Editing Wiki.tetrain.com Runbook (section)

== Phase 5 — Deploy migrated MediaWiki 1.43.9 to production ==

=== 5.1 Export from the hop chain, import into production MariaDB ===

<pre>
<nowiki>
docker exec mw-mariadb mariadb-dump -uroot -pmigrate_temp_pw my_wiki > /root/mw-hop-migration/my_wiki_migrated_1.43.sql
mysql -u wikiuser -p my_wiki < /root/mw-hop-migration/my_wiki_migrated_1.43.sql
</nowiki>
</pre>

(The migrated dump — 26.5MB — is still on disk at <code><nowiki>/root/mw-hop-migration/my_wiki_migrated_1.43.sql</nowiki></code> if you need to re-import.)

=== 5.2 Deploy the codebase ===

<pre>
<nowiki>
mkdir -p /var/www/wiki
tar xzf /root/mw-hop-migration/tarballs/mediawiki-1.43.9.tar.gz --strip-components=1 -C /var/www/wiki

cd /var/www/wiki
curl -sS https://getcomposer.org/installer | php
php composer.phar install --no-dev
</nowiki>
</pre>

=== 5.3 Extensions — 9 standard + MsUpload ===

Most of the 9 (<code><nowiki>CheckUser</nowiki></code>, <code><nowiki>ConfirmEdit</nowiki></code>, <code><nowiki>Gadgets</nowiki></code>, <code><nowiki>Nuke</nowiki></code>, <code><nowiki>ParserFunctions</nowiki></code>, <code><nowiki>WikiEditor</nowiki></code>, plus many more not in the original list) already ship inside the 1.43.9 tarball itself — only <code><nowiki>Renameuser</nowiki></code>, <code><nowiki>TimedMediaHandler</nowiki></code>, and <code><nowiki>MsUpload</nowiki></code> needed fetching separately:

<pre>
<nowiki>
cd /var/www/wiki/extensions
git clone --branch REL1_43 https://gerrit.wikimedia.org/r/mediawiki/extensions/Renameuser.git
git clone --branch REL1_43 https://gerrit.wikimedia.org/r/mediawiki/extensions/TimedMediaHandler.git
git config --global --add safe.directory /var/www/wiki/extensions/MsUpload
git clone --branch REL1_43 https://github.com/wikimedia/mediawiki-extensions-MsUpload.git MsUpload
</nowiki>
</pre>

(Confirmed live: <code><nowiki>MsUpload</nowiki></code>'s <code><nowiki>.git</nowiki></code> remote is exactly <code><nowiki>https://github.com/wikimedia/mediawiki-extensions-MsUpload.git</nowiki></code>, branch <code><nowiki>REL1_43</nowiki></code>, current commit <code><nowiki>0c261546d07d9cdd152541e220b14a8a969b58a</nowiki></code>.)

<code><nowiki>UserAdmin</nowiki></code> and <code><nowiki>HTML5video</nowiki></code> are '''not''' cloned here — dropped per the decision log (<code><nowiki>UserAdmin</nowiki></code>: abandoned upstream, no PHP8 fork; <code><nowiki>HTML5video</nowiki></code>: PHP8-incompatible, later replaced by <code><nowiki>EmbedVideo</nowiki></code> in Phase 7, not by <code><nowiki>TimedMediaHandler</nowiki></code> as originally assumed).

=== 5.4 <code><nowiki>LocalSettings.php</nowiki></code> — production version ===

Written fresh (not copied from the hop chain's minimal version). Full current content, secrets redacted, confirmed live via <code><nowiki>cat /var/www/wiki/LocalSettings.php</nowiki></code>:

<pre>
<nowiki>
<?php
if ( !defined( 'MEDIAWIKI' ) ) { exit; }

$wgSitename = "TetraWiki";
$wgMetaNamespace = "TetraWiki";

$wgScriptPath = "";
$wgServer = "https://wiki-new.tetrain.com";   // updated again in Phase 8 to the real domain
$wgResourceBasePath = $wgScriptPath;

$wgEmergencyContact = "biswajit.tetra@gmail.com";
$wgPasswordSender = "biswajit.tetra@gmail.com";
$wgEnableEmail = true;
$wgEnableUserEmail = true;
$wgEnotifUserTalk = false;
$wgEnotifWatchlist = false;
$wgEmailAuthentication = true;

$wgDBtype = "mysql";
$wgDBserver = "localhost";
$wgDBname = "my_wiki";
$wgDBuser = "wikiuser";
$wgDBpassword = "<from /root/.wiki_db_credentials>";
$wgSecretKey = "<freshly generated, not the migration-testing placeholder>";
$wgUpgradeKey = "<freshly generated>";

$wgDBprefix = "";
$wgDBTableOptions = "ENGINE=InnoDB, DEFAULT CHARSET=binary";
$wgSharedDB = null;

$wgMainCacheType = CACHE_ACCEL;
$wgMemCachedServers = [];

$wgEnableUploads = true;
$wgUseImageMagick = false;
$wgUseInstantCommons = false;
$wgLanguageCode = "en";
$wgLocaltimezone = "UTC";
$wgLocalisationCacheConf['storeDirectory'] = "/var/www/wiki/cache";
$wgSitemapNamespaces = false;

$wgDefaultSkin = "vector-2022";   // see Phase 6 — legacy "vector" was the original wrong value
wfLoadSkin( 'Vector' );

wfLoadExtension( 'CheckUser' );
wfLoadExtension( 'ConfirmEdit' );
wfLoadExtension( 'ConfirmEdit/QuestyCaptcha' );
wfLoadExtension( 'Gadgets' );
wfLoadExtension( 'Nuke' );
wfLoadExtension( 'ParserFunctions' );
wfLoadExtension( 'Renameuser' );
wfLoadExtension( 'TimedMediaHandler' );
wfLoadExtension( 'WikiEditor' );
wfLoadExtension( 'MsUpload' );
wfLoadExtension( 'EmbedVideo' );   // added in Phase 7, not present at initial deploy

$wgGroupPermissions['*']['edit'] = true;
$wgGroupPermissions['*']['createaccount'] = true;
$wgGroupPermissions['*']['read'] = true;

$wgRightsPage = "";
$wgRightsUrl = "";
$wgRightsText = "";
$wgDiff3 = "/usr/bin/diff3";
</nowiki>
</pre>

=== 5.5 Images + SELinux ===

<pre>
<nowiki>
tar xzf /root/mw-hop-migration/images.tar.gz -C /var/www/wiki
chown -R apache:apache /var/www/wiki
semanage fcontext -a -t httpd_sys_rw_content_t "/var/www/wiki/images(/.*)?"
semanage fcontext -a -t httpd_sys_rw_content_t "/var/www/wiki/cache(/.*)?"
restorecon -Rv /var/www/wiki/images /var/www/wiki/cache
</nowiki>
</pre>

Confirmed live: <code><nowiki>ls -Zd</nowiki></code> shows <code><nowiki>httpd_sys_content_t</nowiki></code> on <code><nowiki>/var/www/wiki</nowiki></code> itself and <code><nowiki>httpd_sys_rw_content_t</nowiki></code> on <code><nowiki>images/</nowiki></code> and <code><nowiki>cache/</nowiki></code> specifically — matches the pattern above (Rocky 9 is SELinux-enforcing by default, this was required, not optional).

'''Verify''': homepage loads (200, title "TetraWiki"); a real content page renders (<code><nowiki>ISGEC_-_Next_Cloud_Deployment</nowiki></code> was the one checked); thumbnail generation works (GD-based since <code><nowiki>$wgUseImageMagick = false</nowiki></code>).

----