{"host": "gerrit2003.wikimedia.org", "state": "core_diff", "description": "Differences to core resources", "diff": {"full": {"total": 3444, "only_in_self": ["File[/var/lib/gerrit/review_site/bin/gerrit.war]", "File[/var/lib/gerrit/review_site/bin]", "File[/var/lib/gerrit/review_site/etc/gerrit.config]", "File[/var/lib/gerrit/review_site/etc/gitiles.config]", "File[/var/lib/gerrit/review_site/etc/its/templates]", "File[/var/lib/gerrit/review_site/etc/lfs.config]", "File[/var/lib/gerrit/review_site/etc/log4j.xml]", "File[/var/lib/gerrit/review_site/etc/replication.config]", "File[/var/lib/gerrit/review_site/etc/secure.config]", "File[/var/lib/gerrit/review_site/etc/ssh_host_key]", "File[/var/lib/gerrit/review_site/lib]", "File[/var/lib/gerrit/review_site/logs]", "File[/var/lib/gerrit/review_site/plugins]", "File[/var/lib/gerrit/review_site/tmp]", "File[/var/lib/gerrit/review_site]"], "only_in_other": ["File[/srv/site_path/bin/gerrit.war]", "File[/srv/site_path/bin]", "File[/srv/site_path/etc/gerrit.config]", "File[/srv/site_path/etc/gitiles.config]", "File[/srv/site_path/etc/its/templates]", "File[/srv/site_path/etc/lfs.config]", "File[/srv/site_path/etc/log4j.xml]", "File[/srv/site_path/etc/replication.config]", "File[/srv/site_path/etc/secure.config]", "File[/srv/site_path/etc/ssh_host_key]", "File[/srv/site_path/lib]", "File[/srv/site_path/logs]", "File[/srv/site_path/plugins]", "File[/srv/site_path/tmp]", "File[/srv/site_path]"], "resource_diffs": [{"resource": "File[/var/lib/gerrit/review_site/etc/secure.config]", "content": "--- /var/lib/gerrit/review_site/etc/secure.config.orig\n+++ /var/lib/gerrit/review_site/etc/secure.config\n@@ -1,10 +0,0 @@\n-[auth]\n-    registerEmailPrivateKey = AsL1PruNcpXuSAIjcCLqT\n-[its-phabricator]\n-    token = cli-unknownvalue\n-\n-[plugin \"javamelody\"]\n-    prometheusBearerToken = prome123\n-[plugin \"metrics-reporter-prometheus\"]\n-    prometheusBearerToken = prome123\n-", "parameters": "--- File[/var/lib/gerrit/review_site/etc/secure.config].orig\n+++ File[/var/lib/gerrit/review_site/etc/secure.config]\n\n-    owner => gerrit\n-    mode  => 0440\n-    group => gerrit\n"}, {"resource": "File[/lib/systemd/system/gerrit.service]", "content": "--- /lib/systemd/system/gerrit.service.orig\n+++ /lib/systemd/system/gerrit.service\n@@ -7,7 +7,7 @@\n Group=gerrit\n Type=simple\n EnvironmentFile=/etc/default/gerrit\n-ExecStart=/usr/lib/jvm/java-17-openjdk-amd64/bin/java -Xmx64g -Xms64g -Dflogger.backend_factory=com.google.common.flogger.backend.log4j.Log4jBackendFactory#getInstance -Dflogger.logging_context=com.google.gerrit.server.logging.LoggingContext#getInstance -Dh2.maxCompactTime=15000 -XX:+UnlockExperimentalVMOptions -XX:G1NewSizePercent=15 -XX:+UseStringDeduplication -XX:+HeapDumpOnOutOfMemoryError -XX:+ExitOnOutOfMemoryError -XX:HeapDumpPath=/srv/gerrit  -jar /var/lib/gerrit/review_site/bin/gerrit.war daemon -d /var/lib/gerrit/review_site\n+ExecStart=/usr/lib/jvm/java-17-openjdk-amd64/bin/java -Xmx64g -Xms64g -Dflogger.backend_factory=com.google.common.flogger.backend.log4j.Log4jBackendFactory#getInstance -Dflogger.logging_context=com.google.gerrit.server.logging.LoggingContext#getInstance -Dh2.maxCompactTime=15000 -XX:+UnlockExperimentalVMOptions -XX:G1NewSizePercent=15 -XX:+UseStringDeduplication -XX:+HeapDumpOnOutOfMemoryError -XX:+ExitOnOutOfMemoryError -XX:HeapDumpPath=/srv/gerrit  -jar /srv/site_path/bin/gerrit.war daemon -d /srv/site_path\n \n # Give it a bit more time to terminate cleanly.\n #"}, {"resource": "Nrpe::Check[check_gerrit]", "parameters": "--- Nrpe::Check[check_gerrit].orig\n+++ Nrpe::Check[check_gerrit]\n\n@@\n-    command => /usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 --ereg-argument-array '^/usr/lib/jvm/java-17-openjdk-amd64/bin/java .*-jar /var/lib/gerrit/review_site/bin/gerrit.war daemon -d /var/lib/gerrit/review_site'\n+    command => /usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 --ereg-argument-array '^/usr/lib/jvm/java-17-openjdk-amd64/bin/java .*-jar /srv/site_path/bin/gerrit.war daemon -d /srv/site_path'\n"}, {"resource": "File[/srv/site_path/etc/gerrit.config]", "content": "--- /srv/site_path/etc/gerrit.config.orig\n+++ /srv/site_path/etc/gerrit.config\n@@ -0,0 +1,282 @@\n+# Full documentation is at:\n+#\n+# https://gerrit.wikimedia.org/r/Documentation/config-gerrit.html\n+#\n+\n+[auth]\n+    type = LDAP\n+    cookieSecure = true\n+    cookiePath = /\n+    registerUrl = https://idm.wikimedia.org/signup/\n+    gitBasicAuth = true\n+    gitBasicAuthPolicy = HTTP_LDAP\n+[cache]\n+    directory = cache\n+[cache \"changes_by_project\"]\n+    memoryLimit = 3096\n+[cache \"changeid_project\"]\n+    memoryLimit = 3096\n+[cache \"ldap_groups_byinclude\"]\n+    maxAge = 1 hour\n+[cache \"ldap_usernames\"]\n+    maxAge = 1 hour\n+    memoryLimit = 2048\n+[cache \"projects\"]\n+    memoryLimit = 3096\n+    loadOnStartup = true\n+[cache \"static_content\"]\n+    maxAge = 1 day\n+[cache \"web_sessions\"]\n+    maxAge = 90 days\n+    memoryLimit = 8192\n+    diskLimit = 256m\n+[capability]\n+    administrateServer = group ldap/gerritadmin\n+[change]\n+    # Richer diff3 rendering for changes with conflicts T359821\n+    diff3ConflictView = true\n+    disablePrivateChanges = true\n+    # Moving changes may be counter-intuitive and probably needs\n+    # discussion before turning it on.\n+    # See https://gerrit-review.googlesource.com/Documentation/config-gerrit.html#change.move\n+    # Since Gerrit v2.15 does not have the possibility to move\n+    # changes, we turn it off for now. Once it has been discussed if\n+    # we want it, we can still turn it on.\n+    move = false\n+    # Populate whether a change in mergeable in ChangeInfo objects\n+    # Causes all open changes to be reindexed when the target reference\n+    # advances.\n+    mergeabilityComputationBehavior = API_REF_UPDATED_AND_CHANGE_REINDEX\n+[changeCleanup]\n+    # Not actually used, but Gerrit complains if unset\n+    interval = 1 week\n+    startTime = Sat 02:59\n+[commentlink \"bugzilla\"]\n+    match = \"\\\\b[bB][uU][gG]\\\\:?\\\\s+#?(\\\\d+)\\\\b\"\n+    link = https://bugzilla.wikimedia.org/$1\n+[commentlink \"changeid\"]\n+    match = \\\\b(I[0-9a-f]{7,40})\\\\b\n+    link = /q/$1\n+[commentlink \"codereview\"]\n+    match = \\\\br(\\\\d+)\\\\b\n+    link = https://www.mediawiki.org/wiki/Special:Code/MediaWiki/$1\n+[commentlink \"commit\"]\n+    match = (^|\\\\s|[:,!?\\\\(\\\\[\\\\{])([0-9a-f]{7,40})\\\\b\n+    link = /q/$2\n+    prefix = $1\n+    text = $2\n+[commentlink \"cve\"]\n+    match = \\\\b(CVE\\\\-\\\\d{4}\\\\-\\\\d+)\\\\b\n+    link = https://cve.mitre.org/cgi-bin/cvename.cgi?name=$1\n+[commentlink \"its-phabricator\"]\n+    # $1 must hold the bug number because of the notification bots that are using this.\n+    match = \"\\\\bT(\\\\d+)(#\\\\d+)?\\\\b(?![#\\\"]|</a>)\"\n+    link = https://phabricator.wikimedia.org/T$1$2\n+[commentlink \"mingle-analytics\"]\n+    match = \"\\\\b([aA]nalytics\\\\s*[:-]?\\\\s*[cC]ard|[cC]ard\\\\s*[:-]?\\\\s*[aA]nalytics)\\\\s*\\\\#?\\\\s*(\\\\d+)\\\\b\"\n+    link = https://wikimedia.mingle.thoughtworks.com/projects/analytics/cards/$2\n+[commentlink \"rt\"]\n+    match = \"\\\\b[rR][tT]\\\\:?\\\\s+#?(\\\\d+)\\\\b\"\n+    link = https://rt.wikimedia.org/Ticket/Display.html?id=$1\n+[commentlink \"scid\"]\n+    match = \"\\\\b[sS][cC][iI][dD]\\\\:?\\\\s+#?(\\\\d+)\\\\b\"\n+    link = https://meta.wikimedia.org/w/index.php?oldid=$1\n+[commitmessage]\n+    maxSubjectLength = 100\n+    maxLineLength = 120\n+[container]\n+    # Parameters in the container section are solely used by the `gerrit.sh`\n+    # wrapper which we do NOT use on the WMF instance.\n+    #\n+    # One must instead inject the parameters in the ExecStart systemd unit.\n+    #\n+    # `gerrit init` makes a few update, list them there to avoid unwanted\n+    # modifications:\n+    user = gerrit\n+    javaHome = /usr/lib/jvm/java-17-openjdk-amd64\n+    javaOptions = \"-Dflogger.backend_factory=com.google.common.flogger.backend.log4j.Log4jBackendFactory#getInstance\"\n+    javaOptions = \"-Dflogger.logging_context=com.google.gerrit.server.logging.LoggingContext#getInstance\"\n+[core]\n+    packedGitOpenFiles = 20000\n+    packedGitLimit = 4g\n+    packedGitWindowSize = 16k\n+    streamFileThreshold = 100m\n+    useRecursiveMerge = true\n+[execution]\n+    defaultThreadPoolSize = 2\n+[experiments]\n+    # Enhance diff with ResembleJS - T341291\n+    enabled = UiFeature__new_image_diff_ui\n+\n+    # Browser notifications\n+    # Since Gerrit 3.8 and the default in 3.12 - T389327\n+    enabled = UiFeature__push_notifications\n+[gc]\n+    interval = 1 week\n+    startTime = Sat 02:00\n+[gerrit]\n+    basePath = /srv/gerrit/git\n+    canonicalWebUrl = https://gerrit.wikimedia.org/r/\n+    faviconPath = static/wikimedia-codereview-logo.cache.ico\n+    # Used in gerrit 2.16+\n+    # see https://gerrit-review.googlesource.com/Documentation/config-gerrit.html#gerrit.listProjectsFromIndex\n+    listProjectsFromIndex = true\n+    reportBugUrl = https://phabricator.wikimedia.org/maniphest/task/create/?projects=PHID-PROJ-lc5rwomzjp6fmcdpbw43\n+    serverId = e9e9afe9-4712-486d-8885-f54b72dd1951\n+[groups]\n+    newGroupsVisibleToAll = true\n+[http]\n+    addUserAsResponseHeader = true\n+[httpd]\n+    listenUrl = proxy-https://127.0.0.1:8080/r/\n+    maxQueued = 500\n+    minThreads = 10\n+    maxThreads = 60\n+    maxWait = 2 min\n+    # Set the default explicitly. We require this to be longer than Apache 2\n+    # mod_proxy ProxyTimeout. See modules/profile/templates/gerrit/apache.erb\n+    # where it is set to a lower value.\n+    #\n+    # Ref: https://phabricator.wikimedia.org/T246763#11637703\n+    idleTimeout = 30 sec\n+[index]\n+    type = LUCENE\n+# User gerritbot\n+[its-phabricator]\n+    url = https://phabricator.wikimedia.org/\n+    # To be removed once we upgrade to 2.14+.\n+    username = gerritbot\n+    commentOnChangeAbandoned = false\n+    commentOnChangeMerged = false\n+    commentOnChangeRestored = false\n+    commentOnChangeCreated = false\n+    commentOnCommentAdded = false\n+    commentOnPatchSetCreated = false\n+    commentOnRefUpdatedGitWeb = false\n+[log]\n+    jsonLogging = true\n+    textLogging = true\n+    timeToKeep = 30d\n+[ldap]\n+    server = ldaps://ldap-ro.codfw.wikimedia.org\n+    accountBase = ou=people,dc=wikimedia,dc=org\n+    accountPattern = (&(objectClass=person)(cn=${username})(!(pwdPolicySubentry=cn=disabled,ou=ppolicies,dc=wikimedia,dc=org)))\n+    accountFullName = cn\n+    groupBase = ou=groups,dc=wikimedia,dc=org\n+    groupMemberPattern = (&(objectClass=groupOfNames)(member=${dn}))\n+    groupScope = one\n+    groupsVisibleToAll = true\n+    # Fixes T152640\n+    localUsernameToLowerCase = true\n+    connectTimeout = 5 s\n+    readTimeout = 5 s\n+[lfs]\n+    plugin = lfs\n+[mimetype \"application/javascript\"]\n+    safe = true\n+[mimetype \"application/x-php\"]\n+    safe = true\n+[mimetype \"image/bmp\"]\n+    safe = true\n+[mimetype \"image/gif\"]\n+    safe = true\n+[mimetype \"image/jpeg\"]\n+    safe = true\n+[mimetype \"image/png\"]\n+    safe = true\n+[mimetype \"image/tiff\"]\n+    safe = true\n+[mimetype \"image/x-icon\"]\n+    safe = true\n+[mimetype \"text/css\"]\n+    safe = true\n+[mimetype \"text/javascript\"]\n+    safe = true\n+[mimetype \"text/plain\"]\n+    safe = true\n+[mimetype \"text/x-php\"]\n+    safe = true\n+\n+# https://gerrit.wikimedia.org/r/plugins/metrics-reporter-prometheus/Documentation/config.md\n+[plugin \"metrics-reporter-prometheus\"]\n+# The pattern matching is done against the Gerrit internal metrics listed at\n+# https://gerrit.wikimedia.org/r/Documentation/metrics.html\n+#\n+# Metrics exposed by the plugin can be seen at:\n+# https://gerrit.wikimedia.org/r/plugins/metrics-reporter-prometheus/metrics\n+    excludeMetrics = ^change/submit.*\n+    excludeMetrics = ^http/server/rest_api/.*\n+    excludeMetrics = ^http/server/rest_api/.*\n+    excludeMetrics = license/cla_check_count\n+    excludeMetrics = ^plugin/latency.*\n+    excludeMetrics = ^reviewer_suggestion/.*\n+    excludeMetrics = ^sequence/next_id_latency.*\n+\n+# https://gerrit.wikimedia.org/r/plugins/readonly/Documentation/config.md\n+[plugin \"readonly\"]\n+# When doing switch over we need to be able to monitor the leftover replication\n+# tasks by using `replication list`. We might also want to start replications\n+# and thus allow any `replication` command.\n+allowSshCommand = ^replication\n+\n+# https://gerrit.wikimedia.org/r/plugins/rename-project/Documentation/config.md\n+[plugin \"rename-project\"]\n+    # The primary sends to replica daemons the `gerrit rename-project` command\n+    # The `gerrit2` user is in the Administators group on Gerrit\n+    url = ssh://gerrit2@gerrit1003.wikimedia.org:29418\n+    url = ssh://gerrit2@gerrit2002.wikimedia.org:29418\n+\n+[plugin \"webhooks\"]\n+    sslVerify = true\n+\n+[noteDb \"changes\"]\n+    autoMigrate = false\n+    trial = false\n+    write = true\n+    read = true\n+    sequence = true\n+    primaryStorage = note db\n+    disableReviewDb = true\n+[pack]\n+    deltacompression = true\n+[receive]\n+    maxObjectSizeLimit = 100m\n+    maxBatchChanges = 10\n+    enableSignedPush = false\n+    autogc = false\n+[repository \"*\"]\n+    ownerGroup = Administrators\n+[repository \"mediawiki/*\"]\n+    ownerGroup = mediawiki\n+[repository \"operations/*\"]\n+    ownerGroup = ldap/ops\n+[sendemail]\n+    includeDiff = true\n+    connectTimeout = 30 sec\n+    smtpServer = localhost\n+    threadPoolSize = 2\n+[sshd]\n+    listenAddress = *:29418\n+    loginGraceTime = 60 s\n+    idleTimeout = 3600 s\n+    maxConnectionsPerUser = 8\n+    threads = 28\n+    batchThreads = 4\n+    # Avoid some fetches issues over ssh\n+    # Intentionally undocumented upstream\n+    # T263293\n+    enableChannelIdTracking = false\n+[trackingid \"bugzilla\"]\n+    footer = Bug:\n+    match = \"\\\\#?\\\\d{1,6}\"\n+    system = Bugzilla\n+[trackingid \"phabricator\"]\n+    footer = Bug:\n+    match = T\\\\d+\n+    system = Phab\n+[trackingid \"rt\"]\n+    footer = RT:\n+    match = \"\\\\#?\\\\d{1,6}\"\n+    system = RT\n+[user]\n+    email = gerrit@wikimedia.org", "parameters": "--- File[/srv/site_path/etc/gerrit.config].orig\n+++ File[/srv/site_path/etc/gerrit.config]\n\n+    owner => gerrit\n+    mode  => 0444\n+    group => gerrit\n"}, {"resource": "File[/srv/site_path/logs]", "parameters": "--- File[/srv/site_path/logs].orig\n+++ File[/srv/site_path/logs]\n\n+    require => Scap::Target[gerrit/gerrit]\n+    group   => gerrit\n+    ensure  => link\n+    owner   => gerrit\n+    target  => /var/log/gerrit\n"}, {"resource": "File[/etc/default/gerrit]", "content": "--- /etc/default/gerrit.orig\n+++ /etc/default/gerrit\n@@ -1,2 +1,2 @@\n-GERRIT_SITE=\"/var/lib/gerrit/review_site\"\n-GERRIT_WAR=\"/var/lib/gerrit/review_site/bin/gerrit.war\"\n+GERRIT_SITE=\"/srv/site_path\"\n+GERRIT_WAR=\"/srv/site_path/bin/gerrit.war\""}, {"resource": "Systemd::Service[gerrit]"}, {"resource": "File[/var/lib/gerrit/review_site/etc/replication.config]", "content": "--- /var/lib/gerrit/review_site/etc/replication.config.orig\n+++ /var/lib/gerrit/review_site/etc/replication.config\n@@ -1,41 +0,0 @@\n-####################################\n-# This file is generated by puppet #\n-####################################\n-[gerrit]\n-  replicateOnStartup = true\n-  # Re-enable this once the bug is fixed\n-  # todo with reloading the replication config.\n-  autoReload = false\n-  defaultForceUpdate = true\n-[remote \"github\"]\n-  authGroup = mediawiki-replication\n-  createMissingRepositories = false\n-  maxRetries = 50\n-  mirror = false\n-  projects = ^(?:(?!apps\\\\/).)*$\n-  push = +refs/heads/*:refs/heads/*\n-  push = +refs/tags/*:refs/tags/*\n-  remoteNameStyle = dash\n-  replicatePermissions = false\n-  rescheduleDelay = 15\n-  threads = 2\n-  url = git@github.com:wikimedia/${name}\n-[remote \"replica\"]\n-  defaultForceUpdate = true\n-  mirror = true\n-  replicateHiddenProjects = true\n-  replicateProjectDeletions = true\n-  replicationDelay = 5\n-  rescheduleDelay = 5\n-  threads = 4\n-  url = gerrit@gerrit1003.wikimedia.org:/srv/gerrit/git/${name}.git\n-[remote \"spare\"]\n-  defaultForceUpdate = true\n-  mirror = true\n-  replicateHiddenProjects = true\n-  replicateProjectDeletions = true\n-  replicationDelay = 5\n-  rescheduleDelay = 5\n-  threads = 4\n-  url = gerrit@gerrit2002.wikimedia.org:/srv/gerrit/git/${name}.git\n-", "parameters": "--- File[/var/lib/gerrit/review_site/etc/replication.config].orig\n+++ File[/var/lib/gerrit/review_site/etc/replication.config]\n\n-    owner  => gerrit\n-    mode   => 0444\n-    group  => gerrit\n-    ensure => file\n"}, {"resource": "File[/var/lib/gerrit/review_site/plugins]", "parameters": "--- File[/var/lib/gerrit/review_site/plugins].orig\n+++ File[/var/lib/gerrit/review_site/plugins]\n\n-    require => Scap::Target[gerrit/gerrit]\n-    group   => root\n-    ensure  => link\n-    owner   => root\n-    target  => /srv/deployment/gerrit/gerrit/plugins\n"}, {"resource": "File[/var/lib/gerrit/review_site/etc/gerrit.config]", "content": "--- /var/lib/gerrit/review_site/etc/gerrit.config.orig\n+++ /var/lib/gerrit/review_site/etc/gerrit.config\n@@ -1,282 +0,0 @@\n-# Full documentation is at:\n-#\n-# https://gerrit.wikimedia.org/r/Documentation/config-gerrit.html\n-#\n-\n-[auth]\n-    type = LDAP\n-    cookieSecure = true\n-    cookiePath = /\n-    registerUrl = https://idm.wikimedia.org/signup/\n-    gitBasicAuth = true\n-    gitBasicAuthPolicy = HTTP_LDAP\n-[cache]\n-    directory = cache\n-[cache \"changes_by_project\"]\n-    memoryLimit = 3096\n-[cache \"changeid_project\"]\n-    memoryLimit = 3096\n-[cache \"ldap_groups_byinclude\"]\n-    maxAge = 1 hour\n-[cache \"ldap_usernames\"]\n-    maxAge = 1 hour\n-    memoryLimit = 2048\n-[cache \"projects\"]\n-    memoryLimit = 3096\n-    loadOnStartup = true\n-[cache \"static_content\"]\n-    maxAge = 1 day\n-[cache \"web_sessions\"]\n-    maxAge = 90 days\n-    memoryLimit = 8192\n-    diskLimit = 256m\n-[capability]\n-    administrateServer = group ldap/gerritadmin\n-[change]\n-    # Richer diff3 rendering for changes with conflicts T359821\n-    diff3ConflictView = true\n-    disablePrivateChanges = true\n-    # Moving changes may be counter-intuitive and probably needs\n-    # discussion before turning it on.\n-    # See https://gerrit-review.googlesource.com/Documentation/config-gerrit.html#change.move\n-    # Since Gerrit v2.15 does not have the possibility to move\n-    # changes, we turn it off for now. Once it has been discussed if\n-    # we want it, we can still turn it on.\n-    move = false\n-    # Populate whether a change in mergeable in ChangeInfo objects\n-    # Causes all open changes to be reindexed when the target reference\n-    # advances.\n-    mergeabilityComputationBehavior = API_REF_UPDATED_AND_CHANGE_REINDEX\n-[changeCleanup]\n-    # Not actually used, but Gerrit complains if unset\n-    interval = 1 week\n-    startTime = Sat 02:59\n-[commentlink \"bugzilla\"]\n-    match = \"\\\\b[bB][uU][gG]\\\\:?\\\\s+#?(\\\\d+)\\\\b\"\n-    link = https://bugzilla.wikimedia.org/$1\n-[commentlink \"changeid\"]\n-    match = \\\\b(I[0-9a-f]{7,40})\\\\b\n-    link = /q/$1\n-[commentlink \"codereview\"]\n-    match = \\\\br(\\\\d+)\\\\b\n-    link = https://www.mediawiki.org/wiki/Special:Code/MediaWiki/$1\n-[commentlink \"commit\"]\n-    match = (^|\\\\s|[:,!?