For quite some time, we’ve been wanting to reorganize how bits and builds find their way out to the world.
It’s a project we’ve affectionately referred to as “stage migration,” and we’re finally at a point where we’re ready to make changes that will hopefully improve security and auditability, reliability, and expandability.
The primary goals of this move are to support:
- Ensuring that builds get scanned before they’re available for download
- Audit access to the FTP tree and move to LDAP authentication for easier management
- Move to expandable storage, backed by a highly-reliable storage platform
- Combine ftp.m.o and archive.m.o, to make it easier to find builds
To address these goals, this week, the Build & IT teams will be reconfiguring the way the servers that make up ftp.m.o are set up.
The main changes that you’ll notice are:
- archive.m.o and ftp.m.o will be merged into one site, which will respond to both addresses. (So, no need to switch between them if you’re regression testing!)
- Directories with many builds, like firefox/nightly/, will be rearranged to allow much quicker access than the current archive.m.o. We’ll be creating YYYY/MM subdirectories, and moving deliverables into those directories. For example, the builds from March of last year would be found in firefox/nightly/2006/03/, and in that directory, you would find directories with builds like 2006-03-01-04-mozilla1.8 and 2006-03-01-04-trunk. We will be doing this for all builds older than a month.
- All files will be virus scanned before becoming available. We currently virus scan all builds, but depending on a number of factors, it was possible for unscanned-builds to appear on the FTP site for a window of time; we’ve removed this window.
- Interactive shell accounts on the FTP farm will be replaced with sftp-only accounts.
We will be doing most of this work during an outage window starting on Thursday, 27 September at 10 pm to 2 am. The tree will be closed during this time, because we’ll be teaching Tinderbox about the new FTP structure. Updates might be wonky on Friday, as well.
We will be moving the archived builds around earlier in the week, on Wednesday during the European day (“Go, go, gadget cf!”
We’re doing our best to minimize adverse changes but because of the above, it’s possible that your account could become disabled, or data in your home directory on the current FTP machine becomes unavailable. If that happens, please email email@example.com, and let us know, so we can fix it.