Closed Bug 1314977 Opened 8 years ago Closed 7 years ago

Disable icloud on taskcluster machines

Categories

(Taskcluster :: Workers, defect)

Product:
Taskcluster
Component:
Workers
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED FIXED

People

(Reporter: wcosta, Assigned: dustin)

References

Details

It happens with wcosta puppet environment.

Nov 03 12:59:29 t-yosemite-r7-0046 com.apple.xpc.launchd: (com.apple.icloud.fmfd): Service only ran for 0 seconds. Pushing respawn out by 10 seconds.
Nov 03 12:59:39 t-yosemite-r7-0046 com.apple.xpc.launchd: (com.apple.icloud.fmfd): Service only ran for 0 seconds. Pushing respawn out by 10 seconds.
Nov 03 12:59:49 t-yosemite-r7-0046 com.apple.xpc.launchd: (com.apple.icloud.fmfd): Service only ran for 0 seconds. Pushing respawn out by 10 seconds.
Nov 03 12:59:59 t-yosemite-r7-0046 com.apple.xpc.launchd: (com.apple.icloud.fmfd): Service only ran for 0 seconds. Pushing respawn out by 10 seconds.
Nov 03 13:00:09 t-yosemite-r7-0046 com.apple.xpc.launchd: (com.apple.icloud.fmfd): Service only ran for 0 seconds. Pushing respawn out by 10 seconds.
Nov 03 13:00:19 t-yosemite-r7-0046 com.apple.xpc.launchd: (com.apple.icloud.fmfd): Service only ran for 0 seconds. Pushing respawn out by 10 seconds.
Nov 03 13:00:29 t-yosemite-r7-0046 com.apple.xpc.launchd: (com.apple.icloud.fmfd): Service only ran for 0 seconds. Pushing respawn out by 10 seconds.
Nov 03 13:00:39 t-yosemite-r7-0046 com.apple.xpc.launchd: (com.apple.icloud.fmfd): Service only ran for 0 seconds. Pushing respawn out by 10 seconds.
Blocks: 1309197
Component: Task Configuration → Worker
I found this:

https://discussions.apple.com/thread/6849394?tstart=0

Kim: you've done some plist work...can you possibly help Wander dig into this in your copious free time?
Flags: needinfo?(kmoir)
I've looked but but haven't found a good solution yet.  I'll continue investigating.
No longer blocks: 1309197
See Also: → 1309197
I'll take a hack at this, on the chance that it is causing issues with tests or talos.

Kim, if you have any pointers from your investigation, let me know.
Assignee: nobody → dustin
Apparently FMF is "Find My Friends":
 https://en.wikipedia.org/wiki/Find_My_Friends

Here are the related files, from t-yosemite-r7-0040.test.releng.scl3.mozilla.com:

/private/var/root/Library/Preferences/com.apple.icloud.fmfd.plist
/System/Library/LaunchAgents/com.apple.icloud.fmfd.plist
/System/Library/Sandbox/Profiles/fmfd.sb
/Users/administrator/Library/Preferences/com.apple.icloud.fmfd.plist
/Users/cltbld/Library/Preferences/com.apple.icloud.fmfd.plist
/usr/libexec/fmfd

