1304582 - taskcluster failure, possibly chain of trust generation?

Status: RESOLVED FIXED

(Taskcluster :: Workers, defect)

Description

[Aki Sasaki (not active)]

18:46 <aki> https://tools.taskcluster.net/task-inspector/#F6YeiAtmR7y0gJrGLm4rKg/0 looks successful, but it failed. wondering if the chain of trust generation failed?  
19:17 <•garndt> aki: I see the error in the logs. Can you enter a bug so I can look tomorrow?
19:27 <aki> sure

Comment 1

[Aki Sasaki (not active)]

https://treeherder.mozilla.org/#/jobs?repo=try&revision=a60ebd67958a&selectedJob=27922956 works.
https://treeherder.mozilla.org/#/jobs?repo=try&revision=09e8fffe4faa&selectedJob=27922857 doesn't.

The only differences between the two pushes are a whitespace change in README.txt in the former, and task.payload.features.chainOfTrust = true in the latter.

Comment 2

[Greg Arndt [:garndt]]

I have a patch for docker-worker already merged to fix the issue with the chain of trust in that worker.  The ami can be deployed tomorrow.

Comment 3

[Greg Arndt [:garndt]]

https://github.com/taskcluster/docker-worker/commit/0a9183bd9bcd886028c237a5d2878e4a75f43c02

Comment 4

[Aki Sasaki (not active)]

Thanks!

Comment 5

[Aki Sasaki (not active)]

I was able to get the decision task to generate the chain of trust artifact successfully.
We can either close out this bug now, or when the docker-image and android/linux builder worker type AMIs are deployed.
Thank you!

Comment 6

[Aki Sasaki (not active)]

https://treeherder.mozilla.org/#/jobs?repo=try&revision=9f8cd9e86c77 shows that turning taskcluster.payload.features.chainOfTrust on for all builds+docker-image tasks is broken as of last night.

Comment 7

[Aki Sasaki (not active)]

I enabled decision+build+docker-image cot generation in-tree.