553728 - need private storage/ftp server for security patch private repo builds

Status: RESOLVED FIXED

(mozilla.org Graveyard :: Server Operations, task)

Description

[chris hofmann]

more detail on why this is needed in https://securitywiki.mozilla.org/SourceLeakRiskReductionPlan and the main meta tracking bug.

a limited number "trusted" nightly build testers will need access to this ftp server to verify any problems surfaced out of the automated testing and do sanity checks on the the builds before landing security patches on the trunk

Comment 1

[matthew zeier [:mrz]]

What's the timing around this?

Comment 2

[Reed Loden [:reed]]

Why was this marked infra? It's already restricted to the security group. Please unset infra.

Comment 3

[Reed Loden [:reed]]

(In reply to comment #2)
> Why was this marked infra? It's already restricted to the security group.
> Please unset infra.

ping. Please remove the infra group from this bug.

Comment 4

[matthew zeier [:mrz]]

I blame Bugzilla here - when I moved components I lost the salmon color and fearing I lost the security flag, I flipped it as infra.

Comment 5

[matthew zeier [:mrz]]

(yeah lame, when you add a comment you lose the salmon coloring too)

Comment 6

[Daniel Veditz [:dveditz]]

So now that we have a repo (bug 551752) RelEng will need this done so they can do bug 551756.

If we can password protect subdirectories of ftp.mozilla.org (we did for partner builds for a while, right?) that would be good enough and we wouldn't need an entire new server.

Need joduinn and mrz/aravind to find a place they can both agree on.

Comment 7

[Chris Lyon [:clyon]]

Can this happen today/tomorrow? 

adding in dmoore to see if he can help.

Comment 8

[John O'Duinn [:joduinn] (please use "needinfo?" flag)]

(In reply to comment #7)
> Can this happen today/tomorrow? 
> 
> adding in dmoore to see if he can help.

Raising priority, and removing mrz assignment, as he is on vacation.

Comment 9

[John O'Duinn [:joduinn] (please use "needinfo?" flag)]

(In reply to comment #8)
> (In reply to comment #7)
> > Can this happen today/tomorrow? 
> > 
> > adding in dmoore to see if he can help.
> 
> Raising priority, and removing mrz assignment, as he is on vacation.

Moving from projects, where it was languishing unloved, as this was needed for a Q2 goal. Pushing over to Aravind after irc with him.

Comment 10

[Aravind Gottipati [:aravind]]

Created a upload location and sent the details to Lukas and John.

Comment 11

[Daniel Veditz [:dveditz]]

Can we add the location to this bug here? If they're different I'm really only interested in the download location I can hand out.

Comment 12

[Daniel Veditz [:dveditz]]

I was told the location was going to be
https://ftp.mozilla.org/pvt-builds/firefox/shadow-central-builds/

Comment 13

[Lukas Blakk [:lsblakk] use ?needinfo]

(In reply to comment #12)
> I was told the location was going to be
> https://ftp.mozilla.org/pvt-builds/firefox/shadow-central-builds/

Sorry, my bad, I took out the extra 'firefox' because it was already in the path (to staging) so it's:
 
https://ftp.mozilla.org/pvt-builds/shadow-central-builds

Comment 14

[Daniel Veditz [:dveditz]]

I apparently don't have permission to access that anymore :-( Is it not hooked up to the LDAP group for this project?

Comment 15

[Daniel Veditz [:dveditz]]

Nevermind, Aravind reminded me that we set up a simple user:pass system instead. That way we can 1) share builds with people who don't have LDAP accounts, and 2) share builds without having to grant those people access to hgpvt web for future code changes/patch watching.