Source code
Revision control
Copy as Markdown
Other Tools
# This Source Code Form is subject to the terms of the Mozilla Public
# License, v. 2.0. If a copy of the MPL was not distributed with this
---
trust-domain: gecko
project-repo-param-prefix: ''
product-dir: 'browser'
treeherder:
group-names:
'js-bench-sm': 'JavaScript shell benchmarks with Spidermonkey'
'js-bench-v8': 'JavaScript shell benchmarks with Google V8'
'node': 'Node tests'
'py3': 'Python 3 unit tests'
'A': 'Android Gradle tests'
'Bpgo': 'Profile-guided optimization builds'
'Btime': 'Browsertime performance tests on Firefox'
'Btime-cache': 'Browsertime performance tests on Firefox with populated bytecode cache.'
'Btime-1proc': 'Browsertime performance tests on Firefox without e10s'
'Btime-nofis': 'Browsertime tests on Firefox without fission enabled'
'Btime-P-nofis': 'Browsertime power tests on Firefox without fission enabled'
'Btime-Prof-nofis': 'Browsertime tests on Firefox with profiling and without fission enabled'
'Btime-P-nofis-refbrow': 'Browsertime Power Usage Tests on reference browser without fission enabled'
'Btime-P-nofis-fenix': 'Browsertime Power Usage Tests on Fenix without fission enabled'
'Btime-live-nofis-fenix': 'Browsertime tests on Fenix without fission enabled using live sites'
'Btime-nofis-fenix': 'Browsertime tests on Fenix without fission enabled'
'Btime-webext-nofis-fenix': 'Browsertime performance tests on Fenix with extensions and without fission enabled'
'Btime-webext-fenix': 'Browsertime performance tests on Fenix with extensions'
'Btime-webext': 'Browsertime performance tests on Firefox with extensions'
'Btime-live-nofis': 'Browsertime tests on Firefox without fission enabled using live sites'
'Btime-nofis-refbrow': 'Browsertime tests on reference browser without fission enabled'
'Btime-live-nofis-ChR': 'Browsertime tests on Chrome without fission enabled using live sites'
'Btime-Prof': 'Browsertime performance tests on Firefox with Gecko Profiling'
'Btime-Prof-1proc': 'Browsertime performance tests on Firefox with Gecko Profiling and without e10s'
'Btime-live': 'Browsertime performance tests on Firefox'
'Btime-live-fenix': 'Browsertime performance tests on Firefox'
'Btime-live-ChR': 'Browsertime performance tests on Google Chrome Release'
'Btime-live-Saf': 'Browsertime performance tests on Safari'
'Btime-ChR': 'Browsertime performance tests on Google Chrome Release'
'Btime-nofis-ChR': 'Browsertime performance tests on Google Chrome Release without fission enabled'
'Btime-P': 'Browsertime power tests on Firefox/Geckoview'
'Btime-P-fenix': 'Browsertime power tests on Fenix'
'Btime-P-refbrow': 'Browsertime power tests on reference browser'
'Btime-fenix': 'Browsertime performance tests on Fenix'
'Btime-refbrow': 'Browsertime performance tests on the reference browser'
'Btime-Saf': 'Browsertime performance tests on Safari'
'Btime-STP': 'Browsertime performance tests on Safari Technology Preview'
'Btime-CaR': 'Browsertime performance tests on Chromium-as-Release'
'Btime-nofis-CaR': 'Browsertime performance tests on Chromium-as-Release without fission enabled'
'Btime-1M_400ms': 'Browsertime network benchmark tests with 1M_400ms condition'
'Btime-ChR-1M_400ms': 'Browsertime network benchmark tests with 1M_400ms condition'
'Btime-CaR-1M_400ms': 'Browsertime network benchmark tests with 1M_400ms condition'
'Btime-300M_40ms': 'Browsertime network benchmark tests with 300M_40ms condition'
'Btime-ChR-300M_40ms': 'Browsertime network benchmark tests with 300M_40ms condition'
'Btime-CaR-300M_40ms': 'Browsertime network benchmark tests with 300M_40ms condition'
'Btime-300M_80ms': 'Browsertime network benchmark tests with 300M_80ms condition'
'Btime-ChR-300M_80ms': 'Browsertime network benchmark tests with 300M_80ms condition'
'Btime-CaR-300M_80ms': 'Browsertime network benchmark tests with 300M_80ms condition'
