Editing Wiki.tetrain.com Upgrade Plan (section)

== 6. Migration completed (2026-07-24) — ready for client testing ==

* Backup recovered once <code><nowiki>wiki.tetrain.com</nowiki></code> SSH came back (client confirmed cause: their VPN had disconnected — nothing wrong with the box itself). DB (47MB), images (215MB), and extensions/config (161MB, archival only) transferred to <code><nowiki>wiki-new.tetrain.com</nowiki></code>, integrity verified via MD5.
* '''Full 6-hop version-hop chain run against the real production data''', not just a smoke test: 1.18.4 → 1.23.16 → 1.27.7 → 1.31.16 → 1.35.13 → 1.39.11 → '''1.43.9''' (switched from the initially-grabbed 1.43.2 to the latest 1.43.x patch after 1.43.2's pinned Composer dependencies hit security-advisory blocks — 1.43.9 resolved cleanly). Every hop's <code><nowiki>update.php</nowiki></code> completed with zero real errors. Data integrity confirmed identical before/after: 1707 pages, 3634 revisions, 163 users.
* Migrated DB exported from the migration container and imported into the real production MariaDB (scoped <code><nowiki>wikiuser</nowiki></code> account, not root).
* MediaWiki 1.43.9 codebase deployed to <code><nowiki>/var/www/wiki</nowiki></code>, Composer dependencies installed properly (<code><nowiki>composer install --no-dev</nowiki></code>).
* All 9 standard extensions + <code><nowiki>MsUpload</nowiki></code> pulled at the <code><nowiki>REL1_43</nowiki></code> branch (CheckUser, ConfirmEdit, Gadgets, Nuke, ParserFunctions, Renameuser, TimedMediaHandler, WikiEditor, Vector skin, MsUpload) — MediaWiki's own 1.43.9 tarball already bundles most of these, only Renameuser/TimedMediaHandler/MsUpload needed fetching separately. Confirmed all 9 loaded correctly via <code><nowiki>Special:Version</nowiki></code>.
* Images copied in (originals + archive, 236MB total incl. fresh-install defaults), SELinux contexts set correctly (<code><nowiki>httpd_sys_rw_content_t</nowiki></code> on images/cache dirs — Rocky 9 is enforcing by default).
* <code><nowiki>LocalSettings.php</nowiki></code> written fresh for the new environment: proper <code><nowiki>wgServer</nowiki></code> (HTTPS), freshly generated <code><nowiki>wgSecretKey</nowiki></code>/<code><nowiki>wgUpgradeKey</nowiki></code> (not the placeholder used during migration testing), scoped DB credentials pulled from <code><nowiki>/root/.wiki_db_credentials</nowiki></code> (never displayed in chat).
* '''End-to-end verification, all passing''': homepage loads (200, correct site title "TetraWiki"), a real migrated content page renders correctly (<code><nowiki>ISGEC_-_Next_Cloud_Deployment</nowiki></code>), direct image serving works, '''on-demand thumbnail generation confirmed working''' (GD-based, since <code><nowiki>$wgUseImageMagick = false</nowiki></code>).

=== What's deliberately dropped/changed vs. the old site ===

* <code><nowiki>HTML5video</nowiki></code> — dropped from the migration itself (not ported, since it's PHP8-incompatible and functionally superseded by <code><nowiki>TimedMediaHandler</nowiki></code> for *uploaded* video files). This left every pre-existing YouTube embed on the wiki broken (the tag simply doesn't exist anymore), since <code><nowiki>HTML5video</nowiki></code> was actually being used for embedding external YouTube videos, not self-hosted file uploads — a distinct use case <code><nowiki>TimedMediaHandler</nowiki></code> doesn't cover. '''Fixed 2026-07-25''', see Section 8 below — this line in earlier versions of this doc said "dropped, superseded by TimedMediaHandler," which undersold the actual user-facing impact and is superseded by that section.
* <code><nowiki>UserAdmin</nowiki></code> — dropped (abandoned upstream, no PHP8-compatible fork). Equivalent functionality now lives in core <code><nowiki>Special:UserRights</nowiki></code>, <code><nowiki>Special:Block</nowiki></code>, <code><nowiki>Special:PasswordReset</nowiki></code>, <code><nowiki>Special:CreateAccount</nowiki></code>. '''Flag this at handover''' — anyone who goes looking for the old UserAdmin panel URL needs to know it's gone and why.
* TLS is now enforced (old site was HTTP-only) — Let's Encrypt, auto-renewing.
* DB access is now a scoped <code><nowiki>wikiuser</nowiki></code> account, not <code><nowiki>root</nowiki></code> like the old box.

=== Not yet done ===

* Old <code><nowiki>wiki.tetrain.com</nowiki></code> box (now at <code><nowiki>wiki-old.tetrain.com</nowiki></code>, 172.105.56.64) decommission — DNS cutover is done (Section 9), but the box itself hasn't been shut down/reclaimed yet; still a distinct later decision pending client go-ahead, same gating pattern as every other destructive step in this engagement.
* '''Outbound email is confirmed broken''' on <code><nowiki>wiki-new</nowiki></code>/<code><nowiki>wiki.tetrain.com</nowiki></code> — MediaWiki has <code><nowiki>$wgEnableEmail</nowiki></code>/<code><nowiki>$wgEnableUserEmail</nowiki></code> on and a sender address configured, but no MTA is installed at all (no <code><nowiki>sendmail</nowiki></code>, no Postfix, nothing on port 25; PHP's <code><nowiki>sendmail_path</nowiki></code> points at a binary that doesn't exist). Password resets, "email this user," and watchlist notifications all silently fail right now. '''Client explicitly deferred this''' (2026-07-25) — parked until they're ready to take it up. Open question when they do: route through Tetra's existing relay servers (<code><nowiki>server-relay1/2/3.tetrain.com</nowiki></code>, used for every other Tetra-hosted mail flow in this fleet) vs. a local Postfix — leaning relay for SPF/deliverability consistency, but needs a decision.
* <code><nowiki>TimedMediaHandler</nowiki></code> needs <code><nowiki>ffmpeg</nowiki></code> for video transcoding if video *uploads* are actually used — not installed yet, wasn't blocking for the text/image content that makes up this wiki, can add if needed. (Separate from the YouTube-embed fix in Section 8, which doesn't touch file uploads.)
* Cosmetic: <code><nowiki>wgLogo</nowiki></code> points at a placeholder path; the old site's custom logo (<code><nowiki>tetralogo.jpg</nowiki></code> from the old <code><nowiki>skins/common/</nowiki></code>) could be restored if wanted.
* Rocky 9 kernel was bumped during initial setup (5.14.0-687.17 → .29) — a reboot is needed at some point to actually run the current kernel; not done yet since this was a live build in progress.

'''Production URL: https://wiki.tetrain.com/''' (live since 2026-07-25). Test/staging alias <code><nowiki>https://wiki-new.tetrain.com/</nowiki></code> still resolves to the same box and still works — both hostnames are on the same Apache vhost and TLS cert now (Section 9).