[Go Faster] Intent to unship: Firefox Hotfix

Julien Vehent jvehent at mozilla.com
Fri Jan 5 23:49:20 UTC 2018


FWIW, I don't plan on rotating the hotfix signing keys, and the HSMs
where they are currently stored will be brought offline by the end of
Q2. We'll still have access to the keys, but it will take several days
to sign a hotfix at that point.

- Julien

On Fri  5.Jan'18 at 14:10:30 -0800, Andrew McKay wrote:
> Reviving an old thread... just to let you know that we are starting to
> land the patches to enable system add-ons for Android
> (https://bugzilla.mozilla.org/show_bug.cgi?id=1380041) and remove the
> hotfix in Firefox 59
> (https://bugzilla.mozilla.org/show_bug.cgi?id=1356331).
> 
> On 24 July 2017 at 14:00, Lawrence Mandel <lmandel at mozilla.com> wrote:
> > On Tue, Jul 18, 2017 at 12:57 PM, Ritu Kothari <rkothari at mozilla.com> wrote:
> >>
> >>
> >>
> >> On Fri, Jul 14, 2017 at 7:31 PM, Julien Vehent <jvehent at mozilla.com>
> >> wrote:
> >>>
> >>> RelMan: what is your take on this question from Andy?
> >>>
> >>> > How far back do release management want to be able to go in affecting
> >>> > changes to Firefox?
> >>
> >>
> >> Hi Julien, Andy, I am still trying to find out how many of our release
> >> users are on <44 version. In the meantime, how do we hotfix ESR versions?
> >> Does the gofaster system add-on (SAO) mechanism for flipping prefs work on
> >> ESR52 as well? I should know this but my memory fails me. :)
> >>
> >> Are there any kinds/classes of hotfixes such as updating whitelists that
> >> could only be accomplished by hotfix add-on and not by SAO? Also, I am
> >> assuming there is no impact to Fennec.
> >
> >
> > We haven't typically (maybe ever) used the hotfix mechansim for ESR as it's
> > preferable to sysadmins to have a standard release that they can choose to
> > deploy. For older releases, the only use that I know of is a periodic push
> > to get older versions updated to newer versions. Probably best to have
> > bsmedberg weigh in on whether we can accept losing that capability for
> > versions <44 at this point.
> >
> > Lawrence
> >
> >>
> >> Thanks,
> >> Ritu
> >>>
> >>>
> >>> Because if we don't care about going back to Firefox < 44, then we don't
> >>> need to preserve the backend infrastructure to sign hotfixes after 57,
> >>> and
> >>> bug 1352454 is a WONTFIX.
> >>>
> >>> (we will still backup the current hotfix signing keys, but accessing
> >>> them will be manual, painful and slow).
> >>>
> >>> - Julien
> >>>
> >>> On Fri 31.Mar'17 at 16:58:16 -0700, Andrew McKay wrote:
> >>> > I didn't hear anything against this, but I did speak to Julien about
> >>> > the signing of the hotfix. That uses a server that needs to moved with
> >>> > the end of life of SCL3. Currently Go Faster add-ons only go back to
> >>> > Firefox 44. A recent hotfix fixed something in a version earlier than
> >>> > Firefox 44.
> >>> >
> >>> > How far back do release management want to be able to go in affecting
> >>> > changes to Firefox?
> >>> >
> >>> > This ability to go back to earlier releases does not affect the code
> >>> > in Firefox, but will affect our ability to remove hotfix support from
> >>> > an AMO and signing of the hotfix.
> >>> >
> >>> > On 1 March 2017 at 19:12, Felipe Gomes <fgomes at mozilla.com> wrote:
> >>> > > Having been involved in shipping fixes with both of these systems, I
> >>> > > can say
> >>> > > that I fully support this.  From a client point of view, system
> >>> > > add-ons are
> >>> > > a lot better; and the release process for them has gotten easier and
> >>> > > better
> >>> > > than hotfixes too.
> >>> > >
> >>> > > I believe there are some developer ergonomics improvements that can
> >>> > > be made
> >>> > > to make them a bit easier to develop and test locally. I have some
> >>> > > suggestions/ideas and I'll file bugs for them.
> >>> > >
> >>> > >
> >>> > > Felipe
> >>> > >
> >>> > >
> >>> > > On Wed, Mar 1, 2017 at 5:09 PM, Andrew McKay <amckay at mozilla.com>
> >>> > > wrote:
> >>> > >>
> >>> > >> Now that we have system add-ons we'd like to deprecate and remove
> >>> > >> the
> >>> > >> Hotfix. Given the research that rhelmer recently did, we can see
> >>> > >> that
> >>> > >> the uptake of system add-ons is similar to the Hotfix.
> >>> > >>
> >>> > >> I've made a proposal here:
> >>> > >> https://wiki.mozilla.org/Add-ons/HotfixRemoval
> >>> > >>
> >>> > >> I'm specifically looking for feedback from release drivers that we
> >>> > >> are
> >>> > >> comfortable with system add-ons going forward.
> >>> > >> _______________________________________________
> >>> > >> release-drivers mailing list
> >>> > >> release-drivers at mozilla.org
> >>> > >> https://mail.mozilla.org/listinfo/release-drivers
> >>> > >
> >>> > >
> >>> _______________________________________________
> >>> release-drivers mailing list
> >>> release-drivers at mozilla.org
> >>> https://mail.mozilla.org/listinfo/release-drivers
> >>
> >>
> >>
> >> _______________________________________________
> >> Gofaster mailing list
> >> Gofaster at mozilla.org
> >> https://mail.mozilla.org/listinfo/gofaster
> >>
> >


More information about the Gofaster mailing list