Compilation results for phab2003.codfw.wmnet: System changes detected

Catalog differences

Summary

Resources only in the new catalog

• Exec[systemd daemon-reload for rsync-phabricator-repos.timer (rsync-phabricator-repos.timer)]
• Service[wmf_auto_restart_prometheus-apache-exporter.timer]
• Service[aphlict]
• File[/etc/rsyslog.d/40-backup-home-dirs.conf]
• File[/lib/systemd/system/wmf_auto_restart_aphlict.service]
• File[/etc/logrotate.d/phabricator_stats_job_yearly_metrics]
• File[/etc/gitconfig.d/10-setup_proxy.gitconfig]
• Exec[systemd daemon-reload for phabricator_stats_job_quarterly_wmf_qls.service (phabricator_stats_job_quarterly_wmf_qls.service)]
• Package[exim4-config]
• File[/var/log/phabricator_stats_job_yearly_metrics]
• File[/etc/phabricator/config.yaml]
• File[/var/log/phd/ssh.log]
• File[/etc/bacula/ssl/server.p12]
• File[/home/urbanecm/.my.cnf]
• Exec[phabricator-admin_ensure_members]
• Exec[apt_update_php]
• Concat_file[/etc/bacula/ssl/cert.pem]
• Package[python3-phabricator]
• File[/etc/logrotate.d/backup-home-dirs]
• File[/srv/repos]
• File[/etc/update-motd.d/06-backups-srv-repos]
• File[/etc/logrotate.d/wmf_auto_restart_prometheus-apache-exporter]
• File[/etc/logrotate.d/phabricator_stats_job_community_metrics]
• File[/var/log/phabricator_stats_job_community_metrics]
• Exec[systemd daemon-reload for phabricator_clean_tmp_files.timer (phabricator_clean_tmp_files.timer)]
• File[/var/log/backup-home-dirs]
• File[/lib/systemd/system/phabricator_stats_job_project_changes.timer]
• Exec[systemd daemon-reload for aphlict.service (aphlict)]
• File[/etc/logrotate.d/rsync-phabricator-home-dirs]
• File[/etc/logrotate.d/phabricator_task_dump]
• File[/srv/phab/phabricator/scripts/ssh/]
• Exec[systemd daemon-reload for phabricator_stats_job_community_metrics.timer (phabricator_stats_job_community_metrics.timer)]
• File[/var/log/wmf_auto_restart_envoyproxy]
• Service[phabricator_stats_job_project_changes.timer]
• File[/etc/rsyslog.d/40-phabricator-stats-job-yearly-metrics.conf]
• File[/etc/envoy/admin-config.yaml]
• File[/var/log/rsync-phabricator-repos]
• User[aphlict]
• File[/etc/nftables/input/10_rsyncd_access_srv-dumps.nft]
• File[/etc/phab_epipe.conf]
• Exec[systemd daemon-reload for phabricator_stats_job_quarterly_wmf_qls.timer (phabricator_stats_job_quarterly_wmf_qls.timer)]
• File[/lib/systemd/system/phabricator_stats_job_quarterly_wmf_qls.service]
• File[/lib/systemd/system/phabricator_stats_job_tech_news_weekly_stats.service]
• File[/lib/systemd/system/wmf_auto_restart_envoyproxy.service]
• File[/lib/systemd/system/phabricator_stats_job_yearly_metrics.service]
• File[/var/log/phabricator_stats_job_quarterly_metrics]
• File[/etc/rsyslog.d/40-wmf-auto-restart-envoyproxy.conf]
• File[/usr/local/bin/backup-home-dirs]
• File[/etc/sysusers.d/vcs.conf]
• File[/srv/dumps]
• Exec[systemd daemon-reload for backup-home-dirs.service (backup-home-dirs.service)]
• File[/etc/nftables/input/10_ssh_cluster.nft]
• Service[phabricator_task_dump.timer]
• File[/lib/systemd/system/backup-home-dirs.service]
• Exec[systemd daemon-reload for phabricator_clean_tmp_files.service (phabricator_clean_tmp_files.service)]