\\\\(\\\\[\\\\{])([0-9a-f]{7,40})\\\\b\n-    link = /q/$2\n-    prefix = $1\n-    text = $2\n-[commentlink \"cve\"]\n-    match = \\\\b(CVE\\\\-\\\\d{4}\\\\-\\\\d+)\\\\b\n-    link = https://cve.mitre.org/cgi-bin/cvename.cgi?name=$1\n-[commentlink \"its-phabricator\"]\n-    # $1 must hold the bug number because of the notification bots that are using this.\n-    match = \"\\\\bT(\\\\d+)(#\\\\d+)?\\\\b(?![#\\\"]|</a>)\"\n-    link = https://phabricator.wikimedia.org/T$1$2\n-[commentlink \"mingle-analytics\"]\n-    match = \"\\\\b([aA]nalytics\\\\s*[:-]?\\\\s*[cC]ard|[cC]ard\\\\s*[:-]?\\\\s*[aA]nalytics)\\\\s*\\\\#?\\\\s*(\\\\d+)\\\\b\"\n-    link = https://wikimedia.mingle.thoughtworks.com/projects/analytics/cards/$2\n-[commentlink \"rt\"]\n-    match = \"\\\\b[rR][tT]\\\\:?\\\\s+#?(\\\\d+)\\\\b\"\n-    link = https://rt.wikimedia.org/Ticket/Display.html?id=$1\n-[commentlink \"scid\"]\n-    match = \"\\\\b[sS][cC][iI][dD]\\\\:?\\\\s+#?(\\\\d+)\\\\b\"\n-    link = https://meta.wikimedia.org/w/index.php?oldid=$1\n-[commitmessage]\n-    maxSubjectLength = 100\n-    maxLineLength = 120\n-[container]\n-    # Parameters in the container section are solely used by the `gerrit.sh`\n-    # wrapper which we do NOT use on the WMF instance.\n-    #\n-    # One must instead inject the parameters in the ExecStart systemd unit.\n-    #\n-    # `gerrit init` makes a few update, list them there to avoid unwanted\n-    # modifications:\n-    user = gerrit\n-    javaHome = /usr/lib/jvm/java-17-openjdk-amd64\n-    javaOptions = \"-Dflogger.backend_factory=com.google.common.flogger.backend.log4j.Log4jBackendFactory#getInstance\"\n-    javaOptions = \"-Dflogger.logging_context=com.google.gerrit.server.logging.LoggingContext#getInstance\"\n-[core]\n-    packedGitOpenFiles = 20000\n-    packedGitLimit = 4g\n-    packedGitWindowSize = 16k\n-    streamFileThreshold = 100m\n-    useRecursiveMerge = true\n-[execution]\n-    defaultThreadPoolSize = 2\n-[experiments]\n-    # Enhance diff with ResembleJS - T341291\n-    enabled = UiFeature__new_image_diff_ui\n-\n-    # Browser notifications\n-    # Since Gerrit 3.8 and the default in 3.12 - T389327\n-    enabled = UiFeature__push_notifications\n-[gc]\n-    interval = 1 week\n-    startTime = Sat 02:00\n-[gerrit]\n-    basePath = /srv/gerrit/git\n-    canonicalWebUrl = https://gerrit.wikimedia.org/r/\n-    faviconPath = static/wikimedia-codereview-logo.cache.ico\n-    # Used in gerrit 2.16+\n-    # see https://gerrit-review.googlesource.com/Documentation/config-gerrit.html#gerrit.listProjectsFromIndex\n-    listProjectsFromIndex = true\n-    reportBugUrl = https://phabricator.wikimedia.org/maniphest/task/create/?projects=PHID-PROJ-lc5rwomzjp6fmcdpbw43\n-    serverId = e9e9afe9-4712-486d-8885-f54b72dd1951\n-[groups]\n-    newGroupsVisibleToAll = true\n-[http]\n-    addUserAsResponseHeader = true\n-[httpd]\n-    listenUrl = proxy-https://127.0.0.1:8080/r/\n-    maxQueued = 500\n-    minThreads = 10\n-    maxThreads = 60\n-    maxWait = 2 min\n-    # Set the default explicitly. We require this to be longer than Apache 2\n-    # mod_proxy ProxyTimeout. See modules/profile/templates/gerrit/apache.erb\n-    # where it is set to a lower value.\n-    #\n-    # Ref: https://phabricator.wikimedia.org/T246763#11637703\n-    idleTimeout = 30 sec\n-[index]\n-    type = LUCENE\n-# User gerritbot\n-[its-phabricator]\n-    url = https://phabricator.wikimedia.org/\n-    # To be removed once we upgrade to 2.14+.\n-    username = gerritbot\n-    commentOnChangeAbandoned = false\n-    commentOnChangeMerged = false\n-    commentOnChangeRestored = false\n-    commentOnChangeCreated = false\n-    commentOnCommentAdded = false\n-    commentOnPatchSetCreated = false\n-    commentOnRefUpdatedGitWeb = false\n-[log]\n-    jsonLogging = true\n-    textLogging = true\n-    timeToKeep = 30d\n-[ldap]\n-    server = ldaps://ldap-ro.codfw.wikimedia.org\n-    accountBase = ou=people,dc=wikimedia,dc=org\n-    accountPattern = (&(objectClass=person)(cn=${username})(!(pwdPolicySubentry=cn=disabled,ou=ppolicies,dc=wikimedia,dc=org)))\n-    accountFullName = cn\n-    groupBase = ou=groups,dc=wikimedia,dc=org\n-    groupMemberPattern = (&(objectClass=groupOfNames)(member=${dn}))\n-    groupScope = one\n-    groupsVisibleToAll = true\n-    # Fixes T152640\n-    localUsernameToLowerCase = true\n-    connectTimeout = 5 s\n-    readTimeout = 5 s\n-[lfs]\n-    plugin = lfs\n-[mimetype \"application/javascript\"]\n-    safe = true\n-[mimetype \"application/x-php\"]\n-    safe = true\n-[mimetype \"image/bmp\"]\n-    safe = true\n-[mimetype \"image/gif\"]\n-    safe = true\n-[mimetype \"image/jpeg\"]\n-    safe = true\n-[mimetype \"image/png\"]\n-    safe = true\n-[mimetype \"image/tiff\"]\n-    safe = true\n-[mimetype \"image/x-icon\"]\n-    safe = true\n-[mimetype \"text/css\"]\n-    safe = true\n-[mimetype \"text/javascript\"]\n-    safe = true\n-[mimetype \"text/plain\"]\n-    safe = true\n-[mimetype \"text/x-php\"]\n-    safe = true\n-\n-# https://gerrit.wikimedia.org/r/plugins/metrics-reporter-prometheus/Documentation/config.md\n-[plugin \"metrics-reporter-prometheus\"]\n-# The pattern matching is done against the Gerrit internal metrics listed at\n-# https://gerrit.wikimedia.org/r/Documentation/metrics.html\n-#\n-# Metrics exposed by the plugin can be seen at:\n-# https://gerrit.wikimedia.org/r/plugins/metrics-reporter-prometheus/metrics\n-    excludeMetrics = ^change/submit.*\n-    excludeMetrics = ^http/server/rest_api/.*\n-    excludeMetrics = ^http/server/rest_api/.*\n-    excludeMetrics = license/cla_check_count\n-    excludeMetrics = ^plugin/latency.*\n-    excludeMetrics = ^reviewer_suggestion/.*\n-    excludeMetrics = ^sequence/next_id_latency.*\n-\n-# https://gerrit.wikimedia.org/r/plugins/readonly/Documentation/config.md\n-[plugin \"readonly\"]\n-# When doing switch over we need to be able to monitor the leftover replication\n-# tasks by using `replication list`. We might also want to start replications\n-# and thus allow any `replication` command.\n-allowSshCommand = ^replication\n-\n-# https://gerrit.wikimedia.org/r/plugins/rename-project/Documentation/config.md\n-[plugin \"rename-project\"]\n-    # The primary sends to replica daemons the `gerrit rename-project` command\n-    # The `gerrit2` user is in the Administators group on Gerrit\n-    url = ssh://gerrit2@gerrit1003.wikimedia.org:29418\n-    url = ssh://gerrit2@gerrit2002.wikimedia.org:29418\n-\n-[plugin \"webhooks\"]\n-    sslVerify = true\n-\n-[noteDb \"changes\"]\n-    autoMigrate = false\n-    trial = false\n-    write = true\n-    read = true\n-    sequence = true\n-    primaryStorage = note db\n-    disableReviewDb = true\n-[pack]\n-    deltacompression = true\n-[receive]\n-    maxObjectSizeLimit = 100m\n-    maxBatchChanges = 10\n-    enableSignedPush = false\n-    autogc = false\n-[repository \"*\"]\n-    ownerGroup = Administrators\n-[repository \"mediawiki/*\"]\n-    ownerGroup = mediawiki\n-[repository \"operations/*\"]\n-    ownerGroup = ldap/ops\n-[sendemail]\n-    includeDiff = true\n-    connectTimeout = 30 sec\n-    smtpServer = localhost\n-    threadPoolSize = 2\n-[sshd]\n-    listenAddress = *:29418\n-    loginGraceTime = 60 s\n-    idleTimeout = 3600 s\n-    maxConnectionsPerUser = 8\n-    threads = 28\n-    batchThreads = 4\n-    # Avoid some fetches issues over ssh\n-    # Intentionally undocumented upstream\n-    # T263293\n-    enableChannelIdTracking = false\n-[trackingid \"bugzilla\"]\n-    footer = Bug:\n-    match = \"\\\\#?\\\\d{1,6}\"\n-    system = Bugzilla\n-[trackingid \"phabricator\"]\n-    footer = Bug:\n-    match = T\\\\d+\n-    system = Phab\n-[trackingid \"rt\"]\n-    footer = RT:\n-    match = \"\\\\#?\\\\d{1,6}\"\n-    system = RT\n-[user]\n-    email = gerrit@wikimedia.org", "parameters": "--- File[/var/lib/gerrit/review_site/etc/gerrit.config].orig\n+++ File[/var/lib/gerrit/review_site/etc/gerrit.config]\n\n-    owner => gerrit\n-    mode  => 0444\n-    group => gerrit\n"}, {"resource": "File[/var/lib/gerrit/review_site/lib]", "parameters": "--- File[/var/lib/gerrit/review_site/lib].orig\n+++ File[/var/lib/gerrit/review_site/lib]\n\n-    owner  => gerrit\n-    mode   => 0555\n-    group  => gerrit\n-    ensure => directory\n"}, {"resource": "Class[Profile::Gerrit::Migration]", "parameters": "--- Class[Profile::Gerrit::Migration].orig\n+++ Class[Profile::Gerrit::Migration]\n\n@@\n-    gerrit_site => /var/lib/gerrit/review_site\n+    gerrit_site => /srv/site_path\n"}, {"resource": "File[/var/lib/gerrit/review_site/bin/gerrit.war]", "parameters": "--- File[/var/lib/gerrit/review_site/bin/gerrit.war].orig\n+++ File[/var/lib/gerrit/review_site/bin/gerrit.war]\n\n-    require => Scap::Target[gerrit/gerrit]\n-    group   => root\n-    ensure  => link\n-    owner   => root\n-    target  => /srv/deployment/gerrit/gerrit/gerrit.war\n"}, {"resource": "File[/srv/site_path/etc/secure.config]", "content": "--- /srv/site_path/etc/secure.config.orig\n+++ /srv/site_path/etc/secure.config\n@@ -0,0 +1,10 @@\n+[auth]\n+    registerEmailPrivateKey = AsL1PruNcpXuSAIjcCLqT\n+[its-phabricator]\n+    token = cli-unknownvalue\n+\n+[plugin \"javamelody\"]\n+    prometheusBearerToken = prome123\n+[plugin \"metrics-reporter-prometheus\"]\n+    prometheusBearerToken = prome123\n+", "parameters": "--- File[/srv/site_path/etc/secure.config].orig\n+++ File[/srv/site_path/etc/secure.config]\n\n+    owner => gerrit\n+    mode  => 0440\n+    group => gerrit\n"}, {"resource": "Nrpe::Monitor_service[gerrit]", "parameters": "--- Nrpe::Monitor_service[gerrit].orig\n+++ Nrpe::Monitor_service[gerrit]\n\n@@\n-    nrpe_command => /usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 --ereg-argument-array '^/usr/lib/jvm/java-17-openjdk-amd64/bin/java .*-jar /var/lib/gerrit/review_site/bin/gerrit.war daemon -d /var/lib/gerrit/review_site'\n+    nrpe_command => /usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 --ereg-argument-array '^/usr/lib/jvm/java-17-openjdk-amd64/bin/java .*-jar /srv/site_path/bin/gerrit.war daemon -d /srv/site_path'\n"}, {"resource": "File[/srv/site_path/etc/ssh_host_key]", "content": "--- /srv/site_path/etc/ssh_host_key.orig\n+++ /srv/site_path/etc/ssh_host_key\n@@ -0,0 +1,2 @@\n+Puppet::Pops::Types::PBinaryType::Binary\n+U05BS0VPSUwK", "parameters": "--- File[/srv/site_path/etc/ssh_host_key].orig\n+++ File[/srv/site_path/etc/ssh_host_key]\n\n+    group     => gerrit\n+    ensure    => present\n+    show_diff => False\n+    owner     => gerrit\n+    mode      => 0440\n"}, {"resource": "File[/srv/site_path/etc/lfs.config]", "content": "--- /srv/site_path/etc/lfs.config.orig\n+++ /srv/site_path/etc/lfs.config\n@@ -0,0 +1,4 @@\n+[storage]\n+    backend = fs\n+[fs \"gerrit-fs\"]\n+    directory = /srv/gerrit/data/lfs", "parameters": "--- File[/srv/site_path/etc/lfs.config].orig\n+++ File[/srv/site_path/etc/lfs.config]\n\n+    owner => gerrit\n+    mode  => 0444\n+    group => gerrit\n"}, {"resource": "File[/var/lib/gerrit/review_site/logs]", "parameters": "--- File[/var/lib/gerrit/review_site/logs].orig\n+++ File[/var/lib/gerrit/review_site/logs]\n\n-    require => Scap::Target[gerrit/gerrit]\n-    group   => gerrit\n-    ensure  => link\n-    owner   => gerrit\n-    target  => /var/log/gerrit\n"}, {"resource": "File[/var/lib/gerrit/review_site/etc/its/templates]", "parameters": "--- File[/var/lib/gerrit/review_site/etc/its/templates].orig\n+++ File[/var/lib/gerrit/review_site/etc/its/templates]\n\n-    group   => root\n-    ensure  => directory\n-    source  => puppet:///modules/gerrit/its/\n-    recurse => True\n-    owner   => root\n-    mode    => 0444\n-    purge   => True\n"}, {"resource": "File[/var/lib/gerrit/review_site/tmp]", "parameters": "--- File[/var/lib/gerrit/review_site/tmp].orig\n+++ File[/var/lib/gerrit/review_site/tmp]\n\n-    owner  => gerrit\n-    mode   => 0700\n-    group  => gerrit\n-    ensure => directory\n"}, {"resource": "File[/srv/site_path/bin]", "parameters": "--- File[/srv/site_path/bin].orig\n+++ File[/srv/site_path/bin]\n\n+    owner  => gerrit\n+    mode   => 0775\n+    group  => gerrit\n+    ensure => directory\n"}, {"resource": "File[/srv/site_path/etc/replication.config]", "content": "--- /srv/site_path/etc/replication.config.orig\n+++ /srv/site_path/etc/replication.config\n@@ -0,0 +1,41 @@\n+####################################\n+# This file is generated by puppet #\n+####################################\n+[gerrit]\n+  replicateOnStartup = true\n+  # Re-enable this once the bug is fixed\n+  # todo with reloading the replication config.\n+  autoReload = false\n+  defaultForceUpdate = true\n+[remote \"github\"]\n+  authGroup = mediawiki-replication\n+  createMissingRepositories = false\n+  maxRetries = 50\n+  mirror = false\n+  projects = ^(?:(?!apps\\\\/).)