Re: GitLab SSH is moving to gitlab-ssh.wikimedia.org

--===============0798573800438198139==
Content-Type: multipart/alternative; boundary="00000000000045982806567b8005"

--00000000000045982806567b8005
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

It=E2=80=99s the same fingerprint AFAIK =E2=80=93 OpenSSH should print some=
thing like the
following when you first connect to the new hostname:

This host key is known by the following other names/addresses:
    ~/.ssh/known_hosts:*lineno*: gitlab.wikimedia.org

Cheers,
Lucsa

Am Mo., 13. Juli 2026 um 12:00 Uhr schrieb Sebastian Berlin via Wikitech-l =
<
[email protected]>:

> Is the fingerprint for the new host anywhere? It's not on Help:SSH
> Fingerprints <https://wikitech.wikimedia.org/wiki/Help:SSH_Fingerprints>.
>
> *Sebastian Berlin*
> Utvecklare/*Developer*
> Wikimedia Sverige (WMSE)
>
> E-post/*E-Mail*: [email protected]
> Telefon/*Phone*: (+46) 0707 - 92 03 84
>
>
> On Mon, 22 Jun 2026 at 10:20, Arnaud Bran via Wikitech-l <
> [email protected]> wrote:
>
>> Hi all,
>>
>> Heads up: as part of putting GitLab behind a CDN (T425441
>> <https://phabricator.wikimedia.org/T425441>), SSH access for git
>> commands is moving to a dedicated hostname: gitlab-ssh.wikimedia.org.
>> This only affects SSH git access. HTTPS clones are unaffected.
>>
>>
>>    - The new hostname is available now.
>>    - Starting tomorrow (June 23rd) morning, GitLab will advertise it
>>    <https://gerrit.wikimedia.org/r/c/operations/puppet/+/1300763> on new
>>    git clone commands, so new clones will use it automatically.
>>    - gitlab.wikimedia.org will stay reachable over SSH for git commands
>>    until GitLab moves behind the CDN. We'll announce the change before i=
t
>>    happens. After that, gitlab.wikimedia.org will no longer be reachable
>>    via SSH.
>>
>> The quickest way to switch remotes all at once would be:
>>
>> git config --global url."[email protected]:".insteadOf "
>> [email protected]:"
>>
>> Per-repo rewrites, CI jobs and ~/.ssh/config are covered in the migratio=
n
>> guide <https://wikitech.wikimedia.org/wiki/GitLab/Migration>. wmf-laptop
>> <https://wikitech.wikimedia.org/wiki/Wmf-laptop> has been updated, so
>> wmf-update-known-hosts-production and wmf-update-ssh-config will reflect
>> the change.
>> Questions and feedback welcome on the task
>> <https://phabricator.wikimedia.org/T425441>.
>>
>> Thanks!
>> --
>> *Arnaud Bran* (he/him)
>> Senior Site Reliability Engineer
>> Wikimedia Foundation <https://wikimediafoundation.org/>
>> _______________________________________________
>> Wikitech-l mailing list -- [email protected]
>> To unsubscribe send an email to [email protected]
>>
>> https://lists.wikimedia.org/postorius/lists/wikitech-l.lists.wikimedia.o=
rg/
>
> _______________________________________________
> Wikitech-l mailing list -- [email protected]
> To unsubscribe send an email to [email protected]
> https://lists.wikimedia.org/postorius/lists/wikitech-l.lists.wikimedia.or=
g/



--=20
Lucas Werkmeister (he/er)
Software Engineer

Wikimedia Deutschland e. V. | Tempelhofer Ufer 23-24 | 10963 Berlin
Phone: +49 (0)30-577 11 62-0
https://wikimedia.de

Imagine a world in which every single human being can freely share in the
sum of all knowledge. Help us to achieve our vision!
https://spenden.wikimedia.de

Wikimedia Deutschland =E2=80=94 Gesellschaft zur F=C3=B6rderung Freien Wiss=
ens e. V.
Eingetragen im Vereinsregister des Amtsgerichts Charlottenburg, VR 23855 B.
Als gemeinn=C3=BCtzig anerkannt durch das Finanzamt f=C3=BCr K=C3=B6rpersch=
aften I Berlin,
Steuernummer 27/029/42207.

