we decided to go ahead with that, we would still presumably also still be maintaining and supporting our Docker-based stack in parallel. I think much of the value of our current Docker images, and related Docker Compose configuration, is rooted in the fact that our team is here to support what we release and that we keep periodically make new releases. It would be at least double the effort to keep an Upson configuration updated.

Lining this bit of feedback from most recent review of the as-is tool by @Leif_WMDE here: T417264#11659462

Maybe helpful background -- In the Wikibase Image we theoretically don't fail the install process when callback fails. See: https://github.com/wmde/wikibase-release-pipeline/blob/4556216d308482d8290cc8d2ea6153c58cff40ec/build/wikibase/entrypoint.sh#L22

Currently ready for release at https://github.com/wmde/wikibase-release-pipeline/pull/907 pending the completion of a Release Announcement. This should be released just before that announcement is sent out.