Re: GitLab SSH is moving to gitlab-ssh.wikimedia.org

--===============3732935742210704023==
Content-Type: multipart/alternative; boundary="000000000000cac4ff06567c9a60"

--000000000000cac4ff06567c9a60
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

If anyone else was wondering it's now been updated on the wiki.

*Sebastian Berlin*
Utvecklare/*Developer*
Wikimedia Sverige (WMSE)

E-post/*E-Mail*: [email protected]
Telefon/*Phone*: (+46) 0707 - 92 03 84


On Mon, 13 Jul 2026 at 12:24, Lucas Werkmeister <
[email protected]> wrote:

> It=E2=80=99s the same fingerprint AFAIK =E2=80=93 OpenSSH should print so=
mething like the
> following when you first connect to the new hostname:
>
> This host key is known by the following other names/addresses:
>     ~/.ssh/known_hosts:*lineno*: gitlab.wikimedia.org
>
> Cheers,
> Lucsa
>
> Am Mo., 13. Juli 2026 um 12:00 Uhr schrieb Sebastian Berlin via Wikitech-=
l
> <[email protected]>:
>
>> Is the fingerprint for the new host anywhere? It's not on Help:SSH
>> Fingerprints <https://wikitech.wikimedia.org/wiki/Help:SSH_Fingerprints>=
.
>>
>> *Sebastian Berlin*
>> Utvecklare/*Developer*
>> Wikimedia Sverige (WMSE)
>>
>> E-post/*E-Mail*: [email protected]
>> Telefon/*Phone*: (+46) 0707 - 92 03 84
>>
>>
>> On Mon, 22 Jun 2026 at 10:20, Arnaud Bran via Wikitech-l <
>> [email protected]> wrote:
>>
>>> Hi all,
>>>
>>> Heads up: as part of putting GitLab behind a CDN (T425441
>>> <https://phabricator.wikimedia.org/T425441>), SSH access for git
>>> commands is moving to a dedicated hostname: gitlab-ssh.wikimedia.org.
>>> This only affects SSH git access. HTTPS clones are unaffected.
>>>
>>>
>>>    - The new hostname is available now.
>>>    - Starting tomorrow (June 23rd) morning, GitLab will advertise it
>>>    <https://gerrit.wikimedia.org/r/c/operations/puppet/+/1300763> on
>>>    new git clone commands, so new clones will use it automatically.
>>>    - gitlab.wikimedia.org will stay reachable over SSH for git commands
>>>    until GitLab moves behind the CDN. We'll announce the change before =
it
>>>    happens. After that, gitlab.wikimedia.org will no longer be
>>>    reachable via SSH.
>>>
>>> The quickest way to switch remotes all at once would be:
>>>
>>> git config --global url."[email protected]:".insteadOf "
>>> [email protected]:"
>>>
>>> Per-repo rewrites, CI jobs and ~/.ssh/config are covered in the migrati=
on
>>> guide <https://wikitech.wikimedia.org/wiki/GitLab/Migration>. wmf-lapto=
p
>>> <https://wikitech.wikimedia.org/wiki/Wmf-laptop> has been updated, so
>>> wmf-update-known-hosts-production and wmf-update-ssh-config will reflec=
t
>>> the change.
>>> Questions and feedback welcome on the task
>>> <https://phabricator.wikimedia.org/T425441>.
>>>
>>> Thanks!
>>> --
>>> *Arnaud Bran* (he/him)
>>> Senior Site Reliability Engineer
>>> Wikimedia Foundation <https://wikimediafoundation.org/>
>>> _______________________________________________
>>> Wikitech-l mailing list -- [email protected]
>>> To unsubscribe send an email to [email protected]
>>>
>>> https://lists.wikimedia.org/postorius/lists/wikitech-l.lists.wikimedia.=
org/
>>
>> _______________________________________________
>> Wikitech-l mailing list -- [email protected]
>> To unsubscribe send an email to [email protected]
>>
>> https://lists.wikimedia.org/postorius/lists/wikitech-l.lists.wikimedia.o=
rg/
>
>
>
> --
> Lucas Werkmeister (he/er)
> Software Engineer
>
> Wikimedia Deutschland e. V. | Tempelhofer Ufer 23-24 | 10963 Berlin
> Phone: +49 (0)30-577 11 62-0
> https://wikimedia.de
>
> Imagine a world in which every single human being can freely share in the
> sum of all knowledge. Help us to achieve our vision!
> https://spenden.wikimedia.de
>
> Wikimedia Deutschland =E2=80=94 Gesellschaft zur F=C3=B6rderung Freien Wi=
ssens e. V.
> Eingetragen im Vereinsregister des Amtsgerichts Charlottenburg, VR 23855 =
B.
> Als gemeinn=C3=BCtzig anerkannt durch das Finanzamt f=C3=BCr K=C3=B6rpers=
chaften I Berlin,
> Steuernummer 27/029/42207.
>

