4 This section lists and documents the available task kinds.
9 Builds are tasks that produce an installer or other output that can be run by
10 users or automated tests. This is more restrictive than most definitions of
11 "build" in a Mozilla context: it does not include tasks that run build-like
12 actions for static analysis or to produce instrumented artifacts.
17 Build architecture-independent GeckoView AAR (Android ARchive) files. This build-like tasks is an
18 artifact build (ARMv7, but this is arbitrary) that itself depends on arch-specific Android build
19 jobs. It fetches arch-specific AAR files, extracts arch-specific libraries and preference files,
20 and then assembles a multi-architecture "fat AAR". Downstream consumers are expected to use
21 per-ABI feature splits to produce arch-specific APKs.
23 If you want to run this task locally, you need to specify these environment variable:
24 - MOZ_ANDROID_FAT_AAR_ARCHITECTURES: must be a comma-separated list of architecture.
25 Eg: "armeabi-v7a,arm64-v8a,x86,x86_64".
26 - each of MOZ_ANDROID_FAT_AAR_ARM64_V8A, MOZ_ANDROID_FAT_AAR_ARMEABI_V7A,
27 MOZ_ANDROID_FAT_AAR_X86, MOZ_ANDROID_FAT_AAR_X86_64 must be a path relative to
33 Many builds must be signed. The build-signing task takes the unsigned `build`
34 kind artifacts and passes them through signingscriptworker to a signing server
35 and returns signed results.
40 Mac signing without notarization.
42 Uses a self-signed certificate on level 1 environments.
44 Shippable downstream tasks should use artifacts from build-mac-notarization.
46 build-mac-notarization
47 ----------------------
49 Mac notarization on signingscript (linux) using rcodesign.
51 Only available in production environments, as Apple doesn't offer a test
52 endpoint for notarizing apps.
54 Downstream tasks switch to build-mac-signing in non-shippable builds or level 1
60 This kind performs an artifact build: one based on precompiled binaries
61 discovered via the TaskCluster index. This task verifies that such builds
62 continue to work correctly.
67 This kind performs a standalone bootstrap of a Firefox build from various system environments.
72 Hazard builds are similar to "regular' builds, but use a compiler extension to
73 extract a bunch of data from the build and then analyze that data looking for
79 The l10n kind takes the last published nightly build, and generates localized builds
80 from it. You can read more about how to trigger these on the `wiki
81 <https://wiki.mozilla.org/ReleaseEngineering/TryServer#Desktop_l10n_jobs_.28on_Taskcluster.29>`_.
86 The nightly l10n kind repacks a specific nightly build (from the same source code)
87 in order to provide localized versions of the same source.
89 shippable-l10n-signing
90 ----------------------
92 The shippable l10n signing kind takes artifacts from the shippable-l10n kind and
93 passes them to signing servers to have their contents signed appropriately, based
94 on an appropriate signing format. One signing job is created for each shippable-l10n
95 job (usually chunked).
97 shippable-l10n-mac-signing
98 --------------------------
100 Mac signing without notarization.
102 Uses a self-signed certificate on level 1 environments.
104 Shippable downstream tasks should use artifacts from build-mac-notarization.
106 shippable-l10n-mac-notarization
107 -------------------------------
109 Mac notarization on signingscript (linux) using rcodesign.
111 Only available in production environments, as Apple doesn't offer a test
112 endpoint for notarizing apps.
114 Downstream tasks switch to build-mac-signing in non-shippable builds or level 1
120 Source-tests are tasks that run directly from the Gecko source. This can include linting,
121 unit tests, source-code analysis, or measurement work. While source-test tasks run from
122 a source checkout, it is still possible for them to depend on a build artifact, though
128 Publish issues found by source-test tasks on Phabricator.
129 This is a part of Release Management code review Bot.
134 Upload-symbols tasks run after builds and upload the symbols files generated by
135 build tasks to Socorro for later use in crash analysis.
140 Upload-symbols-dummy ensures both x64 and macosx64 tasks run for nightlies and releases.
142 upload-generated-sources
143 ------------------------
145 Upload-generated-sources tasks run after builds and upload source files that were generated as part of the build process to an s3 bucket for later use in links from crash reports or when debugging shipped builds.
