That's also an acceptable solution, but if that's the case then Wikimedia Foundation should update the wiki page for their extensions saying that they aren't fit for third party use.

Max, I think you need to involve WMF legal in this. WTFPL isn't a valid license (it can't be enforced in some countries). If you're against copy-left software licenses, that's fine, but at least choose a recognized and approved open source license (your contract actually requires you to do so, you know...).

Learn from others.

Is there a "get your shit together wikimedia" tag I can use? :)

+1

As for Ansible itself, see my quite extensive blog post on this:

There's a team that's working on deployment right? Are you a member of that team @GWicke? Proposing an alternative outside of that team means you're actively fighting them, making their job harder and wasting everyone's time.

Run + commit -> private/public registry also works really well for just letting people download pre-made versions of the images.

In T92826#1155785, @bd808 wrote:

In T92826#1155734, @Mglaser wrote:

Interesting, @bd808, how one would orchestrate that in order to get one consistent MW up and running. We should give that a thought.

My (limited) understanding of the "Docker Way™" is that you use container linking to tell the wiki container how to find the db, cache, parsoid and other containers that would be needed to build a full app stack. The latest versions of Docker also have a tool called [[https://docs.docker.com/compose/|docker-compose]] that helps automate all of this.

@brion, a lot of people outside WMF are leaning towards SaltStack instead of Puppet.

{{citation needed}}

I was wondering whether we should use the chance an take a stab at salt here, as we have a fresh start.

If you are building a truly "native" Docker system I'm not even sure what you will need Puppet/Chef/Salt/Ansible for. A Docker file describes how to provision the container it describes. When you are only sticking a single service in the container then the configuration will probably generally come down to "install these packages from apt and then put these config files in place."