!PbtOpdWBSRFbEZRLIf:numtide.com

Nix Community Projects

604 Members
Meta discussions related to https://nix-community.org. (For project specific discussions use github issues or projects own matrix channel). Need help from an admin? Open an issue on https://github.com/nix-community/infra/issues159 Servers

You have reached the beginning of time (for this room).


SenderMessageTime
4 Jan 2025
@glepage:matrix.orgGaétan Lepage For instance, if some people like liberodark want to "donate" their system to nix-community so that they can be used as builders while still physically keeping the hardware. Would this be feasible ? 00:15:01
@zowoq:matrix.orgzowoqMaybe? Really depends on what we'd use it for.00:19:43
@purepani:matrix.orgpurepani
In reply to @glepage:matrix.org
For instance, if some people like liberodark want to "donate" their system to nix-community so that they can be used as builders while still physically keeping the hardware. Would this be feasible ?
What stops them from being a jia tan and replacing their builds with malicious packages?
00:20:00
@emilazy:matrix.orgemilythe community builders are not trusted for anything00:20:13
@emilazy:matrix.orgemilyAIUI the offer is for a free x86 box comparable to the current x86 builder, which seems good if it would free up enough resources to pay for a replacement for the dead AArch64 community builder00:20:34
@emilazy:matrix.orgemily(but I guess €50 isn't quite enough for that)00:20:39
@glepage:matrix.orgGaétan Lepage
In reply to @zowoq:matrix.org
Maybe? Really depends on what we'd use it for.
I was thinking about using those as non-critical remote builders (not for CI)
00:22:36
@glepage:matrix.orgGaétan Lepage
In reply to @purepani:matrix.org
What stops them from being a jia tan and replacing their builds with malicious packages?
Well, nothing I guess. But anyway, it is clearly stated that the nix-community builders should not be trusted, so it's not changing our threat model that much I guess.
00:23:45
@zowoq:matrix.orgzowoqDowntime may be an issue if the box doesn't have out of band kvm/ipmi.00:24:50
@liberodark:matrix.orgliberodarkYep KVM & IPMI is not available.00:25:37
@liberodark:matrix.orgliberodarkBut this can be the case with HA. But it is not the same service.00:26:43
@liberodark:matrix.orgliberodarkIn my case I propose to provide a machine and this for free to help. The hosting cost is 25€ per server. Since we have a dedicated 10 Gb line. These are mainly costs for electricity more than anything else. For my part I am only proposing if it can help.00:29:06
@liberodark:matrix.orgliberodark* In my case I propose to provide a machine and this for free to help. The hosting cost is 25€ per server. Since we have a dedicated 10 Gb lines. These are mainly costs for electricity more than anything else. For my part I am only proposing if it can help.00:29:46
@liberodark:matrix.orgliberodark For my part, it was during a discussion with Gaétan Lepage that I heard about a need for a builder.
Hence the fact that I came to offer my help on the subject.
00:30:51
@liberodark:matrix.orgliberodark* Yep KVM & IPMI are not available.00:31:32
@liberodark:matrix.orgliberodark* But it can be the case with HA. But it is not the same service.00:32:02
@liberodark:matrix.orgliberodark* In my case I propose to provide a machine for free to help. The hosting cost is 25€ per server. Since we have dedicated 10 Gb lines. Main costs are for electricity more than anything else. On my side, i am only proposing if it can help.00:35:18
@liberodark:matrix.orgliberodark * It was during a discussion with Gaétan Lepage that I heard about a need for a builder.
Hence the fact that I came to offer my help on the subject.
00:35:52
@purepani:matrix.orgpurepani ~~just for clarity i was not accusing you of being malicious haha~~ 00:36:35
@purepani:matrix.orgpurepani just for clarity i was not accusing you of being malicious haha 00:37:14
@liberodark:matrix.orgliberodarkNo worries I totally agree with what you say and I understand your concern. But my concern is a drop in the quality of contributors because they would not have the adequate tools to work. 00:37:54
@emilazy:matrix.orgemilydid you say you might be able to make AArch64 happen? I think a replacement Ampere box would definitely be the most helpful thing for contributors right now00:39:54
@emilazy:matrix.orgemily one because 80 cores is just really convenient for testing out very large builds (I preferred it over the x86 box for this reason), but also because few people have aarch64-linux hardware powerful enough to do substantial builds at all 00:40:22
@emilazy:matrix.orgemilywe're already seeing e.g. not being able to test the Firefox build on AArch64 because the community builder is gone00:40:38

Show newer messages


Back to Room ListRoom Version: 6