Offboard Diabonas as Package Maintainer & Main Key Holder

Offboarding an Arch Linux team member

Details

• Team member username: @diabonas
• Currently held roles: Package Maintainer/TU, Developer, Main Key Holder
• Removal request:
  • Package Maintainer: https://lists.archlinux.org/archives/list/aur-general@lists.archlinux.org/thread/LU2NYJAB65U72XN5W5G3VFIC73E6RE2X/
    Voting result: https://aur.archlinux.org/package-maintainer/149
  • Main Key Holder: https://lists.archlinux.org/hyperkitty/list/staff@lists.archlinux.org/message/ZYOMQFG3UXQWSQYPP3TRQIOAGLORA6Z7/
    Result: https://lists.archlinux.org/hyperkitty/list/staff@lists.archlinux.org/message/OW4FEXTQRYCEUGNQFDDR6ZPBGNJFG3YO/
  • Developer: ??
    Result:

All roles checklist

• Remove user email by reverting instructions from docs/email.md.
  • Remove entry in group_vars/all/archusers.yml.
  • Remove SSH pubkey from pubkeys/<username>.pub.
  • Run ansible-playbook -t archusers $(git grep -l archusers playbooks/ | grep -v phrik).
  • Setup forwarding if requested (please add the current date as a comment above the mail address in Postfix's users file). (not requested)
    • Inform the user of the conditions for forwarding.
      • In most cases we only offer forwarding for 6 months.
      • We will inform the user prior to disabling the forwarding.
      • The forwarding can be extended if there are good reasons for doing so.
• Set user to inactive in archweb: https://www.archlinux.org/admin/auth/user/
• Remove member from staff mailing list.
• Moderate email address on arch-dev-public (find member and moderate).
• Ask the user to leave #archlinux-staff on Libera Chat and forget the password.
• Remove staff cloak on Libera Chat (Group contacts).
• Remove the user from relevant staff groups on Keycloak.
• Move the user from the public list of their usergroup on archweb (support staff / TUs / devs) to the respective fellow site (fellow support staff / fellow TUs / fellow devs)

Main key offboarding checklist

• Remove user email for the master-key.archlinux.org subdomain by reverting instructions from docs/email.md.
• Create an issue in archlinux-keyring using the "Remove Main Key" template (archlinux-keyring#246 (closed))

TU/Developer offboarding checklist

• Remove member from arch-tu and/or arch-dev mailing lists.
• Ask the user to leave #archlinux-tu and/or #archlinux-dev on Libera Chat and forget the password(s).
• Create an issue in archlinux-keyring using the "Remove Packager Key" template (archlinux-keyring#251)

---

cc @anthraxx

Friendly ping here, would be great if we could get started with the offboarding

changed the description

changed title from Offboard Diabonas as Package Maintainer to Offboard Diabonas as Package Maintainer & Main Key Holder

changed the description

marked the checklist item Remove user email for the master-key.archlinux.org subdomain by reverting instructions from docs/email.md. as completed

marked the checklist item Remove member from arch-tu and/or arch-dev mailing lists. as completed

marked the checklist item Remove member from staff mailing list. as completed

marked the checklist item Moderate email address on arch-dev-public (find member and moderate). as completed

marked the checklist item Move the user from the public list of their usergroup on archweb (support staff / TUs / devs) to the respective fellow site (fellow support staff / fellow TUs / fellow devs) as completed

marked the checklist item Set user to inactive in archweb: https://www.archlinux.org/admin/auth/user/ as completed

marked the checklist item Remove the user from relevant staff groups on Keycloak. as completed

marked the checklist item Remove staff cloak on Libera Chat (Group contacts). as completed

marked the checklist item Ask the user to leave #archlinux-staff on Libera Chat and forget the password. as completed

marked the checklist item Ask the user to leave #archlinux-tu and/or #archlinux-dev on Libera Chat and forget the password(s). as completed

marked the checklist item Inform the user of the conditions for forwarding. as completed

changed the description

marked the checklist item Remove user email by reverting instructions from docs/email.md. as completed

marked the checklist item Remove entry in group_vars/all/archusers.yml. as completed

marked the checklist item Remove SSH pubkey from pubkeys/<username>.pub. as completed

marked the checklist item Run ansible-playbook -t archusers $(git grep -l archusers playbooks/ | grep -v phrik). as completed

closed with commit a2e797eb

I have also removed them from the Package Maintainer group on AURweb and added that to the offboarding template