'Btime-10M_40ms': 'Browsertime network benchmark tests with 10M_40ms condition'
'Btime-ChR-10M_40ms': 'Browsertime network benchmark tests with 10M_40ms condition'
'Btime-CaR-10M_40ms': 'Browsertime network benchmark tests with 10M_40ms condition'
'Btime-100M_40ms': 'Browsertime network benchmark tests with 100M_40ms condition'
'Btime-ChR-100M_40ms': 'Browsertime network benchmark tests with 100M_40ms condition'
'Btime-CaR-100M_40ms': 'Browsertime network benchmark tests with 100M_40ms condition'
'Fetch': 'Fetch and store content'
'Fxfn': 'Firefox functional tests'
'l10n-bump': 'L10n Bumper'
'M': 'Mochitests'
'M-f': 'Mochitest failures'
'Mn': 'Marionette tests'
'MSI': 'Repack installers into MSIs'
'MSIs': 'Signing of Repacked installers of MSIs'
'MSIX': 'Repack into MSIX package'
'MSIXs': 'Signing of Repack into MSIX package'
'Pup': "Puppeteer tests"
'R': 'Reftests'
'Rap': 'Raptor performance tests on Firefox'
'Rap-live': 'Raptor performance tests on Firefox with live sites'
'Rap-Prof': 'Raptor performance tests on Firefox with Gecko Profiling'
'Rap-ChR': 'Raptor performance tests on Google Chrome Release'
'Rap-refbrow': 'Raptor performance tests on the reference browser'
'T': 'Talos performance tests'
'T-Prof': 'Talos performance tests on Firefox with Gecko Profiling'
'tt': 'Telemetry tests'
'SY': 'Are we slim yet tests by TaskCluster'
'W': 'Web platform tests'
'W-b': 'Web platform tests (backlog)'
'W-pb': 'Web platform tests with private browsing enabled'
'X': 'Xpcshell tests'
'X-f': 'Xpcshell tests that fail on a given config'
'L10n': 'Localised Repacks'
'L10n-Rpk': 'Localized Repackaged Repacks'
'deb-L10n': 'Localized Debian Repacks'
'BM': 'Beetmover'
'BMR': 'Beetmover repackages'
'BM-apt': 'Beetmover .deb packages'
'c-Up': 'Balrog submission of complete updates'
'css': 'Checksum signing for source'
'rs': 'Repackage signing'
'BMcs': 'Beetmover checksums'
'BMcslang': 'Beetmover checksums for language packs'
'BMcss': 'Beetmover checksums for source'
'Deb8': 'Packages for Debian 8'
'Deb8-32': 'Packages for Debian 8 32-bits'
'Deb9': 'Packages for Debian 9'
'Deb10': 'Packages for Debian 10'
'Deb11': 'Packages for Debian 11'
'Deb12': 'Packages for Debian 12'
'Ub18': 'Packages for Ubuntu 18.04'
'Ub20': 'Packages for Ubuntu 20.04'
'Ub22': 'Packages for Ubuntu 22.04'
'Ub22a64': 'AArch64 packages for Ubuntu 22.04'
'Ub24': 'Packages for Ubuntu 24.04'
'I': 'Docker Image Builds'
'TA': 'Toolchain builds for Android'
'TL': 'Toolchain builds for Linux 64-bits'
'TL32': 'Toolchain builds for Linux 32-bits'
'TLA64': 'Toolchain builds for Linux AArch64'
'TM': 'Toolchain builds for OSX'
'TMA64': 'Toolchain builds for OSX Aarch64'
'TMW': 'Toolchain builds for Windows MinGW'
'TW32': 'Toolchain builds for Windows 32-bits'
'TW64': 'Toolchain builds for Windows 64-bits'
'TWA64': 'Toolchain builds for Windows AArch64'
'WMC32': 'MinGW-Clang builds for Windows 32-bits'
'WMC64': 'MinGW-Clang builds for Windows 64-bits'
'Searchfox': 'Searchfox builds'
'SM': 'Spidermonkey builds'
'p': 'Partial generation'
'pz': 'Partial-zucchini generation'
'ps': 'Partials signing'
'ms': 'Complete MAR signing'
'ms-stage': 'Autograph-stage MAR signing test'
'Rel': 'Release promotion'
'Snap': 'Snap image generation'
'Flatpak': 'Flatpak image generation'
'langpack': 'Langpack sigatures and uploads'
'TPS': 'Sync tests'
'UV': 'Update verify'
'UVnext': 'Update verify for esr-next'
'pydep': 'python dependency update'
'WR': 'WebRender standalone'
'Wgpu': 'WebGPU standalone'
'cpp': 'C/C++ checks'
'pedantic': 'pedantic checks'
'text': 'Check on texts'
'misc': 'Misc checks'
'js': 'JavaScript checks'
'py': 'Python checks'
'java': 'Java checks'
'rust': 'Rust checks'
'Static-Analysis': 'Full tree static-analysis'
'SS': 'Shadow scheduler'
'Sel': 'Selenium Snap tests'
'Sentry': 'Sentry synchronization'
'test-info': 'Test manifest skip/fail information'
