Planned Gerrit upgrade on Wed, Dec 25 from 00:00 to 04:00 UTC

[guilhem]

Hi there,

We'll upgrade to Gerrit 2.16 on Wed, Dec 25 starting at 00:00 UTC. This
is a pretty long upgrade path and a pessimistic ETA is 04:00 UTC.

*Important*: After completion it will no longer possible to log in using
third-party authentication methods such as Google and GitHub OAuth2 IdPs.
Authentication to the web frontend will need to be done with TDF's Single
Sign-On system. Gerrit accounts not linked to our SSO system will
effectively be *locked out* after that date, and unlocking require manual
intervention from an infra team member. Please see the announcement message
for details: https://listarchives.libreoffice.org/global/projects/msg02605.html .

Authentication using SSH keys and HTTP credentials will keep working as
now. 2.14 also adds support for ed25519 SSH keys; once in production
we'll send a known_hosts snippet with the new host key.

A Gerrit 2.16 preview, including the authentication part, is available
on our stage instance at https://gerrit-stage.documentfoundation.org .

Once on 2.16 we'll start migrating the change metadata backend from
ReviewDb to NoteDb, and eventually upgrade to 3.0 in the not too distant
future. That upgrade should be less intrusive to users.

Cheers,

[guilhem]

The upcoming migration is hopefully known to everyone involved. We
reached out via public announcements to various mailing lists, weekly
ESC notices, a shiny banner, and two individual reminders (will send a
3rd one later today).

The handful of regular contributors who still can't be linked to our
Single Sign-On service will be *locked out* from the web UI next
Wednesday at 00:00 UTC. After that, manual intervention will be required
to unlock old accounts; that'll be cumbersome for everyone and certainly
not without delay.

[guilhem]

Snippet enclosed. The RSA key remains unchanged, the DSA one is no longer
supported (also client-side for OpenSSH ≥7.0), and new keys were generated
for the NIST curves as well as for ed25519. EC keys can be added to one's
profile at https://gerrit.libreoffice.org/settings/#SSHKeys , too.

known_hosts (1.41 KB)