Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 925014 - PR services lacking developer redundancy
Summary: PR services lacking developer redundancy
Status: CONFIRMED
Alias: None
Product: Community Relations
Classification: Unclassified
Component: User Relations (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo Public Relations Team
URL:
Whiteboard:
Keywords:
Depends on: 937585
Blocks:
  Show dependency tree
 
Reported: 2024-02-19 21:01 UTC by John Helmert III
Modified: 2024-08-30 05:21 UTC (History)
8 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2024-02-19 21:01:47 UTC
The PR project page says, "For any social site to be officially run by PR project members, a minimum of two active Gentoo developers should have top-most administrative access."

It appears that there's a few services for which this redundancy is missing:

Mastodon, Telegram, Zulip, XMPP - alicef
(Unofficial) Reddit - rich0
(Unofficial) Discord - maffblaster

And dabbott's potential retirement would leave Cafepress to maffblaster and Facebook to dilfridge. Can we please ensure developer redundancy is in place for these services?
Comment 1 Andreas K. Hüttel archtester gentoo-dev 2024-02-19 21:14:03 UTC
Any developer who wants to help maintaining the Facebook page - just ping me and I'll give you permissions...
Comment 2 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2024-02-20 05:20:56 UTC
The credentials should also be stored somewhere (in the infra repo?).  I imagine that in some cases the accounts may be impossible to recover.
Comment 3 Richard Freeman gentoo-dev 2024-04-14 19:22:40 UTC
I'm happy to add devs to mod on Reddit as needed.  Or if infra wants to set up an account with credentials they control that works too.
Comment 4 Arisu Tachibana Gentoo Infrastructure gentoo-dev 2024-04-25 00:47:10 UTC
I think maffblaster is the owner for telegram channels not me
XMPP I think never worked so we can remove it from the list
zulip was owned together with cynede.
if someone want to help out with zulip, just ping me
Comment 5 Ulrich Müller gentoo-dev 2024-04-25 05:12:24 UTC
(In reply to Alice Ferrazzi from comment #4)
> XMPP I think never worked so we can remove it from the list

That non-working one would be gentoo@conference.riseup.net, I suppose?

There's also:
- gentoo@muc.xmpp.fi (not sure if the PR team is/was involved)
- gentoo@conference.jabb3r.org (channel of the Gentoo e.V.)
Comment 6 Jonas Stein gentoo-dev 2024-04-28 18:34:08 UTC
I have taken over the maintenance of XMPP a few months ago. 
It is now documented on https://wiki.gentoo.org/wiki/Project:Public_Relations
Developers who want to help out, just ping me. See description in the MUC
Comment 7 Arisu Tachibana Gentoo Infrastructure gentoo-dev 2024-07-02 02:08:27 UTC
@jstein thanks
Comment 8 Ulrich Müller gentoo-dev 2024-08-13 15:56:32 UTC
(In reply to John Helmert III from comment #0)
> The PR project page says, "For any social site to be officially run by PR
> project members, a minimum of two active Gentoo developers should have
> top-most administrative access."
> 
> It appears that there's a few services for which this redundancy is missing:
> 
> Mastodon, Telegram, Zulip, XMPP - alicef

Could the Council get a status update on these please? Especially, the Mastodon channel (https://fosstodon.org/@gentoo)?

I see that an alias has been created in bug 937585, does this mean that more than one PR member has administrative access now?
Comment 9 Matthew Marchese Gentoo Infrastructure gentoo-dev 2024-08-15 00:08:51 UTC
I'm happy to provide access to any other Gentoo dev for any other official (or unofficial) channel for which I am involved...

I wrote that PR policy change in order to reduce the bus factor to N > 1.

If we want to implement a plan for the PR team to use a administrator level service account assigned to pr@gentoo.org, I'm OK with helping implement something like that. We'll just need a way for members to securely share secrets, but infra's use of pass/gopass should be sufficient.
Comment 10 Jonas Stein gentoo-dev 2024-08-15 06:01:56 UTC
I would like to revive the understaffed mastodon channel and want to contribute there directly. So far we created an alias mastodon@gentoo.org. This is probably cleaner than using pr@gentoo.org as some services create a lot of messages and we would have to adjust the sorting and filter rules for pr@ very often. Additionally it is technically fixed who maintains the channel. Exactly the members in the alias maintain the service.