--000000000000cac4ff06567c9a60
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>If anyone else was wondering it&#39;s now been update=
d on the wiki.</div><div><div dir=3D"ltr" class=3D"gmail_signature" data-sm=
artmail=3D"gmail_signature"><div dir=3D"ltr"><div><div dir=3D"ltr"><div><di=
v dir=3D"ltr"><span><div><div dir=3D"ltr"><div><div><b><br></b></div><div><=
b>Sebastian Berlin</b><br><span>Utvecklare/<i>Developer</i></span></div><di=
v>Wikimedia Sverige (WMSE)<br></div><br></div>E-post/<i>E-Mail</i>: <a href=
=3D"mailto:[email protected]" target=3D"_blank">sebastian.berli=
[email protected]</a><br>
Telefon/<i>Phone</i>: (+46) 0707 - 92 03 84</div></div></span></div></div><=
/div></div></div></div></div><br></div><br><div class=3D"gmail_quote gmail_=
quote_container"><div dir=3D"ltr" class=3D"gmail_attr">On Mon, 13 Jul 2026 =
at 12:24, Lucas Werkmeister &lt;<a href=3D"mailto:lucas.werkmeister@wikimed=
ia.de">[email protected]</a>&gt; wrote:<br></div><blockquote c=
lass=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px soli=
d rgb(204,204,204);padding-left:1ex"><div dir=3D"ltr"><div>It=E2=80=99s the=
 same fingerprint AFAIK =E2=80=93 OpenSSH should print something like the f=
ollowing when you first connect to the new hostname:</div><div><br></div><d=
iv><span style=3D"font-family:monospace">This host key is known by the foll=
owing other names/addresses:<br>=C2=A0 =C2=A0 ~/.ssh/known_hosts:<i>lineno<=
/i>: <a href=3D"http://gitlab.wikimedia.org" target=3D"_blank">gitlab.wikim=
edia.org</a></span><br><br></div><div>Cheers,</div><div>Lucsa</div></div><b=
r><div class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr">Am Mo., =
13. Juli 2026 um 12:00=C2=A0Uhr schrieb Sebastian Berlin via Wikitech-l &lt=
;<a href=3D"mailto:[email protected]" target=3D"_blank">wikite=
[email protected]</a>&gt;:<br></div><blockquote class=3D"gmail_quote=
" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);=
padding-left:1ex"><div dir=3D"ltr"><div>Is the fingerprint for the new host=
 anywhere? It&#39;s not on=C2=A0<a href=3D"https://wikitech.wikimedia.org/w=
iki/Help:SSH_Fingerprints" target=3D"_blank">Help:SSH Fingerprints</a>.</di=
v><div><div dir=3D"ltr" class=3D"gmail_signature"><div dir=3D"ltr"><div><di=
v dir=3D"ltr"><div><div dir=3D"ltr"><span><div><div dir=3D"ltr"><div><div><=
b><br></b></div><div><b>Sebastian Berlin</b><br><span>Utvecklare/<i>Develop=
er</i></span></div><div>Wikimedia Sverige (WMSE)<br></div><br></div>E-post/=
<i>E-Mail</i>: <a href=3D"mailto:[email protected]" target=3D"_=
blank">[email protected]</a><br>
Telefon/<i>Phone</i>: (+46) 0707 - 92 03 84</div></div></span></div></div><=
/div></div></div></div></div><br></div><br><div class=3D"gmail_quote"><div =
dir=3D"ltr" class=3D"gmail_attr">On Mon, 22 Jun 2026 at 10:20, Arnaud Bran =
via Wikitech-l &lt;<a href=3D"mailto:[email protected]" target=
