This is an automated email from the git hooks/post-receive script.

richard pushed a commit to branch master in repository tor-browser-spec.

The following commit(s) were added to refs/heads/master by this push: new 55bd0e3 Bug 40031: Update release process after changes from tor-browser-build#40476 55bd0e3 is described below

commit 55bd0e3485a2355fd39ffd79106fba4c1a289531 Author: Nicolas Vigier boklm@torproject.org AuthorDate: Mon May 9 16:09:06 2022 +0200

Bug 40031: Update release process after changes from tor-browser-build#40476 --- processes/ReleaseProcess | 25 +++++++++++++++---------- 1 file changed, 15 insertions(+), 10 deletions(-)

diff --git a/processes/ReleaseProcess b/processes/ReleaseProcess index 21a3b9b..a91929b 100644 --- a/processes/ReleaseProcess +++ b/processes/ReleaseProcess @@ -76,6 +76,12 @@ # # The signing scripts are located in the tor-browser-build/tools/signing # directory. +# +# Alternatively, you can run the script `./do-all-signing`, which will +# do all the signing steps automatically, until the static-update-component +# commands on staticiforme. Also the script does not currently handle +# removing the old versions on staticiforme, so you have to do that +# manually.

#. Checkout the tor-browser-build.git commit corresponding to the # tor browser version you need to sign/publish. @@ -147,11 +153,7 @@ linux-signer$ ~/signing-release/linux-signer-signmars

#. Authenticode signing of exe files. On `linux-signer`. - linux-signer$ chgrp -R yubihsm ~/$TORBROWSER_VERSION - linux-signer$ chmod -R g+w ~/$TORBROWSER_VERSION - linux-signer$ sudo su - yubihsm - linux-signer$ cd ~user/$TORBROWSER_VERSION - linux-signer$ /path/to/authenticode-signing.sh + linux-signer$ ~/signing-release/linux-signer-authenticode-signing

#. Authenticode timestamping. ./sync-linux-signer-to-local @@ -193,11 +195,14 @@ staticiforme$ static-update-component cdn.torproject.org

#. Sync files to dist.tpo and cdn.tpo mirrored web servers - # Obtain publish_version.sh from the tor-browser-build repo under - # tools/update/ to run it on staticiforme. - # $PREV_TORBROWSER_VERSION is one of the previously published versions remaining - # on staticiforme from where the .htaccess is copied. - staticiforme$ ./publish_version.sh $TORBROWSER_VERSION $PREV_TORBROWSER_VERSION +# (replace signing-release with signing-alpha for an alpha release) +# It is a good idea to run the static-update-component inside screen +# or tmux so that the upload continues if your connection to +# staticiforme is closed. + $ ./sync-scripts-to-staticiforme + staticiforme$ ~/signing-release/staticiforme-prepare-cdn-dist-upload + staticiforme$ static-update-component cdn.torproject.org && \ + static-update-component dist.torproject.org

#. Make sure we really built from the proper Mozilla build tag by consulting # the respective ESR release branch (for a good overview for ESR78 see