⚓ T84957 Vagrantize Sentry

Subject	Repo	Branch	Lines /-
Remove system user/group options from Sentry role	mediawiki/vagrant	master	0 -24
Add Vagrant role for Sentry (server MW extension)	mediawiki/vagrant	master	372 -0
Rename $wgSentryEndpoint to $wgSentryDsn to better match the docs	mediawiki/extensions/Sentry	master	5 -5

Status	Assigned	Task
Declined	None	T382 RfC: Server-side Javascript error logging
Resolved	Tgr	T524 Interface to display JS error logs
Resolved	• Gilles	T525 Review existing JS error logging solutions
Declined	None	T106913 Use Sentry on non-production Wikimedia wikis, Toolforge and other sites/tools
Declined	None	T106915 Use Sentry in production
Declined	Tgr	T91649 Deploy Sentry (JavaScript error logging) to production, configured to log only a limited subset of users/pages
Resolved	Tgr	T1345 Set up and test Sentry on Labs for JS error logging
Resolved	Tgr	T105374 Investigate if the XSS vulnerability addressed in Sentry 7.6.1 affects us
Resolved	• jlinehan	T88399 Improve Javascript error logging coverage
Resolved	Tgr	T78809 Implement module wrapping for Sentry
Declined	Tgr	T85262 Add startup script to automatically wrap asynchronous functions in try..catch
Declined	Tgr	T86058 Find out whether any browser supported by MediaWiki needs TraceKit's "rethrow to window.onerror" logic for stack traces
Declined	Tgr	T92247 Wrap jQuery AJAX callbacks in try..catch via mw.errorLogging
Resolved	Tgr	T92701 Test the impact of Javascript error logging on performance
Declined	Tgr	T93392 Make sure async wrapping for Javascript error logging only happens when the call is truly async
Resolved	Tgr	T85263 Track module initialization errors in ResourceLoader
Resolved	Tgr	T88874 Catch uncaught exceptions with Sentry
Resolved	Krinkle	T93986 mw.track subscribers cannot unsubscribe
Declined	None	T90524 Use source urls in mw.loader.store
Open	None	T508 Use CORS-enabled fetch of scripts to avoid same-domain limitations in JS error logging
Resolved	Tgr	T507 Measure how many users have CORS-hostile proxies
Declined	None	T88078 Automated tests for Javascript error logging
Declined	None	T526 Add sampling and throttling support to JS error logging
Invalid	None	T89732 Investigate production and/or beta requirements for Sentry
Declined	Tgr	T93138 Procure hardware for Sentry
Resolved	Tgr	T84956 Create basic puppet role for Sentry
Resolved	jcrespo	T112228 Need to run postgresql::user twice to set the password
Resolved	Tgr	T94428 Log Javascript errors in UploadWizard funnel flow
Open	None	T88072 All multimedia extensions/systems should have a MW-Vagrant role
Resolved	Tgr	T84957 Vagrantize Sentry
Resolved	Tgr	T90773 Fix log directory permissions in Sentry vagrant role

Tgr created this task.Dec 19 2014, 12:57 AM

Tgr claimed this task.

Tgr raised the priority of this task from to Medium.

Tgr updated the task description. (Show Details)

Tgr added a project: Multimedia.

Tgr changed Security from none to None.

Tgr added subscribers: Aklapper, Tgr, He7d3r and 6 others.

• Gilles moved this task from Untriaged to Prototyping on the Multimedia board.Dec 19 2014, 10:07 AM

Tgr added a project: MediaWiki-Vagrant.Dec 19 2014, 11:38 PM

Tgr updated the task description. (Show Details)Dec 19 2014, 11:43 PM

Tgr moved this task from Prototyping to Next up on the Multimedia board.Dec 21 2014, 4:26 PM

Tgr added a project: Sentry.Dec 22 2014, 7:37 PM

Change 181606 had a related patch set uploaded (by Gergő Tisza):
[WIP] Add Vagrant role for Sentry (server MW extension)

https://gerrit.wikimedia.org/r/181606

Patch-For-Review

Tgr mentioned this in T84956: Create basic puppet role for Sentry.Dec 24 2014, 3:00 AM