--00000000000045982806567b8005
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>It=E2=80=99s the same fingerprint AFAIK =E2=80=93 Ope=
nSSH should print something like the following when you first connect to th=
e new hostname:</div><div><br></div><div><span style=3D"font-family:monospa=
ce">This host key is known by the following other names/addresses:<br>=C2=
=A0 =C2=A0 ~/.ssh/known_hosts:<i>lineno</i>: <a href=3D"http://gitlab.wikim=
edia.org">gitlab.wikimedia.org</a></span><br><br></div><div>Cheers,</div><d=
iv>Lucsa</div></div><br><div class=3D"gmail_quote gmail_quote_container"><d=
iv dir=3D"ltr" class=3D"gmail_attr">Am Mo., 13. Juli 2026 um 12:00=C2=A0Uhr=
 schrieb Sebastian Berlin via Wikitech-l &lt;<a href=3D"mailto:wikitech-l@l=
ists.wikimedia.org">[email protected]</a>&gt;:<br></div><block=
quote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1=
px solid rgb(204,204,204);padding-left:1ex"><div dir=3D"ltr"><div>Is the fi=
ngerprint for the new host anywhere? It&#39;s not on=C2=A0<a href=3D"https:=
//wikitech.wikimedia.org/wiki/Help:SSH_Fingerprints" target=3D"_blank">Help=
:SSH Fingerprints</a>.</div><div><div dir=3D"ltr" class=3D"gmail_signature"=
><div dir=3D"ltr"><div><div dir=3D"ltr"><div><div dir=3D"ltr"><span><div><d=
iv dir=3D"ltr"><div><div><b><br></b></div><div><b>Sebastian Berlin</b><br><=
span>Utvecklare/<i>Developer</i></span></div><div>Wikimedia Sverige (WMSE)<=
br></div><br></div>E-post/<i>E-Mail</i>: <a href=3D"mailto:sebastian.berlin=
@wikimedia.se" target=3D"_blank">[email protected]</a><br>
Telefon/<i>Phone</i>: (+46) 0707 - 92 03 84</div></div></span></div></div><=
/div></div></div></div></div><br></div><br><div class=3D"gmail_quote"><div =
dir=3D"ltr" class=3D"gmail_attr">On Mon, 22 Jun 2026 at 10:20, Arnaud Bran =
via Wikitech-l &lt;<a href=3D"mailto:[email protected]" target=
=3D"_blank">[email protected]</a>&gt; wrote:<br></div><blockqu=
ote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px=
 solid rgb(204,204,204);padding-left:1ex"><div dir=3D"ltr"><div dir=3D"ltr"=
><div><div><div><div><div><div role=3D"group" aria-label=3D"Message actions=
"><div><div><div></div></div></div></div></div></div></div></div></div><div=
><div><div style=3D"height:auto;opacity:1"><div><div style=3D"opacity:1"><d=
iv><div><div><div><div><div><div><p>Hi all,</p>
<p>Heads up: as part of putting GitLab behind a CDN (<a href=3D"https://pha=
bricator.wikimedia.org/T425441" target=3D"_blank">T425441</a>), SSH access =
for git commands is moving to a dedicated hostname: <a href=3D"http://gitla=
b-ssh.wikimedia.org" target=3D"_blank">gitlab-ssh.wikimedia.org</a>. This o=
nly affects SSH git access. HTTPS clones are unaffected.</p>
<p></p>
<ul><li>The new hostname is available now.</li><li>Starting tomorrow (June =
23rd) morning, GitLab <a href=3D"https://gerrit.wikimedia.org/r/c/operation=
s/puppet/+/1300763" target=3D"_blank">will advertise it</a> on new git clon=
e commands, so new clones will use it automatically.</li><li><a href=3D"htt=
p://gitlab.wikimedia.org" target=3D"_blank">gitlab.wikimedia.org</a> will s=
tay reachable over SSH for git commands until GitLab moves behind the CDN. =
We&#39;ll announce the change before it happens. After that, <a href=3D"htt=
p://gitlab.wikimedia.org" target=3D"_blank">gitlab.wikimedia.org</a> will n=
o longer be reachable via SSH.</li></ul>
<p>The quickest way to switch remotes all at once would be:</p>
<p><code>git config --global url.&quot;<a href=3D"mailto:[email protected]=
imedia.org" target=3D"_blank">[email protected]</a>:&quot;.inste=
adOf &quot;<a href=3D"mailto:[email protected]" target=3D"_blank">gi=
[email protected]</a>:&quot;</code></p><p>Per-repo rewrites, CI jobs a=
nd ~/.ssh/config are covered in the <a href=3D"https://wikitech.wikimedia.o=
