Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remote settings: add signature verification support #6534

Draft
wants to merge 5 commits into
base: main
Choose a base branch
from

Add signatures optional feature

20d1058
Select commit
Loading
Failed to load commit list.
Draft

Remote settings: add signature verification support #6534

Add signatures optional feature
20d1058
Select commit
Loading
Failed to load commit list.
firefoxci-taskcluster / Decision Task (pull-request) succeeded Dec 20, 2024 in 6s

FirefoxCI (pull_request)

The task that creates all of the other tasks in the task graph

Details

View task in Taskcluster | View logs in Taskcluster | View task group in Taskcluster

Task Status

Started: 2024-12-20T11:26:22.775Z
Resolved: 2024-12-20T11:26:28.807Z
Task Execution Time: 6 seconds, 32 milliseconds
Task Status: completed
Reason Resolved: completed
RunId: 0

Artifacts

- public/actions.json
- public/chain-of-trust.json
- public/chain-of-trust.json.sig
- public/docker-contexts/linux2004.tar.gz
- public/docker-contexts/linux.tar.gz
- public/fetch-content
- public/full-task-graph.json
- public/label-to-taskid.json
- public/logs/certified.log
- public/logs/live_backing.log
- public/logs/live.log
- public/optimizations.log
- public/parameters.yml
- public/runnable-jobs.json
- public/run-task
- public/target-tasks.json
- public/task-graph.json


[taskcluster 2024-12-20 11:26:22.880Z] Task ID: XRcxgvOTTcmVu2y9-gyHuA
[taskcluster 2024-12-20 11:26:22.880Z] Worker ID: 6725896231484714843
[taskcluster 2024-12-20 11:26:22.880Z] Worker Group: us-central1-b
[taskcluster 2024-12-20 11:26:22.880Z] Worker Node Type: projects/887720501152/machineTypes/n2-standard-2
[taskcluster 2024-12-20 11:26:22.880Z] Worker Pool: app-services-1/decision-gcp
[taskcluster 2024-12-20 11:26:22.880Z] Worker Version: 38.0.5
[taskcluster 2024-12-20 11:26:22.880Z] Public IP: 35.184.66.61
[taskcluster 2024-12-20 11:26:22.880Z] Hostname: app-services-1-decision-gcp-ifklhdqetbebsexa3b1t-w
[taskcluster 2024-12-20 11:26:22.880Z] using cache "app-services-level-1-checkouts-v1" -> /builds/worker/checkouts

[taskcluster 2024-12-20 11:26:23.405Z] === Task Starting ===
[setup 2024-12-20T11:26:23.758Z] run-task started in /
[setup 2024-12-20T11:26:23.758Z] Invoked by command: --appservices-checkout=/builds/worker/checkouts/vcs --task-cwd=/builds/worker/checkouts/vcs -- bash -cx ln -s /builds/worker/artifacts artifacts && taskgraph decision --pushlog-id='0' --pushdate='0' --project='application-services' --message="" --owner='[email protected]' --level='1' --base-repository="$APPSERVICES_BASE_REPOSITORY" --head-repository="$APPSERVICES_HEAD_REPOSITORY" --head-ref="$APPSERVICES_HEAD_REF" --head-rev="$APPSERVICES_HEAD_REV" --repository-type="$APPSERVICES_REPOSITORY_TYPE" --tasks-for='github-pull-request' 

