icecat: add release icecat-140.8.0-2 for aramo

icecat/taskcluster/docker/debian-raw/Dockerfile

@@ -69,7 +69,16 @@ RUN apt-get update && \
       apt-get install python3-minimal libpython3-stdlib; \
       echo 'dir::bin::methods::http "/usr/local/sbin/snapshot-hack.py";' >> /etc/apt/apt.conf.d/99taskcluster; \
     fi && \
-    apt-get dist-upgrade && \
     apt-get install \
       apt-transport-https \
-      ca-certificates
+      ca-certificates && \
+    if [ -n "$SNAPSHOT" -a -f /etc/apt/sources.list.d/ubuntu.sources ]; then \
+      echo "APT::Snapshot \"$SNAPSHOT\";" > /etc/apt/apt.conf.d/99snapshot && \
+      ( echo 'Package: *'; \
+        echo 'Pin: origin "snapshot.ubuntu.com"'; \
+        echo 'Pin-Priority: 1001'; \
+      ) > /etc/apt/preferences.d/90snapshot && \
+      downgrades=--allow-downgrades && \
+      apt-get update; fi && \
+    apt-get dist-upgrade ${downgrades} && \
+    rm -f /etc/apt/preferences.d/90snapshot

icecat/taskcluster/docker/periodic-updates/scripts/periodic_file_updates.sh

@@ -13,7 +13,7 @@ Usage: $(basename "$0") [-p product]
            # Use archive.m.o instead of the taskcluster index to get xpcshell
            [--use-ftp-builds]
            # Use git rather than hg. Using git does not currently support cloning (use
-           # --skip-repo as well).
+           # --skip-clone as well).
            [--use-git]
            # One (or more) of the following actions must be specified.
            --hsts | --hpkp | --remote-settings | --suffix-list | --mobile-experiments | --ct-logs
@@ -407,9 +407,18 @@ function compare_remote_settings_files {
 
   # 1. List remote settings collections from server.
   echo "INFO: fetch remote settings list from server"
-  ${WGET} -qO- "${REMOTE_SETTINGS_SERVER}/buckets/monitor/collections/changes/records" |\
-    ${JQ} -r '.data[] | .bucket+"/"+.collection+"/"+(.last_modified|tostring)' |\
-    # 2. For each entry ${bucket, collection, last_modified}
+  changes_lines="$(
+    ${WGET} -O- \
+      "${REMOTE_SETTINGS_SERVER}/buckets/monitor/collections/changes/changeset?_expected=0" |
+        ${JQ} -r '.changes[] | .bucket+"/"+.collection+"/"+(.last_modified|tostring)'
+  )"
+  line_count="$(printf '%s\n' "${changes_lines}" | wc -l | xargs)"
+  if [ "${line_count}" -le 1 ]; then
+    echo "ERROR: no changes pulled from server" >&2
+    exit 15
+  fi
+
+  # 2. For each entry ${bucket, collection, last_modified}
   while IFS="/" read -r bucket collection last_modified; do
 
     # 3. Check to see if the collection exists in the dump directory of the repository,
@@ -467,7 +476,7 @@ function compare_remote_settings_files {
     else
       ${HG} --cwd "${TOPSRCDIR}" purge services/settings/dumps/main/search-config-icons
     fi
-  done
+  done <<< "${changes_lines}"
 
   echo "INFO: diffing old/new remote settings dumps..."
   create_repo_diff "${REMOTE_SETTINGS_DIR}" "${REMOTE_SETTINGS_DIFF_ARTIFACT}"

icecat/taskcluster/docker/recipes/ubuntu2404-test-system-setup-base.sh

@@ -7,14 +7,6 @@ test "$(whoami)" == 'root'
 # We do want to install recommended packages.
 sed -i /APT::Install-Recommends/d /etc/apt/apt.conf.d/99taskcluster
 
-apt-get update && apt-get install ubuntu-dbgsym-keyring
-
-cat > /etc/apt/sources.list.d/ddebs.list <<EOF
-deb http://ddebs.ubuntu.com noble main restricted universe multiverse
-deb http://ddebs.ubuntu.com noble-updates main restricted universe multiverse
-deb http://ddebs.ubuntu.com noble-proposed main restricted universe multiverse
-EOF
-
 # To speed up docker image build times as well as number of network/disk I/O
 # build a list of packages to be installed and call it in one go.
 apt_packages=()
@@ -106,15 +98,16 @@ apt_packages+=('x11-xserver-utils')
 # Build a list of packages to install from the multiverse repo.
 apt_packages+=('ubuntu-restricted-extras')
 
-# libgallium debug symbols
-apt_packages+=('mesa-libgallium-dbgsym')
-
 # APT update takes very long on Ubuntu. Run it at the last possible minute.
 apt-get update
 
 # Also force the cleanup after installation of packages to reduce image size.
 apt-get install --allow-downgrades "${apt_packages[@]}"
 
+# libgallium debug symbols
+wget -O /tmp/mesa-libgallium-dbgsym.ddeb "https://launchpad.net/ubuntu/+archive/primary/+files/mesa-libgallium-dbgsym_24.2.8-1ubuntu1~24.04.1_$ARCH.ddeb"
+dpkg -i /tmp/mesa-libgallium-dbgsym.ddeb
+
 # gsd-power can't start without logind, but it's marked as required in the
 # gnome-session config; remove it so the session doesn't start with the fail
 # whale
@@ -129,13 +122,13 @@ if [[ "$ARCH" == "amd64" ]]; then
     apt_packages=()
     apt_packages+=('libavcodec-extra60:i386')
     apt_packages+=('libpulse0:i386')
-    apt_packages+=('libxt6:i386')
+    apt_packages+=('libxt6t64:i386')
     apt_packages+=('libxtst6:i386')
     apt_packages+=('libsecret-1-0:i386')
-    apt_packages+=('libgtk-3-0:i386')
+    apt_packages+=('libgtk-3-0t64:i386')
     apt_packages+=('libx11-xcb1:i386')
     apt_packages+=('libxcb1:i386')
-    apt_packages+=('libasound2:i386')
+    apt_packages+=('libasound2t64:i386')
 
     apt-get install --allow-downgrades "${apt_packages[@]}"
 fi

icecat/taskcluster/docker/snap-coreXX-build/system-setup.sh

@@ -10,6 +10,9 @@ if [ "${SNAP_BASE}" != "core24" ]; then
     exit 0
 fi;
 
+# Remove snapshot.ubuntu.com configuration for now.
+rm -f /etc/apt/apt.conf.d/99snapshot
+
 # GPG: we need to do it here otherwhise snapcraft tries to do it as user and fails
 CROSS_GPG_KEYID="F6ECB3762474EDA9D21B7022871920D1991BC93C"
 KEYRING_FILENAME="/etc/apt/keyrings/craft-$(echo "${CROSS_GPG_KEYID}" | rev | cut -c 1-8 | rev | tr -d '\n').gpg"