rg/wiki/GitLab/Migration" target=3D"_blank">migration guide</a>.=C2=A0<a hr=
ef=3D"https://wikitech.wikimedia.org/wiki/Wmf-laptop" target=3D"_blank">wmf=
-laptop</a> has been updated, so wmf-update-known-hosts-production and wmf-=
update-ssh-config will reflect the change.</p>Questions and feedback welcom=
e on <a href=3D"https://phabricator.wikimedia.org/T425441" target=3D"_blank=
">the task</a>.<br></div><div>
<p>Thanks!</p></div></div></div></div></div></div></div></div></div></div><=
/div></div><div dir=3D"ltr" class=3D"gmail_signature"><div dir=3D"ltr"><spa=
n style=3D"color:rgb(136,136,136)">--</span><br style=3D"color:rgb(136,136,=
136)"><div dir=3D"ltr" style=3D"color:rgb(136,136,136)"><div dir=3D"ltr"><t=
able style=3D"font-size:14px;color:rgb(32,33,34);font-family:sans-serif;bor=
der:medium"><tbody><tr><td style=3D"padding:5pt"></td><td style=3D"vertical=
-align:top;padding:5pt;font-size:9pt;line-height:1.38;font-family:Arial,san=
s-serif"><b>Arnaud Bran</b>=C2=A0(he/him)<br><span style=3D"font-size:8pt">=
Senior Site Reliability Engineer</span><br><a href=3D"https://wikimediafoun=
dation.org/" title=3D"foundationsite:" style=3D"color:rgb(102,51,102);backg=
round:none" target=3D"_blank"><span style=3D"color:rgb(0,0,0);font-size:8pt=
">Wikimedia Foundation</span></a></td></tr></tbody></table></div></div></di=
v></div></div>
</div>
_______________________________________________<br>
Wikitech-l mailing list -- <a href=3D"mailto:[email protected]=
" target=3D"_blank">[email protected]</a><br>
To unsubscribe send an email to <a href=3D"mailto:[email protected]=
kimedia.org" target=3D"_blank">[email protected]</a><br>
<a href=3D"https://lists.wikimedia.org/postorius/lists/wikitech-l.lists.wik=
imedia.org/" rel=3D"noreferrer" target=3D"_blank">https://lists.wikimedia.o=
rg/postorius/lists/wikitech-l.lists.wikimedia.org/</a></blockquote></div>
_______________________________________________<br>
Wikitech-l mailing list -- <a href=3D"mailto:[email protected]=
" target=3D"_blank">[email protected]</a><br>
To unsubscribe send an email to <a href=3D"mailto:[email protected]=
kimedia.org" target=3D"_blank">[email protected]</a><br>
<a href=3D"https://lists.wikimedia.org/postorius/lists/wikitech-l.lists.wik=
imedia.org/" rel=3D"noreferrer" target=3D"_blank">https://lists.wikimedia.o=
rg/postorius/lists/wikitech-l.lists.wikimedia.org/</a></blockquote></div><d=
iv><br clear=3D"all"></div><br><span class=3D"gmail_signature_prefix">-- </=
span><br><div dir=3D"ltr" class=3D"gmail_signature"><div dir=3D"ltr"><div><=
div dir=3D"ltr"><div><div dir=3D"ltr"><div><div dir=3D"ltr"><div><div dir=
=3D"ltr">Lucas Werkmeister (he/er)<br>Software Engineer<br><br>Wikimedia De=
utschland e. V. | Tempelhofer Ufer 23-24 | 10963 Berlin<br>Phone: +49 (0)30=
-577 11 62-0<br><a href=3D"https://wikimedia.de" target=3D"_blank">https://=
wikimedia.de</a><br><br>Imagine a world in which every single human being c=
an freely share in the sum of all knowledge. Help us to achieve our vision!=
<br><a href=3D"https://spenden.wikimedia.de" target=3D"_blank">https://spen=
den.wikimedia.de</a><br><br>Wikimedia Deutschland =E2=80=94 Gesellschaft zu=
r F=C3=B6rderung Freien Wissens e. V.=20
Eingetragen im Vereinsregister des Amtsgerichts Charlottenburg, VR 23855 B.=
 Als gemeinn=C3=BCtzig anerkannt durch das Finanzamt f=C3=BCr K=C3=B6rpersc=
haften I Berlin, Steuernummer 27/029/42207.</div></div></div></div></div></=
div></div></div></div></div>

--00000000000045982806567b8005--

--===============0798573800438198139==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Wikitech-l mailing list -- [email protected]
To unsubscribe send an email to [email protected]
https://lists.wikimedia.org/postorius/lists/wikitech-l.lists.wikimedia.org/
--===============0798573800438198139==--