[setup 2024-12-20T11:26:23.759Z] Python version: 3.11.2
[cache 2024-12-20T11:26:23.760Z] cache /builds/worker/checkouts exists; requirements: gid=1000 uid=1000 version=1
[setup 2024-12-20T11:26:23.760Z] running as worker:worker
[vcs 2024-12-20T11:26:23.761Z] executing ['git', 'config', '--global', '--add', 'safe.directory', '/builds/worker/checkouts/vcs']
[vcs 2024-12-20T11:26:23.762Z] executing ['git', 'fetch', '--no-tags', 'https://github.com/leplatrem/application-services', 'remote-settings-signature-verification']
[vcs 2024-12-20T11:26:24.068Z] From https://github.com/leplatrem/application-services
[vcs 2024-12-20T11:26:24.068Z]  * branch                remote-settings-signature-verification -> FETCH_HEAD
[vcs 2024-12-20T11:26:24.071Z] executing ['git', 'checkout', '-f', '-B', 'remote-settings-signature-verification', '20d105824f3e4294c792897f176a7819f1782671']
[vcs 2024-12-20T11:26:24.082Z] Reset branch 'remote-settings-signature-verification'
[vcs 2024-12-20T11:26:24.083Z] executing ['git', 'submodule', 'init']
[vcs 2024-12-20T11:26:24.105Z] executing ['git', 'submodule', 'update', '--force']
[vcs 2024-12-20T11:26:24.228Z] Submodule path 'components/external/glean': checked out '2fe73c4d2876f5e1c073fb4ac4c010a36ad5c825'
[vcs 2024-12-20T11:26:24.229Z] cleaning git checkout...
[vcs 2024-12-20T11:26:24.229Z] executing ['git', 'clean', '-nxdff']
[vcs 2024-12-20T11:26:24.237Z] removing ['/builds/worker/checkouts/vcs/artifacts', '/builds/worker/checkouts/vcs/docker-contexts/', '/builds/worker/checkouts/vcs/taskcluster/app_services_taskgraph/__pycache__/', '/builds/worker/checkouts/vcs/taskcluster/app_services_taskgraph/loader/__pycache__/', '/builds/worker/checkouts/vcs/taskcluster/app_services_taskgraph/transforms/__pycache__/']
[vcs 2024-12-20T11:26:24.239Z] successfully cleaned git checkout!
[vcs 2024-12-20T11:26:24.241Z] TinderboxPrint:<a href='https://github.com/leplatrem/application-services/commit/20d105824f3e4294c792897f176a7819f1782671' title='Built from application-services commit 20d105824f3e4294c792897f176a7819f1782671'>20d105824f3e4294c792897f176a7819f1782671</a>
[setup 2024-12-20T11:26:24.241Z] MOZ_FETCHES_DIR is /builds/worker/fetches
[pip-install 2024-12-20T11:26:24.259Z] executing ['uv', 'pip', 'install', '--python', '/usr/bin/python3', '--target', '/builds/worker/.local/lib/python3.11/site-packages', '--require-hashes', '-r', '/builds/worker/checkouts/vcs/taskcluster/requirements.txt']
[pip-install 2024-12-20T11:26:24.471Z] Resolved 33 packages in 158ms
[pip-install 2024-12-20T11:26:24.656Z] Prepared 33 packages in 183ms
[pip-install 2024-12-20T11:26:24.681Z] Installed 33 packages in 24ms
[pip-install 2024-12-20T11:26:24.683Z]  + appdirs==1.4.4
[pip-install 2024-12-20T11:26:24.683Z]  + arrow==1.3.0
[pip-install 2024-12-20T11:26:24.683Z]  + binaryornot==0.4.4
[pip-install 2024-12-20T11:26:24.683Z]  + certifi==2024.8.30
[pip-install 2024-12-20T11:26:24.683Z]  + chardet==5.2.0
[pip-install 2024-12-20T11:26:24.683Z]  + charset-normalizer==3.3.2
[pip-install 2024-12-20T11:26:24.683Z]  + click==8.1.7
[pip-install 2024-12-20T11:26:24.683Z]  + cookiecutter==2.6.0
[pip-install 2024-12-20T11:26:24.683Z]  + giturlparse==0.12.0
[pip-install 2024-12-20T11:26:24.683Z]  + idna==3.8
[pip-install 2024-12-20T11:26:24.683Z]  + jinja2==3.1.4
[pip-install 2024-12-20T11:26:24.683Z]  + json-e==4.7.1
[pip-install 2024-12-20T11:26:24.683Z]  + markdown-it-py==3.0.0
[pip-install 2024-12-20T11:26:24.683Z]  + markupsafe==2.1.5
[pip-install 2024-12-20T11:26:24.683Z]  + mdurl==0.1.2
[pip-install 2024-12-20T11:26:24.683Z]  + mozilla-repo-urls==0.1.1
[pip-install 2024-12-20T11:26:24.683Z]  + mozilla-taskgraph==3.0.1
[pip-install 2024-12-20T11:26:24.683Z]  + pygments==2.18.0
[pip-install 2024-12-20T11:26:24.683Z]  + python-dateutil==2.9.0.post0
[pip-install 2024-12-20T11:26:24.683Z]  + python-slugify==8.0.4
