On 3 April 2018 at 21:45, db wrote: > On 3 Apr 2018, at 18:04, Mojca Miklavec wrote: >> Travis has lots of limitations, but it offers both (a) and (b) for free. > > Couldn't (b) be the current infrastructure?
No, because that would make the infrastructure that distributes binaries to all our users susceptible to malicious PRs. Except if we modify the current setup to stop a VM after each build in case there are no pending jobs, and fire a new clean VM to build the PRs in the meantime, with different build instructions and without any uploads. I believe it would also be ok to have a second set of isolated builders whose images would only be reset once in a while. But that still calls for additional hardware. Mojca