• File[/lib/systemd/system/wmf_auto_restart_aphlict.timer]
• File[/etc/nftables/input/10_bacula-file-daemon-backup1014.eqiad.wmnet.nft]
• File[/etc/rsyslog.d/40-phabricator-stats-job-quarterly-wmf-qls.conf]
• File[/etc/envoy/stats-config.yaml]
• File[/srv/dumps/WARNING_NEVER_PUT_PRIVATE_DATA_HERE_THIS_IS_SYNCED_TO_PUBLIC]
• File[/etc/logrotate.d/phabricator_stats_job_quarterly_metrics]
• Package[python3-pygments]
• File[/usr/local/bin/yearly_metrics.sh]
• Exec[systemd daemon-reload for phabricator_task_dump.timer (phabricator_task_dump.timer)]
• File[/etc/rsyslog.d/40-rsync-phabricator-repos.conf]
• File[/etc/logrotate.d/phabricator_stats_job_project_changes]
• Group[vcs]
• File[/home/aklapper/.my.cnf]
• File[/srv/phab/phabricator/scripts/mail/]
• File[/lib/systemd/system/backup-home-dirs.timer]
• File[/srv/phab/phabricator/scripts/]
• File[/lib/systemd/system/phabricator_task_dump.timer]
• File[/etc/envoy/ssl/discovery2026__phabricator_discovery_wmnet_server.chained.pem]
• Group[phabricator-bulk-manager]
• File[/srv/phab/aphlict/config.json]
• File[/srv/phab/phabricator/scripts/daemon/]
• Service[phabricator_clean_tmp_files.timer]
• Exec[systemd daemon-reload for phabricator_stats_job_quarterly_metrics.timer (phabricator_stats_job_quarterly_metrics.timer)]
• File[/etc/default/rsync]
• File[/etc/logrotate.d/phabricator_clean_tmp_files]
• File[/etc/sysctl.d/70-phabricator-network-tuning.conf]
• Exec[Generate cert discovery2026__phabricator_discovery_wmnet_server refresh on intermediate ca change]
• File[/etc/ssh/userkeys/mbinder]
• Exec[mask_phd.service]
• File[/etc/sysctl.d/70-TCP-Fast-Open.conf]
• File[/etc/gitconfig.d/00-header.gitconfig]
• Exec[renew certificate - discovery2026__phabricator_discovery_wmnet_server]
• Exec[Generate cert discovery2026__phabricator_discovery_wmnet_server refresh]
• Service[rsync-phabricator-home-dirs.timer]
• Package[mariadb-client]
• Service[phabricator_stats_job_quarterly_metrics.timer]
• File[/lib/systemd/system/phabricator_clean_tmp_files.service]
• File[/etc/envoy/ssl/discovery2026__phabricator_discovery_wmnet_server-key.pem]
• File[/usr/local/bin/quarterly_wmf_qls.sh]
• File[/etc/default/exim4]
• Service[wmf_auto_restart_aphlict.timer]
• Exec[systemd daemon-reload for phabricator_stats_job_yearly_metrics.service (phabricator_stats_job_yearly_metrics.service)]
• File[/etc/apache2/sites-available/50-phabricator.conf]
• Service[phabricator_stats_job_community_metrics.timer]
• File[/etc/rsyslog.d/40-phabricator-stats-job-tech-news-weekly-stats.conf]
• File[/lib/systemd/system/wmf_auto_restart_prometheus-apache-exporter.timer]
• File[/etc/rsyslog.d/40-phabricator-stats-job-community-metrics.conf]
• File[/usr/local/bin/phab_epipe.py]
• Exec[systemd daemon-reload for phabricator_stats_job_project_changes.service (phabricator_stats_job_project_changes.service)]
• Service[phabricator_stats_job_tech_news_weekly_stats.timer]
• File[/etc/envoy/runtime.yaml]
• File[/etc/envoy/ssl/discovery2026__phabricator_discovery_wmnet_server.csr]
• Exec[systemd daemon-reload for phabricator_stats_job_tech_news_weekly_stats.timer (phabricator_stats_job_tech_news_weekly_stats.timer)]
• Exec[/srv/phab/libext/translations/src_static_dir_exists]
• File[/usr/local/bin/project_changes.sh]
• File[/etc/default/prometheus-apache-exporter]
• File[/etc/logrotate.d/wmf_auto_restart_aphlict]
• File[/lib/systemd/system/phabricator_task_dump.service]
• File[/var/log/phabricator_stats_job_tech_news_weekly_stats]
• Exec[systemd daemon-reload for phabricator_stats_job_yearly_metrics.timer (phabricator_stats_job_yearly_metrics.timer)]
• File[/etc/rsyslog.d/40-rsync-phabricator-home-dirs.conf]
• File[/etc/logrotate.d/phabricator_stats_job_tech_news_weekly_stats]
• File[/var/spool/exim4/db]
• Mailalias[root]
• Service[prometheus-apache-exporter]
• File_line[auto_restart_file_presence_prometheus-apache-exporter]
• Exec[systemd daemon-reload for wmf_auto_restart_aphlict.timer (wmf_auto_restart_aphlict.timer)]
• Exec[update-gitconfig]
• File[/etc/logrotate.d/envoy]
• File[/var/spool/exim4]
• File[/etc/rsync.d]
• File_line[deselect_dst_root_ca_x3]
• Mount[/var/spool/exim4/db]
• File[/etc/phab_community_metrics.conf]
• File[/etc/rsyslog.d/10-input-file-apache2-error.conf]
• File[/usr/local/bin/chk_phuser]
• File[/etc/ssh/userkeys/urbanecm]
• File[/etc/bacula/ssl/server.key]
• Concat_fragment[/etc/bacula_puppet_ca_chain]
• File[/lib/systemd/system/phabricator_stats_job_project_changes.service]
• File[/etc/envoy/ssl/discovery2026__phabricator_discovery_wmnet_server.chain.pem]
• File[/etc/logrotate.d/phabricator_stats_job_quarterly_wmf_qls]
• File[/etc/exim4/system_filter]
• Exec[systemd daemon-reload for phabricator_stats_job_community_metrics.service (phabricator_stats_job_community_metrics.service)]
• Service[backup-home-dirs.timer]
• File[/usr/local/sbin/build-envoy-config]
• Exec[update-safedir-gitconfig]
• User[urbanecm]
• File[/var/log/wmf_auto_restart_aphlict]
• File[/etc/envoy/listeners.d]
• File[/etc/exim4/update-exim4.conf.conf]
• File[/usr/local/bin/phab_git_safedir.sh]
• File[/etc/update-motd.d/05-phabricator]
• File[/etc/gitconfig.d]
• File[/etc/update-motd.d/06-backups-home]
• File[/etc/sudoers.d/phabricator-admin]
• Exec[systemd daemon-reload for backup-home-dirs.timer (backup-home-dirs.timer)]
• File[/etc/phab_tech_news_weekly_stats.conf]
• File[/etc/phabtools.conf]
• File[/etc/logrotate.d/rsync-phabricator-repos]
• File[/lib/systemd/system/aphlict.service]
• File[/etc/phabricator]
• Exec[mkdir /var/spool/exim4/scan]
• Exec[systemd daemon-reload for envoyproxy.service (envoyproxy.service)]
• File[/var/log/rsync-phabricator-home-dirs]
• Exec[create chained cert /etc/envoy/ssl/discovery2026__phabricator_discovery_wmnet_server.chain.pem]
• File[/etc/logrotate.d/wmf_auto_restart_envoyproxy]
• File[/etc/phab_yearly_metrics.conf]
• File[/usr/local/bin/community_metrics.sh]
• File[/etc/sudoers.d/vcs]
• Service[bacula-fd]
• File[/etc/rsyslog.d/10-input-file-apache2-access.conf]
• Service[wmf_auto_restart_envoyproxy.timer]
• File[/var/log/aphlict/]
• Service[envoyproxy.service]
• Exec[phabricator-bulk-manager_ensure_members]
• File[/etc/bacula/bacula-fd.conf]
• File[/lib/systemd/system/phabricator_stats_job_quarterly_metrics.timer]