[root@t-yosemite-r7-0040.test.releng.scl3.mozilla.com ~]# plutil -convert xml1 /private/var/root/Library/Preferences/com.apple.icloud.fmfd.plist
[root@t-yosemite-r7-0040.test.releng.scl3.mozilla.com ~]# cat /private/var/root/Library/Preferences/com.apple.icloud.fmfd.plist
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
        <key>apsTokenStorageKey</key>
        <data>
        zyIgVRQsrAh92Rq5h7L+ItycbmI=
        </data>
        <key>lazyInitTimeSecsStoredKey</key>
        <real>86400</real>
</dict>
</plist>
[root@t-yosemite-r7-0040.test.releng.scl3.mozilla.com ~]# plutil -convert xml1 /Users/cltbld/Library/Preferences/com.apple.icloud.fmfd.plist
[root@t-yosemite-r7-0040.test.releng.scl3.mozilla.com ~]# cat /Users/cltbld/Library/Preferences/com.apple.icloud.fmfd.plist
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
        <key>apsTokenStorageKey</key>
        <data>
        zfeF9cTQrnC5FHcI9jb3FSDz7Oc=
        </data>
        <key>lazyInitTimeSecsStoredKey</key>
        <real>86400</real>
</dict>
</plist>
[root@t-yosemite-r7-0040.test.releng.scl3.mozilla.com ~]# plutil -convert xml1 /System/Library/LaunchAgents/com.apple.icloud.fmfd.plist
[root@t-yosemite-r7-0040.test.releng.scl3.mozilla.com ~]# cat /System/Library/LaunchAgents/com.apple.icloud.fmfd.plist
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
        <key>EnablePressuredExit</key>
        <true/>
        <key>EnableTransactions</key>
        <true/>
        <key>Label</key>
        <string>com.apple.icloud.fmfd</string>
        <key>MachServices</key>
        <dict>
                <key>com.apple.icloud.fmfd</key>
                <true/>
                <key>com.apple.icloud.fmfd.aps</key>
                <true/>
        </dict>
        <key>POSIXSpawnType</key>
        <string>Adaptive</string>
        <key>Program</key>
        <string>/usr/libexec/fmfd</string>
        <key>Umask</key>
        <integer>23</integer>
        <key>WorkingDirectory</key>
        <string>/var/empty</string>
</dict>
</plist>

[root@t-yosemite-r7-0040.test.releng.scl3.mozilla.com ~]# cat /System/Library/Sandbox/Profiles/fmfd.sb
(version 1)

(deny default)
(import "system.sb")

(system-network)

(define (home-regex home-relative-regex)
       (regex (string-append "^" (regex-quote (param "_HOME")) home-relative-regex)))
(define (home-subpath home-relative-subpath)
       (subpath (string-append (param "_HOME") home-relative-subpath)))
(define (home-literal home-relative-literal)
       (literal (string-append (param "_HOME") home-relative-literal)))

(allow file-issue-extension
       (home-literal "/Library/Caches/com.apple.icloud.fmfd"))

(allow file-read*
       (home-literal "/Library/Preferences/.GlobalPreferences.plist")
       (home-literal "/Library/Preferences/com.apple.GEO.plist")
       (home-literal "/Library/Preferences/com.apple.logging.plist")
       (home-literal "/Library/Preferences/com.apple.icloud.fmfd.plist")
       (home-literal "/Library/Preferences/MobileMeAccounts.plist")
       (home-literal "/Library/Preferences/com.apple.security.revocation.plist")
       (home-literal "/Library/Caches/GeoServices/ActiveTileGroup.pbd")
       (home-literal "/Library/Caches/GeoServices/networkDefaults.plist")
       (home-literal "/Library/Caches/com.apple.icloud.fmfd/Cache.db")
       (home-literal "/Library/Keychains/login.keychain")

       (literal "/Library/Keychains/System.keychain")
       (literal "/Library/Preferences/com.apple.security.plist")
       (literal "/Library/Preferences/.GlobalPreferences.plist")
       (literal (string-append "/Library/Managed Preferences/" (param "_USER") "/.GlobalPreferences.plist"))
       (literal (string-append "/Library/Managed Preferences/" (param "_USER") "/com.apple.logging.plist"))
       (literal "/Library/Managed Preferences/com.apple.logging.plist")
       (literal "/Library/Managed Preferences/.GlobalPreferences.plist")
       (literal "/private/var/db/DetachedSignatures")
       (literal "/private/var/db/mds/messages/se_SecurityMessages")
       (literal "/private/var/db/mds/system/mdsDirectory.db")
       (literal "/private/var/db/mds/system/mdsObject.db")
       (literal "/usr/libexec")
       (literal "/usr/libexec/fmfd")
       (literal "/usr/libexec/fmfd/..namedfork/rsrc")

       (home-regex #"/Library/Keychains/\.[\w]*")
       (home-regex #"/Library/Preferences/ByHost/\.GlobalPreferences\.[-\w.]*")
       (regex #"^/private/var/folders/[^/]+/[^/]+/C/mds/mdsDirectory\.db$")
       (regex #"^/private/var/folders/[^/]+/[^/]+/C/mds/mdsObject\.db$")
       (regex #"^/private/var/folders/[^/]+/[^/]+/C/mds/mds\.lock$"))

(allow file-read-metadata)