[pip-install 2024-12-20T11:26:24.683Z]  + pyyaml==6.0.2
[pip-install 2024-12-20T11:26:24.683Z]  + redo==3.0.0
[pip-install 2024-12-20T11:26:24.683Z]  + requests==2.32.3
[pip-install 2024-12-20T11:26:24.683Z]  + rich==13.8.0
[pip-install 2024-12-20T11:26:24.683Z]  + six==1.16.0
[pip-install 2024-12-20T11:26:24.683Z]  + slugid==2.0.0
[pip-install 2024-12-20T11:26:24.683Z]  + taskcluster-taskgraph==11.2.4
[pip-install 2024-12-20T11:26:24.683Z]  + taskcluster-urls==13.0.1
[pip-install 2024-12-20T11:26:24.683Z]  + text-unidecode==1.3
[pip-install 2024-12-20T11:26:24.683Z]  + types-python-dateutil==2.9.0.20240821
[pip-install 2024-12-20T11:26:24.683Z]  + typing-extensions==4.12.2
[pip-install 2024-12-20T11:26:24.683Z]  + urllib3==2.2.2
[pip-install 2024-12-20T11:26:24.683Z]  + voluptuous==0.14.2
[task 2024-12-20T11:26:24.688Z] executing ['bash', '-cx', 'ln -s /builds/worker/artifacts artifacts && taskgraph decision --pushlog-id=\'0\' --pushdate=\'0\' --project=\'application-services\' --message="" --owner=\'[email protected]\' --level=\'1\' --base-repository="$APPSERVICES_BASE_REPOSITORY" --head-repository="$APPSERVICES_HEAD_REPOSITORY" --head-ref="$APPSERVICES_HEAD_REF" --head-rev="$APPSERVICES_HEAD_REV" --repository-type="$APPSERVICES_REPOSITORY_TYPE" --tasks-for=\'github-pull-request\' \n']
[task 2024-12-20T11:26:24.691Z] + ln -s /builds/worker/artifacts artifacts
[task 2024-12-20T11:26:24.692Z] + taskgraph decision --pushlog-id=0 --pushdate=0 --project=application-services --message= [email protected] --level=1 --base-repository=https://github.com/mozilla/application-services --head-repository=https://github.com/leplatrem/application-services --head-ref=remote-settings-signature-verification --head-rev=20d105824f3e4294c792897f176a7819f1782671 --repository-type=git --tasks-for=github-pull-request
[task 2024-12-20T11:26:25.273Z] 2024-12-20 11:26:25,273 - INFO - Loading graph configuration.
[task 2024-12-20T11:26:25.323Z] 2024-12-20 11:26:25,323 - INFO - base_ref has been reset from "" to "origin/main".
[task 2024-12-20T11:26:25.323Z] 2024-12-20 11:26:25,323 - INFO - base_rev is not set.
[task 2024-12-20T11:26:25.323Z] 2024-12-20 11:26:25,323 - INFO - Using base_ref "origin/main" to determine latest common revision...
[task 2024-12-20T11:26:25.326Z] 2024-12-20 11:26:25,326 - INFO - base_rev has been reset from "" to "35bb959d60b798baa4280dc405e702851996d0d0".
[task 2024-12-20T11:26:25.330Z] 2024-12-20 11:26:25,330 - WARNING - using default project parameters; add application-services to PER_PROJECT_PARAMETERS in /builds/worker/.local/lib/python3.11/site-packages/taskgraph/decision.py to customize behavior for this project
[task 2024-12-20T11:26:25.331Z] 2024-12-20 11:26:25,330 - INFO - Using Parameters(id=47ad04b042e3) (from defaults)
[task 2024-12-20T11:26:25.331Z] 2024-12-20 11:26:25,331 - INFO - writing artifact file `parameters.yml`
[task 2024-12-20T11:26:25.341Z] 2024-12-20 11:26:25,341 - INFO - writing artifact file `actions.json`
[task 2024-12-20T11:26:25.342Z] 2024-12-20 11:26:25,342 - INFO - Loading kinds
[task 2024-12-20T11:26:25.349Z] 2024-12-20 11:26:25,349 - INFO - Generating full task set
[task 2024-12-20T11:26:25.353Z] 2024-12-20 11:26:25,353 - INFO - Writing docker-contexts/linux.tar.gz for docker image linux
[task 2024-12-20T11:26:25.371Z] 2024-12-20 11:26:25,371 - INFO - Writing docker-contexts/linux2004.tar.gz for docker image linux2004
[task 2024-12-20T11:26:25.389Z] 2024-12-20 11:26:25,389 - INFO - Generated 2 tasks for kind docker-image
[task 2024-12-20T11:26:25.403Z] 2024-12-20 11:26:25,403 - INFO - Generated 3 tasks for kind fetch
[task 2024-12-20T11:26:25.406Z] 2024-12-20 11:26:25,406 - INFO - Generated 2 tasks for kind lint
[task 2024-12-20T11:26:25.471Z] 2024-12-20 11:26:25,471 - INFO - Generated 6 tasks for kind toolchain