147 upload-generated-sources-dummy
148 ------------------------------
150 Upload-generated-sources-dummy ensures both x64 and macosx64 tasks run for nightlies and releases.
155 Valgrind tasks produce builds instrumented by valgrind.
160 Searchfox builds generate C++ index data for Searchfox.
162 static-analysis-autotest
163 ------------------------
165 Static analysis autotest utility in order to be sure that there is no regression
166 when upgrading utilities that impact static-analysis.
171 Toolchain builds create the compiler toolchains used to build Firefox. These
172 will eventually be dependencies of the builds themselves, but for the moment
173 are run manually via try pushes and the results uploaded to tooltool.
178 Spidermonkey tasks check out the full gecko source tree, then compile only the
179 spidermonkey portion. Each task runs specific tests after the build.
184 See the :doc:`test kind documentation <kinds/test>` for more info.
195 Tasks of the ``docker-image`` kind build the Docker images in which other
198 The tasks to generate each docker image have predictable labels:
199 ``docker-image-<name>``.
201 Docker images are built from subdirectories of ``taskcluster/docker``, using
202 ``docker build``. There is currently no capability for one Docker image to
203 depend on another in-tree docker image, without uploading the latter to a
209 Balrog tasks are responsible for submitting metadata to our update server (Balrog).
210 They are typically downstream of a beetmover job that moves signed MARs somewhere
211 (eg: beetmover and beetmover-l10n for releases, beetmover-repackage for nightlies).
216 Beetmover, takes specific artifacts, "Beets", and pushes them to a location outside
217 of Taskcluster's task artifacts, (archive.mozilla.org as one place) and in the
218 process determines the final location and a "pretty" name (versioned product name)
223 Beetmover L10n, takes specific artifacts, "Beets", and pushes them to a location outside
224 of Taskcluster's task artifacts, (archive.mozilla.org as one place) and in the
225 process determines the final location and a "pretty" name (versioned product name)
226 This separate kind uses logic specific to localized artifacts, such as including
227 the language in the final artifact names.
232 Beetmover-repackage is beetmover but for tasks that need an intermediate step
233 between signing and packaging, such as OSX. For more details see the definitions
234 of the Beetmover kind above and the repackage kind below.
236 release-beetmover-push-to-release
237 ---------------------------------
239 release-beetmover-push-to-release publishes promoted releases from the
240 candidates directory to the release directory. This is part of release
245 Beetmover-source publishes Ubuntu's snap. This is part of release promotion.
249 Beetmover-source publishes release source. This is part of release promotion.
253 Beetmover-geckoview publishes the Android library called "geckoview".
257 Beetmover-apt publishes Linux .deb packages from the Mozilla archive to our APT repositories.
261 condprof creates and updates realistic profiles.
263 release-source-checksums-signing
264 --------------------------------
265 release-source-checksums-signing take as input the checksums file generated by
266 source-related beetmover task and sign it via the signing scriptworkers.
267 Returns the same file signed and additional detached signature.
271 Beetmover, takes specific artifact checksums and pushes it to a location outside
272 of Taskcluster's task artifacts (archive.mozilla.org as one place) and in the
273 process determines the final location and "pretty" names it (version product name)
275 release-beetmover-source-checksums
276 ----------------------------------
277 Beetmover, takes source specific artifact checksums and pushes it to a location outside
278 of Taskcluster's task artifacts (archive.mozilla.org as one place) and in the
279 process determines the final location and "pretty" names it (version product name)
283 Runs performance tests using mozperftest.
285 release-balrog-submit-toplevel
286 ------------------------------
287 Toplevel tasks are responsible for submitting metadata to Balrog that is not specific to any
288 particular platform+locale. For example: fileUrl templates, versions, and platform aliases.
290 Toplevel tasks are also responsible for updating test channel rules to point at the Release
293 release-secondary-balrog-submit-toplevel
294 ----------------------------------------
295 Performs the same function as `release-balrog-submit-toplevel`, but against the beta channel
298 release-balrog-scheduling
299 -------------------------
300 Schedules a Release for shipping in Balrog. If a `release_eta` was provided when starting the Release,
301 it will be scheduled to go live at that day and time.
