Re: FF builds
在 2021-09-09星期四的 02:49 +，Bojan Smojver via devel写道： > Just being devil's advocate for a second here... > > Two days to build FF in koji? Has it gotten that big or are the > builds that slow? It should not be that slow, if you look at build.log you can see ``` ... timed out waiting for test to complete ... ``` Seems that some bugs in checks block the build to finish or fail for long time. > > :-) > > -- > Bojan > ___ > devel mailing list -- devel@lists.fedoraproject.org > To unsubscribe send an email to devel-le...@lists.fedoraproject.org > Fedora Code of Conduct: https://docs.fedoraproject.org/en- > US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject > .org > Do not reply to spam on the list, report it: https://pagure.io/fedora- > infrastructure -- Qiyu Yan GPG keyid: 0x4FC914F065F2DF12 About: https://fedoraproject.org/wiki/User:Yanqiyu signature.asc Description: This is a digitally signed message part ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
Re: FF builds
On Friday, 10 September 2021 at 15:32, Miroslav Suchý wrote: > Dne 09. 09. 21 v 18:54 Demi Marie Obenour napsal(a): > > Can the Firefox build be distributed among multiple machines? > > I would love to see a benchmark how much it speed up big packages and how it > slow downs smaller packages. Whole rpmbuild part. > > > FYI > > Mock has CCache plugin, which speeds the thing a bit, but can be easily > exploited. So on build systems it is switched off. > > Years ago I wrote blogpost about building in memory using tmpfs. That can > give you up to 70% gain. > > http://miroslav.suchy.cz/blog/archives/2015/05/28/increase_mock_performance_-_build_packages_in_memory/index.html > > We use this in Copr. AFAIK Koji does not use it. You can join Fedora infra to > change it :) Nowadays, you can mount /var/lib/mock on zram, too: $ cat /etc/systemd/zram-generator.conf [zram0] zram-fraction = 0.5 max-zram-size = 4096 [zram1] mount-point = /var/lib/mock zram-fraction = 0.75 max-zram-size = 12288 Regards, Dominik -- Fedora https://getfedora.org | RPM Fusion http://rpmfusion.org There should be a science of discontent. People need hard times and oppression to develop psychic muscles. -- from "Collected Sayings of Muad'Dib" by the Princess Irulan ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
Re: FF builds
On Fri, Sep 10, 2021 at 2:11 PM Stephen John Smoogen wrote: > Small correction. Miroslav didn't say COPR uses ccache. He said COPR > uses ramdisk for mock. Oh, whoops. Got it. ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
Re: FF builds
On Fri, 10 Sept 2021 at 14:05, Ken Dreyer wrote: > > On Fri, Sep 10, 2021 at 9:33 AM Miroslav Suchý wrote: > > We use this in Copr. AFAIK Koji does not use it. You can join Fedora infra > > to change it :) > > Is there more documentation about how Copr uses ccache? I was grepping > around https://pagure.io/copr/copr for "ccache" and I see the > "ccache_enable" plugin config is set to "False". > Small correction. Miroslav didn't say COPR uses ccache. He said COPR uses ramdisk for mock. Using ccache in mock is exploitable so that a bad build can interfere with other packages and items. > The reason I'm asking is that I'm considering testing mock's ccache > plugin within Koji for Ceph. > > I'm wondering about management, specifically whether we must track and > maintain per-ceph-version ccaches. > > Do you have utilities for examining the caches, clearing them, etc? Do > you distribute caches across builders? Anything else we should think > about? > > - Ken > ___ > devel mailing list -- devel@lists.fedoraproject.org > To unsubscribe send an email to devel-le...@lists.fedoraproject.org > Fedora Code of Conduct: > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org > Do not reply to spam on the list, report it: > https://pagure.io/fedora-infrastructure -- Stephen J Smoogen. I've seen things you people wouldn't believe. Flame wars in sci.astro.orion. I have seen SPAM filters overload because of Godwin's Law. All those moments will be lost in time... like posts on a BBS... time to shutdown -h now. ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
Re: FF builds