• User[mbinder]
• File[/etc/logrotate.d/phd]
• Service[rsync]
• File[/etc/phab_project_changes.conf]
• Package[envoyproxy]
• File[/etc/bacula/ssl]
• Concat_fragment[/etc/rsyncd.conf-header]
• File[/lib/systemd/system/phabricator_clean_tmp_files.timer]
• File[/etc/rsyslog.d/40-phabricator-stats-job-quarterly-metrics.conf]
• Exec[/srv/phab/libext/ava/src_static_dir_exists]
• File[/etc/sudoers.d/www-data]
• File[/var/log/phabricator_stats_job_project_changes]
• File_line[auto_restart_file_presence_aphlict]
• Package[s-nail]
• File[/usr/local/bin/git-http-backend]
• Exec[systemd daemon-reload for wmf_auto_restart_prometheus-apache-exporter.timer (wmf_auto_restart_prometheus-apache-exporter.timer)]
• File[/etc/logrotate.d/aphlict]
• File[/etc/bacula/ssl/server-keypair.pem]
• File[/lib/systemd/system/phabricator_stats_job_community_metrics.service]
• Service[phd]
• File[/etc/envoy/ssl]
• File[/etc/rsyslog.d/00-imfile.conf]
• Exec[systemd daemon-reload for phabricator_stats_job_tech_news_weekly_stats.service (phabricator_stats_job_tech_news_weekly_stats.service)]
• File[/srv/phab/phabricator//support/aphlict/server/node_modules]
• Package[bacula-fd]
• Group[aphlict]
• File[/usr/local/bin/tech_news_weekly_stats.sh]
• File[/etc/nftables/input/10_phabmain-smtp.nft]
• File[/lib/systemd/system/wmf_auto_restart_prometheus-apache-exporter.service]
• File[/etc/rsyslog.d/40-envoy.conf]
• Service[exim4]
• Exec[systemd daemon-reload for phabricator_task_dump.service (phabricator_task_dump.service)]
• Package[prometheus-apache-exporter]
• Exec[systemd daemon-reload for phabricator_stats_job_quarterly_metrics.service (phabricator_stats_job_quarterly_metrics.service)]
• File[/home/gjg/.my.cnf]
• Service[phabricator_stats_job_yearly_metrics.timer]
• Concat_file[/etc/rsyncd.conf]
• File[/etc/nftables/notrack/10_envoy_tls_termination_src_sets.nft]
• File[/etc/exim4/exim4.conf]
• File[/etc/rsyslog.d/40-phabricator-task-dump.conf]
• Exec[systemd daemon-reload for phd.service (phd)]
• Package[subversion]
• File[/home/mbinder]
• File[/etc/envoy/listeners.d/00-tls_terminator_443.yaml]
• File[/etc/phab_quarterly_metrics.conf]
• File[/etc/envoy/clusters.d]
• Service[phabricator_stats_job_quarterly_wmf_qls.timer]
• File[/etc/sudoers.d/phabricator-bulk-manager]
• Package[python3-pymysql]
• File[/usr/libexec/phabricator-ssh-hook.sh]
• File[/etc/rsyslog.d/40-wmf-auto-restart-prometheus-apache-exporter.conf]
• File[/var/spool/exim4/scan]
• Concat[/etc/bacula/ssl/cert.pem]
• File[/var/run/aphlict/]
• Exec[/srv/phab/libext/misc_static_dir_exists]
• File[/etc/phab_quarterly_wmf_qls.conf]
• File[/lib/systemd/system/rsync-phabricator-home-dirs.timer]
• File[/usr/local/bin/arc]
• Exec[systemd daemon-reload for wmf_auto_restart_aphlict.service (wmf_auto_restart_aphlict.service)]
• File[/usr/local/sbin/envoyproxy-hot-restarter]
• File[/etc/exim4/aliases]
• File[/lib/systemd/system/rsync-phabricator-home-dirs.service]
• File[/etc/systemd/system/envoyproxy.service.d/puppet-override.conf]
• Exec[systemd daemon-reload for rsync-phabricator-home-dirs.timer (rsync-phabricator-home-dirs.timer)]
• Exec[create-/etc/bacula-keypair]
• Exec[systemd daemon-reload for wmf_auto_restart_envoyproxy.service (wmf_auto_restart_envoyproxy.service)]
• File[/etc/exim4/dkim]
• File[/etc/envoy/clusters.d/00-cluster_local_port_80.yaml]
• Concat_fragment[/etc/rsyncd.conf-srv-dumps]
• File[/etc/apache2/sites-enabled/50-phabricator.conf]
• User[gjg]
• File_line[auto_restart_file_presence_envoyproxy]
• File[/lib/systemd/system/phabricator_stats_job_tech_news_weekly_stats.timer]
• Exec[systemd daemon-reload for rsync-phabricator-home-dirs.service (rsync-phabricator-home-dirs.service)]
• File[/srv/phab/phabricator/scripts/repository/]
• File[/etc/rsyslog.d/40-phabricator-clean-tmp-files.conf]
• File[/etc/envoy/ssl/discovery2026__phabricator_discovery_wmnet_server.pem]
• File[/usr/libexec]
• File[/var/log/phabricator_clean_tmp_files]
• File[/lib/systemd/system/phabricator_stats_job_quarterly_metrics.service]
• File[/etc/cfssl/csr/discovery2026__phabricator_discovery_wmnet_server.csr]
• Package[python3-mysqldb]
• File[/var/log/envoy]
• Exec[systemd daemon-reload for rsync-phabricator-repos.service (rsync-phabricator-repos.service)]
• File[/lib/systemd/system/phabricator_stats_job_community_metrics.timer]
• Exec[systemd daemon-reload for wmf_auto_restart_prometheus-apache-exporter.service (wmf_auto_restart_prometheus-apache-exporter.service)]
• File[/var/log/phd]
• Concat[/etc/rsyncd.conf]
• File[/lib/systemd/system/rsync-phabricator-repos.timer]
• File[/etc/rsyslog.d/40-phabricator-stats-job-project-changes.conf]
• File[/etc/envoy]
• Exec[Generate cert discovery2026__phabricator_discovery_wmnet_server]
• File[/etc/logrotate.d/exim4-paniclog]
• Exec[verify-envoy-config]
• File[/home/urbanecm]
• Exec[update-sysusers-vcs]
• File[/srv/phab/tools/public_task_dump.py]
• Group[phabricator-admin]
• File[/etc/nftables/input/10_envoy_tls_termination_src_sets.nft]
• Package[apachetop]
• File[/lib/systemd/system/phabricator_stats_job_yearly_metrics.timer]
• File[/var/log/phabricator_stats_job_quarterly_wmf_qls]
• Package[exim4-daemon-heavy]
• Package[nodejs]
• File[/etc/rsyslog.d/40-wmf-auto-restart-aphlict.conf]
• File[/usr/local/bin/quarterly_metrics.sh]
• File[/etc/nftables/input/10_phabmain_http.nft]
• Exec[phab-git-safedir]
• Service[rsync-phabricator-repos.timer]
• User[vcs]
• File[/lib/systemd/system/phabricator_stats_job_quarterly_wmf_qls.timer]
• File[/etc/ssh/userkeys/gjg]
• File[/usr/local/sbin/envoyproxy-start]
• File[/lib/systemd/system/phd.service]
• File[/home/gjg]
• Mount[/var/spool/exim4/scan]
• Exec[systemd daemon-reload for wmf_auto_restart_envoyproxy.timer (wmf_auto_restart_envoyproxy.timer)]
• File[/etc/systemd/system/envoyproxy.service.d]
• File[/lib/systemd/system/rsync-phabricator-repos.service]
• Concat_fragment[/etc/bacula_puppet_agent_cert]
• File[/var/log/wmf_auto_restart_prometheus-apache-exporter]
• File[/srv/homes]
• File[/etc/envoy/envoy.yaml]
• File[/lib/systemd/system/wmf_auto_restart_envoyproxy.timer]
• File[/var/log/phabricator_task_dump]
• Exec[systemd daemon-reload for phabricator_stats_job_project_changes.timer (phabricator_stats_job_project_changes.timer)]

