Closed Bug 1446816 Opened 2 years ago Closed Last year

add back KEY to the list of artifacts that is uploaded for each release

Categories

(Release Engineering :: Release Automation: Other, enhancement, P1)

enhancement

Tracking

(firefox61 fixed)

RESOLVED FIXED
Tracking Status
firefox61 --- fixed

People

(Reporter: mtabara, Assigned: bhearsum)

References

Details

Attachments

(4 files, 1 obsolete file)

After rewriting checksums in Taskcluster in bug 1432219, we no longer have this file uploaded along within the rest of artifacts for the `~candidates` dirs. Let's add this back. 

Solutions:
* either add it to the signingscript so that is dumped along with the files and grabbed by beetmover
* add it in-tree and place it directly under artifacts for any of the `release-bouncer` tasks
Assignee: nobody → bhearsum
Priority: -- → P1
I haven't tested this yet (do you have any pointers on doing that?), but it seems plausible.
Attachment #8964675 - Flags: review?(aki)
Comment on attachment 8964675 [details] [diff] [review]
add KEY file to signing scriptworker deployment

I don't know of a great way to test other than setting up a puppet env on releng-puppet2, and pointing the beetmover-dev pool at it. Then we could test a staging release on maple, and (assuming we have KEY in a beetmover upstreamArtifacts somewhere) we'll have KEY in the staging bucket candidates dir.

If we're pretty confident in this, we can roll this out to prod puppet and watch for puppet errors in email, and roll back if we hit any issues. It's still wise to test on maple after this is rolled out.
Attachment #8964675 - Flags: review?(aki) → review+
Comment on attachment 8964676 [details]
Add KEY file to artifacts list.

Aki Sasaki [:aki] has approved the revision.

https://phabricator.services.mozilla.com/D840
Attachment #8964676 - Flags: review+
I had to make some minor fixes, but this worked in staging. You can see the KEY file present in both candidates and releases:
http://ftp.stage.mozaws.net/pub/firefox/candidates/59.0b20-candidates/build7/
http://ftp.stage.mozaws.net/pub/firefox/releases/59.0b20/

I'll provide updated patches shortly, and then we can get this landed + backported.
The KEY locations were inconsistent in the earlier patch, and I missed a couple of commas.
Attachment #8964675 - Attachment is obsolete: true
Attachment #8965312 - Flags: review?(aki)
Attachment #8965321 - Flags: review?(mtabara) → review+
Attachment #8965312 - Flags: review?(aki) → review+
Attachment #8965312 - Flags: checked-in+
Attachment #8965321 - Flags: checked-in+
Pushed by bhearsum@mozilla.com:
https://hg.mozilla.org/integration/mozilla-inbound/rev/5ade4a1adeba
add back KEY to the list of artifacts that is uploaded for each release. r=aki
Also landed on beta:
https://hg.mozilla.org/releases/mozilla-beta/rev/1564bef7385394af80874bd0dc976af43085fa66

This will get used in b11 next week.
https://hg.mozilla.org/mozilla-central/rev/5ade4a1adeba
Status: NEW → RESOLVED
Closed: Last year
Resolution: --- → FIXED
Comment on attachment 8969686 [details]
Bug 1446816: Add KEY files to production Thunderbird signing scriptworker; r?aki

Aki Sasaki [:aki] has approved the revision.

https://phabricator.services.mozilla.com/D1005
Attachment #8969686 - Flags: review+
You need to log in before you can comment on or make changes to this bug.