Re: Let's enable Koschei for all packages automatically

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 8/26/22 09:22, Stephen Smoogen wrote:
> On Thu, 25 Aug 2022 at 03:58, Miro Hrončok <mhroncok@xxxxxxxxxx> wrote:
> 
>> Hello folks,
>>
>> during our Nest FESCo session, we've talked about enabling Koschei [1] for
>> all
>> packages automatically.
>>
>> There seem to be a consensus by FESCo members, that it would be a good
>> thing.
>>
>> What would it take?
>>
>> 1) Koji resources
>>
>> I think we can try to enable this and see if it burns. I think ti won't.
>>
>>
> It will, but we will deal with it. Koschei builds have had to be throttled
> down multiple times in the past due to the fact that all those builds
> working or failed take up some disk space on builders for a bit. Get a lot
> of churn and koschei builds and you end up with builders without disk space
> and various developers who are saying yes! in the past yelling about not
> being able to do their real work :). We will just have to figure out how to
> throttle things down safely to make it work. The current
> koji+all-other-stuff is a batch operating system (line up the tasks and do
> them until they are done) which we treat like a time-share which only holds
> when things are 'low' usage.
> 
> Long term I think we are going to need to figure out ways to get the fedora
> buildsystem safely and securely into various clouds to allow for many more
> builders and resources. [This isn't just koji, but the assumptions that all
> the other tools in the fedora system from the 'dashboard' to the
> koji+bodhi+osbs+odcs+pungi+etc+etc build system that all the resources are
> close and local in a 'sealed' firewalled off space. ]

How bursty is the builder workload?  Also, if you go this route, I strongly
recommend enforcing CA pinning (not public key pinning!) to the appropriate
Google/Amazon roots.
-- 
Sincerely,
Demi Marie Obenour (she/her/hers)
_______________________________________________
devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue




[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Users]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]

  Powered by Linux