Change 181779 had a related patch set uploaded (by Gergő Tisza):
Rename $wgSentryEndpoint to $wgSentryDsn to better match the docs

https://gerrit.wikimedia.org/r/181779

Patch-For-Review

jeremyb-phone subscribed.Dec 25 2014, 4:41 AM

Tgr moved this task from Next up to Needs code review on the Multimedia board.Dec 25 2014, 6:23 AM

Change 181779 merged by jenkins-bot:
Rename $wgSentryEndpoint to $wgSentryDsn to better match the docs

https://gerrit.wikimedia.org/r/181779

Change 181606 merged by Dduvall:
Add Vagrant role for Sentry (server MW extension)

https://gerrit.wikimedia.org/r/181606

dduvall moved this task from Backlog to Done on the MediaWiki-Vagrant board.Jan 9 2015, 8:32 PM

• Gilles moved this task from Needs code review to Ready for testing on the Multimedia board.Jan 12 2015, 4:18 PM

• Gilles closed this task as Resolved.Jan 14 2015, 4:17 PM

• Gilles moved this task from Ready for testing to Doing on the Multimedia board.

Tgr added a parent task: T88072: All multimedia extensions/systems should have a MW-Vagrant role.Jan 30 2015, 3:40 AM

Liuxinyu970226 unsubscribed.Jan 30 2015, 3:45 AM

I am running into various permissions-related trouble, e.g. ImproperlyConfigured: Could not write to directory: /vagrant/logs/sentry.mail.log.
Vagrant does not seem to play nice with the concept of separate user/group per application.
@dduvall, which direction would you prefer, making sentry use www-data or making directory settings more permissive?

MarkTraceur moved this task from Doing to Next up on the Multimedia board.Feb 6 2015, 9:32 PM

Change 189184 had a related patch set uploaded (by Gergő Tisza):
Remove system user/group options from Sentry role

https://gerrit.wikimedia.org/r/189184

Patch-For-Review

Change 189184 abandoned by Gergő Tisza:
Remove system user/group options from Sentry role

https://gerrit.wikimedia.org/r/189184

Tgr added a project: Multimedia-Sprint-2015-02-18.Feb 18 2015, 1:08 AM

Tgr edited a custom field.

Tgr edited a custom field.Feb 18 2015, 1:11 AM

In T84957#1009925, @Tgr wrote:

I am running into various permissions-related trouble, e.g. ImproperlyConfigured: Could not write to directory: /vagrant/logs/sentry.mail.log.
Vagrant does not seem to play nice with the concept of separate user/group per application.
@dduvall, which direction would you prefer, making sentry use www-data or making directory settings more permissive?

I would make it all run as www-data personally. This is an unprivileged system user allocated for Apache but is more generally used in the WMF cluster as the user that runs MediaWiki code. Granular control of file permissions in Vagrant for host mounted directories are fragile. Almost ever time we try to change them we break something.

Tgr moved this task from Backlog to Reviewed, needs improvements on the Multimedia-Sprint-2015-02-18 board.Feb 18 2015, 5:44 PM

• Gilles added a project: Multimedia-Sprint-2015-02-25.Feb 25 2015, 10:58 AM

• Gilles moved this task from Backlog to Reviewed, needs improvements on the Multimedia-Sprint-2015-02-25 board.

• Gilles moved this task from Reviewed, needs improvements to Backlog on the Multimedia-Sprint-2015-02-25 board.Feb 25 2015, 12:15 PM

If all that's left is switching to www-data, I think it should be a new dedicated task and this one should be closed. There's a vagrant role for sentry now, everything from this point on is specific improvements/bugfixes.

Moved to T90773.

Tgr removed a project: Multimedia-Sprint-2015-02-25.Feb 25 2015, 8:04 PM

• Gilles closed subtask T90773: Fix log directory permissions in Sentry vagrant role as Resolved.Mar 2 2015, 8:45 AM

dduvall mentioned this in rMWVA9cd92d68af32: Add Vagrant role for Sentry (server MW extension).Mar 3 2015, 7:49 PM

Diffusion mentioned this in rMEXTc9477b64d544: Updated mediawiki/extensions Project: mediawiki/extensions/Sentry….Mar 11 2015, 6:23 AM

Tgr mentioned this in rESNT0d7fa6f0a227: Rename $wgSentryEndpoint to $wgSentryDsn to better match the docs.Apr 8 2015, 6:17 PM