[tor-commits] [tor-browser-spec/master] Describe MAR signing process.

[mikeperry@xxxxxxxxxxxxxx]

commit 17f03da6dc7bfe672db989b9c83ac7b5f6db7ca4
Author: Mike Perry <mikeperry-git@xxxxxxxxxxxxxx>
Date:   Mon Feb 23 20:30:04 2015 -0800

    Describe MAR signing process.
---
 processes/ReleaseProcess |   14 ++++++++++++--
 1 file changed, 12 insertions(+), 2 deletions(-)

diff --git a/processes/ReleaseProcess b/processes/ReleaseProcess
index 61c44b7..e0ec140 100644
--- a/processes/ReleaseProcess
+++ b/processes/ReleaseProcess
@@ -65,8 +65,18 @@
 #. Distribute build to tor-qa@xxxxxxxxxxxxxxxxxxxx
    #XXX: Currently manual
 
-#. Sign individual bundle files
-#  XXX: Document this
+#. Sign the MAR update files
+   # First, copy the torbrowser tree to removable storage:
+   rsync -avP $TORBROWSER_BUILDDIR/../../../ /media/storage/TBB/
+   # Then, remove storage, attach to offline computer that houses TBB signing key.
+   # Run the following from that rsync'ed removable storage dir:
+   export NSS_DB_DIR=/path/to/nssdb
+   make signmars
+   # Then, re-attach storage, and rsync signed MARs to builddir
+   torsocks rsync -avP /media/storage/TBB/tor-browser-bundle/gitian/$TORBROWSER_BUILDDIR/*.mar people.torproject.org:public_html/builds/$TORBROWSER_BUILDDIR
+
+#. Sign individual bundle files:
+   # XXX: Document
 
 #. Clear out old builds, transfer builds to staticiforme
 #. Remote:

_______________________________________________
tor-commits mailing list
tor-commits@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-commits