Stage final release for mirrors: Difference between revisions

Latest revision as of 17:57, 3 November 2015

This page is deprecated
All Fedora Release Engineering Documentation has moved here with source hosted along side the code in the releng pagure repository

Description

When the release has been fully tested and approved at the "Go/No-Go" meeting it is ready for release to the Fedora mirrors.

Action

1. Sign all CHECKSUM files:

$ for checksum in $(find /mnt/fedora_koji/compose/23_Alpha_RC2/23_Alpha/ -name  *CHECKSUM); do cat $checksum >/tmp/sum && sigul sign-text -o /tmp/signed fedora-23 /tmp/sum && chmod 644 /tmp/signed && sg releng "mv /tmp/signed $checksum"; done

2. Prepare the master mirror by logging into releng2:

$ ssh <fas-username>@gateway.fedoraproject.org
$ ssh releng2

$ sudo -u ftpsync mkdir -p /pub/fedora/linux/releases/13/{Fedora,Everything,Live} 
$ sudo -u ftpsync chmod 700 /pub/fedora/linux/releases/13/

3. Synchronize the Everything tree with the mirrors from releng2:

$ sudo -u ftpsync rsync -rlptDHhv --progress --stats --exclude images/ - \
    --exclude EFI --exclude isolinux --exclude .treeinfo \
    --exclude .discinfo - --link-dest=/pub/fedora/linux/development/13/ \
    /mnt/koji/mash/branched-20100518/13/ \
    /pub/fedora/linux/releases/13/Everything/

4. Synchronize the Fedora tree with the mirrors from releng2:

$ sudo -u ftpsync rsync -rlptDHhv --progress --stats - \
    --link-dest=/pub/fedora/linux/development/13/ \
    jkeating@compose-x86-01:/srv/pungi/13.RC4/Fedora/ \ 
    /pub/fedora/linux/releases/13/Fedora/

5. Synchronize the Live images with the mirrors from releng2:

$ sudo -u ftpsync rsync -rlptDHhv --progress --stats --exclude \*.log \
    jkeating@compose-x86-01:/srv/pungi/live/Fedora-13-i686-Live{,-KDE}/ \
    /pub/fedora/linux/releases/13/Live/i686/

6. Change file permissionsOpen for mirrors (also known as the mirror stage bit flip) on releng2:

$ sudo -u ftpsync chmod 750 /pub/fedora/linux/releases/13

Verification

Verification is somewhat difficult as one cannot look at the content via the web server due to permissions. Typically we ask somebody from the Infrastructure team to give the tree a second set of eyes.

Consider Before Running

Hope the release is good!

@@ Line 1: / Line 1: @@
+{{admon/important|This page is deprecated| All Fedora Release Engineering Documentation has moved [https://docs.pagure.org/releng/ here] with source hosted along side the code in the [https://pagure.io/releng releng pagure repository]}}
 == Description ==
 When the release has been fully tested and approved at the "Go/No-Go" meeting it is ready for release to the Fedora mirrors.
 == Action ==
-. Sign the DVD/CD shasum files by starting from the compose host:
+. Sign all CHECKSUM files:
-<pre>
-$ cd /srv/pungi/13.rc4/Fedora/; for arch in *; do cat \
-$arch/iso/*CHECKSUM > /tmp/sum && sigul sign-text -o /tmp/signed \
-fedora-13 /tmp/sum && sudo mv /tmp/signed \
-$arch/iso/Fedora-13-$arch-CHECKSUM; done
-</pre>
-. While remaining on the compose host, sign the spins:
 <pre>
-$ cd /srv/pungi/live/13.rc4/; for dir in *; do pushd $dir; \
+$ for checksum in $(find /mnt/fedora_koji/compose/23_Alpha_RC2/23_Alpha/ -name  *CHECKSUM); do cat $checksum >/tmp/sum && sigul sign-text -o /tmp/signed fedora-23 /tmp/sum && chmod 644 /tmp/signed && sg releng "mv /tmp/signed $checksum"; done
-    echo "# The image checksum(s) are generated with sha256sum." > \
-    $(basename `pwd`)-CHECKSUM && echo "# The PGP checksum uses sha1sum." >> \
-    $(basename `pwd`)-CHECKSUM && sha256sum -b $(basename `pwd`).iso >> \
-    $(basename `pwd`)-CHECKSUM && sigul sign-text -o $(basename `pwd`)-CHECKSUM \
-    fedora-13 $(basename `pwd`)-CHECKSUM && cat *-CHECKSUM && rm *CHECKSUM~; \
-    popd; done
 </pre>
 . Prepare the master mirror by logging into releng2:
 <pre>
-$ ssh <fas-username>@releng2.fedoraproject.org
+$ ssh <fas-username>@gateway.fedoraproject.org
+$ ssh releng2
 </pre>
@@ Line 33: / Line 22: @@
 </pre>
 . Synchronize the ''Everything'' tree with the mirrors from releng2:
 <pre>
 $ sudo -u ftpsync rsync -rlptDHhv --progress --stats --exclude images/ - \
@@ Line 42: / Line 31: @@
 </pre>
 . Synchronize the ''Fedora'' tree with the mirrors from releng2:
 <pre>
 $ sudo -u ftpsync rsync -rlptDHhv --progress --stats - \
@@ Line 50: / Line 39: @@
 </pre>
 . Synchronize the Live images with the mirrors from releng2:
 <pre>
 $ sudo -u ftpsync rsync -rlptDHhv --progress --stats --exclude \*.log \
@@ Line 57: / Line 46: @@
 </pre>
-.  Change file permissionsOpen for mirrors (also known as the ''bit flip'') on releng2:
+.  Change file permissionsOpen for mirrors (also known as the ''mirror stage bit flip'') on releng2:
 <pre>
 $ sudo -u ftpsync chmod 750 /pub/fedora/linux/releases/13
@@ Line 63: / Line 52: @@
 == Verification ==
-* '''FIXME'''--anything to add here?
+Verification is somewhat difficult as one cannot look at the content via the web server due to permissions.  Typically we ask somebody from the Infrastructure team to give the tree a second set of eyes.
 == Consider Before Running ==
-* '''FIXME'''--anything to add here?
+Hope the release is good!

Search