Onboard blakkheim as Trusted User

Onboarding an Arch Linux team member

Details

• Team member username: @blakkheim
• Application: https://lists.archlinux.org/pipermail/aur-general/2022-August/036930.html
• Voting result: https://lists.archlinux.org/pipermail/aur-general/2022-September/036964.html
• SSH public key: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDilqpO7lsrLwNYc4D3UELkJaXDW4iFxJ/+ifQ8i9+kH blakkheim@arch
• Full Name: T.J. Townsend
• Personal e-mail address: <redacted>
• PGP key ID used with personal e-mail address: 54C1FD273361EA514A237793F296BDE50368C6CE
• Communication e-mail address: arch

All roles checklist

The mailing list password can be found in misc/vaults/additional-credentials.vault.

• Add new user email as per docs/email.md.
• Create a new user in archweb. Select the appropriate group membership and allowed repos (if applicable).
• Subscribe communication e-mail address to internal staff mailing list.
• Give the user access to #archlinux-staff on Libera Chat.
• Give the user a link to our staff services page.
• Replace the Team member username with the @-prefixed username on Gitlab.
• Remove personal information (such as Full Name and Personal e-mail address, as well as the clearsigned representation of this data), remove the description history and make the issue non-confidential.
• Request staff cloak on Libera Chat (Group contacts)
• Go to Arch Linux group -> Enter Admin mode -> go to members -> add username as "minimal access"
• Go to Arch Staff group -> Enter Admin mode -> go to members -> add username as "reporter"

Packager onboarding checklist

• Create issue in archlinux-keyring using the "New Packager Key" template: archlinux-keyring#195 (closed)

TU onboarding checklist

• Add entry in group_vars/all/archusers.yml.
• Add SSH pubkey to pubkeys/<username>.pub.
• Run ansible-playbook -t archusers $(git grep -l archusers playbooks/ | grep -v phrik).
• Assign the user to the Trusted Users groups on Keycloak.
• Assign the user to the Trusted Users group on archlinux.org.
• Subscribe communication e-mail address to internal arch-tu mailing list.
• Allow sending from communication e-mail address on arch-dev-public (subscribe and/or find address and remove moderation).

changed the description

marked the checklist item Give the user access to #archlinux-staff on Libera Chat. as completed

marked the checklist item Go to Arch Linux group -> Enter Admin mode -> go to members -> add username as "minimal access" as completed

marked the checklist item Go to Arch Staff group -> Enter Admin mode -> go to members -> add username as "reporter" as completed

marked the checklist item Replace the Team member username with the @-prefixed username on Gitlab. as completed

marked the checklist item Assign the user to the Trusted Users groups on Keycloak. as completed

mentioned in commit 53908819

marked the checklist item Add entry in group_vars/all/archusers.yml. as completed

marked the checklist item Add SSH pubkey to pubkeys/<username>.pub. as completed

marked the checklist item Run ansible-playbook -t archusers $(git grep -l archusers playbooks/ | grep -v phrik). as completed

marked the checklist item Add new user email as per docs/email.md. as completed

marked the checklist item Create a new user in archweb. Select the appropriate group membership and allowed repos (if applicable). as completed

marked the checklist item Assign the user to the Trusted Users group on archlinux.org. as completed

marked the checklist item Give the user a link to our staff services page. as completed

marked the checklist item Subscribe communication e-mail address to internal arch-tu mailing list. as completed

marked the checklist item Allow sending from communication e-mail address on arch-dev-public (subscribe and/or find address and remove moderation). as completed

marked the checklist item Subscribe communication e-mail address to internal staff mailing list. as completed

marked the checklist item Request staff cloak on Libera Chat (Group contacts) as completed

changed the description

marked the checklist item **Remove personal information (such as Full Name and Personal e-mail as completed

closed

made the issue visible to everyone