gecko-dev/taskcluster/taskgraph/transforms/geckodriver_signing.py
2020-01-21 17:12:08 +00:00

124 lines
4.5 KiB
Python

# This Source Code Form is subject to the terms of the Mozilla Public
# License, v. 2.0. If a copy of the MPL was not distributed with this
# file, You can obtain one at http://mozilla.org/MPL/2.0/.
"""
Transform the repackage signing task into an actual task description.
"""
from __future__ import absolute_import, print_function, unicode_literals
from six import text_type
from taskgraph.loader.single_dep import schema
from taskgraph.transforms.base import TransformSequence
from taskgraph.util.attributes import copy_attributes_from_dependent_job
from taskgraph.util.scriptworker import (
get_signing_cert_scope_per_platform,
)
from taskgraph.transforms.task import task_description_schema
from voluptuous import Required, Optional
repackage_signing_description_schema = schema.extend({
Required('depname', default='geckodriver-repackage'): text_type,
Optional('label'): text_type,
Optional('treeherder'): task_description_schema['treeherder'],
Optional('shipping-phase'): task_description_schema['shipping-phase'],
})
transforms = TransformSequence()
transforms.add_validate(repackage_signing_description_schema)
@transforms.add
def make_repackage_signing_description(config, jobs):
for job in jobs:
dep_job = job['primary-dependency']
attributes = copy_attributes_from_dependent_job(dep_job)
attributes['repackage_type'] = 'repackage-signing'
treeherder = job.get('treeherder', {})
treeherder.setdefault('symbol', 'Gd(s)')
treeherder.setdefault('platform', dep_job.task.get('extra', {}).get('treeherder-platform'))
treeherder.setdefault(
'tier',
dep_job.task.get('extra', {}).get('treeherder', {}).get('tier', 1)
)
treeherder.setdefault('kind', 'build')
dependencies = {dep_job.kind: dep_job.label}
signing_dependencies = dep_job.dependencies
dependencies.update({
k: v for k, v in signing_dependencies.items()
if k != 'docker-image'
})
description = "Signing Geckodriver for build '{}/{}'".format(
attributes.get('build_platform'),
attributes.get('build_type'),
)
build_platform = dep_job.attributes.get('build_platform')
is_nightly = dep_job.attributes.get('nightly', dep_job.attributes.get('shippable'))
signing_cert_scope = get_signing_cert_scope_per_platform(
build_platform, is_nightly, config
)
upstream_artifacts = _craft_upstream_artifacts(dep_job.kind, build_platform)
scopes = [signing_cert_scope]
task = {
'label': job['label'],
'description': description,
'worker-type': 'linux-signing',
'worker': {
'implementation': 'scriptworker-signing',
'upstream-artifacts': upstream_artifacts,
},
'scopes': scopes,
'dependencies': dependencies,
'attributes': attributes,
'run-on-projects': dep_job.attributes.get('run_on_projects'),
'treeherder': treeherder,
}
if build_platform.startswith('macosx'):
worker_type = task['worker-type']
worker_type_alias_map = {
'linux-depsigning': 'mac-depsigning',
'linux-signing': 'mac-signing',
}
assert worker_type in worker_type_alias_map, \
(
"Make sure to adjust the below worker_type_alias logic for "
"mac if you change the signing workerType aliases!"
" ({} not found in mapping)".format(worker_type)
)
worker_type = worker_type_alias_map[worker_type]
task['worker-type'] = worker_type_alias_map[task['worker-type']]
task['worker']['mac-behavior'] = 'mac_geckodriver'
yield task
def _craft_upstream_artifacts(dependency_kind, build_platform):
if build_platform.startswith('win'):
signing_format = 'autograph_authenticode'
extension = 'zip'
elif build_platform.startswith('linux'):
signing_format = 'autograph_gpg'
extension = 'tar.gz'
elif build_platform.startswith('macosx'):
signing_format = 'mac_geckodriver'
extension = 'tar.gz'
else:
raise ValueError('Unsupported build platform "{}"'.format(build_platform))
return [{
'taskId': {'task-reference': '<{}>'.format(dependency_kind)},
'taskType': 'repackage',
'paths': ['public/geckodriver.{}'.format(extension)],
'formats': [signing_format],
}]