=3D"_blank">[email protected]</a>&gt; wrote:<br></div><blockqu=
ote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px=
 solid rgb(204,204,204);padding-left:1ex"><div dir=3D"ltr"><div dir=3D"ltr"=
><div><div><div><div><div><div role=3D"group" aria-label=3D"Message actions=
"><div><div><div></div></div></div></div></div></div></div></div></div><div=
><div><div style=3D"height:auto;opacity:1"><div><div style=3D"opacity:1"><d=
iv><div><div><div><div><div><div><p>Hi all,</p>
<p>Heads up: as part of putting GitLab behind a CDN (<a href=3D"https://pha=
bricator.wikimedia.org/T425441" target=3D"_blank">T425441</a>), SSH access =
for git commands is moving to a dedicated hostname: <a href=3D"http://gitla=
b-ssh.wikimedia.org" target=3D"_blank">gitlab-ssh.wikimedia.org</a>. This o=
nly affects SSH git access. HTTPS clones are unaffected.</p>
<p></p>
<ul><li>The new hostname is available now.</li><li>Starting tomorrow (June =
23rd) morning, GitLab <a href=3D"https://gerrit.wikimedia.org/r/c/operation=
s/puppet/+/1300763" target=3D"_blank">will advertise it</a> on new git clon=
e commands, so new clones will use it automatically.</li><li><a href=3D"htt=
p://gitlab.wikimedia.org" target=3D"_blank">gitlab.wikimedia.org</a> will s=
tay reachable over SSH for git commands until GitLab moves behind the CDN. =
We&#39;ll announce the change before it happens. After that, <a href=3D"htt=
p://gitlab.wikimedia.org" target=3D"_blank">gitlab.wikimedia.org</a> will n=
o longer be reachable via SSH.</li></ul>
<p>The quickest way to switch remotes all at once would be:</p>
<p><code>git config --global url.&quot;<a href=3D"mailto:[email protected]=
imedia.org" target=3D"_blank">[email protected]</a>:&quot;.inste=
adOf &quot;<a href=3D"mailto:[email protected]" target=3D"_blank">gi=
[email protected]</a>:&quot;</code></p><p>Per-repo rewrites, CI jobs a=
nd ~/.ssh/config are covered in the <a href=3D"https://wikitech.wikimedia.o=
rg/wiki/GitLab/Migration" target=3D"_blank">migration guide</a>.=C2=A0<a hr=
ef=3D"https://wikitech.wikimedia.org/wiki/Wmf-laptop" target=3D"_blank">wmf=
-laptop</a> has been updated, so wmf-update-known-hosts-production and wmf-=
update-ssh-config will reflect the change.</p>Questions and feedback welcom=
e on <a href=3D"https://phabricator.wikimedia.org/T425441" target=3D"_blank=
">the task</a>.<br></div><div>
<p>Thanks!</p></div></div></div></div></div></div></div></div></div></div><=
/div></div><div dir=3D"ltr" class=3D"gmail_signature"><div dir=3D"ltr"><spa=
n style=3D"color:rgb(136,136,136)">--</span><br style=3D"color:rgb(136,136,=
136)"><div dir=3D"ltr" style=3D"color:rgb(136,136,136)"><div dir=3D"ltr"><t=
able style=3D"font-size:14px;color:rgb(32,33,34);font-family:sans-serif;bor=
der:medium"><tbody><tr><td style=3D"padding:5pt"></td><td style=3D"vertical=
-align:top;padding:5pt;font-size:9pt;line-height:1.38;font-family:Arial,san=
