929931 - Update all machines and templates for proxy and java settings

Status: RESOLVED FIXED

(Mozilla QA Graveyard :: Infrastructure, defect)

Description

[Henrik Skupin [:whimboo][⌚️UTC+1]]

I have to update all of our machines and templates for the following changes/updates:

* Fix proxy settings for bug 880709
* Update Classic Shell for Win 8.1 and 8
* Update Java to 7u45
* Totally disable automatic update checks for Java

Comment 1

[Henrik Skupin [:whimboo][⌚️UTC+1]]

Not sure what happened with the Vista nodes but all of them had the screensaver enabled again, also Defender was active on one of those. I also might want to check that.

Comment 2

[Henrik Skupin [:whimboo][⌚️UTC+1]]

So for the Java updates on Windows I wrote a little script which does the following:

* Installs Java via its silent installer
* Enables Java for web content
* Sets security level to high
* Disables the Java auto update settings completely
* Disables the Java update checker in Windows Run key in Registry (might be obsolete but I feel better with it)

The script is located at \\10.22.73.127\\share\\tools\\java\\

Lets see what I can do for OS X. For Linux we don't need that given that the updates are coming through the OS updates.

Comment 3

[Dave Hunt [:davehunt] [he/him] ⌚BST]

Could you also attach the script here?

Comment 4

[Henrik Skupin [:whimboo][⌚️UTC+1]]

Scripts vary a bit here. But after updating all VMs I got the most sorted out:

Registry for win32:
-------------------
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Update\Policy]
"EnableJavaUpdate"=dword:00000000
"NotifyDownload"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=-


Registry for win64:
-------------------
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\JavaSoft\Java Update\Policy]
"EnableJavaUpdate"=dword:00000000
"NotifyDownload"=dword:00000000
"NotifyInstall"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=-


Script to reinstall Java on the machine:
----------------------------------------
@ECHOOFF

wmic product where "name like 'Java%%Update %%'" call uninstall /nointeractive

\\10.22.73.127\share\tools\java\win\jre-7u45-windows-i586.exe /s WEB_JAVA=1 WEB_JAVA_SECURITY_LEVEL=H

regedit /s \\10.22.73.127\share\tools\java\win\tweaks_64.reg (or 32 for 32bit)


The wmic line is necessary given that Java doesn't seem to automatically uninstall an older installation via the unattended mode. :/

Comment 5

[Henrik Skupin [:whimboo][⌚️UTC+1]]

I haven't found any way how to completely disable update checks for Java on OS X. Adrian, do you have an idea?

Comment 6

[Adrian J Fernandez [:Aj]]

If via GUI;
System Preferences -> Others -> Java

When the Java Control Panel opens up, go to the Update tab and disable.

As for cli, pretty sure it's possible but probably not worth the hassle...

Comment 7

[Henrik Skupin [:whimboo][⌚️UTC+1]]

Nope, exactly that doesn't work. The automatic update checker doesn't obey this setting and present the update dialog anyway. :(

For now I have update all Minis with Java 7u45 so we are not blocked by those update dialogs anymore. But we still have to find a proper solution how to deactivate the checks completely.

Comment 8

[Henrik Skupin [:whimboo][⌚️UTC+1]]

I have updated all of our machines now and will run some tests once the patch on bug 879989 has been landed. If we are ok, I would like to update all of our templates.

Comment 9

[Henrik Skupin [:whimboo][⌚️UTC+1]]

The proxy settings are looking good. Adrian, can you please convert the templates to VMs so that I can update them all? Thanks.

Comment 10

[Adrian J Fernandez [:Aj]]

Templates are online;

Ubuntu_12.04_x86 10.22.73.242
Ubuntu_12.04_x86-64 10.22.73.243
Ubuntu_13.04_x86 10.22.73.238
Ubuntu_13.04_x86-64 10.22.73.222
Win_8.1RTM_x86 10.22.73.227
Win_8.1RTM_x86-64 10.22.73.230
Win_8_x86 10.22.73.220
Win_8_x86-64 10.22.73.221
Win7_x86 10.22.73.216
Win7_x86-64 10.22.73.226
WinVista_x86 10.22.73.225
WinXP_x86 10.22.73.224

Please let me know when to switch back to templates, thanks!

Comment 11

[Henrik Skupin [:whimboo][⌚️UTC+1]]

(In reply to Adrian Fernandez [:Aj] from comment #10)
> Ubuntu_12.04_x86 10.22.73.242
> Ubuntu_12.04_x86-64 10.22.73.243
> WinXP_x86 10.22.73.224
> WinVista_x86 10.22.73.225
> Win7_x86 10.22.73.216
> Win7_x86-64 10.22.73.226
> Win_8_x86 10.22.73.220
> Win_8_x86-64 10.22.73.221
> Win_8.1RTM_x86 10.22.73.227
> Win_8.1RTM_x86-64 10.22.73.230

Updates for all those templates have been done. Please convert them back.

> Ubuntu_13.04_x86 10.22.73.238
> Ubuntu_13.04_x86-64 10.22.73.222

Updates and the upgrade to 13.10 has been done. Please convert them back and rename the template appropriately.

Thanks

Comment 12

[Adrian J Fernandez [:Aj]]

All VMs converted back to templates.

The Ubuntu_13.04_* templates have been renamed to Ubuntu_13.10.

Comment 13

[Henrik Skupin [:whimboo][⌚️UTC+1]]

Adrian, we have to take another look at the Ubuntu 13.10 machines. I missed to re-add the 3rd party libraries, so Java is outdated now on those templates.

Comment 14

[Adrian J Fernandez [:Aj]]

Templates back online;
Ubuntu_13.04_x86 10.22.73.238
Ubuntu_13.04_x86-64 10.22.73.222

Comment 15

[Adrian J Fernandez [:Aj]]

err on my end, actual (correct) template names;

Ubuntu_13.10_x86 10.22.73.238
Ubuntu_13.10_x86-64 10.22.73.222

Comment 16

[Henrik Skupin [:whimboo][⌚️UTC+1]]

I have updated both VMs. We are fine now and they can be converted back. Thanks.

Comment 17

[Adrian J Fernandez [:Aj]]

VMs converted back to templates.