[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-commits] [Git][tpo/applications/tor-browser-build][main] Bug 41037: Set time on signing machine before starting signing

Title: GitLab

richard pushed to branch main at The Tor Project / Applications / tor-browser-build

Commits:

  • de4e1feb
    by Nicolas Vigier at 2024-01-18T09:50:25+01:00 
    Bug 41037: Set time on signing machine before starting signing

After a reboot, the time on our signing machine is incorrect. To avoid
signing a release with incorrect timestamps, we set the time on the
signing machine at the beginning of the signing process.

3 changed files:

Changes:

  • tools/signing/do-all-signing
    ... ... @@ -29,6 +29,11 @@ test -f "$steps_dir/linux-signer-gpg-sign.done" ||
    29 29 
       read -sp "Enter gpg passphrase: " GPG_PASS
    30 30 
     echo
    31 31
    32 
    +function set-time-on-signing-machine {
    33 
    +  local current_time=$(date -u)
    34 
    +  ssh "$ssh_host_linux_signer" sudo /usr/bin/date -s "'$current_time'"
    35 
    +}
    36 
    +
    32 37 
     function wait-for-finished-build {
    33 38 
       "$script_dir/wait-for-finished-build"
    34 39 
     }
    ... ... @@ -171,6 +176,7 @@ function do_step {
    171 176
    172 177 
     export SIGNING_PROJECTNAME
    173 178
    179 
    +do_step set-time-on-signing-machine
    174 180 
     do_step wait-for-finished-build
    175 181 
     do_step sync-builder-unsigned-to-local-signed
    176 182 
     do_step sync-scripts-to-linux-signer

  • tools/signing/machines-setup/setup-signing-machine
    ... ... @@ -91,6 +91,7 @@ sudoers_file sign-mar
    91 91 
     sudoers_file sign-exe
    92 92 
     sudoers_file sign-apk
    93 93 
     sudoers_file sign-rcodesign
    94 
    +sudoers_file set-date
    94 95
    95 96 
     authorized_keys boklm boklm-tb-release.pub boklm-yk1.pub
    96 97 
     create_user richard signing

  • tools/signing/machines-setup/sudoers.d/set-date
    1 
    +%signing ALL = NOPASSWD: /usr/bin/date -s *

    • —
    View it on GitLab.
    You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications · Help 

    _______________________________________________
tor-commits mailing list
tor-commits@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-commits