| 9 May 2026 |
K900 | AFAIUI | 17:53:25 |
K900 | And also I don't see how that would even help because you also need to sign the actual NAR | 17:53:36 |
K900 | Which the builders don't have keys for | 17:53:42 |
K900 | So you'd need a custom protocol for the builders to ask the coordinator to sign the NAR and then you need to figure out how to actually authenticate the builder ideally with something like SPIFFE and that's a whole other can of worms | 17:54:14 |
Sergei Zimmerman (xokdvium) | In reply to @emilazy:matrix.org so "failure at the time of upload" sounds very plausible to me. especially given that Nix retries substitutions a bunch out of the box, whereas these queue runner logs look like it's not retrying at all Hm queue runner is supposed to be retrying to upload the same thing - at least nix binary cache store does this. Whether we are not doing it well enough is another question | 17:56:58 |
Sergei Zimmerman (xokdvium) | But from the logs portion seems like retries do succeed after a couple of attempts | 17:57:21 |
Sergei Zimmerman (xokdvium) | But S3 robustness might not be best, AWS does this crazy thing where it returns 400 on a closed socket and it’s not retried - but I don’t see that particular error mode in the logs for now. | 17:58:22 |
Sergei Zimmerman (xokdvium) | But it’s not clear to me what needs to happen to improve this since the hydra repo is in this strange state where the new queue runner is quite f’d | 17:59:45 |
emily | so I do notice that it doesn't seem like we've had new cases crop up in the past… idk, month or so? | 18:01:04 |
emily | but it was really bad for a while before that | 18:01:10 |
emily | does that line up with the times where the disks were chronically full on the Darwin nodes? | 18:01:24 |
emily | I'm wondering if we could have had a situation where only some outputs were getting registered and pushed out somehow because of running out of disk. or where GC was getting aggressive and clobbering stuff before it was even uploaded. | 18:01:47 |
hexa (signing key rotation when) | Feature wise that's in the new queue runner, we are still running the old queue runner | 18:02:02 |
hexa (signing key rotation when) | Even after switching to the new queue runner we'll test centralized mode first and presigned urls laterr | 18:02:42 |
hexa (signing key rotation when) | * | 18:02:46 |
hexa (signing key rotation when) | Plausible | 18:03:00 |
hexa (signing key rotation when) | I fixed that over a month ago | 18:03:12 |
hexa (signing key rotation when) | https://grafana.nixos.org/d/he6lz9g/macos-disk-mem-swap?orgId=1&from=now-90d&to=now&timezone=utc | 18:03:47 |
John Ericson | in this situation, do we know why the (old) queue runner told two builders to build fish? | 18:52:31 |
hexa (signing key rotation when) | I don't | 18:55:01 |
John Ericson | unless it thought the first one failed I can't think of why either | 18:56:46 |
John Ericson | I am working on new queue runner right now making it more like old when with the use of BuildDerivation | 18:56:59 |
John Ericson | hopefully that will at lest help with the new scheduling things and building their dependencies problem | 18:57:24 |
emily | I know that another job can pull fish in as a dependency and it'll be built on the Nix level. | 19:00:47 |
emily | how that interacts with the queue runner/uploads I don't know | 19:00:54 |
John Ericson | the queue runner sends BasicDerivations so that the builder should not know how to build fish in that case | 19:03:12 |