1191933 - Sign simulator add-ons via script

Status: VERIFIED FIXED

(Cloud Services :: Operations: Marketplace, task)

Description

[J. Ryan Stinnett [:jryans] (Use needinfo, replies may be slow)]

The Firefox DevTools team manages a number of Firefox OS Simulator add-ons.  These add-ons are not listed on AMO, so some other process is needed to sign them.

Using the unlisted add-on signing process could potentially be done, but it's not very practical currently:

* There are quite a few of them to sign (6 FxOS version * 4 platforms = 24 XPIs)
* Each XPI file is quite large (~100 MB)
* The AMO upload validator fails with an error ("subpackage is invalid")

Mossop mentioned he's had a few test add-ons signed via script, as in bug 1151133 and others, so this sounds like it could work for our case too.

Comment 1

[J. Ryan Stinnett [:jryans] (Use needinfo, replies may be slow)]

Jason, are you willing to sign these add-ons with your script?  It would be a big help to us!

If you are, does your script alter the version of the add-on at all?

Comment 2

[Jason Thomas [:jason]]

I am okay with signing them as long as a? :Mossop since this happening outside of AMO.

The script doesn't alter the version of the add-on.

Comment 3

[J. Ryan Stinnett [:jryans] (Use needinfo, replies may be slow)]

Mossop, I assume you approve of this?

Comment 4

[Dave Townsend [:mossop] (PTO until 6/3)]

a=me

Comment 5

[J. Ryan Stinnett [:jryans] (Use needinfo, replies may be slow)]

Okay, I can work on preparing the XPIs.  I'll need to bump the version so existing users are upgraded correctly.

Jason, what's a good method for us to exchange these large files?  I could upload them to http://archive.mozilla.org/pub/mozilla.org/labs/ for example, but I am not sure if you can write to that location.

Comment 6

[Jason Thomas [:jason]]

Could you upload them to your home directory on people.mozilla.org? I should be able to grab them from there.

Comment 7

[J. Ryan Stinnett [:jryans] (Use needinfo, replies may be slow)]

Okay, great, I'll work on preparing the files and uploading them there.

Comment 8

[J. Ryan Stinnett [:jryans] (Use needinfo, replies may be slow)]

Jason, all the XPIs are now ready to be signed.  I wasn't sure if you meant you had access to my private user directory files, or just that I could make them available there via public_html, so anyway they are available both ways:

http://people.mozilla.org/~rstinnett/simulators/

There should be 24 XPIs to sign.

Comment 9

[Jason Thomas [:jason]]

I've signed the add-ons and placed them in your home directory /home/rstinnett/simulators-signed. I've spot checked a few of the signed add-ons to make sure the signature are correct. Please verify and let me know if there are any issues.

Comment 10

[J. Ryan Stinnett [:jryans] (Use needinfo, replies may be slow)]

Great, they appear to work correctly here!  Thanks for doing this, it's made the signing task much easier for us.