| 10 Apr 2023 |
cole-h | ...right, cuz the repo for that is separate from ofborg itself.
OK, one moment. | 13:22:05 |
cole-h | Try now? | 13:24:53 |
K900 | Can we make ofborg scream if a PR with, say, 2000 or more rebuilds targets master? | 13:26:11 |
K900 | Preferably in a way that blocks merging | 13:26:39 |
K900 | Or at least makes the button scary | 13:26:49 |
cole-h | ofborg does not block merging. It's only guidance, because it's not always 100% correct. | 13:27:05 |
cole-h | I would think that the big red "1000+ rebuilds" labels would already kinda make the button scary though, no? | 13:27:25 |
K900 | No one sees those if there's like 100 comments | 13:27:45 |
K900 | And the merge button is at the bottom | 13:27:51 |
K900 | https://github.com/NixOS/nixpkgs/pull/218331 happened earlier today | 13:28:41 |
K900 | We already have a check that fails when you try to target a channel branch | 13:29:39 |
K900 | Would be nice to have something like that for staging | 13:29:57 |
cole-h | While not ideal, I don't necessarily want to give PRs a big red X (a failed status check) unless something is broken. | 13:30:41 |
K900 | Well github doesn't exactly have a warning state | 13:31:24 |
K900 | And I think a big red X is preferable to merging 5000 rebuilds into master directly | 13:32:02 |
cole-h | I'd also argue that there are valid cases where we'd want to merge a large rebuild to master (say, a massive vulnerability in glibc or openssl that allows RCE or things). | 13:32:15 |
K900 | I'd expect anyone that actually needs to do this to know this is not fatal | 13:32:24 |
K900 | Like, you can always ignore the check and merge | 13:32:50 |
cole-h | Related to my last message is I don't want to cheapen the "big red X" from ofborg. If you get a big red X, that PR should not be merged in its current state, period. | 13:33:03 |
K900 | That's not really true either though | 13:33:40 |
K900 | There are also valid situations where you might want to merge something that's still broken but maybe becomes less broken | 13:34:02 |
K900 | And then there's staging where pretty much every PR is red because ofborg can't catch up | 13:34:26 |
K900 | (not that it should try to( | 13:34:34 |
K900 | * (not that it should try to) | 13:34:38 |
cole-h | Is there a documented number somewhere in nixpkgs that says "builds greater than this amount should target staging"? | 13:38:50 |
K900 | https://nixos.org/manual/nixpkgs/unstable/#submitting-changes-staging-branch | 13:39:19 |
cole-h | If so, I'd accept a PR adding a new, failing status check in the case that a PR's rebuilds exceeds that amount on any platform.
Otherwise, I'd want that to be codified somewhere before ofborg starts enforcing it. | 13:39:20 |
K900 | "Mass rebuilds are commits that cause rebuilds for many packages, like more than 500 (or perhaps, if it’s “light” packages, 1000)." | 13:39:27 |
K900 | I don't think it's really enforced all that much | 13:40:04 |
ma27 | however there are exceptions, IIRC critical openssl patches went straight to master in the past for instance. | 13:40:22 |