539711 - "De-productize" donate.mozilla.org so Trellon can have their access back

Status: RESOLVED WONTFIX

(mozilla.org Graveyard :: Server Operations, task)

Description

[Gervase Markham [:gerv]]

Trellon need to make further updates to donate.mozilla.org to switch from PayPal Pro to Standard. Please reverse whatever changes were made to lock them out, so they can make those updates. Please can this be done ASAP?

Once that's done, we will have another go at productizing it, including a security review.

Gerv

Comment 1

[matthew zeier [:mrz]]

We have two hosts here - 

dm-mozcrm01 - donate.mozilla.org

dm-mozcrm-stage01 - the whole civicrm app.

Ideally you guys would be doing your work on the stage and we'll pull changes into prod.  Can that work?

Comment 2

[Gervase Markham [:gerv]]

Depends how the two are connected :-) I believe the changes are in CiviCRM configuration, rather than in stuff checked out from SVN. Marc: can you chime in and tell us what you are changing, and how we might get the changes from one machine to the other?

mrz: does Marc currently have access to dm-mozcrm-stage01? If not, can that (re-)happen, please? Thanks :-)

Gerv

Comment 3

[marcingy]

The changes are 2 fold.

There is one file to be updated via svn, which prevents the donation page from being render because of tweaks that were specific to paypal pro form. While we also have some database changes that need to be made via the civicrm gui to update the site to use paypal standard.

Marc

Comment 4

[Derek Moore [:dmoore]]

Reducing priority to silence pagers while we work this through.

Comment 5

[Gervase Markham [:gerv]]

My understanding of the current state of this bug is that the ball is in IT's court to make network/DNS/config changes to restore Trellon's access to dm-mozcrm-stage01 and give Marc an externally-resolvable DNS name to ssh to. Let me know if that's wrong, or if you need any info from me or Marc to do this.

As the name dm-mozcrm-stage01 doesn't seem to resolve externally, I assume part of restoring access will be giving it an external name and telling Marc what it is.

mrz: how do you anticipate making those changes to the production instance which need to be made via the CiviCRM GUI? Do you just want to make dm-mozcrm01 externally visible so Marc can log in to CiviCRM? Or do you want to update dm-mozcrm-stage01 and then re-clone it to dm-mozcrm01?

I assume that the SVN change will require an IT person logging in to dm-mozcrm01 and typing "svn update". Again, let me know if that's wrong.

Marc: I assume the SVN change you need is already checked into the SVN repo?

Gerv

Comment 6

[Gervase Markham [:gerv]]

server ops team/mrz: any progress here? This bug has the donate.mozilla.org rollout at a standstill, and that rollout is a really high priority for the Foundation team.

Please let me know if my summary in comment #5 is incorrect, or if you need more info from us. :-)

Gerv

Comment 7

[matthew zeier [:mrz]]

all - Fx 3.6 release related work preempts this at the moment.  Probably later in the week.

Comment 8

[matthew zeier [:mrz]]

oremj - this bug is really about making a proper stage enviro for Trellon.  Mark & Gerv have more background on this.

Comment 9

[Jeremy Orem [:oremj]]

This process seems cumbersome. Can we/trellon just set up a rackspace VM w/CentOS? From there they can implement/document the exact steps needed to get this thing set up from a base install.

If that type of process will work let me know. I have a few other set up requirements.

Comment 10

[Gervase Markham [:gerv]]

OK. Here's what's happening:

- We are abandoning this effort to get donate.mozilla.org (re)staged, (re)security reviewed and put into production independently.

- Instead, we will deploy donate.mozilla.org and www.drumbeat.org together on the same server. oremj is currently preparing the staging server for this deployment, based on instructions given by Trellon's drumbeat team. 

Part of the work done by Trellon for us was supporting exactly this type of multisite deployment, and we will be asking them for instructions for getting this feature working, with both donate and drumbeat on the same machine, using the same database.

The combined server will then proceed to security review and productization, rather than having two separate reviews and productizations.

Mozillians.org remains on the back burner until this is done.

If this confuses anyone, please email Matt and me :-)

Gerv