SCRAM button for the package manager

A really simple way of shutting the packages so no one can download a compromised package.

Documented in the handbook and automated for bonus points.

SCRAM

mentioned in issue #1161 (closed)

Really simple way of shutting packages off is to do

sudo packagecloud-ctl stop

on the machine. That will shut off the package server.

Now we need to document it in the runbooks AND add a note in the community advocate handbook.

We need to be sure we (by we I mean also DevRel) can press that button whenever an emergency arrives.

cc/ @ahanselka can you take this action please?

@pcarranza do we want to hook this into Cog perhaps? That way we can give anyone we want in Slack permission to do this.

@ahanselka yes, I think so, but we first need a chef push job for it so we can wire it.

@pcarranza alright, this will enable push jobs for starting and stoping packagecloud: https://dev.gitlab.org/cookbooks/chef-repo/merge_requests/527

Here is the addition to the runbooks: gitlab-com/runbooks!201 (merged)

Here is the addition to the community advocate handbook: gitlab-com/www-gitlab-com!5198 (merged)

All of the required things have been merged.

closed

assigned to @ahanselka

removed milestone