1737802 - channel-switching for pine

Status: RESOLVED WONTFIX

(Release Engineering :: Release Requests, task)

Description

[Julien Cristau [:jcristau]]

Firefox builds from the pine project branch use the firefox-mozilla-central mar channel id. We'd like to migrate users over to "pinebuilds" builds, which use firefox-mozilla-central-pine, so we'll need to generate and sign a custom mar.

Comment 1

[Julien Cristau [:jcristau]]

Attachment: switch-to-pine.mar (unsigned)

mar file info:

Compression type: xz
Signature type: unknown
Signature block found with 0 signatures

1 additional block found:
  - Product Information Block:
    - MAR channel name: firefox-mozilla-central
    - Product version: 95.0a1

SIZE    MODE    NAME   
184     0644    update-settings.ini
184     0644    Contents/Resources/update-settings.ini
140     0644    updatev3.manifest

update-settings.ini contents:

; If you modify this file updates may fail.
; Do not modify this file.

[Settings]
ACCEPTED_MAR_CHANNEL_IDS=firefox-mozilla-central-pine

updatev3.manifest contents:

type "partial"
add-if "update-settings.ini" "update-settings.ini"
add-if "Contents/Resources/update-settings.ini" "Contents/Resources/update-settings.ini"

Comment 2

[Aki Sasaki (not active)]

From https://gist.github.com/jcristau/bbf9521fccfed846e1ea48eb9c3ee9a1#file-create-channel-switch-mar-py aiui

Comment 3

[Aki Sasaki (not active)]

Attachment: [signingscript] enable nightly mar adhoc-signing

Mainly to expedite these changes.

(Updated k8s-sops to populate the mar nightly user/pass for adhoc 3 signing pool)

Comment 4

[Aki Sasaki (not active)]

Attachment: Bug 1737802 - add nightly-signing scope to adhoc-signing. r=#releng

Comment 5

[Aki Sasaki (not active)]

Looks like in adhoc-signing right now we hardcode whether we're release- or dep-signing here.

We need a release-cert optional key/value pair in the manifest that allows us to specify nightly-signing.

Comment 6

[Aki Sasaki (not active)]

nightly-signing wip at https://github.com/mozilla-releng/adhoc-signing/compare/master...escapewindow:nightly-signing?expand=1 , not done yet

Comment 7

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/ci/ci-configuration/rev/48e107147851
add nightly-signing scope to adhoc-signing. r=releng-reviewers,jmaher

Comment 8

[Aki Sasaki (not active)]

Attachment: [adhoc-signing] nightly signing support

Comment 9

[Aki Sasaki (not active)]

(Hoping this was helpful, and not stepping on toes)

We still need

• review&merge of scriptworker-scripts PR
• roll out to production-signingscript
• review&merge of adhoc-signing PR
• verify everything works

Comment 10

[Julien Cristau [:jcristau]]

Comment on attachment 9247875 [details]
[signingscript] enable nightly mar adhoc-signing

https://github.com/mozilla-releng/scriptworker-scripts/pull/429

Comment 11

[Julien Cristau [:jcristau]]

We won't be using this after all.