303 release-secondary-balrog-scheduling
304 -----------------------------------
305 Performs the same function as `release-balrog-scheduling`, except for the beta channel as part of RC
308 release-binary-transparency
309 ---------------------------
310 Binary transparency creates a publicly verifiable log of binary shas for downstream
311 release auditing. https://wiki.mozilla.org/Security/Binary_Transparency
313 release-snap-repackage
314 ----------------------
315 Generate an installer using Ubuntu's Snap format.
317 release-flatpak-repackage
318 -------------------------
319 Generate an installer using Flathub's Flatpak format.
323 Pushes Flatpak repackage on Flathub
325 release-secondary-flatpak-push
326 ------------------------------
327 Performs the same function as `release-flatpak-push`, except for the beta channel as part of RC
330 release-notify-av-announce
331 --------------------------
332 Notify anti-virus vendors when a release is likely shipping.
336 Notify when a release has been pushed to CDNs.
340 Notify when a release has been shipped.
342 release-secondary-notify-ship
343 -----------------------------
344 Notify when an RC release has been shipped to the beta channel.
346 release-notify-promote
347 ----------------------
348 Notify when a release has been promoted.
350 release-notify-started
351 ----------------------
352 Notify when a release has been started.
356 Submits bouncer information for releases.
358 release-mark-as-shipped
359 -----------------------
360 Marks releases as shipped in Ship-It v1
362 release-bouncer-aliases
363 -----------------------
364 Update Bouncer's (download.mozilla.org) "latest" aliases.
368 Checks Bouncer (download.mozilla.org) uptake.
372 Updates nightly bouncer locations for version bump.
374 release-bouncer-check
375 ---------------------
376 Checks Bouncer (download.mozilla.org) uptake as part of the release tasks.
378 release-generate-checksums
379 --------------------------
380 Generate the per-release checksums along with the summaries
382 release-generate-checksums-signing
383 ----------------------------------
384 Sign the pre-release checksums produced by the above task
386 release-generate-checksums-beetmover
387 ------------------------------------
388 Submit to S3 the artifacts produced by the release-checksums task and its signing counterpart.
392 Verifies the contents and package of release update MARs.
394 release-secondary-final-verify
395 ------------------------------
396 Verifies the contents and package of release update MARs for RC releases.
398 release-push-langpacks
399 -------------------------------
400 Publishes language packs onto addons.mozilla.org.
402 release-beetmover-signed-langpacks
403 ----------------------------------
404 Publishes signed langpacks to archive.mozilla.org
406 release-beetmover-signed-langpacks-checksums
407 --------------------------------------------
408 Publishes signed langpacks to archive.mozilla.org
410 release-update-verify
411 ---------------------
412 Verifies the contents and package of release update MARs.
413 release-secondary-update-verify
414 -------------------------------
415 Verifies the contents and package of release update MARs.
417 release-update-verify-next
418 --------------------------
419 Verifies the contents and package of release and updare MARs from the previous ESR release.
421 release-update-verify-config
422 ----------------------------
423 Creates configs for release-update-verify tasks
425 release-secondary-update-verify-config
426 --------------------------------------
427 Creates configs for release-secondary-update-verify tasks
429 release-update-verify-config-next
430 ---------------------------------
431 Creates configs for release-update-verify-next tasks
433 release-updates-builder
434 -----------------------
435 Top level Balrog blob submission & patcher/update verify config updates.
439 Bumps to the next version.
443 Generates source for the release
445 release-source-signing
446 ----------------------
447 Signs source for the release
449 release-partner-repack
450 ----------------------
451 Generates customized versions of releases for partners.
453 release-partner-attribution
454 ---------------------------
455 Generates attributed versions of releases for partners.
457 release-partner-repack-chunking-dummy
458 -------------------------------------
459 Chunks the partner repacks by locale.
461 release-partner-repack-signing
462 ------------------------------
463 Internal signing of partner repacks.
465 release-partner-repack-mac-signing
466 ----------------------------------
468 Mac signing without notarization.
470 Uses a self-signed certificate on level 1 environments.
472 Shippable downstream tasks should use artifacts from build-mac-notarization.
474 release-partner-repack-mac-notarization
475 ---------------------------------------
477 Mac notarization on signingscript (linux) using rcodesign.
479 Only available in production environments, as Apple doesn't offer a test
480 endpoint for notarizing apps.
