612472 - Puppet package for cacert.pem and wgetrc sync on darwin9 build slaves

Status: RESOLVED FIXED

(Release Engineering :: General, defect, P1)

Description

[Lukas Blakk [:lsblakk] use ?needinfo]

Attachment: syncs cacert.pem and wgetrc on darwin9 slaves

Need this on our buildslaves in order to do wget on logs with https urls on darwin9 slaves.  Tested in staging-puppet and was able to sync cacert.pem and wgetrc on moz2-darwin9-slave04 successfully and test wget for an https url.

Comment 1

[Lukas Blakk [:lsblakk] use ?needinfo]

Oh and I also tested a leak test run in staging with these installed (before making the puppet package) and it succesfully passed the leak log wget steps that had previously been failing without cacert.pem installed and defined in wgetrc.

Comment 2

[Lukas Blakk [:lsblakk] use ?needinfo]

p.s. I got the cacert.pem with the directions from bsmedberg's blog post: http://benjamin.smedbergs.us/blog/2008-08-27/how-to-teach-wget-about-security/

Comment 3

[[e-mail] (:bhearsum)]

Comment on attachment 490770 [details] [diff] [review]
syncs cacert.pem and wgetrc on darwin9 slaves

Why only 10.5 machines? If it works on 10.6 we may as well install it there, too!

Comment 4

[[e-mail] (:bhearsum)]

Comment on attachment 490770 [details] [diff] [review]
syncs cacert.pem and wgetrc on darwin9 slaves

From IRC:
Please change line 1 of cacert.pp to be accurate.
Don't think you need the exec {}.
Please look into this error:
err: Could not retrieve catalog: Could not find class cacert in namespaces staging-buildslave at /etc/puppet/manifests/classes/staging-buildslave.pp:20 on node moz2-darwin9-slave03.build.mozilla.org

Comment 5

[Lukas Blakk [:lsblakk] use ?needinfo]

Attachment: [tested] cacert.pem and wgetrc added to Mac buildslaves

got rid of the log error, correctly installed these two files on staging slave.

Comment 6

[[e-mail] (:bhearsum)]

Comment on attachment 491205 [details] [diff] [review]
[tested] cacert.pem and wgetrc added to Mac buildslaves

LGTM!

Style nit: closing brace on file block should be in the same column as the 'f' in file.

Comment 7

[Lukas Blakk [:lsblakk] use ?needinfo]

Comment on attachment 491205 [details] [diff] [review]
[tested] cacert.pem and wgetrc added to Mac buildslaves

http://hg.mozilla.org/build/puppet-manifests/rev/8b76df810ac5

Comment 8

[Lukas Blakk [:lsblakk] use ?needinfo]

updated all puppet masters, and ran a couple of OS X 10.5 leak builds to confirm.