891504 - talos zips not accessible through mozilla vpn

Status: RESOLVED FIXED

(Infrastructure & Operations :: RelOps: General, task)

Description

[[e-mail] (:bhearsum)]

Similar to bug 879410, but different directory. Eg: http://build.mozilla.org/talos/zips/talos.a11542b55a70.zip returns a 403.

Comment 1

[Dustin J. Mitchell [:dustin] (he/him)]

I doubt this is worth fixing, since these files are already served at http://talos-bundles.pvt.build.mozilla.org/ and production use will move to that vhost once the ZLB's are upgraded to take the load.

Comment 2

[Dustin J. Mitchell [:dustin] (he/him)]

..and then we're going to turn off relengweb1, which is where this is hosted now.

Comment 3

[Armen [:armenzg]]

I'm happy with just a suggested URL to test that our slaves will be able to reach a talos.zip.

I currently run this:
curl -I http://build.mozilla.org/talos/zips/${TALOS_ZIP}

Comment 4

[Dustin J. Mitchell [:dustin] (he/him)]

You should still be able to reach that from a slave (or we'd have the trees closed!) - just not from the VPN.

Comment 5

[Armen [:armenzg]]

It's a verification step that we added to ensure that the package is reachable before the A-team lands the change on inbound.
We've had problems in the past, where we thought that the permission changes step or the upload step were run correctly but did not; We only found out when it started burning the trees.

Is there a way that I could run curl from my laptop so I could ensure that it will work on a slave?

The other option would be to actually ssh into a machine and then run the step but I would rather not have to be having to figure out which machine is up if at all possible.

Thanks.

Comment 6

[Dustin J. Mitchell [:dustin] (he/him)]

Well, running it on your laptop isn't a good way to ensure it will work on a slave!  You could always use cruncher for this purpose - anything on the build network, not just slaves,  has access.

Comment 7

[Armen [:armenzg]]

This command does the job for me:
ssh cruncher "curl -I http://build.mozilla.org/talos/zips/${TALOS_ZIP}"

Anything left in here?

Comment 8

[Nick Thomas [:nthomas] (UTC+12)]

Armen, is there a doc to update ? I don't see anything related to Talos uploads at https://wiki.mozilla.org/ReleaseEngineering/How_To

Comment 9

[Aki Sasaki (not active)]

Looks like https://wiki.mozilla.org/ReleaseEngineering:Buildduty:Other_Duties#How_to_update_the_talos_zips is updated already.

Comment 10

[Nick Thomas [:nthomas] (UTC+12)]

Just found that too. One day we'll learn How_To be consistent where we put things.

Comment 11

[Dustin J. Mitchell [:dustin] (he/him)]

That's going to change again soon, in bug 657046.