499849 - Hg Account Request for Thunderbird Release Automation - user tbirdbld

Status: RESOLVED FIXED

(mozilla.org :: Repository Account Requests, task, P1)

Description

[Philippe M. Chiasson (:gozer)]

Attachment: tbirdbld_dsa.pub

+++ This bug was initially created as a clone of Bug #496367 +++
[shamelessly ripping off a bug from KaiRo]

For enabling the Thunderbird release automation to do relbranching and tagging, we need Mercurial access, including access to mozilla-central/-1.9.1, comm-central and L10n repos, for the tbirdbld user that is used by the Thunderbird buildbots.

The same user with the same key has access to stage, aus2 and the symbol push server, so it's been an established user/key for build stuff for a long time now.

I'm attaching the tbirdbld_dsa.pub file we have in use on all those boxes.

Comment 1

[Marcia Knous [:marcia]]

Need someone to vouch per https://wiki.mozilla.org/Commit_Policy:Current_Procedures#build.2F.2A.

Also has the Committer's form been filled out and returned to Erica?

Comment 2

[Philippe M. Chiasson (:gozer)]

This is not an account for a human, but rather, an account for build/release automation. See bug #496367 for similar context.

Comment 3

[Marcia Knous [:marcia]]

Ok, after reading Bug 496367 this seems fine since we have done it for others. Reed do you want to take this bug since you handled the other one?

Comment 4

[Philippe M. Chiasson (:gozer)]

Reed, any chance you can look into this one sometime this week ?

Comment 5

[Philippe M. Chiasson (:gozer)]

Increasing priority, as this is needed for Thunderbird Beta 4

Comment 6

[Reed Loden [:reed]]

Sorry, didn't know I was still the assignee for this bug. Over to IT.

Comment 7

[Philippe M. Chiasson (:gozer)]

Just raising priority a little, as this must be simple, and we are getting close to TB 3.0b4 release time (this coming Tuesday)

Comment 8

[Mark Banner (:standard8)]

Pinging again to get this done please - we'll most likely need this starting *tomorrow* - Tuesday 15.

(worst case slip at the moment is one day, but please don't assume that).

Comment 9

[Philippe M. Chiasson (:gozer)]

Bumping to major bug as well, time is running out.

Comment 10

[Aravind Gottipati [:aravind]]

Will get this done today.  Would help if you could ping me on irc so you can test it once I am done.

Comment 11

[Aravind Gottipati [:aravind]]

I granted the user access to mercurial and to the repositories.  The public key is the same as the one on file.  Please let me know if its working like you expect or if you find something is missing.

Comment 12

[Philippe M. Chiasson (:gozer)]

I've verified it was working yesterday with aravind on IRC, but this morning, build automation failed, looks like it doesn't work anymore.

Comment 13

[Philippe M. Chiasson (:gozer)]

Same test as yesterday fails

$> ssh -v -i ~/.ssh/tbirdbld [e-mail] clone test
[...]
debug1: Next authentication method: publickey
debug1: Offering public key: /home/gozer/.ssh/tbirdbld
debug1: Authentications that can continue: publickey,gssapi-with-mic
debug1: No more authentication methods to try.
Permission denied (publickey,gssapi-with-mic).

Raising priority as this is now holding up Thunderbird 3 Beta 4 builds

Comment 14

[Philippe M. Chiasson (:gozer)]

Working for comm-central and friends, but not for l10n stuff:

remote: abort: could not lock repository /repo/hg/mozilla/releases/l10n-mozilla-1.9.1/af: Permission denied

Comment 15

[Philippe M. Chiasson (:gozer)]

Works okay now