| 4 Jan 2025 |
Gaétan Lepage | For instance, if some people like liberodark want to "donate" their system to nix-community so that they can be used as builders while still physically keeping the hardware. Would this be feasible ? | 00:15:01 |
zowoq | Maybe? Really depends on what we'd use it for. | 00:19:43 |
purepani | In reply to @glepage:matrix.org For instance, if some people like liberodark want to "donate" their system to nix-community so that they can be used as builders while still physically keeping the hardware. Would this be feasible ? What stops them from being a jia tan and replacing their builds with malicious packages? | 00:20:00 |
emily | the community builders are not trusted for anything | 00:20:13 |
emily | AIUI the offer is for a free x86 box comparable to the current x86 builder, which seems good if it would free up enough resources to pay for a replacement for the dead AArch64 community builder | 00:20:34 |
emily | (but I guess €50 isn't quite enough for that) | 00:20:39 |
Gaétan Lepage | In reply to @zowoq:matrix.org Maybe? Really depends on what we'd use it for. I was thinking about using those as non-critical remote builders (not for CI) | 00:22:36 |
Gaétan Lepage | In reply to @purepani:matrix.org What stops them from being a jia tan and replacing their builds with malicious packages? Well, nothing I guess. But anyway, it is clearly stated that the nix-community builders should not be trusted, so it's not changing our threat model that much I guess. | 00:23:45 |
zowoq | Downtime may be an issue if the box doesn't have out of band kvm/ipmi. | 00:24:50 |
liberodark | Yep KVM & IPMI is not available. | 00:25:37 |
liberodark | But this can be the case with HA.
But it is not the same service. | 00:26:43 |
liberodark | In my case I propose to provide a machine and this for free to help.
The hosting cost is 25€ per server.
Since we have a dedicated 10 Gb line.
These are mainly costs for electricity more than anything else.
For my part I am only proposing if it can help. | 00:29:06 |
liberodark | * In my case I propose to provide a machine and this for free to help.
The hosting cost is 25€ per server.
Since we have a dedicated 10 Gb lines.
These are mainly costs for electricity more than anything else.
For my part I am only proposing if it can help. | 00:29:46 |
liberodark | For my part, it was during a discussion with Gaétan Lepage that I heard about a need for a builder. Hence the fact that I came to offer my help on the subject. | 00:30:51 |
liberodark | * Yep KVM & IPMI are not available. | 00:31:32 |
liberodark | * But it can be the case with HA.
But it is not the same service. | 00:32:02 |
liberodark | * In my case I propose to provide a machine for free to help.
The hosting cost is 25€ per server.
Since we have dedicated 10 Gb lines.
Main costs are for electricity more than anything else.
On my side, i am only proposing if it can help. | 00:35:18 |
liberodark | * It was during a discussion with Gaétan Lepage that I heard about a need for a builder. Hence the fact that I came to offer my help on the subject. | 00:35:52 |
purepani | ~~just for clarity i was not accusing you of being malicious haha~~ | 00:36:35 |
purepani | just for clarity i was not accusing you of being malicious haha | 00:37:14 |
liberodark | No worries I totally agree with what you say and I understand your concern.
But my concern is a drop in the quality of contributors because they would not have the adequate tools to work.
| 00:37:54 |
emily | did you say you might be able to make AArch64 happen? I think a replacement Ampere box would definitely be the most helpful thing for contributors right now | 00:39:54 |
emily | one because 80 cores is just really convenient for testing out very large builds (I preferred it over the x86 box for this reason), but also because few people have aarch64-linux hardware powerful enough to do substantial builds at all | 00:40:22 |
emily | we're already seeing e.g. not being able to test the Firefox build on AArch64 because the community builder is gone | 00:40:38 |