[task 2024-12-20T11:26:25.474Z] 2024-12-20 11:26:25,473 - INFO - Generated 1 tasks for kind android-build
[task 2024-12-20T11:26:25.477Z] 2024-12-20 11:26:25,477 - INFO - Generated 1 tasks for kind swift
[task 2024-12-20T11:26:25.504Z] 2024-12-20 11:26:25,504 - INFO - Generated 18 tasks for kind module-build
[task 2024-12-20T11:26:25.508Z] 2024-12-20 11:26:25,508 - INFO - Generated 2 tasks for kind branch-build
[task 2024-12-20T11:26:25.514Z] 2024-12-20 11:26:25,514 - INFO - Generated 6 tasks for kind server-megazord-build
[task 2024-12-20T11:26:25.523Z] 2024-12-20 11:26:25,523 - INFO - Generated 11 tasks for kind nimbus-build
[task 2024-12-20T11:26:25.530Z] 2024-12-20 11:26:25,530 - INFO - Generated 18 tasks for kind signing
[task 2024-12-20T11:26:25.534Z] 2024-12-20 11:26:25,534 - INFO - Generated 1 tasks for kind build-summary
[task 2024-12-20T11:26:25.537Z] 2024-12-20 11:26:25,537 - INFO - Generated 2 tasks for kind nimbus-binaries-assemble
[task 2024-12-20T11:26:25.540Z] 2024-12-20 11:26:25,540 - INFO - Generated 1 tasks for kind release-publish
[task 2024-12-20T11:26:25.543Z] 2024-12-20 11:26:25,543 - INFO - Generated 2 tasks for kind server-megazord-assemble
[task 2024-12-20T11:26:25.545Z] 2024-12-20 11:26:25,545 - INFO - Generated 1 tasks for kind upload-symbols
[task 2024-12-20T11:26:25.570Z] 2024-12-20 11:26:25,569 - INFO - Generated 24 tasks for kind beetmover
[task 2024-12-20T11:26:25.573Z] 2024-12-20 11:26:25,572 - INFO - Generated 1 tasks for kind mark-as-shipped
[task 2024-12-20T11:26:25.574Z] 2024-12-20 11:26:25,573 - INFO - Generating full task graph
[task 2024-12-20T11:26:25.574Z] 2024-12-20 11:26:25,573 - INFO - Full task graph contains 102 tasks and 274 dependencies
[task 2024-12-20T11:26:25.578Z] 2024-12-20 11:26:25,578 - INFO - writing artifact file `full-task-graph.json`
[task 2024-12-20T11:26:25.602Z] 2024-12-20 11:26:25,602 - INFO - writing artifact file `runnable-jobs.json`
[task 2024-12-20T11:26:25.604Z] 2024-12-20 11:26:25,603 - INFO - Generating target task set
[task 2024-12-20T11:26:25.605Z] 2024-12-20 11:26:25,603 - INFO - Filter filter_target_tasks pruned 85 tasks (17 remain)
[task 2024-12-20T11:26:25.605Z] 2024-12-20 11:26:25,603 - INFO - Filter filter_branch_build_tasks pruned 2 tasks (15 remain)
[task 2024-12-20T11:26:25.605Z] 2024-12-20 11:26:25,603 - INFO - writing artifact file `target-tasks.json`
[task 2024-12-20T11:26:25.605Z] 2024-12-20 11:26:25,603 - INFO - Generating target task graph
[task 2024-12-20T11:26:25.605Z] 2024-12-20 11:26:25,604 - INFO - Adding 0 tasks with `always_target` attribute
[task 2024-12-20T11:26:25.605Z] 2024-12-20 11:26:25,604 - INFO - Generating optimized task graph
[task 2024-12-20T11:26:25.605Z] 2024-12-20 11:26:25,605 - INFO - No tasks removed during optimization
[task 2024-12-20T11:26:25.732Z] 2024-12-20 11:26:25,732 - INFO - Replaced 11 tasks by index-search (index-search) during optimization.
[task 2024-12-20T11:26:25.733Z] 2024-12-20 11:26:25,733 - INFO - writing artifact file `task-graph.json`
[task 2024-12-20T11:26:25.734Z] 2024-12-20 11:26:25,734 - INFO - writing artifact file `label-to-taskid.json`
[task 2024-12-20T11:26:25.736Z] 2024-12-20 11:26:25,736 - INFO - Creating task with taskId JOFA8GyRT7-oWmb16Cl3qA for android-build-pr
[task 2024-12-20T11:26:25.738Z] 2024-12-20 11:26:25,738 - INFO - Creating task with taskId eNri0nBMQKSV04SBG33d1w for lint-detekt
[task 2024-12-20T11:26:25.741Z] 2024-12-20 11:26:25,741 - INFO - Creating task with taskId J5MfknRdQwWvIMTOtiEypw for lint-ktlint
[task 2024-12-20T11:26:25.743Z] 2024-12-20 11:26:25,742 - INFO - Creating task with taskId FnzuJwJQSQStvFEl5vbmvQ for Build summary task
[taskcluster 2024-12-20 11:26:26.209Z] === Task Finished ===
[taskcluster 2024-12-20 11:26:28.140Z] Successful task run with exit code: 0 completed in 5.261 seconds