Bug 25102: Setup nightly signing

boklm-tbb-nightly-build:

	ansible-playbook --vault-password-file=~/ansible-vault/boklm-tbb-nightly -i inventory boklm-tbb-nightly-build.yml

tbb-nightly-signing:

	ANSIBLE_CONFIG='$(@D)/ansible.cfg' ansible-playbook -i inventory tbb-nightly-signing.yml

  For more details, see also this ticket:

  https://trac.torproject.org/projects/tor/ticket/33948

tbb-nightly-signing:

  This target is used to deploy a nightly signing machine. The

  configuration of nightly signing is done in the following files:

   tools/ansible/roles/tbb-nightly-signing/defaults/main.yml

   tools/signing/nightly/config.yml

   tools/signing/nightly/update-responses-base-config.yml

Adding, removing, updating users on the Tor Browser team build machine

======================================================================

[ssh_connection]

; When connecting to a v3 onion, we get the error:

; "unix_listener: [...] too long for Unix domain socket"

; We solve this by using %n (The original remote hostname, as given on

; the command line) instead of %h (The remote hostname) in the control path.

control_path=%(directory)s/%%r-%%n-%%r

build-sunet-a ansible_ssh_user=root ansible_ssh_host=build-sunet-a.torproject.net

fpcentral ansible_become=True ansible_become_method=sudo ansible_become_user=fpcentral ansible_ssh_host=forrestii.torproject.org allow_world_readable_tmpfiles=True

boklm-tbb-nightly-build ansible_ssh_user=root ansible_become_method=su

tbb-nightly-signing ansible_ssh_user=root ansible_become_method=su

[tbb-build]

build-sunet-a

---

nightly_signing_user: nightly-signing

nightly_signing_cron_hour: '*'

nightly_signing_cron_minute: '0,30'

tor_browser_build_dir: "/home/{{ nightly_signing_user }}/tor-browser-build"

tor_browser_build_git_url: https://git.torproject.org/builders/tor-browser-build.git

tor_browser_build_commit: 8d66414b7860751ffec6a83a6bc6dbfbd94f801a