On Fri, Mar 07, 2025 at 12:56:21PM -0800, Brendan Conoboy wrote: > > A few weeks back I started a discussion about accidental secrets, > using Konflux as an example. Now that FOSDEM has come and gone, I’d > like to take the topic further. If you’re not familiar with it, > in its own words, Konflux-ci “is an open source, cloud-native > software factory focused on software supply chain security”, but for > the sake of this discussion, it’s probably better to think of it as > “the aspirational replacement for the myriad build and CI systems > Red Hat uses in all its products”. Aspirational is key- we aren’t > there yet… and it’s going to take a while to get there. This doesn't really help with the "what". I work at Red Hat and still have no idea what Konflux actually is. For Koji I can take a look at the web interface: https://koji.fedoraproject.org/koji/ and kind of get the gist of what's going on. Or to be a bit fairer as many here are already familiar with Koji, SUSE's build system web interface: https://build.opensuse.org/ Where's the web interface of Konflux? Where can I explore what it's doing / building right now? > Despite many months of development, rpm support is just now being > plumbed into the system (containers happened first). In fact, at > this year’s CentOS Connect had Mike McLean, lead developer of koji, > presented “Building RPMs with Konflux > > ”. In his talk he related some of the details about the interim rpm > approach, which injects builds into the koji after a build is > complete. This seems weird, but it makes sense: When your goal is to > eventually replace the full pipeline, but it’s going to take a long > time, you have to write some throw-away code that bridges new to > old. I didn't watch his talk, but this all sounds very vague. And that the fact that it's "container first" and an internal project first is worrying too. How does it build containers without starting with RPMs? Where do those RPMs come from? TL;DR, I don't know what this is. Rich. -- Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones Read my programming and virtualization blog: http://rwmj.wordpress.com Fedora Windows cross-compiler. Compile Windows programs, test, and build Windows installers. Over 100 libraries supported. http://fedoraproject.org/wiki/MinGW -- _______________________________________________ devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue