Onboard serebit as a new Trusted User

Onboarding an Arch Linux team member

Details

• Team member username: @serebit
• Application: https://lists.archlinux.org/pipermail/aur-general/2022-July/036916.html
• Voting result: https://lists.archlinux.org/pipermail/aur-general/2022-August/036929.html
• SSH public key: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDF32tlSDr0Ze6owld0p8LCwFT4ttwy99qfDERX/Ntlqobtr9AsZx4FMHToLwhehJuhpj3hzmlmHtRyqF1HnTd6Jrxk8jTmqYej7QpOIZSEmkYwUZK8optnWFIQ/Ce+t5InkJG/FoexXTXEOCegVdZmCyS7Rxr2Nt6v9EDAhYXb9strKROVYy0G5rNisu9aLPqTLEcpbHWnOwHjFuIzivsCq7klqiYYjNruFtH53QEHRKWJhwrrW1AHGQQz3N3nZ/9bV/CvOfC4OZw5CQB4ewDEnYOoMwsQBhlflY2gNDqwcFlC42XIVe+ZD/vL0XNtK+2EK0wmihwEyhieZ8CmoOl/PLxdez9Ipc+Bu5yVDqkIAl4F58Ct55l+21aRVeQEoCxR/3+TJQicwHIurpCftL/g0WF16qnrJ1kcZwSyUi1UO0krBeczrkpjz2gG+Cf/NunLYCn5aXDJ+fJ8QOP8JrG9zQfLMsXiszZv4ICxI5iQDOCAz6r3cHtZCThJJy53FQc= serebit@galilei
• Full Name: Campbell Jones
• Personal e-mail address: <redacted>
• PGP key ID used with personal e-mail address: 0x35A1812BB04FF587E5DA13ECE63F9713E1179526
• Communication e-mail address: personal

All roles checklist

The mailing list password can be found in misc/vaults/additional-credentials.vault.

• Add new user email as per docs/email.md.
• Create a new user in archweb. Select the appropriate group membership and allowed repos (if applicable).
• Subscribe communication e-mail address to internal staff mailing list.
• Give the user access to #archlinux-staff on Libera Chat.
• Give the user a link to our staff services page.
• Replace the Team member username with the @-prefixed username on Gitlab.
• Remove personal information (such as Full Name and Personal e-mail address, as well as the clearsigned representation of this data), remove the description history and make the issue non-confidential.
• Request staff cloak on Libera Chat (Group contacts)
• Go to Arch Linux group -> Enter Admin mode -> go to members -> add username as "minimal access"
• Go to Arch Staff group -> Enter Admin mode -> go to members -> add username as "reporter"

Packager onboarding checklist

• Create issue in archlinux-keyring using the "New Packager Key" template (archlinux-keyring#190 (closed))

TU onboarding checklist

• Add entry in group_vars/all/archusers.yml.
• Add SSH pubkey to pubkeys/<username>.pub.
• Run ansible-playbook -t archusers $(git grep -l archusers playbooks/ | grep -v phrik).
• Assign the user to the Trusted Users groups on Keycloak.
• Assign the user to the Trusted Users group on archlinux.org.
• Subscribe communication e-mail address to internal arch-tu mailing list.
• Allow sending from communication e-mail address on arch-dev-public (subscribe and/or find address and remove moderation).