Confirmed users
3,990
edits
Releases/Firefox 3.6.2/BuildNotes: Difference between revisions
→Resign MD5SUMS and SHA1SUMS
| (20 intermediate revisions by 4 users not shown) | |||
| Line 42: | Line 42: | ||
| style="background: none repeat scroll 0% 0% rgb(239, 239, 239);" | '''Build machine''' | | style="background: none repeat scroll 0% 0% rgb(239, 239, 239);" | '''Build machine''' | ||
|- | |- | ||
| 1 | | rowspan="3" | 1 | ||
| Linux | | Linux | ||
| <br> | | <br> | ||
| moz2-linux-slave20 | | moz2-linux-slave20 | ||
|- | |- | ||
| Mac | | Mac | ||
| <br> | | <br> | ||
| bm-xserve11 | | bm-xserve11 | ||
|- | |- | ||
| Windows | | Windows | ||
| <br> | | <br> | ||
| win32-slave42 | | win32-slave42 | ||
|- | |- | ||
| 2 | | rowspan="3" | 2 | ||
| Linux | | Linux | ||
| <br> | | <br> | ||
| moz2-linux-slave21 | | moz2-linux-slave21 | ||
|- | |- | ||
| Mac | | Mac | ||
| <br> | | <br> | ||
| moz2-darwin9-slave13 | | moz2-darwin9-slave13 | ||
|- | |- | ||
| Windows | | Windows | ||
| <br> | | <br> | ||
| win32-slave34 | | win32-slave34 | ||
|- | |- | ||
| 3 | | rowspan="3" | 3 | ||
| Linux | | Linux | ||
| | | 20100316060223 | ||
| moz2-linux-slave21 | | moz2-linux-slave21 | ||
|- | |- | ||
| Mac | | Mac | ||
| | | 20100316055951 | ||
| moz2-darwin9-slave10 | | moz2-darwin9-slave10 | ||
|- | |- | ||
| Windows | | Windows | ||
| | | 20100316074819 | ||
| win32-slave18 | | win32-slave18 | ||
|} | |} | ||
| Line 166: | Line 160: | ||
* partner repack step failed to upload the generated builds. Given all the other network failures at the time, this isn't surprising. Re-ran the upload step by hand without issue. | * partner repack step failed to upload the generated builds. Given all the other network failures at the time, this isn't surprising. Re-ran the upload step by hand without issue. | ||
* Remove build1/en-US.xpi {{bug|485860}} | |||
==== Unit tests ==== | ==== Unit tests ==== | ||
| Line 215: | Line 210: | ||
===== Partner Signing ===== | ===== Partner Signing ===== | ||
* | NOTE: For the next release we will probably have {{bug|554321}} fixed and signing repacks will be different than what we did here. | ||
---- | |||
Lots of problems here: | |||
* The partner builds generated by the automation are not useful because they cannot be signed with the same internal bits as the rest of the builds. | |||
* Coop redid the partner builds against already signed builds. These builds refused to get signed because repacked NSIS installers do that. | |||
Kev provided us with a tarball of internally signed, but not externally signed partner builds. Those were signed with the instructions [https://intranet.mozilla.org/Build:CombinedSigning#Partner_Repack_Signing here]. | |||
===== Resign MD5SUMS and SHA1SUMS ===== | |||
* I had removed en-US.xpi after having signed. {{bug|554455}} | |||
* This is what I did to get this fixed: | |||
# keymaster | |||
mkdir -p ~/signing-work/firefox-3.6.2-remove_en-US.xpi/unsigned | |||
cd ~/signing-work/firefox-3.6.2-remove_en-US.xpi/unsigned | |||
scp -i ~/.ssh/ffxbld_dsa ffxbld@stage.mozilla.org:/home/ftp/pub/firefox/nightly/3.6.2-candidates/build3/{MD5SUMS,SHA1SUMS} . | |||
# modified MD5SUMS and SHA1SUMS | |||
gpg -v -u releases -sba MD5SUMS | |||