*$\n+  push = +refs/heads/*:refs/heads/*\n+  push = +refs/tags/*:refs/tags/*\n+  remoteNameStyle = dash\n+  replicatePermissions = false\n+  rescheduleDelay = 15\n+  threads = 2\n+  url = git@github.com:wikimedia/${name}\n+[remote \"replica\"]\n+  defaultForceUpdate = true\n+  mirror = true\n+  replicateHiddenProjects = true\n+  replicateProjectDeletions = true\n+  replicationDelay = 5\n+  rescheduleDelay = 5\n+  threads = 4\n+  url = gerrit@gerrit1003.wikimedia.org:/srv/gerrit/git/${name}.git\n+[remote \"spare\"]\n+  defaultForceUpdate = true\n+  mirror = true\n+  replicateHiddenProjects = true\n+  replicateProjectDeletions = true\n+  replicationDelay = 5\n+  rescheduleDelay = 5\n+  threads = 4\n+  url = gerrit@gerrit2002.wikimedia.org:/srv/gerrit/git/${name}.git\n+", "parameters": "--- File[/srv/site_path/etc/replication.config].orig\n+++ File[/srv/site_path/etc/replication.config]\n\n+    owner  => gerrit\n+    mode   => 0444\n+    group  => gerrit\n+    ensure => file\n"}, {"resource": "Systemd::Unit[gerrit]"}, {"resource": "File[/var/lib/gerrit/review_site/etc/ssh_host_key]", "content": "--- /var/lib/gerrit/review_site/etc/ssh_host_key.orig\n+++ /var/lib/gerrit/review_site/etc/ssh_host_key\n@@ -1,2 +0,0 @@\n-Puppet::Pops::Types::PBinaryType::Binary\n-U05BS0VPSUwK", "parameters": "--- File[/var/lib/gerrit/review_site/etc/ssh_host_key].orig\n+++ File[/var/lib/gerrit/review_site/etc/ssh_host_key]\n\n-    group     => gerrit\n-    ensure    => present\n-    show_diff => False\n-    owner     => gerrit\n-    mode      => 0440\n"}, {"resource": "File[/var/lib/gerrit/review_site/etc/log4j.xml]", "parameters": "--- File[/var/lib/gerrit/review_site/etc/log4j.xml].orig\n+++ File[/var/lib/gerrit/review_site/etc/log4j.xml]\n\n-    owner  => root\n-    group  => root\n-    ensure => absent\n"}, {"resource": "File[/var/lib/gerrit/review_site/etc/lfs.config]", "content": "--- /var/lib/gerrit/review_site/etc/lfs.config.orig\n+++ /var/lib/gerrit/review_site/etc/lfs.config\n@@ -1,4 +0,0 @@\n-[storage]\n-    backend = fs\n-[fs \"gerrit-fs\"]\n-    directory = /srv/gerrit/data/lfs", "parameters": "--- File[/var/lib/gerrit/review_site/etc/lfs.config].orig\n+++ File[/var/lib/gerrit/review_site/etc/lfs.config]\n\n-    owner => gerrit\n-    mode  => 0444\n-    group => gerrit\n"}, {"resource": "Class[Profile::Gerrit::Proxy]", "parameters": "--- Class[Profile::Gerrit::Proxy].orig\n+++ Class[Profile::Gerrit::Proxy]\n\n@@\n-    gerrit_site => /var/lib/gerrit/review_site\n+    gerrit_site => /srv/site_path\n"}, {"resource": "File[/srv/site_path/tmp]", "parameters": "--- File[/srv/site_path/tmp].orig\n+++ File[/srv/site_path/tmp]\n\n+    owner  => gerrit\n+    mode   => 0700\n+    group  => gerrit\n+    ensure => directory\n"}, {"resource": "File[/var/www/wikimedia-codereview-logo.cache.png]", "parameters": "--- File[/var/www/wikimedia-codereview-logo.cache.png].orig\n+++ File[/var/www/wikimedia-codereview-logo.cache.png]\n\n@@\n-    target => /var/lib/gerrit/review_site/static/wikimedia-codereview-logo.cache.png\n+    target => /srv/site_path/static/wikimedia-codereview-logo.cache.png\n"}, {"resource": "Class[Gerrit]", "parameters": "--- Class[Gerrit].orig\n+++ Class[Gerrit]\n\n@@\n-    gerrit_site => /var/lib/gerrit/review_site\n+    gerrit_site => /srv/site_path\n"}, {"resource": "File[/var/lib/gerrit/review_site/etc/gitiles.config]", "content": "--- /var/lib/gerrit/review_site/etc/gitiles.config.orig\n+++ /var/lib/gerrit/review_site/etc/gitiles.config\n@@ -1,7 +0,0 @@\n-[gerrit]\n-    cloneUrlType = http\n-    linkname = gitiles\n-    target = _self\n-    baseUrl = https://gerrit.wikimedia.org/g\n-[markdown]\n-    namedanchor = true", "parameters": "--- File[/var/lib/gerrit/review_site/etc/gitiles.config].orig\n+++ File[/var/lib/gerrit/review_site/etc/gitiles.config]\n\n-    owner => gerrit\n-    mode  => 0444\n-    group => gerrit\n"}, {"resource": "File[/srv/site_path]", "parameters": "--- File[/srv/site_path].orig\n+++ File[/srv/site_path]\n\n+    group   => gerrit\n+    ensure  => directory\n+    recurse => remote\n+    mode    => 0755\n+    owner   => gerrit\n+    source  => puppet:///modules/gerrit/site\n"}, {"resource": "File[/etc/gerrit]", "parameters": "--- File[/etc/gerrit].orig\n+++ File[/etc/gerrit]\n\n@@\n-    target => /var/lib/gerrit/review_site/etc\n+    target => /srv/site_path/etc\n"}, {"resource": "File[/etc/nagios/nrpe.d/check_gerrit.cfg]", "content": "--- /etc/nagios/nrpe.d/check_gerrit.cfg.orig\n+++ /etc/nagios/nrpe.d/check_gerrit.cfg\n@@ -1,2 +1,2 @@\n # File generated by puppet. DO NOT edit by hand\n-command[check_gerrit]=/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 --ereg-argument-array '^/usr/lib/jvm/java-17-openjdk-amd64/bin/java .*-jar /var/lib/gerrit/review_site/bin/gerrit.war daemon -d /var/lib/gerrit/review_site'\n+command[check_gerrit]=/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 --ereg-argument-array '^/usr/lib/jvm/java-17-openjdk-amd64/bin/java .*-jar /srv/site_path/bin/gerrit.war daemon -d /srv/site_path'"}, {"resource": "File[/srv/site_path/bin/gerrit.war]", "parameters": "--- File[/srv/site_path/bin/gerrit.war].orig\n+++ File[/srv/site_path/bin/gerrit.war]\n\n+    require => Scap::Target[gerrit/gerrit]\n+    group   => root\n+    ensure  => link\n+    owner   => root\n+    target  => /srv/deployment/gerrit/gerrit/gerrit.war\n"}, {"resource": "File[/srv/site_path/etc/its/templates]", "parameters": "--- File[/srv/site_path/etc/its/templates].orig\n+++ File[/srv/site_path/etc/its/templates]\n\n+    group   => root\n+    ensure  => directory\n+    source  => puppet:///modules/gerrit/its/\n+    recurse => True\n+    owner   => root\n+    mode    => 0444\n+    purge   => True\n"}, {"resource": "File[/srv/site_path/etc/log4j.xml]", "parameters": "--- File[/srv/site_path/etc/log4j.xml].orig\n+++ File[/srv/site_path/etc/log4j.xml]\n\n+    owner  => root\n+    group  => root\n+    ensure => absent\n"}, {"resource": "File[/srv/site_path/lib]", "parameters": "--- File[/srv/site_path/lib].orig\n+++ File[/srv/site_path/lib]\n\n+    owner  => gerrit\n+    mode   => 0555\n+    group  => gerrit\n+    ensure => directory\n"}, {"resource": "Class[Profile::Gerrit]", "parameters": "--- Class[Profile::Gerrit].orig\n+++ Class[Profile::Gerrit]\n\n@@\n-    gerrit_site => /var/lib/gerrit/review_site\n+    gerrit_site => /srv/site_path\n"}, {"resource": "File[/srv/site_path/etc/gitiles.config]", "content": "--- /srv/site_path/etc/gitiles.config.orig\n+++ /srv/site_path/etc/gitiles.config\n@@ -0,0 +1,7 @@\n+[gerrit]\n+    cloneUrlType = http\n+    linkname = gitiles\n+    target = _self\n+    baseUrl = https://gerrit.wikimedia.org/g\n+[markdown]\n+    namedanchor = true", "parameters": "--- File[/srv/site_path/etc/gitiles.config].orig\n+++ File[/srv/site_path/etc/gitiles.config]\n\n+    owner => gerrit\n+    mode  => 0444\n+    group => gerrit\n"}, {"resource": "File[/var/www/page-bkg.cache.jpg]", "parameters": "--- File[/var/www/page-bkg.cache.jpg].orig\n+++ File[/var/www/page-bkg.cache.jpg]\n\n@@\n-    target => /var/lib/gerrit/review_site/static/page-bkg.cache.jpg\n+    target => /srv/site_path/static/page-bkg.cache.jpg\n"}, {"resource": "File[/var/lib/gerrit/review_site]", "parameters": "--- File[/var/lib/gerrit/review_site].orig\n+++ File[/var/lib/gerrit/review_site]\n\n-    group   => gerrit\n-    ensure  => directory\n-    recurse => remote\n-    mode    => 0755\n-    owner   => gerrit\n-    source  => puppet:///modules/gerrit/site\n"}, {"resource": "File[/var/lib/gerrit/review_site/bin]", "parameters": "--- File[/var/lib/gerrit/review_site/bin].orig\n+++ File[/var/lib/gerrit/review_site/bin]\n\n-    owner  => gerrit\n-    mode   => 0775\n-    group  => gerrit\n-    ensure => directory\n"}, {"resource": "File[/srv/site_path/plugins]", "parameters": "--- File[/srv/site_path/plugins].orig\n+++ File[/srv/site_path/plugins]\n\n+    require => Scap::Target[gerrit/gerrit]\n+    group   => root\n+    ensure  => link\n+    owner   => root\n+    target  => /srv/deployment/gerrit/gerrit/plugins\n"}], "perc_changed": "2.15%"}, "core": {"total": 3444, "only_in_self": ["File[/var/lib/gerrit/review_site/bin/gerrit.war]", "File[/var/lib/gerrit/review_site/bin]", "File[/var/lib/gerrit/review_site/etc/gerrit.config]", "File[/var/lib/gerrit/review_site/etc/gitiles.config]", "File[/var/lib/gerrit/review_site/etc/its/templates]", "File[/var/lib/gerrit/review_site/etc/lfs.config]", "File[/var/lib/gerrit/review_site/etc/log4j.xml]", "File[/var/lib/gerrit/review_site/etc/replication.config]", "File[/var/lib/gerrit/review_site/etc/secure.config]", "File[/var/lib/gerrit/review_site/etc/ssh_host_key]", "File[/var/lib/gerrit/review_site/lib]", "File[/var/lib/gerrit/review_site/logs]", "File[/var/lib/gerrit/review_site/plugins]", "File[/var/lib/gerrit/review_site/tmp]", "File[/var/lib/gerrit/review_site]"], "only_in_other": ["File[/srv/site_path/bin/gerrit.war]", "File[/srv/site_path/bin]", "File[/srv/site_path/etc/gerrit.config]", "File[/srv/site_path/etc/gitiles.config]", "File[/srv/site_path/etc/its/templates]", "File[/srv/site_path/etc/lfs.config]", "File[/srv/site_path/etc/log4j.xml]", "File[/srv/site_path/etc/replication.config]", "File[/srv/site_path/etc/secure.config]", "File[/srv/site_path/etc/ssh_host_key]", "File[/srv/site_path/lib]", "File[/srv/site_path/logs]", "File[/srv/site_path/plugins]", "File[/srv/site_path/tmp]", "File[/srv/site_path]"], "resource_diffs": [{"resource": "File[/lib/systemd/system/gerrit.service]", "content": "--- /lib/systemd/system/gerrit.service.orig\n+++ /lib/systemd/system/gerrit.service\n@@ -7,7 +7,7 @@\n Group=gerrit\n Type=simple\n EnvironmentFile=/etc/default/gerrit\n-ExecStart=/usr/lib/jvm/java-17-openjdk-amd64/bin/java -Xmx64g -Xms64g -Dflogger.backend_factory=com.google.common.flogger.backend.log4j.Log4jBackendFactory#getInstance -Dflogger.logging_context=com.google.gerrit.server.logging.LoggingContext#getInstance -Dh2.maxCompactTime=15000 -XX:+UnlockExperimentalVMOptions -XX:G1NewSizePercent=15 -XX:+UseStringDeduplication -XX:+HeapDumpOnOutOfMemoryError -XX:+ExitOnOutOfMemoryError -XX:HeapDumpPath=/srv/gerrit  -jar /var/lib/gerrit/review_site/bin/gerrit.war daemon -d /var/lib/gerrit/review_site\n+ExecStart=/usr/lib/jvm/java-17-openjdk-amd64/bin/java -Xmx64g -Xms64g -Dflogger.backend_factory=com.google.common.flogger.backend.log4j.Log4jBackendFactory#getInstance -Dflogger.logging_context=com.google.gerrit.server.logging.LoggingContext#getInstance -Dh2.maxCompactTime=15000 -XX:+UnlockExperimentalVMOptions -XX:G1NewSizePercent=15 -XX:+UseStringDeduplication -XX:+HeapDumpOnOutOfMemoryError -XX:+ExitOnOutOfMemoryError -XX:HeapDumpPath=/srv/gerrit  -jar /srv/site_path/bin/gerrit.war daemon -d /srv/site_path\n \n # Give it a bit more time to terminate cleanly.\n #"}, {"resource": "File[/etc/default/gerrit]", "content": "--- /etc/default/gerrit.orig\n+++ /etc/default/gerrit\n@@ -1,2 +1,2 @@\n-GERRIT_SITE=\"/var/lib/gerrit/review_site\"\n-GERRIT_WAR=\"/var/lib/gerrit/review_site/bin/gerrit.war\"\n+GERRIT_SITE=\"/srv/site_path\"\n+GERRIT_WAR=\"/srv/site_path/bin/gerrit.war\""}, {"resource": "File[/var/www/wikimedia-codereview-logo.cache.png]", "parameters": "--- File[/var/www/wikimedia-codereview-logo.cache.png].orig\n+++ File[/var/www/wikimedia-codereview-logo.cache.png]\n\n@@\n-    target => /var/lib/gerrit/review_site/static/wikimedia-codereview-logo.cache.png\n+    target => /srv/site_path/static/wikimedia-codereview-logo.cache.png\n"}, {"resource": "File[/etc/gerrit]", "parameters": "--- File[/etc/gerrit].orig\n+++ File[/etc/gerrit]\n\n@@\n-    target => /var/lib/gerrit/review_site/etc\n+    target => /srv/site_path/etc\n"}, {"resource": "File[/etc/nagios/nrpe.d/check_gerrit.cfg]", "content": "--- /etc/nagios/nrpe.d/check_gerrit.cfg.orig\n+++ /etc/nagios/nrpe.d/check_gerrit.cfg\n@@ -1,2 +1,2 @@\n # File generated by puppet. DO NOT edit by hand\n-command[check_gerrit]=/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 --ereg-argument-array '^/usr/lib/jvm/java-17-openjdk-amd64/bin/java .*-jar /var/lib/gerrit/review_site/bin/gerrit.war daemon -d /var/lib/gerrit/review_site'\n+command[check_gerrit]=/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 --ereg-argument-array '^/usr/lib/jvm/java-17-openjdk-amd64/bin/java .