Resources only in the old catalog

• File[/var/lib/scap/scap/bin]
• File[/etc/update-motd.d/05-phabricator--migration]
• File[/var/lib/scap/scap]

Resources modified

• Concat_fragment[main contacts]

  Content differences:

  --- main contacts.orig
  +++ main contacts
  @@ -1,3 +1,3 @@
   ---
  -role::phabricator::migration:
  +role::phabricator:
   - Collaboration Services

• File[/srv/phab]

  Parameters differences:

  --- File[/srv/phab].orig
  +++ File[/srv/phab]
  
  +    require => Package[phabricator/deployment]
  

• File[/etc/resolv.conf]

  Content differences:

  --- /etc/resolv.conf.orig
  +++ /etc/resolv.conf
  @@ -2,6 +2,6 @@
   #### THIS FILE IS MANAGED BY PUPPET
   ####  as template('resolvconf/resolv.conf.erb')
   #####################################################################
  -search codfw.wmnet 
  +search codfw.wmnet eqiad.wmnet
   options timeout:1 attempts:3 ndots:1
   nameserver 10.3.0.1

• File[/etc/php/8.2/mods-available/apcu.ini]

  Content differences:

  --- /etc/php/8.2/mods-available/apcu.ini.orig
  +++ /etc/php/8.2/mods-available/apcu.ini
  @@ -2,5 +2,6 @@
   ;
   ; configuration for the apcu PHP extension
   ; priority=20
  +apc.shm_size = 4096M
   extension = apcu.so
   

• File[/var/lib/prometheus/node.d/role_owner.prom]

  Content differences:

  --- /var/lib/prometheus/node.d/role_owner.prom.orig
  +++ /var/lib/prometheus/node.d/role_owner.prom
  @@ -1,3 +1,3 @@
   # HELP role_owner The team owner of the server role
   # TYPE role_owner gauge
  -role_owner{team="collaboration-services",role="phabricator::migration",cluster="misc"} 1.0
  +role_owner{team="collaboration-services",role="phabricator",cluster="misc"} 1.0

• File[/etc/phabricator/script-vars]

  Content differences:

  --- /etc/phabricator/script-vars.orig
  +++ /etc/phabricator/script-vars
  @@ -2,6 +2,6 @@
   # Sourced by /usr/local/sbin/phab_deploy_* scripts
   #
   PHAB_DIR='/srv/phab'
  -PHAB_STORAGE_USER='phadmin'
  -PHAB_STORAGE_PASS='fakefakefake'
  +PHAB_STORAGE_USER='admin_user'
  +PHAB_STORAGE_PASS='admin_pass'
   PHAB_DEPLOY_USER='phab-deploy'

Relevant files

• Production catalog
• Change catalog
• Production errors/warnings
• Change errors/warnings
• Standard Diff
• Full Diff