1204109 - Provide a way to get private artifacts from automated tools

Status: RESOLVED WORKSFORME

(Taskcluster :: Services, defect)

Description

[Michael Shal [:mshal]]

For mozregression to bisect B2G device builds, it would be handy to have some way for it to automatically fetch private builds with the user's credentials (eg: private/build/aries.zip for a particular taskId). I've no idea how this should be implemented, though - thoughts?

Comment 1

[Julien Pagès (:parkouss)]

Hm, we should check if taskcluster for python support that ? I will ask on #taskcluster.

Comment 2

[Selena Deckelmann :selenamarie :selena]

(In reply to Michael Shal [:mshal] from comment #0)
> For mozregression to bisect B2G device builds, it would be handy to have
> some way for it to automatically fetch private builds with the user's
> credentials (eg: private/build/aries.zip for a particular taskId). I've no
> idea how this should be implemented, though - thoughts?

This depends on the deployment of Roles for scopes. Should be ready in a few weeks.

Comment 3

[Naoki Hirata :nhirata (please use needinfo instead of cc)]

Have you guys seen : https://github.com/askeing/taskcluster-util-python ?

From Askeing:

"It can help you:

    check the b2g version
    get the crash report link
    reset device
    enable/disable the cert apps for WebIDE
    backup/restore profile(workaround solution).

To install it, simply run the following command [2].

    $ sudo pip install -U b2g_util

Now you can try to connect your device and get the version information in any folder.

    $ b2g_check_versions


By the way, the new tool for Flashing Builds from Taskcluster is still TBD.
We only have a simple tool to download builds from Taskcluster [3] now.
However, the temporary credentials still doesn't work [4].
So, it only work fine with special credentials requested from bugzilla."

Comment 4

[Michael Shal [:mshal]]

I haven't seen that before - thanks for the link! Does that mean we don't need the roles for scopes mentioned in #c2?

Comment 5

[Naoki Hirata :nhirata (please use needinfo instead of cc)]

It still does depend on this, I believe if I understand the Roles issue.  "Temporary credentials still doesn't work [4].  So, it only work fine with special credentials requested from bugzilla."

Having said that, those with special credentials can use this.

There's a way to define credentials within the tool: --credentials /Users/nhirata/tc_credential.json
Could this be incorporated please?

Comment 6

[Jonas Finnemann Jensen (:jonasfj)]

So they way to download private artifacts with the client library is to:
 1) get credentials
    A) Use taskcluster.utils.authenticate()  gets temporary credentials using users browser
    B) From env vars or other means... (user must include certificate if using temp creds)
 2) Create an instance of taskcluster.Queue with credentials
 3) Call queue.buildSignedUrl(queue.buildUrl('getArtifact', ...), ...)
 4) Use curl or something else to download from the signed url

For details on the buildSignedUrl and buildUrl methods, see:
https://github.com/taskcluster/taskcluster-client.py/blob/master/taskcluster/baseclient.py

Or ask jhford.


reopen, if this is still an issue,
--
This bug is closed as part of the Great Bugzilla Cleaning Sprint of 2016 by bstack and jonasfj, please reopen if you disagree.