1876902 - Provide a way to sign macOS builds locally

Status: RESOLVED FIXED

(Firefox Build System :: General, enhancement, P1)

Description

[Haik Aftandilian [:haik]]

Provide a ./mach command that can be used to sign local packaged builds so that developers can easily sign Firefox app bundles and perform manual testing. This won't get us to having local builds be automatically signed so that ./mach test ... commands run on sign builds, but it is one step closer. The .app built in the object dir is not signable because it includes symlinks to outside the bundle. Bug 1522409 can be used for the future work to make signing automatic.

Comment 1

[Haik Aftandilian [:haik]]

Attachment: Bug 1876902 - Provide a way to sign macOS builds locally r=hneiva! r!#mach-reviewers

Introduce a ./mach macos-sign command that can be used to sign local packaged builds for manual testing.

Comment 2

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/e8d20bbb8f68
Provide a way to sign macOS builds locally r=mach-reviewers,hneiva r!#mach-reviewers

Comment 3

[Cristian Tuns]

Backed out for causing rst lint failures in signing_macos_build.rst

• Backout link
• Push with failures
• Failure Log
• Failure line: TEST-UNEXPECTED-ERROR | /builds/worker/checkouts/gecko/docs/contributing/signing/signing_macos_build.rst:97 | Explicit markup ends without a blank line; unexpected unindent. (rst)

Comment 4

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/d23f976d6c03
Provide a way to sign macOS builds locally r=mach-reviewers,hneiva r!#mach-reviewers

Comment 5

[Sebastian Hengst [:aryx] (needinfo me if it's about an intermittent or backout)]

https://hg.mozilla.org/mozilla-central/rev/d23f976d6c03