| 2 Mar 2025 |
raitobezarius | second is that booting on AA64 ceased to work on that OVMF | 21:29:42 |
raitobezarius | one guess would be that openssl is desync | 21:30:24 |
raitobezarius | that OVMF upgraded to OpenSSL 3.4 | 21:30:34 |
raitobezarius | but now someone would need to git bisect over AA64 the boot failure | 21:30:55 |
raitobezarius | honestly if mbedTLS is now available on public EDK2, people should move to it | 21:31:29 |
raitobezarius | the other weird change is all the confidential computing stuff | 21:31:50 |
adamcstephens | I upgraded to openssl during the bump since upstream had done so as mentioned in the release notes, both to 3.4 | 21:36:47 |
adamcstephens | Should we revert for now to give time for further investigation? | 21:37:06 |
adamcstephens | This is failing lix tests, or it's failing when run on a lix host? | 21:39:24 |
hexa | reproduced this on the aarch64-linux community builder, which runs nix 2.25.2 with use-cgroup | 21:43:19 |
hexa | that's what I used to bisect fwiw | 21:43:25 |
raitobezarius | In reply to @adam:robins.wtf This is failing lix tests, or it's failing when run on a lix host? two different problems | 21:44:23 |
raitobezarius | what is relevant to lix is only the failed proper cleanup when timing out | 21:44:37 |
adamcstephens | thanks for clarifying. | 21:45:03 |
Arian | Wasn't cgroup in nix also kinda screwed? | 21:46:33 |
Arian | * Wasn't cgroups in nix also kinda screwed? | 21:46:46 |
Arian | Even with the recent changes the hierarchy is funky | 21:46:55 |
adamcstephens | i'll open a PR to revert. were you reproducing on nixos.tests.systemd-boot.extraEntries.aarch64-linux ? | 21:48:43 |
hexa | Yes | 21:48:57 |
adamcstephens | thanks | 21:49:05 |
raitobezarius | In reply to @arianvp:matrix.org Wasn't cgroups in nix also kinda screwed? this is possible but I'm not a CppNix developer so I have no idea | 21:49:07 |
hexa | Can also disable cgroup usage | 21:49:21 |
raitobezarius | I recommend to disable it on Lix builders, this doesn't serve any real purpose, Lix 2.93.0 will always create a new cgroup hierarchy even if it cannot be managed as well as desired | 21:49:49 |
raitobezarius | Later on, once we can cleanup some architectural issues, we will enable proper control over the hierarchy for build farms | 21:50:03 |
adamcstephens | https://github.com/NixOS/nixpkgs/pull/386486 | 21:51:36 |
hexa | I'm disabling cgroups instead | 22:05:01 |
adamcstephens | i'll set to draft for now then | 22:05:37 |
raitobezarius | In reply to @adam:robins.wtf i'll set to draft for now then why disabling cgroups would fix that? | 22:51:14 |
raitobezarius | this doesn't strike me having any relation with cgroups whatsover | 22:51:22 |
raitobezarius | or hexa (signing key rotation when) did the build succeded without cgroups??? | 22:51:38 |