| 3 Jan 2025 |
Grimmauld (moving to @grimmauld:grapevine.grimmauld.de) | alright thanks, thats reassuring. I will give a shout once i am there. Currently working on my bachelors thesis and systemd hardening while i wait for apparmor upstream to make some progress, so it'll be a bit, but do expect that request eventually | 22:13:12 |
zowoq | x86 build box costs ~€50. | 23:42:16 |
emily | ah, server auction? makes sense | 23:47:32 |
zowoq | We're basically on budget now at €640. | 23:51:18 |
Gaétan Lepage | You mean that we have right enough to handle our current monthly budget or that we have enough to get an ARM builder ? | 23:52:01 |
zowoq | Sorry, the former. | 23:56:20 |
| 4 Jan 2025 |
Gaétan Lepage | Ok I see | 00:13:18 |
Gaétan Lepage | What is your opinion on the feasibility of adding third-party systems to nix-community/infra ? | 00:13:58 |
Gaétan Lepage | For instance, if some people like liberodark want to "donate" their system to nix-community so that they can be used as builders while still physically keeping the hardware. Would this be feasible ? | 00:15:01 |
zowoq | Maybe? Really depends on what we'd use it for. | 00:19:43 |
purepani | In reply to @glepage:matrix.org For instance, if some people like liberodark want to "donate" their system to nix-community so that they can be used as builders while still physically keeping the hardware. Would this be feasible ? What stops them from being a jia tan and replacing their builds with malicious packages? | 00:20:00 |
emily | the community builders are not trusted for anything | 00:20:13 |
emily | AIUI the offer is for a free x86 box comparable to the current x86 builder, which seems good if it would free up enough resources to pay for a replacement for the dead AArch64 community builder | 00:20:34 |
emily | (but I guess €50 isn't quite enough for that) | 00:20:39 |
Gaétan Lepage | In reply to @zowoq:matrix.org Maybe? Really depends on what we'd use it for. I was thinking about using those as non-critical remote builders (not for CI) | 00:22:36 |
Gaétan Lepage | In reply to @purepani:matrix.org What stops them from being a jia tan and replacing their builds with malicious packages? Well, nothing I guess. But anyway, it is clearly stated that the nix-community builders should not be trusted, so it's not changing our threat model that much I guess. | 00:23:45 |
zowoq | Downtime may be an issue if the box doesn't have out of band kvm/ipmi. | 00:24:50 |
liberodark | Yep KVM & IPMI is not available. | 00:25:37 |
liberodark | But this can be the case with HA.
But it is not the same service. | 00:26:43 |
liberodark | In my case I propose to provide a machine and this for free to help.
The hosting cost is 25€ per server.
Since we have a dedicated 10 Gb line.
These are mainly costs for electricity more than anything else.
For my part I am only proposing if it can help. | 00:29:06 |
liberodark | * In my case I propose to provide a machine and this for free to help.
The hosting cost is 25€ per server.
Since we have a dedicated 10 Gb lines.
These are mainly costs for electricity more than anything else.
For my part I am only proposing if it can help. | 00:29:46 |
liberodark | For my part, it was during a discussion with Gaétan Lepage that I heard about a need for a builder. Hence the fact that I came to offer my help on the subject. | 00:30:51 |
liberodark | * Yep KVM & IPMI are not available. | 00:31:32 |
liberodark | * But it can be the case with HA.
But it is not the same service. | 00:32:02 |
liberodark | * In my case I propose to provide a machine for free to help.
The hosting cost is 25€ per server.
Since we have dedicated 10 Gb lines.
Main costs are for electricity more than anything else.
On my side, i am only proposing if it can help. | 00:35:18 |
liberodark | * It was during a discussion with Gaétan Lepage that I heard about a need for a builder. Hence the fact that I came to offer my help on the subject. | 00:35:52 |
purepani | ~~just for clarity i was not accusing you of being malicious haha~~ | 00:36:35 |
purepani | just for clarity i was not accusing you of being malicious haha | 00:37:14 |
liberodark | No worries I totally agree with what you say and I understand your concern.
But my concern is a drop in the quality of contributors because they would not have the adequate tools to work.
| 00:37:54 |
emily | did you say you might be able to make AArch64 happen? I think a replacement Ampere box would definitely be the most helpful thing for contributors right now | 00:39:54 |