The alias is active and I asked Alice for the credentials via mail and while we chatted on IRC. I hope to gain access today as the FrOSCon is already this weekend.
Comment 11 Matthew Marchese Gentoo Infrastructure gentoo-dev 2024-08-22 06:16:06 UTC
Alice has shared Mastodon (https://fosstodon.org) credentials with me and has given me permission to change the login email address to the mastodon@gentoo.org alias... however I'm not seeing that alias existing on dev.g.o.

@jstein, where did you create the alias?
Comment 12 Andreas K. Hüttel archtester gentoo-dev 2024-08-22 19:52:43 UTC
(In reply to Matthew Marchese from comment #11)
> Alice has shared Mastodon (https://fosstodon.org) credentials with me and
> has given me permission to change the login email address to the
> mastodon@gentoo.org alias... however I'm not seeing that alias existing on
> dev.g.o.
> 
> @jstein, where did you create the alias?

So what speaks against you (Matt) now giving the credentials to Jonas?
Comment 13 Matthew Marchese Gentoo Infrastructure gentoo-dev 2024-08-26 05:58:20 UTC
(In reply to Andreas K. Hüttel from comment #12)
> So what speaks against you (Matt) now giving the credentials to Jonas?

Nothing but time - which is short for me this summer. Apologies for the delay. Only time for Gentoo lately has been very late hours of the evening...

I'll reset the password to a new shared secret and will PGP secure mail it out to Jonas and alicef.

Future state I hope to build out a distributed shared secrets solution using pass/go-pass. That way we'll get secrets syncing at no (email) sharing effort...
Comment 14 Matthew Marchese Gentoo Infrastructure gentoo-dev 2024-08-26 06:31:50 UTC
(In reply to Richard Freeman from comment #3)
> I'm happy to add devs to mod on Reddit as needed.  Or if infra wants to set
> up an account with credentials they control that works too.

Please add me on reddit. I'm not browsing a LOT, but I do take a look at it more than I look at the Cafepress site.

My reddit username: maffblaster

Thanks, Rich!
Comment 15 Matthew Marchese Gentoo Infrastructure gentoo-dev 2024-08-26 06:54:53 UTC
Since not many devs have volunteered to join more sites and services for Gentoo's social presence in 6 months, I propose we close this as CANTFIX for now.

I have very little interest in adding more effort into social sites beyond which I am already present.

I still fully support bus factor N > 1 whenever possible (as author of the policy), however at this time it would appear we're tapped out at the contributor resource level to achieve that policy goal... e.g. it's not at all because we *won't* keep the policy, it's because we *can't* do so right now unless we have more PR (or other) dev stepping up to solve the problem.

One alternative to solve this problem could be to add an additional clause into the policy to revoke (delete) Gentoo's presence unless the N > 1 rule is met ... Seems like this wouldn't go well for reputation since we'd leave a vacuum; especially on the more heavily populated sites.

Another alternative could be to write into policy that devs starting a presence on new sites should create a new site-related private alias (like was just performed for Mastodon/Fossodon) to which devs could get themselves added when the need arises. This covers the edge case where a dev retires or goes AWOL and another (new) PR member needs to reset credentials in order to restore team access.

My vote so far would be for the PR-specific private alias option as preferred over no presence at all.
Comment 16 Matt Jolly gentoo-dev 2024-08-27 09:56:56 UTC
I've been helping out on the Discord side for a while, however I don't have full admin access. I'm willing to be another +1 on the bus factor _or_ consider migrating to a new one with the only admin access being a g.o alias; the legacy administrative structure has been a cause of some friction in the past - perhaps a clean break is worthwhile.

I can also volunteer on the Reddit side if there's a need; I already try and keep an eye on posts there and escalate them to the moderation team if appropriate.
Comment 17 Richard Freeman gentoo-dev 2024-08-27 10:36:45 UTC
(In reply to Matt Jolly from comment #16)
> 
> I can also volunteer on the Reddit side if there's a need; I already try and
> keep an eye on posts there and escalate them to the moderation team if
> appropriate.

Up to you.  Ping me if you want to be a mod.  I do try to look out for flags but reddit isn't noisy about them unless you get a few on a single comment/post and people tend to be quicker about hitting reply than report.

I added maffblaster already.
Comment 18 Arisu Tachibana Gentoo Infrastructure gentoo-dev 2024-08-30 05:21:59 UTC
The mastodon account credential have been reported to the pr team