Source code
Revision control
Copy as Markdown
Other Tools
# This Source Code Form is subject to the terms of the Mozilla Public
# License, v. 2.0. If a copy of the MPL was not distributed with this
# file, You can obtain one at http://mozilla.org/MPL/2.0/.
---
loader: taskgraph.loader.transform:loader
transforms:
- taskgraph.transforms.from_deps
- gecko_taskgraph.transforms.release:run_on_releases
- gecko_taskgraph.transforms.update_integrity
- gecko_taskgraph.transforms.job
- gecko_taskgraph.transforms.task
kind-dependencies:
- build-signing
- mar-signing
- partials-signing
- repackage
- toolchain
only-for-build-platforms:
- linux64-shippable/opt
- linux64-aarch64-shippable/opt
tasks:
test-update-integrity:
run-on-repo-type: [hg]
run-on-releases: [nightly]
attributes:
# derived in `from-deps`, but needs to be unset until we're ready
# to run it outside of nightly
shipping_phase: null
description: verify update integrity
worker-type: b-linux
from-deps:
kinds: [mar-signing, partials-signing, repackage, build-signing]
group-by: platform-no-l10n
copy-attributes: true
fetches:
# partials not listed here because the number and naming of them
# are dynamic
# repackage and build-signing fetches contain platform-specific names,
# and thus not listed here
# fetches for these kinds are added in a transform
mar-signing:
- artifact: target.complete.mar
cert-overrides:
by-project:
# when running staging release, we must override the certs in the
# updater with dep certs, because that's what the mars we're applying
# will be signed with
try:
- nightly_aurora_level3_primary.der|dep1.der
- nightly_aurora_level3_secondary.der|dep2.der
- release_primary.der|dep1.der
- release_secondary.der|dep2.der
# no cert overriding is necessary for other releases
default: null
treeherder:
symbol: UpInt({locale})
kind: other
tier: 3
worker:
artifacts:
- name: public/build
type: directory
path: /builds/worker/artifacts
docker-image:
in-tree: "update-verify"
chain-of-trust: true
max-run-time: 600
run:
using: run-task
sparse-profile: "update-verify"
cwd: "{checkout}"
use-python: default
fetches:
toolchain:
- linux64-marannon