[tor-bugs] #25102 [Applications/Tor Browser]: Add script to sign nightly build mar files, generate update-responses xml and publish the new version

[Tor Bug Tracker & Wiki]

#25102: Add script to sign nightly build mar files, generate update-responses xml
and publish the new version
-------------------------------------------------+-------------------------
 Reporter:  boklm                                |          Owner:  boklm
     Type:  task                                 |         Status:
                                                 |  assigned
 Priority:  Medium                               |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  tbb-rbm, tbb-update,                 |  Actual Points:
  TorBrowserTeam201912                           |
Parent ID:  #18867                               |         Points:  2
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by boklm):

 This commit adds the script `tools/signing/nightly/sign-nightly`:
 https://gitweb.torproject.org/user/boklm/tor-browser-
 build.git/commit/?h=bug_25102_v5&id=c2b3fc259d746de78f4c2240b6aee6f1932df8d8

 This script downloads the mar files from the latest nightly, sign them,
 and generate update_responses xml files.

 What is still missing:
  - Correctly setting `platformVersion` and `buildID` (the current version
 of the script sets them to `0`). This depends on #32768.
  - Uploading of the mar files and update_responses xml somewhere to make
 them available for users. This depends on #32800.

 I also started some ansible scripts to setup a signing machine:
 https://gitweb.torproject.org/user/boklm/tor-browser-
 build.git/commit/?h=bug_25102_v5&id=42df2ed18ed5c6409253e2a3651e5fa437150bda

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25102#comment:11>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online