1538204 - Raptor: Sign fenix and reference-browser builds with the dep key

Status: RESOLVED FIXED

(Release Engineering :: Release Automation, enhancement)

Description

[Johan Lorenzo [:jlorenzo] - PTO - Back August 24th]

In bug 1522225, we want to let Raptor run against the release (as opposed to debug) builds. Raptor installs APKs on real devices which require the APKs to be signed. Sadly, gradle doesn't sign the release APKs by default (only the debug ones).

While we could modify gradle to use the "debug key" to sign these APKs, it's preferable to leverage the "dep" signing key because:

a. the debug key is generated on-the-fly by gradle because we don't store it anywhere. Therefore, we may break the real devices if the same package name changes its signing key, if the previous APK wasn't fully uninstalled.
b. On mozilla-central, the "dep" key is already the one we use if some tests require builds to be signed (for instance XPCShell on Windows). In fact, "dep" stands for "dependencies". In other words, this key is made for dependent jobs.

Comment 1

[Johan Lorenzo [:jlorenzo] - PTO - Back August 24th]

Attachment: [reference-browser] Dep-sign APKs for Raptor consumption on each master commit

Comment 2

[Johan Lorenzo [:jlorenzo] - PTO - Back August 24th]

Comment on attachment 9055178 [details] [review]
[reference-browser] Dep-sign APKs for Raptor consumption on each master commit

Landed on master at https://github.com/mozilla-mobile/reference-browser/commit/5752fef68dafb8218431edc77850a859e1bfb889

Comment 3

[Johan Lorenzo [:jlorenzo] - PTO - Back August 24th]

Attachment: [fenix] Dep-sign APKs for Raptor on-master-push

Comment 4

[Johan Lorenzo [:jlorenzo] - PTO - Back August 24th]

Comment on attachment 9056555 [details] [review]
[fenix] Dep-sign APKs for Raptor on-master-push

mhentges is the author of the patch.

r+'d by me at https://github.com/mozilla-mobile/fenix/pull/1417#pullrequestreview-224369136

Landed on master at https://github.com/mozilla-mobile/fenix/commit/6ed0c26dd5b48fbd96ee5fb0e426a1bac63e5def

Comment 5

[Johan Lorenzo [:jlorenzo] - PTO - Back August 24th]

Both projects are now signed with a different key on every push to master!