Closed (won't fix)
Project:
Drupal core
Version:
main
Component:
Umami demo
Priority:
Normal
Category:
Feature request
Assigned:
Unassigned
Issue tags:
Reporter:
Created:
22 May 2018 at 20:14 UTC
Updated:
26 Mar 2026 at 23:31 UTC
Jump to comment: Most recent, Most recent file
Comments
Comment #2
gábor hojtsyA security concern was raised that if this is accessible outside of umami this could wipe your site inadvertently. We would need to make sure it is only accessible from the umami profile. Still in that case if someone happens to build their site on Umami (WHICH WE DON'T SUPPORT), they would have this feature lingering there and it may wipe their site later when they want to clear the cache or something. It would certainly make building on the demo more dangerous by itself.
Comment #3
webchickI'm not crazy about this idea, for the following reasons:
Unless I'm missing something, and there's a drop-dead simple solution to this problem, that's not going to get held up on security team blessing, that's drop-dead easy to design for, then great. Let's do it! But otherwise, this feels like diverting valuable time and people from efforts that could be otherwise spent making the demo really solid and impressive.
Comment #4
gábor hojtsyThe problem with supporting BC is that is not a one time development investment. Whatever changes are made would need to come with tests (database dump, update function test) and some kind of updates are just impossible to support (you added a field_media, the profile wants to add it, no way to resolve that).
The Umami team on today's call said that they see a possibility to postpone this feature until there need to be a breaking change which requires a reinstall. Although in that case the workflow would be:
And this magic button would only be able to do 1 and 3, not 2. So this button is not a magic bullet either :)
Comment #5
webchickThat's fair about the ongoing investment and some of the trickiness therein for upgrade paths. But if we're targeting people who actually read things + can henceforth locate a magic button, a link to a handbook post that explains how to start over with another profile takes 1 line of code and no particular skill vs. a magic button takes N00 lines of code + very specific expertise + ongoing maintenance.
Again, happy to be told that I'm wrong and this feature is super easy to implement. But in absence of that, this feels like a major distraction that puts the MVP at risk for yet another release.
Comment #6
catchI don't think this has to block things being visible, it's just an idea - specifically an idea which seems like it should be less work than trying to maintain an upgrade path and backwards compatibility.
We don't know how widespread the problem of 'building sites on Umami' will be, so we should think about mitigations. I also think it's better to talk about potential approaches before we run into problems.
@webchick:
So the only issue is this is we don't know how people have installed Drupal in the first place. If it's any kind of one-click install, then manual instructions on how to empty a database are tricky to document. Also reinstalling core with a different install profile is not straightforward even for experienced Drupal developers.
We have spent a lot of effort trying to optimise the process of installing for new users - like creating settings.php, making it secure etc. The unfortunate side-effect of this, is that it makes reinstall harder.
Even though I've been using Drupal for over 10 years, I regularly mess up reinstalls and hit errors.
I often start site building on minimal or standard, export the configuration, then continue building the site using config_installer. The first time you reinstall after that change with drush, drush will complain that the install profile in settings.php does not match the one you've picked.
With the UI installer, the same problem happens:

Since the installer makes settings.php read-only, it may be necessary to either delete that file, or to manually edit it and change the install_profile setting. So we don't require people to do anything with settings.php when they install, but we do when they reinstall.
You can see various bug reports about this with config_installer. While the use-case is different, the process of installing again with a different profile is not, and it's tripped up long-term Drupal developers in multiple different hosting environments.
#2819385: Trying to modifying settings.php when it is read-only
#2802903: Install profile setting in settings.php causes import issues
#2156401: Write install_profile value to configuration and only to settings.php if it is writeable dealt with one aspect of this, but that's for locked down environments with a pre-prepared settings.php.
Core doesn't actual require the install profile in settings.php, we write to it for backwards compatibility, so maybe we can remove that bc layer in a minor release (I don't think anyone will miss it): https://www.drupal.org/node/2538996
A related issue I opened a very long time ago is #1242956: Allow install profiles to be switched. If someone was to uninstall the Umami theme (and profile), and we allowed switching the install profile to standard, that's really no different to building up the same configuration from scratch. And it's less destructive than a nuke button.
Comment #7
catchOpened #2975328: Install profile in settings.php and mismatch check makes re-installs of Drupal hard.
Comment #8
gábor hojtsyThis may be blocked on that then unless we want to (and can in the environment) delete settings.php which would mean users need to know db creds which they may have never known (ie. in an ideal simplytest.me environment or another managed environment).
Comment #9
gábor hojtsyBased on #8.
Comment #10
gábor hojtsy#2975328: Install profile in settings.php and mismatch check makes re-installs of Drupal hard landed, so this is unpostponed. Also closed #2802903: Install profile setting in settings.php causes import issues.
Comment #22
quietone commentedThings have changed since this issue was opened and we now have, #3523324: Deprecate and remove the Umami demonstration profile from core, make it a contributed site template.
Therefor I am closing this issue.