Some Eclipse Foundation services are deprecated, or will be soon. Please ensure you've read this important communication.
Bug 350114 - change build scripts not to use specific id for signing
Summary: change build scripts not to use specific id for signing
Status: NEW
Alias: None
Product: WTP Releng
Classification: WebTools
Component: releng (show other bugs)
Version: 3.10   Edit
Hardware: PC Linux
: P3 normal (vote)
Target Milestone: ---   Edit
Assignee: webtools.releng CLA
QA Contact: Carl Anderson CLA
URL:
Whiteboard:
Keywords:
Depends on:
Blocks: 355151
  Show dependency tree
 
Reported: 2011-06-22 22:47 EDT by David Williams CLA
Modified: 2018-06-29 15:14 EDT (History)
1 user (show)

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description David Williams CLA 2011-06-22 22:47:20 EDT
Long ago, when we stated, like ... 5, 6 years ago? ... we had to do signing from our build id (wtpBuild) by using SSH to "send over" to a real committer id. 

This worked fine as long as only one person used 'wtpBuild' but is less than ideal when multiple people use wtpBuild, as it is intended. 

In recent years, since hudsonBuild is used for so much, the webmasters have a system to allow "build ids" to do signing ... not sure if its based on ID, or GROUP, but ... they are going to set up our signing directory soon to allow this. 

At that time, we need to modify our build scripts to remove 'david_williams' (and, david_williams needs to modify his SSH authorized keys file :)
Comment 1 David Williams CLA 2011-06-23 11:48:23 EDT
The kind webmaster have worked their magic to allow 'wtpBuild' to sign, now, which I've tested "manually". So, all that's left is the little issue of changing our scripts. 

I'll try that later today, after our M build is complete.
Comment 2 David Williams CLA 2011-06-24 03:51:41 EDT
> I'll try that later today, after our M build is complete.

Status: the new script appears to work. I did have to stop the cc build process, and restart it, before the system could "see" that wtpBuild had permission to execute 'sign'. 

Still some cleanup required to script, and, we'll have to get this new signing script into maintenance branch, and, eventually patch builds too. (Those are a little more tricky, since for old patch builds, the builder is (often) branched, rather then "use latest" version, as we use for head and maintenance builds).
Comment 3 David Williams CLA 2011-09-21 12:37:53 EDT
mass change back to default assignee and qa contact. I'm not saying I won't work on some :) ... but, won't be all ... so, I think defaults would be best to start over.