*-jar /srv/site_path/bin/gerrit.war daemon -d /srv/site_path'"}, {"resource": "File[/var/www/page-bkg.cache.jpg]", "parameters": "--- File[/var/www/page-bkg.cache.jpg].orig\n+++ File[/var/www/page-bkg.cache.jpg]\n\n@@\n-    target => /var/lib/gerrit/review_site/static/page-bkg.cache.jpg\n+    target => /srv/site_path/static/page-bkg.cache.jpg\n"}], "perc_changed": "1.05%"}, "main": {"total": 3444, "only_in_self": ["File[/var/lib/gerrit/review_site/bin/gerrit.war]", "File[/var/lib/gerrit/review_site/bin]", "File[/var/lib/gerrit/review_site/etc/gerrit.config]", "File[/var/lib/gerrit/review_site/etc/gitiles.config]", "File[/var/lib/gerrit/review_site/etc/its/templates]", "File[/var/lib/gerrit/review_site/etc/lfs.config]", "File[/var/lib/gerrit/review_site/etc/log4j.xml]", "File[/var/lib/gerrit/review_site/etc/replication.config]", "File[/var/lib/gerrit/review_site/etc/secure.config]", "File[/var/lib/gerrit/review_site/etc/ssh_host_key]", "File[/var/lib/gerrit/review_site/lib]", "File[/var/lib/gerrit/review_site/logs]", "File[/var/lib/gerrit/review_site/plugins]", "File[/var/lib/gerrit/review_site/tmp]", "File[/var/lib/gerrit/review_site]"], "only_in_other": ["File[/srv/site_path/bin/gerrit.war]", "File[/srv/site_path/bin]", "File[/srv/site_path/etc/gerrit.config]", "File[/srv/site_path/etc/gitiles.config]", "File[/srv/site_path/etc/its/templates]", "File[/srv/site_path/etc/lfs.config]", "File[/srv/site_path/etc/log4j.xml]", "File[/srv/site_path/etc/replication.config]", "File[/srv/site_path/etc/secure.config]", "File[/srv/site_path/etc/ssh_host_key]", "File[/srv/site_path/lib]", "File[/srv/site_path/logs]", "File[/srv/site_path/plugins]", "File[/srv/site_path/tmp]", "File[/srv/site_path]"], "resource_diffs": [{"resource": "File[/lib/systemd/system/gerrit.service]", "content": "--- /lib/systemd/system/gerrit.service.orig\n+++ /lib/systemd/system/gerrit.service\n@@ -7,7 +7,7 @@\n Group=gerrit\n Type=simple\n EnvironmentFile=/etc/default/gerrit\n-ExecStart=/usr/lib/jvm/java-17-openjdk-amd64/bin/java -Xmx64g -Xms64g -Dflogger.backend_factory=com.google.common.flogger.backend.log4j.Log4jBackendFactory#getInstance -Dflogger.logging_context=com.google.gerrit.server.logging.LoggingContext#getInstance -Dh2.maxCompactTime=15000 -XX:+UnlockExperimentalVMOptions -XX:G1NewSizePercent=15 -XX:+UseStringDeduplication -XX:+HeapDumpOnOutOfMemoryError -XX:+ExitOnOutOfMemoryError -XX:HeapDumpPath=/srv/gerrit  -jar /var/lib/gerrit/review_site/bin/gerrit.war daemon -d /var/lib/gerrit/review_site\n+ExecStart=/usr/lib/jvm/java-17-openjdk-amd64/bin/java -Xmx64g -Xms64g -Dflogger.backend_factory=com.google.common.flogger.backend.log4j.Log4jBackendFactory#getInstance -Dflogger.logging_context=com.google.gerrit.server.logging.LoggingContext#getInstance -Dh2.maxCompactTime=15000 -XX:+UnlockExperimentalVMOptions -XX:G1NewSizePercent=15 -XX:+UseStringDeduplication -XX:+HeapDumpOnOutOfMemoryError -XX:+ExitOnOutOfMemoryError -XX:HeapDumpPath=/srv/gerrit  -jar /srv/site_path/bin/gerrit.war daemon -d /srv/site_path\n \n # Give it a bit more time to terminate cleanly.\n #"}, {"resource": "Nrpe::Check[check_gerrit]", "parameters": "--- Nrpe::Check[check_gerrit].orig\n+++ Nrpe::Check[check_gerrit]\n\n@@\n-    command => /usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 --ereg-argument-array '^/usr/lib/jvm/java-17-openjdk-amd64/bin/java .*-jar /var/lib/gerrit/review_site/bin/gerrit.war daemon -d /var/lib/gerrit/review_site'\n+    command => /usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 --ereg-argument-array '^/usr/lib/jvm/java-17-openjdk-amd64/bin/java .*-jar /srv/site_path/bin/gerrit.war daemon -d /srv/site_path'\n"}, {"resource": "Class[Profile::Gerrit::Proxy]", "parameters": "--- Class[Profile::Gerrit::Proxy].orig\n+++ Class[Profile::Gerrit::Proxy]\n\n@@\n-    gerrit_site => /var/lib/gerrit/review_site\n+    gerrit_site => /srv/site_path\n"}, {"resource": "File[/etc/default/gerrit]", "content": "--- /etc/default/gerrit.orig\n+++ /etc/default/gerrit\n@@ -1,2 +1,2 @@\n-GERRIT_SITE=\"/var/lib/gerrit/review_site\"\n-GERRIT_WAR=\"/var/lib/gerrit/review_site/bin/gerrit.war\"\n+GERRIT_SITE=\"/srv/site_path\"\n+GERRIT_WAR=\"/srv/site_path/bin/gerrit.war\""}, {"resource": "Systemd::Service[gerrit]"}, {"resource": "File[/var/www/wikimedia-codereview-logo.cache.png]", "parameters": "--- File[/var/www/wikimedia-codereview-logo.cache.png].orig\n+++ File[/var/www/wikimedia-codereview-logo.cache.png]\n\n@@\n-    target => /var/lib/gerrit/review_site/static/wikimedia-codereview-logo.cache.png\n+    target => /srv/site_path/static/wikimedia-codereview-logo.cache.png\n"}, {"resource": "Class[Gerrit]", "parameters": "--- Class[Gerrit].orig\n+++ Class[Gerrit]\n\n@@\n-    gerrit_site => /var/lib/gerrit/review_site\n+    gerrit_site => /srv/site_path\n"}, {"resource": "Class[Profile::Gerrit::Migration]", "parameters": "--- Class[Profile::Gerrit::Migration].orig\n+++ Class[Profile::Gerrit::Migration]\n\n@@\n-    gerrit_site => /var/lib/gerrit/review_site\n+    gerrit_site => /srv/site_path\n"}, {"resource": "Nrpe::Monitor_service[gerrit]", "parameters": "--- Nrpe::Monitor_service[gerrit].orig\n+++ Nrpe::Monitor_service[gerrit]\n\n@@\n-    nrpe_command => /usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 --ereg-argument-array '^/usr/lib/jvm/java-17-openjdk-amd64/bin/java .*-jar /var/lib/gerrit/review_site/bin/gerrit.war daemon -d /var/lib/gerrit/review_site'\n+    nrpe_command => /usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 --ereg-argument-array '^/usr/lib/jvm/java-17-openjdk-amd64/bin/java .*-jar /srv/site_path/bin/gerrit.war daemon -d /srv/site_path'\n"}, {"resource": "File[/etc/gerrit]", "parameters": "--- File[/etc/gerrit].orig\n+++ File[/etc/gerrit]\n\n@@\n-    target => /var/lib/gerrit/review_site/etc\n+    target => /srv/site_path/etc\n"}, {"resource": "File[/etc/nagios/nrpe.d/check_gerrit.cfg]", "content": "--- /etc/nagios/nrpe.d/check_gerrit.cfg.orig\n+++ /etc/nagios/nrpe.d/check_gerrit.cfg\n@@ -1,2 +1,2 @@\n # File generated by puppet. DO NOT edit by hand\n-command[check_gerrit]=/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 --ereg-argument-array '^/usr/lib/jvm/java-17-openjdk-amd64/bin/java .*-jar /var/lib/gerrit/review_site/bin/gerrit.war daemon -d /var/lib/gerrit/review_site'\n+command[check_gerrit]=/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 --ereg-argument-array '^/usr/lib/jvm/java-17-openjdk-amd64/bin/java .*-jar /srv/site_path/bin/gerrit.war daemon -d /srv/site_path'"}, {"resource": "Class[Profile::Gerrit]", "parameters": "--- Class[Profile::Gerrit].orig\n+++ Class[Profile::Gerrit]\n\n@@\n-    gerrit_site => /var/lib/gerrit/review_site\n+    gerrit_site => /srv/site_path\n"}, {"resource": "File[/var/www/page-bkg.cache.jpg]", "parameters": "--- File[/var/www/page-bkg.cache.jpg].orig\n+++ File[/var/www/page-bkg.cache.jpg]\n\n@@\n-    target => /var/lib/gerrit/review_site/static/page-bkg.cache.jpg\n+    target => /srv/site_path/static/page-bkg.cache.jpg\n"}, {"resource": "Systemd::Unit[gerrit]"}], "perc_changed": "1.28%"}}}