Closed Bug 748478 Opened 12 years ago Closed 12 years ago

Create new Mac OS X for use as a tinderbox build machine for NSS

Categories

(mozilla.org Graveyard :: Server Operations, task)

Product:
mozilla.org Graveyard
Component:
Server Operations
Platform:
x86_64
macOS
Type:
task
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
VERIFIED FIXED

People

(Reporter: briansmith, Assigned: KaiE)

References

Details

+++ This bug was initially created as a clone of Bug #748476 +++

I do not know what needs to be installed on this VM. It should be a 64-bit VM so we can built 64-bit and 32-bit Mac builds.
Assignee: server-ops → dustin
See Also: → 748480
See Also: → 748476
I'm willing to install the necessary software on this VM.

I want to create documentation anyway, so it's fine if I include all steps after the OS installation.
However, if you prefer to not give me root access:

We need the usual build environment:
https://developer.mozilla.org/en/Mac_OS_X_Build_Prerequisites
We'll give you root, no prob.  I'll get this set up with SSH and screen sharing, and you can have at it (via the jumphost)

for my reference (sorry, Kai, you can't see this link):
https://inventory.mozilla.org/en-US/systems/show/6105/
Phong, I need a license for this - should I go to desktop to get that?
Phong's looking for the license..
Assignee: dustin → phong
(and this is for 10.6 server)
I found a 10.5 license key, but it's the one that the parallels server is using.  So we need a 10.6 key for this, which we need to buy.  I'll file a bug blocking this one for that purpose.
OK, 10.7 turns out to be the most efficient to get installed, so 10.7 it is.  I'm downloading the ISO now.
Ugh, no.  "Mac OS X virrtual mahinces can have only the Mac OS X Server Leopard or Mac OS X Server Snow Leopard operating system installed.  Other versions of Mac OS are not supported."

So we're back where we started..
Can we run a 10.6 VM when the server is 10.5?
Yes - it's listed in the UI as a supported option, and I installed and got through the point where it asked for a license key.
sent via irc.
Assignee: phong → dustin
So from out-of-band conversations, it sounds like this host can only run 10.5 server VMs, since it is a 10.5 server itself, which is why the 10.6 installer is asking for a 10.5 license code (which it also doesn't accept).  Installs must come from real media, not an ISO, and the drive currently contains 10.6 install media.  So we need to get someone onsite to swap in 10.5 media, and then give that a shot.

I really hate parallels.
Assignee: dustin → phong
OK, this is up, on cb-parallels01.  The parallels host is moving tomorrow, though. Also, Kai, I don't think you have VPN access to its current network.  So let's just hand this off to you late pacific time tomorrow, once it's in its new home.  At that point, it will be nss-vm-darwin9-1.community.scl3.mozilla.com.

I've set it up with ARD and SSH access.  I (or anyone in IT) can communicate the password out of band - please let me know how best to do that.
(In reply to Dustin J. Mitchell [:dustin] from comment #14)
> 
> I (or anyone in IT) can communicate
> the password out of band - please let me know how best to do that.

Could you send it with encrypted email?

S/MIME - retrieve my key via https://kuix.de/smime-keyserver/

GPG/PGP:
  http://pgp.zdv.uni-mainz.de:11371/pks/lookup?op=index&search=0x1C27423725007724
  Key fingerprint = 21D1 6E67 E183 98C8 DA9D  DF2E 1C27 4237 2500 7724

Phone: See my entry in the Mozillians directory.
OK, this is at its final home (well, its final IP, at least - we'll be migrating it to the new parallels servers when they're online).  That's
  nss-vm-darwin9-1.community.scl3.mozilla.com

and I sent the password.  Re-open, or open a new bug, if this isn't complete?
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → FIXED
I've received the password and was able to decrypt, thank you.

But I cannot login.

First, I go to
  ssh -v kaie@jump1.community.scl3.mozilla.com  (works)

Then I try
  ssh -v kaie@nss-vm-darwin9-1.community.scl3.mozilla.com

I paste the password you sent to me, but it's rejected.

Is "kaie" the correct username?
Status: RESOLVED → REOPENED
Resolution: FIXED → ---
Also, I would prefer being able to connect to the graphical desktop from my Linux system.

I understand the apple machines are able to offer VNC access.

I used port forwarding to connect to nss-vm-darwin9-1.community.scl3.mozilla.com port 5900.
When I try to connect from Linux with vncviewer, I get an error about incompatible security types.

set up tunnel:
ssh -v -L5904:nss-vm-darwin9-1.community.scl3.mozilla.com:5900 kaie@jump1.community.scl3.mozilla.com

trying to view desktop:


vncviewer 127.0.0.1:5904 -log *:stderr:100

TigerVNC Viewer for X version 1.1.0 - built Nov 22 2011 14:20:29
Copyright (C) 1999-2011 TigerVNC Team and many others (see README.txt)
See http://www.tigervnc.org for information on TigerVNC.

Wed May  9 14:17:54 2012
 Config:      set AutoSelect(Bool) to 1
 Config:      set CustomCompressLevel(Bool) to 0
 CConn:       connected to host 127.0.0.1 port 5904
 CConnection: reading protocol version
 CConnection: Server supports RFB protocol version 3.889
 CConnection: Using RFB protocol version 3.8
 CConnection: processing security types message
 CConnection: Server offers security type [unknown secType](30)
 CConnection: Server offers security type [unknown secType](35)
 CConnection: No matching security types
 main:        No matching security types
arr reminded to forward my authentication key into the session.

I retried using ssh -A, and when connection from the jump host to darwin I see that my key is being offered to the darwin host.

Unfortunately it still doesn't work.
Kai, sorry, I should have specified the username, too -- Administrator.  You can use that to create any additional users you'd like.

I'm not sure how to authenticate to a mac with a linux system.  Forwarding the connection with ssh is the right technique to get to port 5900, though.
Per IRC, I'm bringing this down to move it to the new parallels minis.
And it's back up, on parallels2 now.  I think we're done here!
Status: REOPENED → RESOLVED
Closed: 12 years ago → 12 years ago
Resolution: --- → FIXED
(with 2G RAM)
One important piece is missing: the XCode development software.

I understand it's meanwhile difficult to download XCode, because one needs AppStore login etc.

But I think that Mac OSX installation media contain it.

Could you please copy the XCode installation file(s) to the VM?

Thank you
Status: RESOLVED → REOPENED
Resolution: FIXED → ---
> I understand it's meanwhile difficult to download XCode, because one needs
> AppStore login etc.

... and that wouldn't even be sufficient, because the download requires a Mac with 10.6.6 at least (sigh). I believe getting the XCode software from a Mac OSX 10.5 installation DVD is the most reasonable solution.

(BTW, it wouldn't have been necessary to install a server version of Mac OSX, a client OS would have been sufficient.)
I'll find you a copy of XCode.  Apple!! *shakes fist*

You can't virtualize non-server versions of OS X, sadly.. Apple!! *shakes fist*
I put an xcode 3.1.2 DMG on the desktop - give that a try?  I don't have a ready reference for the version compatibility, but IIRC 4 was the first to require Lion.
Assignee: phong → kaie
Thank you very much!

It was the correct version of Xcode. 

I was able to install and configure the system as a NSS build machine.

I've documented the steps at
https://wiki.mozilla.org/NSS:MacOSXTinderbox
Status: REOPENED → RESOLVED
Closed: 12 years ago → 12 years ago
Resolution: --- → FIXED
Status: RESOLVED → VERIFIED
Blocks: 754908
Blocks: 648676
Product: mozilla.org → mozilla.org Graveyard
You need to log in before you can comment on or make changes to this bug.