s-serif"><b>Arnaud Bran</b>=C2=A0(he/him)<br><span style=3D"font-size:8pt">=
Senior Site Reliability Engineer</span><br><a href=3D"https://wikimediafoun=
dation.org/" title=3D"foundationsite:" style=3D"color:rgb(102,51,102);backg=
round:none" target=3D"_blank"><span style=3D"color:rgb(0,0,0);font-size:8pt=
">Wikimedia Foundation</span></a></td></tr></tbody></table></div></div></di=
v></div></div>
</div>
_______________________________________________<br>
Wikitech-l mailing list -- <a href=3D"mailto:[email protected]=
" target=3D"_blank">[email protected]</a><br>
To unsubscribe send an email to <a href=3D"mailto:[email protected]=
kimedia.org" target=3D"_blank">[email protected]</a><br>
<a href=3D"https://lists.wikimedia.org/postorius/lists/wikitech-l.lists.wik=
imedia.org/" rel=3D"noreferrer" target=3D"_blank">https://lists.wikimedia.o=
rg/postorius/lists/wikitech-l.lists.wikimedia.org/</a></blockquote></div>
_______________________________________________<br>
Wikitech-l mailing list -- <a href=3D"mailto:[email protected]=
" target=3D"_blank">[email protected]</a><br>
To unsubscribe send an email to <a href=3D"mailto:[email protected]=
kimedia.org" target=3D"_blank">[email protected]</a><br>
<a href=3D"https://lists.wikimedia.org/postorius/lists/wikitech-l.lists.wik=
imedia.org/" rel=3D"noreferrer" target=3D"_blank">https://lists.wikimedia.o=
rg/postorius/lists/wikitech-l.lists.wikimedia.org/</a></blockquote></div><d=
iv><br clear=3D"all"></div><br><span class=3D"gmail_signature_prefix">-- </=
span><br><div dir=3D"ltr" class=3D"gmail_signature"><div dir=3D"ltr"><div><=
div dir=3D"ltr"><div><div dir=3D"ltr"><div><div dir=3D"ltr"><div><div dir=
=3D"ltr">Lucas Werkmeister (he/er)<br>Software Engineer<br><br>Wikimedia De=
utschland e. V. | Tempelhofer Ufer 23-24 | 10963 Berlin<br>Phone: +49 (0)30=
-577 11 62-0<br><a href=3D"https://wikimedia.de" target=3D"_blank">https://=
wikimedia.de</a><br><br>Imagine a world in which every single human being c=
an freely share in the sum of all knowledge. Help us to achieve our vision!=
<br><a href=3D"https://spenden.wikimedia.de" target=3D"_blank">https://spen=
den.wikimedia.de</a><br><br>Wikimedia Deutschland =E2=80=94 Gesellschaft zu=
r F=C3=B6rderung Freien Wissens e. V.=20
Eingetragen im Vereinsregister des Amtsgerichts Charlottenburg, VR 23855 B.=
 Als gemeinn=C3=BCtzig anerkannt durch das Finanzamt f=C3=BCr K=C3=B6rpersc=
haften I Berlin, Steuernummer 27/029/42207.</div></div></div></div></div></=
div></div></div></div></div>
</blockquote></div>

--000000000000cac4ff06567c9a60--

--===============3732935742210704023==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Wikitech-l mailing list -- [email protected]
To unsubscribe send an email to [email protected]
https://lists.wikimedia.org/postorius/lists/wikitech-l.lists.wikimedia.org/
--===============3732935742210704023==--