If you think a bug might affect users in the 57 release, please set the correct tracking and status flags for Release Management.

http access to mrepo isn't working

RESOLVED FIXED

Status

Release Engineering
Platform Support
P2
normal
RESOLVED FIXED
5 years ago
4 years ago

People

(Reporter: coop, Assigned: coop)

Tracking

Firefox Tracking Flags

(Not tracked)

Details

Attachments

(1 attachment)

(Assignee)

Description

5 years ago
This URL (currently used by our buildmaster puppet module) doesn't work:

http://mrepo.mozilla.org/mrepo/5-x86_64/RPMS.mozilla/repodata/repomd.xml

...but this one does:

https://mrepo.mozilla.org/mrepo/5-x86_64/RPMS.mozilla/repodata/repomd.xml

Should there be an automatic redirect happening here, or should I be changing our puppet module to point directly to https?
:coop

We shut down port 80 on mrepo for bug 763801 (security concerns), please use https for any communication to mrepo. If you're using the infra puppet the built-in yum_reposd module should of changed this for you.
Sounds like this was addressed, closing.
Status: NEW → RESOLVED
Last Resolved: 5 years ago
Resolution: --- → WONTFIX
(Assignee)

Comment 3

5 years ago
(In reply to Brian Hourigan [:digi] from comment #1)
> We shut down port 80 on mrepo for bug 763801 (security concerns), please use
> https for any communication to mrepo. If you're using the infra puppet the
> built-in yum_reposd module should of changed this for you.

Thanks, Brian. This is a releng puppet system, so I'll make the change on our end.
Assignee: server-ops → coop
Status: RESOLVED → REOPENED
Component: Server Operations → Release Engineering: Platform Support
Priority: -- → P2
QA Contact: jdow → coop
Resolution: WONTFIX → ---
(Assignee)

Updated

5 years ago
Status: REOPENED → ASSIGNED
(Assignee)

Comment 4

5 years ago
Created attachment 648370 [details] [diff] [review]
Use https to access mrepo
Attachment #648370 - Flags: review?(bhearsum)
Comment on attachment 648370 [details] [diff] [review]
Use https to access mrepo

Review of attachment 648370 [details] [diff] [review]:
-----------------------------------------------------------------

Can you be sure to double check access from at least one of each of: buildbot masters and signing machines? We had some issues with the signing machines at one point because we forgot to verify some common puppet changes on them.
Attachment #648370 - Flags: review?(bhearsum) → review+
(Assignee)

Comment 6

5 years ago
(In reply to Ben Hearsum [:bhearsum] from comment #5) 
> Can you be sure to double check access from at least one of each of:
> buildbot masters and signing machines? We had some issues with the signing
> machines at one point because we forgot to verify some common puppet changes
> on them.

OK. I've already checked the masters, but will also verify a signing machine.
(Assignee)

Comment 7

5 years ago
Comment on attachment 648370 [details] [diff] [review]
Use https to access mrepo

https://hg.mozilla.org/build/puppet-manifests/rev/57dc986ebef4
Attachment #648370 - Flags: checked-in+
(Assignee)

Comment 8

5 years ago
(In reply to Chris Cooper [:coop] from comment #6)
> OK. I've already checked the masters, but will also verify a signing machine.

Signing machines seem fine using https.
Status: ASSIGNED → RESOLVED
Last Resolved: 5 years ago5 years ago
Resolution: --- → FIXED
Product: mozilla.org → Release Engineering
You need to log in before you can comment on or make changes to this bug.