# | gpg -v -u releases -sba SHA1SUMS | ||
mkdir -p ~/signing-work/ | |||
cd ~/signing-work/ | |||
scp | |||
* | scp -i ~/.ssh/ffxbld_dsa * ffxbld@stage.mozilla.org:/home/ftp/pub/firefox/nightly/3.6.2-candidates/build3/{MD5SUMS,SHA1SUMS} | ||
* After Nick's approval | |||
# | # ffxbld@stage | ||
cd | cd /pub/mozilla.org/firefox/nightly/3.6.2-candidates/build3/ | ||
cp MD5SUMS* SHA1SUMS* ../../../releases/3.6.2/ | |||
==== L10nVerify ==== | ==== L10nVerify ==== | ||
| Line 320: | Line 301: | ||
$ cd /pub/mozilla.org/firefox/nightly/3.6.2-candidates/build3 | $ cd /pub/mozilla.org/firefox/nightly/3.6.2-candidates/build3 | ||
$ clamdscan -m | $ clamdscan -m | ||
/mnt/netapp/stage/archive.mozilla.org/pub/firefox/nightly/3.6.2-candidates/build3: OK | |||
----------- SCAN SUMMARY ----------- | |||
Infected files: 0 | |||
Time: 2917.127 sec (48 m 37 s) | |||
==== Push to mirrors ==== | ==== Push to mirrors ==== | ||
| Line 327: | Line 311: | ||
* We want to push partner repacks to candidates dirs but we want to make sure we don't send it to the mirrors. This will be the first time we do this and that is why I am adding a note beforehand in this section | * We want to push partner repacks to candidates dirs but we want to make sure we don't send it to the mirrors. This will be the first time we do this and that is why I am adding a note beforehand in this section | ||
After GO from driver: | |||
# ffxbld@stage | # ffxbld@stage | ||
rsync -av --exclude=*.log --exclude=*.txt --exclude=*unsigned* \ | rsync -av --exclude=*.log --exclude=*.txt --exclude=*unsigned* \ | ||
| Line 340: | Line 319: | ||
/pub/mozilla.org/firefox/releases/3.6.2/ | /pub/mozilla.org/firefox/releases/3.6.2/ | ||
</ | Updated <tt>cltbld@stage:/pub/mozilla.org/zz/rsyncd-mozilla-current.exclude</tt> to include 3.6.2 instead of 3.6. | ||
==== Final Verification ==== | ==== Final Verification ==== | ||
Got 9 failures like this | |||
Using https://aus2.mozilla.org/update/1/Firefox/3.6b5/20091204132459/Linux_x86-gcc3/nn-NO/releasetest/update.xml?force=1 | |||
Testing http://download.mozilla.org/?product=firefox-3.6.2-complete&os=linux&lang=nn-NO | |||
HTTP/1.1 302 Found | |||
Date: Tue, 23 Mar 2010 00:22:22 GMT | |||
Server: Apache | |||
Set-Cookie: dmo=10.2.84.4.1269303742243225; path=/; expires=Wed, 23-Mar-11 00:22:22 GMT | |||
X-Powered-By: PHP/5.1.6 | |||
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, private | |||
Pragma: no-cache | |||
Location: http://3347-mozilla.voxcdn.com/pub/mozilla.org/firefox/releases/3.6.2/update/linux-i686/nn-NO/firefox-3.6.2.complete.mar | |||
Content-Type: text/html; charset=UTF-8 | |||
FAIL: download_mars returned non-zero exit code: 7 | |||
Exit status of 7 comes from curl and means 'Failed to connect to host'. nthomas and reed have attempted to debug this in the past and reed has not been able to reproduce it on his end. We are assuming that it's something between the build network and voxcdn only. | |||
==== Push updates to release channel ==== | ==== Push updates to release channel ==== | ||
# cltbld@aus2-staging | |||
cd /opt/aus2/snippets/staging/ | |||
~/bin/backupsnip 20100316-Firefox-3.6.2 | |||