482 Downstream tasks switch to build-mac-signing in non-shippable builds or level 1
485 release-partner-repack-repackage
486 --------------------------------
487 Repackaging of partner repacks.
489 release-partner-repack-repackage-signing
490 ----------------------------------------
491 External signing of partner repacks.
493 release-partner-repack-beetmover
494 --------------------------------
495 Moves the partner repacks to S3 buckets.
497 release-partner-attribution-beetmover
498 -------------------------------------
499 Moves the partner attributions to S3 buckets.
501 release-partner-repack-bouncer-sub
502 ----------------------------------
503 Sets up bouncer products for partners.
505 release-early-tagging
506 ---------------------
507 Utilises treescript to perform tagging that should happen near the start of a release.
509 release-eme-free-repack
510 -----------------------
511 Generates customized versions of releases for eme-free repacks.
513 release-eme-free-repack-signing
514 -------------------------------
515 Internal signing of eme-free repacks
517 release-eme-free-repack-repackage
518 ---------------------------------
519 Repackaging of eme-free repacks.
521 release-eme-free-repack-repackage-signing
522 -----------------------------------------
523 External signing of eme-free repacks.
525 release-eme-free-repack-beetmover
526 ---------------------------------
527 Moves the eme-free repacks to S3 buckets.
529 release-eme-free-repack-beetmover-checksums
530 -------------------------------------------
531 Moves the beetmover checksum for eme-free repacks to S3 buckets.
533 release-eme-free-repack-mac-signing
534 -----------------------------------
536 Mac signing without notarization.
538 Uses a self-signed certificate on level 1 environments.
540 Shippable downstream tasks should use artifacts from build-mac-notarization.
542 release-eme-free-repack-mac-notarization
543 ----------------------------------------
545 Mac notarization on signingscript (linux) using rcodesign.
547 Only available in production environments, as Apple doesn't offer a test
548 endpoint for notarizing apps.
550 Downstream tasks switch to build-mac-signing in non-shippable builds or level 1
555 Repackage tasks take a signed output and package them up into something suitable
556 for shipping to our users. For example, on OSX we return a tarball as the signed output
557 and this task would package that up as an Apple Disk Image (.dmg)
561 Repackage-L10n is a ```Repackage``` task split up to be suitable for use after l10n repacks.
565 These repackage tasks take signed Firefox Linux binaries and puts them in Debian packages.
569 These repackage tasks take the signed langpacks (.xpi) binaries and puts them in Debian packages.
573 Repackage-signing take the repackaged installers (windows) and signs them.
575 repackage-signing-l10n
576 ----------------------
577 Repackage-signing-l10n take the repackaged installers (windows) and signs them for localized versions.
581 Mar-signing takes the complete update MARs and signs them.
585 Mar-signing-l10n takes the complete update MARs and signs them for localized versions.
587 mar-signing-autograph-stage
588 ---------------------------
589 These tasks are only to test autograph-stage, when the autograph team asks for their staging environment to be tested.
593 Repackage-msi takes the signed full installer and produces an msi installer (that wraps the full installer)
594 Using the ```./mach repackage``` command
596 repackage-signing-msi
597 ---------------------
598 Repackage-signing-msi takes the repackaged msi installers and signs them.
602 Repackage-msix takes a (possibly unsigned) package and produces a Windows MSIX package containing no langpacks using the
603 ```./mach repackage``` command.
605 These tasks are supposed intended for rapid iteration in ```try```.
607 repackage-shippable-l10n-msix
608 -----------------------------
609 Repackage-msix takes a signed package and a list of signed langpacks and produces a Windows MSIX package using the
610 ```./mach repackage``` command.
612 The signed langpacks are produced on Linux, since langpacks are platform agnostic.
614 These tasks are for releases; they are complete, and therefore slower, and not intended for rapid iteration in
617 repackage-signing-msix
618 ----------------------
619 Repackage-signing-msix takes Windows MSIX packages produced in ```repackage-msix``` and signs them.
621 repackage-signing-shippable-l10n-msix
622 -------------------------------------
623 Repackage-signing-shippable-l10n-msix takes Windows MSIX packages produced in
624 ```repackage-signing-shippable-l10n-msix``` and signs them.
628 Pushes msix repackage to the Microsoft Store.
632 Repo-Update tasks are tasks that perform some action on the project repo itself,
633 in order to update its state in some way.
637 Partials takes the complete.mar files produced in previous tasks and generates partial
638 updates between previous nightly releases and the new one. Requires a release_history
639 in the parameters. See ``mach release-history`` if doing this manually.
643 Partials-signing takes the partial updates produced in Partials and signs them.
647 Dummy tasks to consolidate balrog dependencies to avoid taskcluster limits on number of dependencies per task.
651 Dummy tasks to consolidate beetmover dependencies to avoid taskcluster limits on number of dependencies per task.
653 post-beetmover-checksums-dummy
654 ------------------------------
655 Dummy tasks to consolidate beetmover-checksums dependencies to avoid taskcluster limits on number of dependencies per task.
