1266864 - Create a new Firefox repository to receive autolanded commits

Status: RESOLVED FIXED

(Developer Services :: Mercurial: hg.mozilla.org, defect)

Description

[Gregory Szorc [:gps]]

Let's call it "autoland." I think the path should be integration/autoland. It should be non-publishing. Write access should be limited to the autoland user.

We should also make it generaldelta and bundle2 only because it isn't bound by legacy access requirements.

Comment 1

[Gregory Szorc [:gps]]

Well, write access also needs to be granted by sheriffs + a very limited set of people. We can create a new scm access group to hold the small set of people.

Comment 2

[Gregory Szorc [:gps]]

fubar: should we add an LDAP or local system group for this? We want to be sure people don't get added to this group. It doesn't really matter to me where it is defined as long is access is significantly restricted and people don't get access accidentally (including through social engineering via whoever has write permissions to the list).

Comment 3

[Gregory Szorc [:gps]]

https://hg.mozilla.org/integration/autoland now exists.

It can only be written to by me. I used experimental/mozilla-central-gd as the base repo. I set format.maxchainlen=10000 going forward so the manifest delta chains aren't so long. This will improve performance a bit.

The repo requires bundle2, so you'll need Mercurial 3.4+ to clone/pull from it. Of course, everyone should be running Mercurial 3.7.3+ because of security fixes, so this shouldn't be a problem :)

Comment 4

[Kendall Libby [:fubar] (he/him)]

(In reply to Gregory Szorc [:gps] from comment #2)
> fubar: should we add an LDAP or local system group for this? We want to be
> sure people don't get added to this group. It doesn't really matter to me
> where it is defined as long is access is significantly restricted and people
> don't get access accidentally (including through social engineering via
> whoever has write permissions to the list).

ldap, else we'll run into problems when we finally (hah) get to bug 1204555. we should also communicate out to the folks involved in the commit access policy chain (eg MOC, ldap admins, marcia knous, etc) so that they are aware and can update their own docs.

Comment 5

[Gregory Szorc [:gps]]

LDAP group created and repo permissions on the server updated.

Calling this bug done.