'condprof': 'Conditioned Profile Builder'
'doc': 'Documentation'
'perftest': 'Performance tests'
'perftest-detect': 'Performance regression detection tooling'
'perftest-chrome': 'Performance tests using Chrome Release'
'perftest-http3': 'Performance tests with HTTP/3'
'perftest-fenix': 'Performance tests using Fenix'
'l10n': 'Localization checks'
'wc': 'webcompat'
'Boot': 'Bootstrap'
'Attr-L10n': 'Build Attribution'
'android-l10n': 'Import strings from android-l10n repo'
# The below symbols are from firefox-android (fenix/focus/android-components)
'buildconfig': 'Make sure the content of .buildconfig.yml matches what gradle knows about its projects'
'compare-locales': 'Validate strings.xml with compare-locales'
'detekt': 'detekt linter'
'ktlint': 'ktlint linter'
'lint': 'gradle lint linter'
'focus': 'Focus general tasks no matter the variant'
'focus-beta': 'Focus beta-related tasks'
'focus-debug': 'Focus builds made for testing'
'focus-nightly': 'Focus nightly-related tasks'
'focus-release': 'Focus production-related tasks'
'fenix': 'Fenix general tasks no matter the variant'
'fenix-beta': 'Fenix beta-related tasks'
'fenix-debug': 'Fenix builds made for testing'
'fenix-nightly': 'Fenix nightly-related tasks'
'fenix-nightlySim': 'Nightly-related tasks that run on each github push'
'fenix-release': 'Fenix production-related tasks'
# This list is based on mobile/android/android-components/.buildconfig.yml except the exceptions down below
'browser-domains': 'browser-domains'
'browser-engine-gecko': 'browser-engine-gecko'
'browser-engine-system': 'browser-engine-system'
'browser-errorpages': 'browser-errorpages'
'browser-icons': 'browser-icons'
'browser-menu': 'browser-menu'
'browser-menu2': 'browser-menu2'
'browser-session-storage': 'browser-session-storage'
'browser-state': 'browser-state'
'browser-storage-sync': 'browser-storage-sync'
'browser-tabstray': 'browser-tabstray'
'browser-thumbnails': 'browser-thumbnails'
'browser-toolbar': 'browser-toolbar'
'compose-awesomebar': 'compose-engine'
'compose-browser-toolbar': 'awesomebar-browser-toolbar'
'compose-engine': 'compose-engine'
'compose-tabstray': 'compose-tabstray'
'concept-awesomebar': 'concept-awesomebar'
'concept-base': 'concept-base'
'compose-cfr': 'compose-cfr'
'concept-engine': 'concept-engine'
'concept-fetch': 'concept-fetch'
'concept-menu': 'concept-menu'
'concept-push': 'concept-push'
'concept-storage': 'concept-storage'
'concept-sync': 'concept-sync'
'concept-tabstray': 'concept-tabstray'
'concept-toolbar': 'concept-toolbar'
'feature-accounts-push': 'feature-accounts-push'
'feature-accounts': 'feature-accounts'
'feature-addons': 'feature-addons'
'feature-app-links': 'feature-app-links'
'feature-autofill': 'feature-autofill'
'feature-awesomebar': 'feature-awesomebar'
'feature-containers': 'feature-containers'
'feature-contextmenu': 'feature-contextmenu'
'feature-customtabs': 'feature-customtabs'
'feature-downloads': 'feature-downloads'
'feature-findinpage': 'feature-findinpage'
'feature-fxsuggest': 'feature-fxsuggest'
'feature-intent': 'feature-intent'
'feature-logins': 'feature-logins'
'feature-media': 'feature-media'
'feature-privatemode': 'feature-privatemode'
'feature-prompts': 'feature-prompts'
'feature-push': 'feature-push'
'feature-pwa': 'feature-pwa'
'feature-qr': 'feature-qr'
'feature-readerview': 'feature-readerview'
'feature-recentlyclosed': 'feature-recentlyclosed'
'feature-search': 'feature-search'
'feature-serviceworker': 'feature-serviceworker'
'feature-session': 'feature-session'
'feature-share': 'feature-share'
'feature-sitepermissions': 'feature-sitepermissions'
'feature-syncedtabs': 'feature-syncedtabs'
'feature-tab-collections': 'feature-tab-collections'
'feature-tabs': 'feature-tabs'
'feature-toolbar': 'feature-toolbar'
'feature-top-sites': 'feature-top-sites'
'feature-webauthn': 'feature-webauthn'
'feature-webcompat': 'feature-webcompat'
'feature-webnotifications': 'feature-webnotifications'
'lib-crash': 'lib-crash'
'lib-auth': 'lib-auth'
'lib-crash-sentry': 'lib-crash-sentry'
'lib-crash-sentry-legacy': 'lib-crash-sentry-legacy'
'lib-dataprotect': 'lib-dataprotect'
'lib-fetch-okhttp': 'lib-fetch-okhttp'
'lib-jexl': 'lib-jexl'
'lib-publicsuffixlist': 'lib-publicsuffixlist'
'lib-push-firebase': 'lib-push-firebase'
'lib-state': 'lib-state'
'samples-compose-browser': 'samples-compose-browser'
'samples-crash': 'samples-crash'
'samples-dataprotect': 'samples-dataprotect'
'samples-firefox-accounts': 'samples-firefox-accounts'
'samples-glean-library': 'samples-glean-library'
'samples-glean': 'samples-glean'
'samples-sync-logins': 'samples-sync-logins'
'samples-sync': 'samples-sync'
'samples-toolbar': 'samples-toolbar'
'service-contile': 'service-contile'
'service-digitalassetlinks': 'service-digitalassetlinks'
'service-experiments': 'service-experiments'
'service-firefox-accounts': 'service-firefox-accounts'
'service-fretboard': 'service-fretboard'
'service-glean': 'service-glean'
'service-location': 'service-location'
'service-nimbus': 'service-nimbus'
'service-pocket': 'service-pocket'
'service-sync-autofill': 'service-sync-autofill'
'service-sync-logins': 'service-sync-logins'
'support-android-test': 'support-android-test'
'support-base': 'support-base'
'support-images': 'support-images'
'support-ktx': 'support-ktx'
'support-license': 'support-license'
'support-locale': 'support-locale'
'support-migration': 'support-migration'
'support-remotesettings': 'support-remotesettings'
'support-rusthttp': 'support-rusthttp'
'support-rusterrors': 'support-rusterrors'
'support-rustlog': 'support-rustlog'
'support-sync-telemetry': 'support-sync-telemetry'
'support-test-appservices': 'support-test-appservices'
'support-test-fakes': 'support-test-fakes'
'support-test-libstate': 'support-test-libstate'
'support-test': 'support-test'
'support-utils': 'support-utils'
'support-webextensions': 'support-webextensions'
'tooling-detekt': 'tooling-detekt'
'tooling-fetch-tests': 'tooling-fetch-tests'
'tooling-lint': 'tooling-lint'
'ui-autocomplete': 'ui-autocomplete'
'ui-colors': 'ui-colors'
'ui-fonts': 'ui-fonts'
'ui-icons': 'ui-icons'
'ui-tabcounter': 'ui-tabcounter'
'ui-widgets': 'ui-widgets'
# These ones are too long to fit in 25 chars
'lib-fetch-httpurlconnecti': 'lib-fetch-httpurlconnection'
'feature-webcompat-reporte': 'feature-webcompat-reporter'
# Groups aren't generated off buildconfig.yml:
'samples-browser': 'samples-browser'
'samples-browser-gecko': 'samples-browser-gecko'
'samples-browser-system': 'samples-browser-system'
# forPerformanceTest: Builds made for Raptor and other performance tests
'Rap-P': 'Raptor power tests'
index:
products:
- 'firefox'
- 'fennec'
- 'mobile'
- 'static-analysis'
- 'devedition'
- 'source'
- 'system-symbols'
- 'geckodriver'
try:
# We have a few platforms for which we want to do some "extra" builds, or at
# least build-ish things. Sort of. Anyway, these other things are implemented
# as different "platforms". These do *not* automatically ride along with "-p
# all"
ridealong-builds:
'linux':
- 'sm-plain-linux32'
- 'sm-arm-sim-linux32'
'linux64':
- 'sm-plain-linux64'
- 'sm-nojit-linux64'
- 'sm-nonunified-linux64'
- 'sm-arm-sim-linux32'
- 'sm-arm64-sim-linux64'
- 'sm-compacting-linux64'
- 'sm-rootanalysis-linux64'
- 'sm-package-linux64'
- 'sm-tsan-linux64'
- 'sm-asan-linux64'
- 'sm-msan-linux64'
- 'sm-fuzzing-linux64'
'win32':
- 'sm-plain-win32'
- 'sm-compacting-win32'
release-promotion:
products:
- 'devedition'
- 'fennec'
- 'firefox'
- 'firefox-android'
rebuild-kinds:
- docker-image
- fetch
- packages
- toolchain
flavors:
promote_devedition:
product: devedition
target-tasks-method: promote_desktop
partial-updates: true
promote_firefox:
product: firefox
