Migrate most remaining Git repositories to GitLab

Originally created by @intrigeri on #17605 (Redmine)

As part of the initial migration (#15878 (closed)) we migrated a subset of our Git repos, exceeding what we promised the sponsor, but not covering all our Git repos.

Our contributors will better understand the setup if all our repos were migrated to GitLab, with only a handful of exceptions when there’s a good reason.

Another goal is to stop using the gitolite setup at immerda, so they can shut down https://git.tails.boum.org/: not only this is good resource hygiene, but having 2 places where we host Git repositories, instead of 3, will also be easier for contributors to cope with.

Delete

• accounting/donations (empty) [intrigeri]
• mac-compatibility (empty) [intrigeri]
• xmpp-internal (empty) [intrigeri]
• ux (already migrated) [intrigeri]
• debian-paris-201705 (if it needs to be revived, it can be uploaded to Debian infra) [intrigeri]
• tails at immerda [intrigeri]
  • We have another public mirror at https://salsa.debian.org/tails-team/tails/ already.
  1. Review, merge, and deploy puppet-tails!40 (merged)
  2. Delete on immerda
• gitlab-config at lizard (already migrated)

Migrate from immerda

• check_puppetdb_nodes, monitor-limesurvey-releases [intrigeri]
  1. Manually push mirror to GitLab
  2. Review, merge, and deploy puppet-tails!39 (merged)
  3. Delete on immerda
• ci [intrigeri]
• download-and-verify-extension (& archive) [intrigeri]
• frontdesk [intrigeri]
• frontdesk-shared [intrigeri]
• greeter (& archive) [intrigeri]
• icedove (& rename to thunderbird) [intrigeri]
• iuk (& archive) [intrigeri]
• live-build [intrigeri]
• otf-2017-2018 (& archive) [intrigeri]
• perl5lib (& archive) [intrigeri]
• persistence-setup (& archive) [intrigeri]
• press [intrigeri]
• pythonlib (& archive) [intrigeri]
• internal [intrigeri]
• security-tracker [intrigeri]
• summit-2014 (& archive)
• summit-2015 (& archive)
• summit-2016 (& archive)
• summit-2017 (& archive)
• summit-2018 (& archive)
• sysadmin [intrigeri]
• translate-server [intrigeri]
• workers-handbook [intrigeri]

Migrate from lizard

• uui-binary (delete mirror at immerda & archive) [intrigeri]

Migrate on demand

Announcement: https://lists.autistici.org/message/20210118.113444.823ec7e6.en.html

After 2021-04-18, we can delete the Git hosting setup at immerda.

⇒ Done on 2021-04-22.

Migrate from immerda to lizard

Once everything else is done, these should be the only repositories left at immerda, that block shutting down https://git.tails.boum.org/:

• fundraising: we need direct access to reset git-remote-gcrypt when it gets too painful
• summit (unless tails/summit#11 is done by then already)
• myprivatekeyispublic/testing [intrigeri]
  1. Delete mirror on GitLab: there, SSH access is much more powerful than on Gitolite, so it's not a good place to host a user whose SSH private key is public
  2. Manually push mirror to lizard
  3. Grant access on lizard repo to existing SSH public key
  4. Prepare tails/tails MR that switches to the lizard remote (tails!344 (merged))
  5. Review, merge, and deploy this MR (tails!344 (merged))
  6. Delete on immerda

Leave on lizard

• accounting: we need direct access to reset git-remote-gcrypt when it gets too painful
• sysadmin stuff: gitolite-admin, gitlab-migration-private, jenkins-lizard-config, weblate-gatekeeper, puppet repos
• isos, torbrowser-archive: need to be next to our web server and to Jenkins
• local mirrors: mirror-pool, mirror-pool-dispatcher, etcher-binary, promotion-material, tails