657 post-beetmover-components-dummy
658 -------------------------------
659 Dummy tasks to consolidate beetmover-components dependencies to avoid taskcluster limits on number of dependencies per task.
663 Dummy tasks to consolidate language pack beetmover dependencies to avoid taskcluster limits on number of dependencies per task.
665 post-update-verify-dummy
666 ------------------------
667 Dummy tasks to consolidate update verify dependencies to avoid taskcluster limits on number of dependencies per task.
671 Tasks that obtain something from a remote service and re-expose it as a
672 task artifact. These tasks are used to effectively cache and re-host
673 remote content so it is reliably and deterministically available.
677 Tasks used to build packages for use in docker images.
681 Tasks used to compare pairs of Firefox builds using https://diffoscope.org/.
682 As of writing, this is mainly meant to be used in try builds, by editing
683 taskcluster/ci/diffoscope/kind.yml for your needs.
687 Tasks used to build/package add-ons.
691 Tasks used to build the openh264 plugin.
695 Signing for the openh264 plugin.
699 Tasks used to do testing of WebRender standalone (without gecko). The
700 WebRender code lives in gfx/wr and has its own testing infrastructure.
704 Tasks used to do synchronize parts of Gecko that have downstream GitHub
709 Tasks that generate builds with PGO instrumentation enabled. This is an
710 intermediate build that can be used to generate profiling information for a
711 final PGO build. This is the 1st stage of the full 3-step PGO process.
715 Tasks that take a build configured for PGO and run the binary against a sample
716 set to generate profile data. This is the 2nd stage of the full 3-step PGO
721 Signing for geckodriver binary.
723 geckodriver-mac-notarization
724 ----------------------------
725 Apple notarization for mac geckodriver binary.
729 A shipitscript task that does the following:
731 1. Checks if automated releases are disabled
732 2. Checks if the changes between the current revision and the previous releases
733 revision are considered "worthwhile" for a new release.
734 3. Triggers the release via ship-it, which will then create an action task.
738 Cron-driven tasks that bump l10n-changesets files in-tree, using data from the l10n dashboard.
742 Hook-driven tasks that automate "Merge Day" tasks during the release cycle.
746 Interact with Sentry, such as by publishing new project releases.
750 Generate missing macOS and windows system symbols from crash reports.
752 system-symbols-upload
753 ---------------------
754 Upload macOS and windows system symbols to tecken.
756 system-symbols-reprocess
757 ------------------------
758 Call Crash-Stats API to reprocess after symbols upload.
762 Push tasks to try to test new scriptworker deployments.
766 Check for updates to (supported) third party libraries, and manage their lifecycle.
771 Performs fuzzing smoke tests
776 Runs Firefox for a short period of time to see if it crashes
781 Compiles a set of en-US strings from all shipping release trains and pushes to
782 the quarantine strings repo.
787 Visual metrics computation of desktop Firefox startup. The performance team
788 monitors this task to watch for regressions in Firefox startup performance.
791 ---------------------
792 Collects data about the transition to ECMAScript Modules from JSMs.
796 Injects attribution information into en-US installers.
800 Injects attribution information into localized installers.
804 Perform a Firefox Snap build using upstream tooling
808 Test a Firefox Snap built using upstream tooling
812 Trigger a CI decision task on comm-central when conditions are met. Currently
813 used for verifying third party Rust code is consistent.
815 external-gradle-dependencies
816 ----------------------------
817 External Gradle dependencies toolchain task.
821 Build android-components.
825 Build Focus, Klar, and Fenix android app bundles.
829 Build Focus, Klar, and Fenix apks.
831 build-samples-browser
832 ---------------------
833 Build android samples browser.
837 Sign android-components.
841 Sign Focus, Klar, and Fenix android app bundles.
845 Sign Focus, Klar, and Fenix apks.
849 Test android-components
853 Test Focus, Klar, and Fenix apks.
857 User interface tests for Focus, Klar, and Fenix apks.
861 Browsertime tests for android.
865 Startup test for android.
869 Gating kind to wait for all android signing tasks.
873 A beetmover task for android components.
875 beetmover-android-app
876 ---------------------
877 A beetmover task for android APKs and AABs.
881 Push Focus and Fenix AABs to Google Play.
885 Push Focus and Fenix AABs to Google Play.
889 Version bump for mobile/android/version.txt.