Bug 185772

Summary: Teach package-root to package iOS sandbox profiles
Product: WebKit Reporter: Andy Estes <aestes>
Component: New BugsAssignee: Andy Estes <aestes>
Status: NEW ---    
Severity: Normal CC: achristensen, ap, bfulgham, dbates, ddkilzer, ews-watchlist, joepeck, mitz, simon.fraser
Priority: P2    
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
Patch
ews-watchlist: commit-queue-
Archive of layout-test-results from ews202 for win-future none

Description Andy Estes 2018-05-18 10:34:09 PDT
Teach package-root to package iOS sandbox profiles
Comment 1 Andy Estes 2018-05-18 10:37:21 PDT
Created attachment 340712 [details]
Patch
Comment 2 Alexey Proskuryakov 2018-05-18 11:49:54 PDT
I think that this is right for correctness tests and QA, but would not be acceptable for at least some of the perf tests.
Comment 3 Alexey Proskuryakov 2018-05-18 11:52:50 PDT
See also: rdar://problem/40233366
Comment 4 Andy Estes 2018-05-18 11:54:48 PDT
(In reply to Alexey Proskuryakov from comment #2)
> I think that this is right for correctness tests and QA, but would not be
> acceptable for at least some of the perf tests.

Sure, probably not. Are those tests run with roots generated by package-root? My understanding is that this is just a convenience script for engineering builds.
Comment 5 Alexey Proskuryakov 2018-05-18 12:20:44 PDT
Not sure, would need to grep through internal code to check (not near a Mac today). I think that this script is used in infrastructure, but maybe not where performance is important.
Comment 6 Andy Estes 2018-05-18 12:29:12 PDT
(In reply to Alexey Proskuryakov from comment #5)
> Not sure, would need to grep through internal code to check (not near a Mac
> today). I think that this script is used in infrastructure, but maybe not
> where performance is important.

The only hits for 'package-root' in Internal and OpenSource are ChangeLogs and one internal script that names an output file 'package-root.txt' (but isn't running package-root itself).
Comment 7 EWS Watchlist 2018-05-18 16:05:53 PDT
Comment on attachment 340712 [details]
Patch

Attachment 340712 [details] did not pass win-ews (win):
Output: http://webkit-queues.webkit.org/results/7726400

New failing tests:
http/tests/preload/onload_event.html
Comment 8 EWS Watchlist 2018-05-18 16:06:05 PDT
Created attachment 340753 [details]
Archive of layout-test-results from ews202 for win-future

The attached test failures were seen while running run-webkit-tests on the win-ews.
Bot: ews202  Port: win-future  Platform: CYGWIN_NT-6.1-2.9.0-0.318-5-3-x86_64-64bit
Comment 9 Joseph Pecoraro 2018-05-19 07:30:36 PDT
I believe package-root was originally intended for engineers. If any test infrastructure is using it, it could have its own variant but I don’t suspect that is the case.
Comment 10 Alexey Proskuryakov 2018-05-19 16:35:30 PDT
I'm fine with the idea of having this script package sandbox profiles.

The implementation seems a bit like a hack though - I would expect a "package" script to only operate on the build directory, never on source. Of course, sandbox profiles aren't currently going to the build directory, but maybe they should. In fact, package-root already copies everything in /usr.
Comment 11 Brent Fulgham 2018-05-19 17:02:06 PDT
(In reply to Alexey Proskuryakov from comment #10)
> I'm fine with the idea of having this script package sandbox profiles.
> 
> The implementation seems a bit like a hack though - I would expect a
> "package" script to only operate on the build directory, never on source. Of
> course, sandbox profiles aren't currently going to the build directory, but
> maybe they should. In fact, package-root already copies everything in /usr.

Maybe the sandbox profiles should be copied somewhere as part of the build process, just like we do with header files and resources?
Comment 12 Andy Estes 2018-05-21 10:21:36 PDT
(In reply to Brent Fulgham from comment #11)
> (In reply to Alexey Proskuryakov from comment #10)
> > I'm fine with the idea of having this script package sandbox profiles.
> > 
> > The implementation seems a bit like a hack though - I would expect a
> > "package" script to only operate on the build directory, never on source. Of
> > course, sandbox profiles aren't currently going to the build directory, but
> > maybe they should. In fact, package-root already copies everything in /usr.
> 
> Maybe the sandbox profiles should be copied somewhere as part of the build
> process, just like we do with header files and resources?

Sounds like a better plan. I'll do that.