Closed Bug 574757 Opened 14 years ago Closed 14 years ago

Allow ffxbld & stage-ffxbld to pull from ssh://hgpvt.mozilla.org/shadow-central

Categories

(mozilla.org Graveyard :: Server Operations, task)

Product:
mozilla.org Graveyard
Component:
Server Operations
Platform:
x86
All
Type:
task
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED FIXED

People

(Reporter: lsblakk, Assigned: aravind)

References

Details

(Whiteboard: [sg:nse]) 

working on staging-slaves in the build network and unable to clone from this repo due to connection refused.
after talking with dveditz about this in IRC, it came up that I was trying to pull with http://  and instead should be doing either https or ssh.

Using https wouldn't be great because there would be authentication required and we can't check that into our (public) configs.  So I'm changing the summary of this to ask for cltbld's ssh key to be given authorization to clone from this repo. That should allow us to clone to the slaves without exposing anything.
Summary: Connection refused when trying to read from hgpvt.mozilla.org → Allow cltbld to pull from ssh://hgpvt.mozilla.org/shadow-central
Group: mozilla-confidential → core-security
Whiteboard: [sg:nse]
cltbld doesn't even have a ldap account (afaik), ffxbld does.  Can I use that account instead?
sure - that would be great, thanks
Summary: Allow cltbld to pull from ssh://hgpvt.mozilla.org/shadow-central → Allow ffxbld to pull from ssh://hgpvt.mozilla.org/shadow-central
Granted ffxbld user access to the sec group.
Status: NEW → RESOLVED
Closed: 14 years ago
Resolution: --- → FIXED
Please also allow stage-ffxbld to pull from this repo as it currently can not.  Editing summary to reflect this.
Status: RESOLVED → REOPENED
Resolution: FIXED → ---
Summary: Allow ffxbld to pull from ssh://hgpvt.mozilla.org/shadow-central → Allow ffxbld & stage-ffxbld to pull from ssh://hgpvt.mozilla.org/shadow-central
My assumption that stage-ffxbld cannot access the repo is based on:

Staging slave:

[cltbld@mv-moz2-linux-ix-slave01 ~]$ /tools/python/bin/hg clone --verbose --noupdate ssh://stage-ffxbld@hgpvt.mozilla.org/shadow-central /builds/slave/shadow-central-linux/build
running ssh stage-ffxbld@hgpvt.mozilla.org "hg -R shadow-central serve --stdio"
remote: abort: There is no Mercurial repository here (.hg not found)!
abort: no suitable response from remote hg!


Production slave:

[cltbld@mv-moz2-linux-ix-slave21 ~]$ /tools/python/bin/hg clone --verbose --noupdate ssh://ffxbld@hgpvt.mozilla.org/shadow-central /builds/slave/shadow-central-linux/build
running ssh ffxbld@hgpvt.mozilla.org "hg -R shadow-central serve --stdio"
requesting all changes
adding changesets
flipped the bits for stage-ffxbld to allow access to those repos.
Status: REOPENED → RESOLVED
Closed: 14 years ago → 14 years ago
Resolution: --- → FIXED
Product: mozilla.org → mozilla.org Graveyard
Group: core-security
You need to log in before you can comment on or make changes to this bug.