Closed Bug 1374787 Opened 7 years ago Closed 6 years ago

spin up new dep signing servers

Categories

(Release Engineering :: Release Automation: Signing, enhancement)

Product:
Release Engineering
Component:
Release Automation: Signing
Type:
enhancement
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED WONTFIX

People

(Reporter: mozilla, Assigned: mozilla)

References

Details

In bug 1366094, we added a dep signing scriptworker pool and support for dep signing servers. This bug tracks actually spinning up the dep signing servers. - new aws sec group - verify netflows - any fixes involving automating the dep signing servers
Now I'm wondering if these should be in the signing subnet, as nthomas suggested. We could potentially restrict access to the depsigning workers and be fine... though if we want to turn off the depsigning ports on the current signing servers, we'd have to point buildbot at them as well.
Can this be closed off now?
No, we have dep signing scriptworkers but no standalone dep signing servers atm.
Component: Release Automation: Other → Release Automation: Signing
See Also: → 1472860
Looks like we can't install mercurial in the virtualenv of mac-depsigning2.srv.releng.mdc1.mozilla.com: Notice: /Stage[main]/Toplevel::Server::Depsigning/Signingserver::Instance[dep-signing-server]/Python::Virtualenv[/builds/signing/dep-signing-server]/Python::Virtualenv::Package[/builds/signing/dep-signing-server||mercurial==4.6.2]/Exec[pip /builds/signing/dep-signing-server||mercurial==4.6.2]/returns: In file included from mercurial/cext/osutil.c:1320: Notice: /Stage[main]/Toplevel::Server::Depsigning/Signingserver::Instance[dep-signing-server]/Python::Virtualenv[/builds/signing/dep-signing-server]/Python::Virtualenv::Package[/builds/signing/dep-signing-server||mercurial==4.6.2]/Exec[pip /builds/signing/dep-signing-server||mercurial==4.6.2]/returns: In file included from /System/Library/Frameworks/ApplicationServices.framework/Headers/ApplicationServices.h:23: Notice: /Stage[main]/Toplevel::Server::Depsigning/Signingserver::Instance[dep-signing-server]/Python::Virtualenv[/builds/signing/dep-signing-server]/Python::Virtualenv::Package[/builds/signing/dep-signing-server||mercurial==4.6.2]/Exec[pip /builds/signing/dep-signing-server||mercurial==4.6.2]/returns: In file included from /System/Library/Frameworks/CoreServices.framework/Headers/CoreServices.h:19: Notice: /Stage[main]/Toplevel::Server::Depsigning/Signingserver::Instance[dep-signing-server]/Python::Virtualenv[/builds/signing/dep-signing-server]/Python::Virtualenv::Package[/builds/signing/dep-signing-server||mercurial==4.6.2]/Exec[pip /builds/signing/dep-signing-server||mercurial==4.6.2]/returns: In file included from /System/Library/Frameworks/CoreFoundation.framework/Headers/CoreFoundation.h:55: Notice: /Stage[main]/Toplevel::Server::Depsigning/Signingserver::Instance[dep-signing-server]/Python::Virtualenv[/builds/signing/dep-signing-server]/Python::Virtualenv::Package[/builds/signing/dep-signing-server||mercurial==4.6.2]/Exec[pip /builds/signing/dep-signing-server||mercurial==4.6.2]/returns: In file included from /System/Library/Frameworks/CoreFoundation.framework/Headers/CFPropertyList.h:13: Notice: /Stage[main]/Toplevel::Server::Depsigning/Signingserver::Instance[dep-signing-server]/Python::Virtualenv[/builds/signing/dep-signing-server]/Python::Virtualenv::Package[/builds/signing/dep-signing-server||mercurial==4.6.2]/Exec[pip /builds/signing/dep-signing-server||mercurial==4.6.2]/returns: In file included from /System/Library/Frameworks/CoreFoundation.framework/Headers/CFStream.h:15: Notice: /Stage[main]/Toplevel::Server::Depsigning/Signingserver::Instance[dep-signing-server]/Python::Virtualenv[/builds/signing/dep-signing-server]/Python::Virtualenv::Package[/builds/signing/dep-signing-server||mercurial==4.6.2]/Exec[pip /builds/signing/dep-signing-server||mercurial==4.6.2]/returns: /usr/include/dispatch/dispatch.h:48:10: fatal error: 'os/object.h' file not found Notice: /Stage[main]/Toplevel::Server::Depsigning/Signingserver::Instance[dep-signing-server]/Python::Virtualenv[/builds/signing/dep-signing-server]/Python::Virtualenv::Package[/builds/signing/dep-signing-server||mercurial==4.6.2]/Exec[pip /builds/signing/dep-signing-server||mercurial==4.6.2]/returns: #include <os/object.h>
Depends on: 1480512, 1472404
Aki tells me this doesn't block an SCL3 exit.

We're planning on moving off the signing servers completely.

Status: NEW → RESOLVED
Closed: 6 years ago
Resolution: --- → WONTFIX
You need to log in before you can comment on or make changes to this bug.