target-tasks-method: promote_desktop
partial-updates: true
promote_firefox_partner_repack:
product: firefox
rebuild-kinds:
- release-partner-repack
- release-partner-repack-chunking-dummy
- release-partner-repack-signing
- release-partner-repack-mac-signing
- release-partner-repack-mac-notarization
- release-partner-repack-repackage
- release-partner-repack-repackage-signing
- release-partner-repack-beetmover
target-tasks-method: promote_desktop
promote_firefox_partner_attribution:
product: firefox
rebuild-kinds:
- release-partner-attribution
- release-partner-attribution-beetmover
target-tasks-method: promote_desktop
promote_firefox_rc:
product: firefox
is-rc: true
target-tasks-method: promote_desktop
partial-updates: true
push_devedition:
product: devedition
target-tasks-method: push_desktop
partial-updates: true
push_firefox:
product: firefox
target-tasks-method: push_desktop
partial-updates: true
ship_devedition:
product: devedition
target-tasks-method: ship_desktop
version-bump: true
partial-updates: true
ship_firefox:
product: firefox
target-tasks-method: ship_desktop
version-bump: true
partial-updates: true
ship_firefox_rc:
product: firefox
is-rc: true
target-tasks-method: ship_desktop
partial-updates: true
promote_android:
product: firefox-android
target-tasks-method: promote_android
push_android:
product: firefox-android
target-tasks-method: push_android
ship_android:
product: firefox-android
target-tasks-method: ship_android
merge-automation:
behaviors:
central-to-beta:
fetch-version-from: "browser/config/version.txt"
version-files:
- filename: "config/milestone.txt"
new-suffix: ''
- filename: "browser/config/version.txt"
new-suffix: ''
- filename: "browser/config/version_display.txt"
new-suffix: 'b1'
- filename: "mobile/android/version.txt"
new-suffix: 'b1'
replacements:
- - browser/config/mozconfigs/linux32/l10n-mozconfig
- ac_add_options --with-branding=browser/branding/nightly
- ac_add_options --enable-official-branding
- - browser/config/mozconfigs/linux64/l10n-mozconfig
- ac_add_options --with-branding=browser/branding/nightly
- ac_add_options --enable-official-branding
- - browser/config/mozconfigs/win32/l10n-mozconfig
- ac_add_options --with-branding=browser/branding/nightly
- ac_add_options --enable-official-branding
- - browser/config/mozconfigs/win64/l10n-mozconfig
- ac_add_options --with-branding=browser/branding/nightly
- ac_add_options --enable-official-branding
- - browser/config/mozconfigs/win64-aarch64/l10n-mozconfig
- ac_add_options --with-branding=browser/branding/nightly
- ac_add_options --enable-official-branding
- - browser/config/mozconfigs/macosx64/l10n-mozconfig
- ac_add_options --with-branding=browser/branding/nightly
- ac_add_options --enable-official-branding
- - .arcconfig
- MOZILLACENTRAL
- BETA
merge-old-head: true
base-tag: 'FIREFOX_BETA_{major_version}_BASE'
end-tag: 'FIREFOX_BETA_{major_version}_END'
from-branch: 'central'
to-branch: 'beta'
early-to-late-beta:
fetch-version-from: "browser/config/version.txt"
version-files: []
replacements:
- - build/defines.sh
- EARLY_BETA_OR_EARLIER=1
- EARLY_BETA_OR_EARLIER=
merge-old-head: false
to-branch: 'beta'
beta-to-release:
fetch-version-from: "browser/config/version.txt"
version-files:
- filename: "browser/config/version_display.txt"
new-suffix: ''
- filename: "mobile/android/version.txt"
new-suffix: ''
replacements:
- - .arcconfig
- BETA
- RELEASE
merge-old-head: true
base-tag: 'FIREFOX_RELEASE_{major_version}_BASE'
end-tag: 'FIREFOX_RELEASE_{major_version}_END'
from-branch: 'beta'
to-branch: 'release'
release-to-esr:
fetch-version-from: "browser/config/version.txt"
version-files:
- filename: "browser/config/version_display.txt"
new-suffix: 'esr'
replacements:
- - .arcconfig
- RELEASE
- ESRONETWOEIGHT
merge-old-head: false
end-tag: "FIREFOX_ESR_{major_version}_BASE"
to-branch: 'esr128'
bump-central:
fetch-version-from: "browser/config/version.txt"
version-files:
- filename: "config/milestone.txt"
version-bump: "major"
new-suffix: 'a1'
- filename: "browser/config/version.txt"
version-bump: "major"
new-suffix: 'a1'
- filename: "browser/config/version_display.txt"
version-bump: "major"
new-suffix: 'a1'
- filename: "mobile/android/version.txt"
version-bump: "major"
new-suffix: 'a1'
replacements:
- - "services/sync/modules/constants.sys.mjs"
- 'WEAVE_VERSION = "1.{current_weave_version}.0"'
- 'WEAVE_VERSION = "1.{next_weave_version}.0"'
merge-old-head: false
end-tag: 'FIREFOX_NIGHTLY_{major_version}_END'
to-branch: 'central'
bump-esr128:
fetch-version-from: "browser/config/version.txt"
version-files:
- filename: "config/milestone.txt"
version-bump: "minor"
- filename: "browser/config/version.txt"
version-bump: "minor"
- filename: "browser/config/version_display.txt"
version-bump: "minor"
replacements: []
merge-old-head: false
to-branch: 'esr128'
scriptworker:
# See additional configuration in taskcluster/gecko_taskgraph/util/scriptworker.py
scope-prefix: 'project:releng'
partner-urls:
release-partner-repack:
by-release-product:
default: null
firefox:
by-release-type:
default: null
beta|release.*:
by-release-level:
production: 'git@github.com:mozilla-partners/repack-manifests.git'
staging: 'git@github.com:moz-releng-automation-stage/repack-manifests.git'
esr.*:
by-release-level:
production: 'git@github.com:mozilla-partners/esr-repack-manifests.git'
staging: 'git@github.com:moz-releng-automation-stage/esr-repack-manifests.git'
release-partner-attribution:
by-release-product:
default: null
firefox:
by-release-type:
default: null
beta|release.*:
by-release-level:
production: 'git@github.com:mozilla-partners/repack-manifests.git'
staging: 'git@github.com:moz-releng-automation-stage/repack-manifests.git'
esr.*:
by-release-level:
production: 'git@github.com:mozilla-partners/esr-repack-manifests.git'
staging: 'git@github.com:moz-releng-automation-stage/esr-repack-manifests.git'
release-eme-free-repack:
by-release-product:
default: null
firefox:
by-release-type:
default: null
beta|release.*:
by-release-level:
production: 'git@github.com:mozilla-partners/mozilla-EME-free-manifest.git'
staging: 'git@github.com:moz-releng-automation-stage/mozilla-EME-free-manifest.git'
task-priority:
by-project:
'mozilla-release': 'highest'
'mozilla-esr.*': 'very-high'
'mozilla-beta': 'high'
'mozilla-central': 'medium'
'autoland': 'low'
'mozilla-inbound': 'low'
'default': 'very-low'
taskgraph:
register: gecko_taskgraph:register
workers:
aliases:
b-linux.*:
provisioner: '{trust-domain}-{level}'
implementation: docker-worker
os: linux
worker-type: '{alias}'
b-win2012:
provisioner: '{trust-domain}-{level}'
implementation: generic-worker
os: windows
worker-type: '{alias}-azure'
b-win2022:
provisioner: '{trust-domain}-{level}'
implementation: generic-worker
os: windows
worker-type: '{alias}'
b-win-aarch64:
provisioner: '{trust-domain}-{level}'
implementation: generic-worker
os: windows
worker-type: 'win11-a64-24h2-builder'
image:
provisioner: '{trust-domain}-{level}'
implementation: docker-worker
os: linux
worker-type: '{alias}'
images:
provisioner: '{trust-domain}-{level}'
implementation: docker-worker
os: linux
worker-type: '{alias}'
images-gcp:
provisioner: '{trust-domain}-{level}'
implementation: docker-worker
os: linux
worker-type: '{alias}'
images-gcp-aarch64:
provisioner: '{trust-domain}-{level}'
implementation: docker-worker
os: linux
worker-type: '{alias}'
addon:
provisioner: scriptworker-k8s
implementation: push-addons
os: scriptworker
worker-type:
by-release-level:
production: '{trust-domain}-3-addon'
staging: '{trust-domain}-1-addon'
balrog:
provisioner: scriptworker-k8s
implementation: balrog
os: scriptworker
worker-type:
by-release-level:
production: '{trust-domain}-3-balrog'
staging: '{trust-domain}-1-balrog'
bouncer:
provisioner: scriptworker-k8s
# Note that this implementation doesn't correspond with an
# payload_builder, there are several `bouncer-*` implemenations.
implementation: bouncer
os: scriptworker
worker-type:
by-release-level:
production: '{trust-domain}-3-bouncer'
staging: '{trust-domain}-1-bouncer'
beetmover:
provisioner: scriptworker-k8s
implementation: beetmover
os: scriptworker
worker-type:
by-release-level:
production: '{trust-domain}-3-beetmover'
staging: '{trust-domain}-1-beetmover'
beetmover-android:
provisioner: scriptworker-k8s
implementation: scriptworker-beetmover
os: scriptworker
worker-type:
by-release-level:
production: '{trust-domain}-3-beetmover'
staging: '{trust-domain}-1-beetmover'
shipit:
provisioner: scriptworker-k8s
implementation: shipit
os: scriptworker
worker-type:
by-release-level:
production: '{trust-domain}-3-shipit'
staging: '{trust-domain}-1-shipit'
linux-depsigning:
provisioner: scriptworker-k8s
implementation: scriptworker-signing
os: linux
worker-type: '{trust-domain}-t-signing'
linux-signing:
provisioner: scriptworker-k8s
implementation: scriptworker-signing
os: linux
worker-type:
by-release-level:
production: '{trust-domain}-3-signing'
staging: '{trust-domain}-t-signing'
mac-depsigning:
provisioner: scriptworker-prov-v1
implementation: scriptworker-signing
os: macosx
worker-type: depsigning-mac-v1
mac-signing:
provisioner: scriptworker-prov-v1
implementation: scriptworker-signing
os: macosx
worker-type:
by-release-level:
production: signing-mac-v1
staging: depsigning-mac-v1
push-apk:
provisioner: scriptworker-k8s
implementation: scriptworker-pushapk
os: scriptworker
worker-type: '{trust-domain}-{level}-pushapk'
pushflatpak:
provisioner: scriptworker-k8s
implementation: push-flatpak
os: scriptworker
worker-type:
by-release-level:
staging: '{trust-domain}-1-pushflatpak'
production: '{trust-domain}-3-pushflatpak'
pushmsix:
provisioner: scriptworker-k8s
implementation: push-msix
os: scriptworker
worker-type:
by-release-level:
staging: '{trust-domain}-1-pushmsix'
production: '{trust-domain}-3-pushmsix'
tree:
provisioner: scriptworker-k8s
implementation: treescript
os: scriptworker
worker-type:
by-release-level:
production: '{trust-domain}-3-tree'
staging:
by-project:
autoland: '{trust-domain}-3-tree'
default: '{trust-domain}-1-tree'
tree-dev:
provisioner: scriptworker-k8s
implementation: treescript
os: scriptworker
worker-type: '{trust-domain}-1-tree-dev'
t-bitbar-gw.*:
provisioner: proj-autophone
implementation: generic-worker
os: linux-bitbar
worker-type: 'gecko-{alias}'
t-linux(-large|-xlarge|-xlarge-source):
provisioner: '{trust-domain}-t'
implementation: docker-worker
os: linux
worker-type: '{alias}-gcp'
t-linux(-large|-xlarge|-xlarge-source)-noscratch:
provisioner: '{trust-domain}-t'
implementation: docker-worker
os: linux
worker-type: '{alias}-gcp'
t-linux-kvm:
provisioner: '{trust-domain}-t'
implementation: docker-worker
os: linux
worker-type: 't-linux-kvm-noscratch-gcp'
t-linux-talos:
provisioner: releng-hardware
implementation: generic-worker
os: linux
worker-type: 'gecko-{alias}'
t-linux-netperf-1804:
provisioner: releng-hardware
implementation: generic-worker
os: linux
worker-type: 'gecko-{alias}'
t-linux-talos-1804:
provisioner: releng-hardware
implementation: generic-worker
os: linux
worker-type: 'gecko-{alias}'
t-linux-wayland:
provisioner: '{trust-domain}-t'
implementation: generic-worker
os: linux
worker-type: 't-linux-2204-wayland'
t-linux-xlarge-wayland:
provisioner: '{trust-domain}-t'
implementation: generic-worker
os: linux
worker-type: 't-linux-xlarge-2204-wayland'
t-linux-wayland-vm:
provisioner: '{trust-domain}-t'
implementation: generic-worker
os: linux
worker-type: 't-linux-vm-2204-wayland'
t-linux-2204-wayland-snap:
provisioner: '{trust-domain}-t'
implementation: generic-worker
os: linux
worker-type: 't-linux-2204-wayland-snap'
t-linux-2404-wayland-snap:
provisioner: '{trust-domain}-t'
implementation: generic-worker
os: linux
worker-type: 't-linux-2404-wayland-snap'
t-osx-1015-r8:
provisioner: releng-hardware
implementation: generic-worker
os: macosx
worker-type: 'gecko-{alias}'
t-osx-1400-r8:
provisioner: releng-hardware
implementation: generic-worker
os: macosx
worker-type: 'gecko-{alias}'
t-osx-1100-m1:
provisioner: releng-hardware
implementation: generic-worker
os: macosx
worker-type: 'gecko-{alias}'
t-osx-1400-m2:
provisioner: releng-hardware
implementation: generic-worker
os: macosx
worker-type: 'gecko-{alias}'
t-osx-1015-power:
provisioner: releng-hardware
implementation: generic-worker
os: macosx
worker-type: 'gecko-{alias}'
b-osx-1015:
provisioner: releng-hardware
