840919 - Running unittest on ix-mn-w864-002 triggers Windows Firewall Alert for python.exe

Status: RESOLVED FIXED

(Infrastructure & Operations Graveyard :: CIDuty, task)

Description

[Carsten Book [:Tomcat]]

Attachment: screenshot

see Screenshot, a Firewall alert for python.exe was popping up when running tests on 864-002

So i guess we have to whitlist python also on the w864 maschines

Dustin: So far i haven't clicked anything in this dialog to let you guys play - also seems to work anyway so far

Comment 1

[Dustin J. Mitchell [:dustin] (he/him)]

That's a different Python than we had added an exception for before.  But it shouldn't be too hard.

Comment 2

[Dustin J. Mitchell [:dustin] (he/him)]

We can add a new Python path, but that virtualenv is under the wrong parent directory.  It should be under C:\slave.  I've added that to bug 780050.

Comment 3

[Carsten Book [:Tomcat]]

talked to armen on irc

06:15 < armenzg> Tomcat: http://hg.mozilla.org/build/mozharness/file/default/configs/unittests/win_unittest.py#l23
06:16 < armenzg> Tomcat: it might need some tweaking in here http://hg.mozilla.org/build/mozharness/file/f8b96235fb89/scripts/desktop_unittest.py#l154
06:17 < armenzg> turn "virtualenv_path" into a relative path

Comment 4

[Armen [:armenzg]]

FTR, I'm not excited with paths being excepted.
Those binaries come from extracting the test packages.
As soon as developers decide to change how things get packaged the trees will go red.
If you have a more general way to add the exceptions that would be great.
If adding new exceptions is piece of cake and can be deployed easily I will be less concerned.

Comment 5

[Dustin J. Mitchell [:dustin] (he/him)]

We can update the paths via GPO, so not a huge big deal.

Comment 6

[Q]

With the introduction of the domain for testers adding new exceptions should be as easy as cut and paste. I can look at alternate methods that aren't as path reliant but it should be easy to add exceptions going forward.

Comment 7

[Armen [:armenzg]]

(In reply to Q from comment #6)
> With the introduction of the domain for testers adding new exceptions should
> be as easy as cut and paste. I can look at alternate methods that aren't as
> path reliant but it should be easy to add exceptions going forward.

This is very helpful to know. No need to look for an alternative.

Thanks!

Comment 8

[Q]

Attachment: FW rules

Comment 9

[Q]

Added GPO Tester_Firewall_Exceptions to the releng.ad.mozilla.com domain. It is linked to the "Tester" ous under machines. The relevant bug numbers are in the descriptions. Attached https://bugzilla.mozilla.org/attachment.cgi?id=714243 which is a policy result report so all rules are visible.