AMO/history
This page keeps the history of AMO: what we've been working on, when, events, pushes... Glossary:
- -dev: the dev server
- stage: the stage server
- prod: the production server
2015-04-25 (saturday crisis)
It was reported that the signing of the 400 add-ons caused crashes of Firefox versions 28 and below (and derivatives) when doing a version update check. We thus decided to revert the signing of those add-ons until we find a fix for that issue.
- https://bugzilla.mozilla.org/show_bug.cgi?id=1158467 Signed extensions on AMO have invalid signatures
- create PR https://github.com/mozilla/olympia/pull/526 to revert auto signing
- cherry-pick and tag https://github.com/mozilla/olympia/compare/2015.04.24...2015.04.25
- https://github.com/mozilla/olympia/commit/0882d3ab830c6c07b698e4eb850c464af8e088d8 Revert auto signing (bug 1158467)
2015-04-24
The auto/bulk signing script is finally ready to deploy to production after some extensive testing on -dev and stage. The signatures are done correctly, on the published add-ons, with the correct certificate, and the emails are sent to the add-on owners.
We thus decided to push to production, and run the script on a chosen list of 400 add-ons.
- https://bugzilla.mozilla.org/show_bug.cgi?id=1070227 Write a script to sign all existing add-ons (send email to addon owners)
- cherry-pick and tag https://github.com/mozilla/olympia/compare/2015.04.22...2015.04.24
- https://github.com/mozilla/olympia/commit/a9638bb431ac9fd1b99edf5f3895a8c7cd9d1e82 Send an email to addon owners after their addon got auto signed (bug 1070227)
2015-04-23
Continue working on the unlisted add-ons feature. The tag 2015.04.22 that was planned to be pushed to production was not, because we decided we needed to send mails to the add-on owners.
- https://bugzilla.mozilla.org/show_bug.cgi?id=1156333 Don't review a file if its signing failed
/!\ cannot be cherry-picked on the tag in production, as it touches codes related to unlisted addons, which isn't in production yet.
2015-04-22
Continue working on the unlisted add-ons feature. Main change: there's now a waffle flag for the automatic validation feature, in prevision for the push to production of the unlisted add-ons feature. We're not sure the automatic validation will be ready, so it's now disabled by default until we turn the flag on.
It was finally decided that we should only auto/bulk sign add-ons that are compatible with Firefox, and only if
- they are default to compatible and Firefox version >= 4
- they aren't default to compatible (binary components or strict compatibility) and Firefox version >= 37
We tagged for a push to stage, and planned a push to production on thursday 2015-04-23.
- reviewed https://github.com/mozilla/olympia/pull/515
- https://bugzilla.mozilla.org/show_bug.cgi?id=1148447 Adjust flow to be steps 1 -> 2 -> 3ish -> 7
- update PR https://github.com/mozilla/olympia/pull/505 following reviews
- create bug https://bugzilla.mozilla.org/show_bug.cgi?id=1157215 add a waffle flag for the automatic validation
- committed https://github.com/mozilla/olympia/commit/343dfec0f9ccebc28f004fe90b0ca62f235518cf Add lib.crypto.tasks to the CELERY_IMPORTS: celery workers on -dev and stage were failing because this was missing
- create bug https://bugzilla.mozilla.org/show_bug.cgi?id=1157444 Only bulk sign versions that are compatible with recent versions of Firefox
- cherry-pick and tag https://github.com/mozilla/olympia/compare/2015.04.21...2015.04.22
- https://github.com/mozilla/olympia/commit/343dfec0f9ccebc28f004fe90b0ca62f235518cf Add lib.crypto.tasks to the CELERY_IMPORTS
- https://github.com/mozilla/olympia/commit/ed854c15883a3af2bbb49f73a2d91c63c0456554 Only bulk sign recent firefox files (bug 1157444)
- sign_addons bulk signing script tested on:
- https://addons.allizom.org/fr/firefox/addon/flash-video-downloader/versions/ (signed all versions above ff10 that were reviewed)
- https://addons.allizom.org/fr/thunderbird/addon/lookout/versions/ (didn't sign any version, it's compatible thunderbird and seamonkey only)