On 8/26/22 09:22, Stephen Smoogen wrote: > On Thu, 25 Aug 2022 at 03:58, Miro Hrončok <mhroncok@xxxxxxxxxx> wrote: > >> Hello folks, >> >> during our Nest FESCo session, we've talked about enabling Koschei [1] for >> all >> packages automatically. >> >> There seem to be a consensus by FESCo members, that it would be a good >> thing. >> >> What would it take? >> >> 1) Koji resources >> >> I think we can try to enable this and see if it burns. I think ti won't. >> >> > It will, but we will deal with it. Koschei builds have had to be throttled > down multiple times in the past due to the fact that all those builds > working or failed take up some disk space on builders for a bit. Get a lot > of churn and koschei builds and you end up with builders without disk space > and various developers who are saying yes! in the past yelling about not > being able to do their real work :). We will just have to figure out how to > throttle things down safely to make it work. The current > koji+all-other-stuff is a batch operating system (line up the tasks and do > them until they are done) which we treat like a time-share which only holds > when things are 'low' usage. > > Long term I think we are going to need to figure out ways to get the fedora > buildsystem safely and securely into various clouds to allow for many more > builders and resources. [This isn't just koji, but the assumptions that all > the other tools in the fedora system from the 'dashboard' to the > koji+bodhi+osbs+odcs+pungi+etc+etc build system that all the resources are > close and local in a 'sealed' firewalled off space. ] How bursty is the builder workload? Also, if you go this route, I strongly recommend enforcing CA pinning (not public key pinning!) to the appropriate Google/Amazon roots. -- Sincerely, Demi Marie Obenour (she/her/hers) _______________________________________________ devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue