Updating the Bazel prebuilts in AOSP
Instructions
First, decide which version of Bazel you need.
- A Bazel release (e.g. Bazel 3.7.0)
- A Bazel nightly
- A Bazel per-commit build
Whichever of these you use, you will need to use official nojdk x86-64 versions of Bazel, for Linux and macOS (Darwin).
Run the release_bazel.py
script in the root repository to download
and verify the binaries from the trusted Bazel CI pipeline:
python /prebuilts/bazel/common/release_bazel.py --commit <commit>
To get the commit hash for builds, see the [Bazel releases], [Bazel nightlies] or [Bazel per-commit builds] sections below.
this will run update.sh
which will also:
- Download the remote_java_tools prebuilts corresponding
to the downloaded Bazel binary
- verify that the downloaded binary has the correct SHA-256
checksum as provided from Bazel CI metadata.
Once you have the binaries, you will need to create and send up to three CLs, to update the Linux, macOS, and platform-agnostic prebuilts that live in separate Git repositories, i.e.
- https://android.googlesource.com/platform/prebuilts/bazel/linux-x86_64/
- https://android.googlesource.com/platform/prebuilts/bazel/darwin-x86_64/
- https://android.googlesource.com/platform/prebuilts/bazel/common/
The update script does not automatically create CLs, so you need to create them manually. In each CL description, mention the testing you did, which should at least include:
- For release builds only: Verifying the file signature, e.g.
gpg --import bazel-release.pub.gpg
- Taken from https://bazel.build/bazel-release.pub.gpg
gpg --verify bazel_nojdk-<commit>-linux-x86_64.sig
- It should say "Good signature from Bazel Developer ..."
- Verifying that Bazel starts, on Linux and on macOS, e.g.
source build/envsetup.sh
bazel info
Ensure that the CLs are set to the same Gerrit topic so they are submitted together.
Obtaining Bazel binaries
The update.sh
script automates downloading Bazel binaries. The next sections
describe how the different Bazel binaries (release, nightly, per-commit) can be
manually downloaded from the Bazel CI.
Bazel releases
The commit hash for linux and darwin nojdk x86-64 binaries are available from https://github.com/bazelbuild/bazel/releases
Bazel nightlies
The commit hash and urls for linux and macOS nojdk x86-64 binaries are available in https://storage.googleapis.com/bazel-builds/metadata/latest.json
Bazel per-commit builds
You need to know the GitHub commit that contains your change, e.g. https://github.com/bazelbuild/bazel/commit/364a867df255c57c8edc4a8aae8f78cb54900a54
And the linux and macOS nojdk x86-64 binaries are available from:
https://storage.googleapis.com/bazel-builds/metadata/<commit>.json
- e.g. https://storage.googleapis.com/bazel-builds/metadata/364a867df255c57c8edc4a8aae8f78cb54900a54.json