~/bin/pushsnip 20100316-Firefox-3.6.2 | |||
==== Release | ==== Release ==== | ||
# ffxbld@stage | |||
rm latest-3.6 | |||
ln -s 3.6.2 latest-3.6 | |||
==== EU Ballot Build ==== | |||
This is a win32 partner build for the EU browser ballot. ''Ideally they would be pushed at the same time as the other builds, so this work should happen earlier for 3.6.3.'' The process documented here may be a bit different for 3.6.3, eg partner repacks coming out of the automation and getting signed automatically. | |||
After the builds are created (this time by Kev), and passed QA, they were signed and moved into the candidates dir | |||
# ffxbld@stage | |||
# get copy of signed tarball to /tmp/ | |||
mkdir /tmp/ffxbld | |||
cd /tmp/ffxbld | |||
tar xfv /tmp/euballot-362-signed.tar | |||
mv win32 win32-EUballot | |||
mv -v win32-EUballot /pub/mozilla.org/firefox/nightly/3.6.2-candidates/build3/ | |||
cd /pub/mozilla.org/firefox/nightly/3.6.2-candidates/build3/win32-EUballot | |||
find . ! -user ffxbld | |||
find . ! -group firefox | |||
find . -type f ! -perm 644 | |||
find . -mindepth 1 -type d ! -perm 755 ! -name 'contrib*' | |||
find . -maxdepth 1 -type d ! -perm 2775 -name 'contrib*' | |||
rsync -av --exclude=*.log --exclude=*.txt --exclude=*unsigned* \ | |||
--exclude=*.crashreporter-symbols.zip --exclude=*.tests.tar.bz2* \ | |||
--exclude=*partner-repacks* \ | |||
/pub/mozilla.org/firefox/nightly/3.6.2-candidates/build3/ \ | |||
/pub/mozilla.org/firefox/releases/3.6.2/ | |||
In bouncer, add a Firefox-3.6.2-EUballot product and point it at <tt>/firefox/releases/3.6.2/win32-EUballot/en-US/Firefox%20Setup%203.6.2.exe</tt>. Strange as it may seem, using en-US is correct even though this build doesn't exist - bouncer requires it that way and will do s/en-US/sv-SE/ when checking for the file. | |||
After mirror uptake more than 10k, filed {{bug|554261}} to finish off release. We have to update our browser choice website and cut over to the Firefox-3.6.2-EUballot in bouncer. | |||
==== XULRunner build ==== | |||
* This step doesn't have to be the last one | |||
Triggered the builds by going to the buildbot waterfall for mozilla-1.9.2 and forcing builds for linux (not x64), mac and windows xulrunner. Set the field "Revision to build" (not properties) to 'FIREFOX_3_6_2_RELEASE'. Email the builds to release-drivers. | |||
# as xrbld@stage on a production slave | |||
cd /pub/mozilla.org/xulrunner/nightly | |||
mkdir -p 1.9.2.2-candidates/build1 | |||
mv 2010-03-23-07-mozilla-1.9.2/* 1.9.2.2-candidates/build1/ | |||
rm -rf 2010-03-23-07-mozilla-1.9.2/ | |||
* [http://ftp.mozilla.org/pub/mozilla.org/xulrunner/nightly/1.9.2.2-candidates/build1 1.9.2.2 candidates dir] | |||
* [http://production-master.build.mozilla.org:8010/builders/Linux%20mozilla-1.9.2%20xulrunner/builds/233 Linux xulrunner build] | |||
* [http://production-master.build.mozilla.org:8010/builders/WINNT%205.2%20mozilla-1.9.2%20xulrunner/builds/236 Windows xulrunner build] | |||
* [http://production-master.build.mozilla.org:8010/builders/OS%20X%2010.5.2%20mozilla-1.9.2%20xulrunner/builds/235 OSX xulrunner build] | |||
* Waiting on reply from mfinkle and/or dtwonsed to publish these builds | |||