1911193 - automatically update known certificate transparency log list as part of periodic file updates

Status: RESOLVED FIXED

(Core :: Security: PSM, enhancement, P1)

Description

[Dana Keeler (she/her) [:keeler]]

We should automatically update the list of known certificate transparency logs as part of the periodic file updates job.

Comment 1

[Dana Keeler (she/her) [:keeler]]

Attachment: Bug 1911193 - update known certificate transparency logs in periodic-updates task r?leplatrem

Comment 2

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/f5d5579141d4
update known certificate transparency logs in periodic-updates task r=leplatrem

Comment 3

[tszentpeteri]

Backed out for causing docker images bustages

• Backout link
• Push with failures
• Failure Log:

Get:121 http://snapshot.debian.org/archive/debian/20230611T210420Z bookworm/main amd64 libgtk-3-0 amd64 3.24.37-2 [2845 kB]
95% [121 libgtk-3-0 12.3 kB/2845 kB 0%]                             392 kB/s 8s
95% [121 libgtk-3-0 245 kB/2845 kB 9%]                              392 kB/s 7s
96% [121 libgtk-3-0 774 kB/2845 kB 27%]                             392 kB/s 6s
96% [121 libgtk-3-0 1295 kB/2845 kB 46%]                            392 kB/s 5s
97% [121 libgtk-3-0 1513 kB/2845 kB 53%]                            901 kB/s 2s
98% [121 libgtk-3-0 2223 kB/2845 kB 78%]                            901 kB/s 1s
99% [Working]                                                       901 kB/s 0s
                                                                               
Get:125 http://snapshot.debian.org/archive/debian/20230611T210420Z bookworm/main amd64 libx11-xcb1 amd64 2:1.8.4-2 [192 kB]
99% [125 libx11-xcb1 12.3 kB/192 kB 6%]                             901 kB/s 0s
99% [Working]                                                       901 kB/s 0s
                                                                               
Get:126 http://snapshot.debian.org/archive/debian/20230611T210420Z bookworm/main amd64 libxml2-utils amd64 2.9.14+dfsg-1.2 [98.8 kB]
99% [126 libxml2-utils 5286 B/98.8 kB 5%]                           901 kB/s 0s
99% [126 libxml2-utils 27.0 kB/98.8 kB 27%]                         901 kB/s 0s
100% [Working]                                                      901 kB/s 0s
                                                                               
Fetched 55.3 MB in 58s (951 kB/s)
E: Failed to fetch http://snapshot.debian.org/archive/debian/20230611T210420Z/pool/main/u/util-linux/libfdisk1_2.38.1-5%2bb1_amd64.deb  404  Not Found [IP: 199.232.98.132 80]
E: Unable to fetch some archives, maybe run apt-get update or try with --fix-missing?
error building image: error building stage: failed to execute command: waiting for process to exit: exit status 100
Error: Could not build image: exit status: 100
[taskcluster 2024-08-07 19:05:55.970Z] === Task Finished ===
[taskcluster 2024-08-07 19:05:55.981Z] Artifact "public/image.tar.zst" not found at "/workspace/image.tar.zst": (HTTP code 404) no such container - Could not find the file /workspace/image.tar.zst in container 2cba29c43f489e431c85007cfd6a0d904c5ab1d89c8eedd71fb4e5d37d323076 
[taskcluster 2024-08-07 19:05:56.056Z] Unsuccessful task run with exit code: 1 completed in 75.212 seconds

Comment 4

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/8a49dcd84f8d
update known certificate transparency logs in periodic-updates task r=leplatrem

Comment 5

[pstanciu]

https://hg.mozilla.org/mozilla-central/rev/8a49dcd84f8d