implementation: generic-worker
os: macosx
worker-type:
by-level:
'3': 'gecko-3-b-osx-1015'
default: 'gecko-1-b-osx-1015'
b-osx-arm64:
provisioner: releng-hardware
implementation: generic-worker
os: macosx
worker-type:
by-level:
'3': 'gecko-3-b-osx-arm64'
default: 'gecko-1-b-osx-arm64'
t-win10-64(|-gpu-s|-source):
provisioner: '{trust-domain}-t'
implementation: generic-worker
os: windows
worker-type: '{alias}'
t-win10-64(-hw|-1803-hw):
provisioner: releng-hardware
implementation: generic-worker
os: windows
worker-type: 'gecko-{alias}'
win11-64-2009(-hw-ref):
provisioner: releng-hardware
implementation: generic-worker
os: windows
worker-type: '{alias}'
win11-64-2009-hw:
provisioner: releng-hardware
implementation: generic-worker
os: windows
worker-type: '{alias}'
win10-64-2009(|-gpu|-ssd|-source|-ssd-gpu):
provisioner: 'gecko-t'
implementation: generic-worker
os: windows
worker-type: '{alias}'
t-win11-64(|-gpu-s|-source):
provisioner: '{trust-domain}-t'
implementation: generic-worker
os: windows
worker-type: '{alias}'
win11-64-2009(|-gpu|-ssd|-source|-ssd-gpu):
provisioner: 'gecko-t'
implementation: generic-worker
os: windows
worker-type: '{alias}'
win11-a64-24h2:
provisioner: 'gecko-t'
implementation: generic-worker
os: windows
worker-type: '{alias}'
t-win7-32-gpu:
provisioner: '{trust-domain}-t'
implementation: generic-worker
os: windows
worker-type: '{alias}'
t-win7-32:
provisioner: releng-hardware
implementation: generic-worker
os: windows
worker-type: 'gecko-{alias}-hw'
t-win64-aarch64-laptop:
provisioner: bitbar
implementation: generic-worker
os: windows
worker-type: 'gecko-{alias}'
succeed:
provisioner: built-in
implementation: succeed
os: none
worker-type: succeed
misc:
provisioner: '{trust-domain}-t'
implementation: docker-worker
os: linux
worker-type: misc-gcp
mac-signing:
mac-requirements:
by-platform:
macosx64.*: build/package/mac_osx/requirements.plist
default: ''
hardened-sign-config:
by-hardened-signing-type:
production:
- deep: false
runtime: true
force: true
entitlements: security/mac/hardenedruntime/v2/production/plugin-container.xml
globs:
- "/Contents/MacOS/plugin-container.app"
- deep: false
runtime: true
force: true
entitlements: security/mac/hardenedruntime/v2/production/media-plugin-helper.xml
globs:
- "/Contents/MacOS/media-plugin-helper.app"
- deep: false
runtime: true
force: true
# These files are signed without entitlements
globs:
- "/Contents/MacOS/crashreporter.app"
- "/Contents/MacOS/updater.app/Contents/Frameworks/UpdateSettings.framework"
- "/Contents/MacOS/updater.app"
- "/Contents/Library/LaunchServices/org.mozilla.updater"
- "/Contents/MacOS/XUL"
- "/Contents/MacOS/pingsender"
- "/Contents/MacOS/nmhproxy"
- "/Contents/MacOS/*.dylib"
- "/Contents/Resources/gmp-clearkey/*/*.dylib"
- "/Contents/Frameworks/ChannelPrefs.framework"
- deep: false
runtime: true
force: true
entitlements:
by-build-platform:
.*devedition.*: security/mac/hardenedruntime/v2/production/firefoxdeveloperedition.browser.xml
default:
by-project:
mozilla-central: security/mac/hardenedruntime/v2/production/nightly.browser.xml
default: security/mac/hardenedruntime/v2/production/firefox.browser.xml
globs:
- "/" # The .app
default:
- deep: false
runtime: true
force: true
entitlements: security/mac/hardenedruntime/v2/developer/plugin-container.xml
globs:
- "/Contents/MacOS/plugin-container.app"
- deep: false
runtime: true
force: true
entitlements: security/mac/hardenedruntime/v2/developer/media-plugin-helper.xml
globs:
- "/Contents/MacOS/media-plugin-helper.app"
- deep: false
runtime: true
force: true
entitlements: security/mac/hardenedruntime/v2/developer/utility.xml
globs:
- "/Contents/MacOS/crashreporter.app"
- "/Contents/MacOS/updater.app/Contents/Frameworks/UpdateSettings.framework"
- "/Contents/MacOS/updater.app"
- "/Contents/Library/LaunchServices/org.mozilla.updater"
- "/Contents/MacOS/pingsender"
- "/Contents/MacOS/nmhproxy"
- "/Contents/Frameworks/ChannelPrefs.framework"
- deep: false
runtime: true
force: true
# These files are signed without entitlements
globs:
- "/Contents/MacOS/XUL"
- "/Contents/MacOS/*.dylib"
- "/Contents/Resources/gmp-clearkey/*/*.dylib"
- deep: false
runtime: true
force: true
entitlements: security/mac/hardenedruntime/v2/developer/browser.xml
globs:
- "/" # The .app
expiration-policy:
by-project:
try:
default: 28 days
shortest: 7 days
short: 14 days
medium: 28 days
long: 28 days
autoland:
default: 1 year
shortest: 14 days
short: 3 months
medium: 1 year
# To avoid keeping shippable builds for over a year
long: 1 year
default:
default: 3 months
shortest: 7 days
short: 1 month
medium: 1 year
long: 1 year