Upgade #Thumbor from [[ https://www.debian.org/releases/stretch/ | Debian stretch ]] to [[ https://www.debian.org/releases/buster/ | Debian buster ]], according to [[ https://wikitech.wikimedia.org/wiki/Operating_system_upgrade_policy | Operating system upgrade policy]] and guidance from #serviceops.
Things to consider:
* #Wikimedia-svg-rendering (e.g. T40010 )
~~Repackage/rebuild for buster~~ We will be using Blubber and pip requirements to deploy Thumbor
To be resolved
[ ] Figure out and decide what version of librsvg we require for Thumbor on Debian Buster. There are complex caveats both with too new and too old versions. Ref T265549 and T40010 for (long) backstory here.
Optional/Related tasks:
[x] T212941 Investigate systemd hardening to replace Firejail for Thumbor
[] T212946 Stream Thumbor logs to logstash
[x] T187765 Replace the Nginx fronting Thumbor with a reverse proxy capable of queuing requests