Closed Bug 610575 Opened 14 years ago Closed 14 years ago

Cannot download packages for running talos/unittests on shadow-central builds

Categories

(mozilla.org Graveyard :: Server Operations, task)

x86
macOS
task
Not set
major

Tracking

(Not tracked)

RESOLVED FIXED

People

(Reporter: lsblakk, Assigned: aravind)

References

Details

(Whiteboard: [sg:nse])

I was under the impression that machines in the build network would be able to download from dm-pvtbuild01.mozilla.org without needing authentication but in staging I am unable to download the build to talos-r3-fed-002 with:

wget --progress=dot:mega -N https://dm-pvtbuild01.mozilla.org/staging/shadow-central/shadow-central-linux/1289292391/firefox-4.0b8pre.en-US.linux-i686.tar.bz2

The result is:

--2010-11-08 19:22:08--  https://dm-pvtbuild01.mozilla.org/staging/shadow-central/shadow-central-linux/1289292391/firefox-4.0b8pre.en-US.linux-i686.tar.bz2
Resolving dm-pvtbuild01.mozilla.org... 10.2.74.95
Connecting to dm-pvtbuild01.mozilla.org|10.2.74.95|:443... connected.
HTTP request sent, awaiting response... 401 Authorization Required
Authorization failed.
Summary: Cannot download packaged for running talos/unittests on shadow-central builds → Cannot download packages for running talos/unittests on shadow-central builds
my understanding that the build machines should be able to grab packaged was based on https://bugzilla.mozilla.org/show_bug.cgi?id=585615#c49 where Aravind says that "anyone in the build network should be able to browse stuff
(over https) without a password".
I had two networks in there, this looks like the MV (or the scl) network.  The allow lines now contain

        Allow from 10.2.71
        Allow from 10.2.90
        Allow from 10.250.49
Status: NEW → RESOLVED
Closed: 14 years ago
Resolution: --- → FIXED
Are you sure that's a complete list of a IPs machines will be pulling from ? Compared to '<Directory /var/www/html/build/clobberer>' in dm-wwwbuild01:/etc/httpd/conf/domains/build.mozilla.org.conf it looks like missing 10.250.48 and .50 in Castro and no Santa Clara. FWIW, I don't think we have anything in 10.2.76 anymore, according to reverse dns anyway.
Definite missing some IPs, I'm still getting failures from some of our talos boxes like talos-r3-fed-044
http://tinderbox.mozilla.org/showlog.cgi?log=Shadow-Central/1289328577.1289328608.2086.gz
Status: RESOLVED → REOPENED
Resolution: FIXED → ---
Added 48 and 50.  If there are more missing, can you please list the machines/subnets that need to be added?
Added a few more.

This is the new allowed subnets line

Allow from 10.2.71 10.2.90 10.250.48 10.250.49 10.250.50 10.12.49.0/255.255.252.0 10.12.75.0/255.255.255.0
Status: REOPENED → RESOLVED
Closed: 14 years ago14 years ago
Resolution: --- → FIXED
Product: mozilla.org → mozilla.org Graveyard
Group: core-security
You need to log in before you can comment on or make changes to this bug.