(allow file-write*
       (literal "/Users/local/Library/Caches/com.apple.icloud.fmfd")
       (home-literal "/Library/Keychains/login.keychain")
       (home-literal "/Library/Logs/com.apple.icloud.fmfd.log")
       (home-literal "/Library/Preferences/com.apple.icloud.fmfd.plist")
       (regex (string-append "^" (param "_HOME") #"/Library/Keychains/login\.keychain\.sb-[-\w]*"))
       (regex #"^/private/var/folders/[^/]+/[^/]+/C/mds/mdsDirectory\.db$")
       (regex #"^/private/var/folders/[^/]+/[^/]+/C/mds/mdsDirectory\.db_$")
       (regex #"^/private/var/folders/[^/]+/[^/]+/C/mds/mdsObject\.db$")
       (regex #"^/private/var/folders/[^/]+/[^/]+/C/mds/mdsObject\.db_$"))

(allow file-write-data
       (home-literal "/Library/Caches/com.apple.icloud.fmfd/Cache.db")
       (home-literal "/Library/Logs/com.apple.icloud.fmfd.log")
       (regex #"^/private/var/folders/[^/]+/[^/]+/C/mds/mds\.lock$"))

(allow ipc-posix-shm-read-data
       (ipc-posix-name "com.apple.AppleDatabaseChanged"))

(allow ipc-posix-shm-write-data
       (ipc-posix-name "com.apple.AppleDatabaseChanged"))

(allow mach-lookup
       (global-name "com.apple.CoreServices.coreservicesd")
       (global-name "com.apple.SecurityServer")
       (global-name "com.apple.SystemConfiguration.SCNetworkReachability")
       (global-name "com.apple.apsd")
       (global-name "com.apple.cmfsyncagent.auth")
       (global-name "com.apple.cookied")
       (global-name "com.apple.coreservices.launchservicesd")
       (global-name "com.apple.distributed_notifications@Uv3")
       (global-name "com.apple.marco")
       (global-name "com.apple.networkd")
       (global-name "com.apple.nsurlstorage-cache")
       (global-name "com.apple.ocspd")
       (global-name "com.apple.windowserver.active"))

(allow network-outbound
       (literal "/private/var/run/mDNSResponder")
       (remote tcp "*:443")
       (remote tcp "*:8888"))
Flags: needinfo?(kmoir)
This appears not to fail until some time after startup -- presumably triggered by a test run of some sort:

Jan 25 21:12:21 t-yosemite-r7-0040.test.releng.scl3.mozilla.com reboot[20250]: rebooted by root
..
Jan 25 21:44:41 t-yosemite-r7-0040.test.releng.scl3.mozilla.com imagent[429]: [Warning] ************* imagent timed out connecting to identityservicesd, please file a radar, and attach the stackshots generated ***********************
Jan 25 21:46:41 t-yosemite-r7-0040.test.releng.scl3.mozilla.com imagent[429]: [Warning] ************* imagent timed out connecting to identityservicesd, please file a radar, and attach the stackshots generated ***********************
Jan 25 21:48:41 t-yosemite-r7-0040.test.releng.scl3.mozilla.com imagent[429]: [Warning] ************* imagent timed out connecting to identityservicesd, please file a radar, and attach the stackshots generated ***********************
Jan 25 21:48:41 t-yosemite-r7-0040.test.releng.scl3.mozilla.com imagent[429]: [Warning] IMDAccount: incoming 'defaults' is not a dictionary, (null), (null)
Jan 25 21:48:41 --- last message repeated 1 time ---
Jan 25 21:48:41 t-yosemite-r7-0040.test.releng.scl3.mozilla.com fmfd[1600]: fmfd: Could not get user folder
Jan 25 21:48:41 t-yosemite-r7-0040 com.apple.xpc.launchd[1] (com.apple.icloud.fmfd): Service only ran for 0 seconds. Pushing respawn out by 10 seconds.

This is probably related to the use of a dynamic user: when fmfd starts up, it's looking for something (~/iCloud??) and not finding it, and is perhaps even unable to create it.

We might be best served here by waiting until we can figure out what test is causing this, and whether it's causing that test to fail.  Just deleting all of the fmfd-related files may make the log messages stop, but might also break that test.
Now that we're running the worker and tasks as the same user as has autologin'd, this appears to not be an issue.
Status: NEW → RESOLVED
Closed: 7 years ago
Resolution: --- → FIXED
Component: Worker → Workers
You need to log in before you can comment on or make changes to this bug.