New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
firefox-bin/update: fix #98338
firefox-bin/update: fix #98338
Conversation
Mozilla has ended the gpg.mozilla.org SKS server and the key can't be imported from keys.openpgp.org because it lacks a user ID because Mozilla hasn't verified their email... Since the key isn't going to change any time soon and SKS is mostly busted, might as well hard-code it.
EditorConfig check getting confused by the binary file :/ |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
mozilla.asc in 2b44f56 matches:
pub rsa4096/61B7B526D98F0353 2015-07-17 [SC]
Key fingerprint = 14F2 6682 D091 6CDD 81E3 7B6D 61B7 B526 D98F 0353
uid [ unknown] Mozilla Software Releases <release@mozilla.com>
sub rsa4096/F1A6668FBB7D572E 2019-05-30 [S] [expires: 2021-05-29]
Btw, gpgv
can use the keyring directly as long as its not armored.
$ gpg -o mozilla.gpg --dearmor mozilla.asc
$ gpgv --keyring=$(pwd)/mozilla.gpg SHA256SUMS.asc SHA256SUMS
gpgv: Signature made Mon 31 Aug 2020 10:59:13 PM CEST
gpgv: using RSA key 097B313077AE62A02F84DA4DF1A6668FBB7D572E
gpgv: Good signature from "Mozilla Software Releases <release@mozilla.com>"
/marvin opt-in |
Hi! I'm an experimental bot. My goal is to guide this PR through its stages, hopefully ending with a merge. You can read up on the usage here. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
Tested OK, checked key.
nix-shell maintainers/scripts/update.nix --argstr package firefox-bin-unwrapped
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Works with thunderbird-bin
.
nix-shell maintainers/scripts/update.nix --argstr package pkgs.thunderbird-bin-78
firefox-bin/update: fix (cherry picked from commit 7ecdf14)
I tried using this on Firefox but the upgrade script just block at some point and even after 20 minutes nothing happened. Does it work for anyone else on Firefox? |
NixOS#98338 (comment) (cherry picked from commit 4eacc37)
Motivation for this change
Things done
sandbox
innix.conf
on non-NixOS linux)nix-shell -p nixpkgs-review --run "nixpkgs-review wip"
./result/bin/
)nix path-info -S
before and after)