On Fri, Sep 10, 2021 at 9:33 AM Miroslav Suchý wrote: > We use this in Copr. AFAIK Koji does not use it. You can join Fedora infra to > change it :) Is there more documentation about how Copr uses ccache? I was grepping around https://pagure.io/copr/copr for "ccache" and I see the "ccache_enable" plugin config is set to "False". The reason I'm asking is that I'm considering testing mock's ccache plugin within Koji for Ceph. I'm wondering about management, specifically whether we must track and maintain per-ceph-version ccaches. Do you have utilities for examining the caches, clearing them, etc? Do you distribute caches across builders? Anything else we should think about? - Ken ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
Re: FF builds
On Fri, 10 Sept 2021 at 09:33, Miroslav Suchý wrote: > > Dne 09. 09. 21 v 18:54 Demi Marie Obenour napsal(a): > > Can the Firefox build be distributed among multiple machines? > > I would love to see a benchmark how much it speed up big packages and how it > slow downs smaller packages. Whole rpmbuild > part. > > > FYI > > Mock has CCache plugin, which speeds the thing a bit, but can be easily > exploited. So on build systems it is switched off. > > Years ago I wrote blogpost about building in memory using tmpfs. That can > give you up to 70% gain. > > http://miroslav.suchy.cz/blog/archives/2015/05/28/increase_mock_performance_-_build_packages_in_memory/index.html > > We use this in Copr. AFAIK Koji does not use it. You can join Fedora infra to > change it :) > Uhm, let us not set up unreal expectations on what Fedora Infrastructure can do. 1. Koji needs to be able to support it and Fedora Infrastructure doesn't/maintain work on that code. 2. Fedora Infrastructure would need either newer hardware or cut down the number of builders to allow for more memory per system to do the builds in ramdisk. 3. There are a long list of 'higher' priority items which the koji developers have on their list to do all the time. This needs to be weighed against the other needs of trying to make builds reproducible, trying to make koji work better in a cloud evironment, etc. 4. If all of that would make it look like Fedora Infrastructure should move to a different build system... then it isn't going to happen soon. -- Stephen J Smoogen. I've seen things you people wouldn't believe. Flame wars in sci.astro.orion. I have seen SPAM filters overload because of Godwin's Law. All those moments will be lost in time... like posts on a BBS... time to shutdown -h now. ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
Re: FF builds
On Thu, 9 Sep 2021 12:42:09 -0400 Demi Marie Obenour wrote: > On 9/8/21 10:49 PM, Bojan Smojver via devel wrote: > > Just being devil's advocate for a second here... > > > > Two days to build FF in koji? Has it gotten that big or are the > > builds that slow? > > > > :-) > > This is also a security problem: consider a 0day exploit found in the > wild. > > Should the FF builds be given more resources? Does Mozilla provide a > signed Flatpak that could be used instead? If you absolutely required a security fix, you could get the latest nightly build from mozilla.org and run it from outside the system directories. If you always want the latest firefox you could build the latest nightly from a source repository locally (takes about 90 minutes here on a not very powerful machine) and install it in usr/local. Needs lots of development packages installed. For integration and no worry, the fedora package is the way to go for most people. The issue here is rare in fedora in my experience (that an exploit is revealed before fedora has it fixed in its repositories). ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
Re: FF builds
Dne 09. 09. 21 v 18:54 Demi Marie Obenour napsal(a): Can the Firefox build be distributed among multiple machines? I would love to see a benchmark how much it speed up big packages and how it slow downs smaller packages. Whole rpmbuild part. FYI Mock has CCache plugin, which speeds the thing a bit, but can be easily exploited. So on build systems it is switched off. Years ago I wrote blogpost about building in memory using tmpfs. That can give you up to 70% gain. http://miroslav.suchy.cz/blog/archives/2015/05/28/increase_mock_performance_-_build_packages_in_memory/index.html We use this in Copr. AFAIK Koji does not use it. You can join Fedora infra to change it :) Miroslav ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
Re: FF builds
On 9/9/21 14:22, Neal Gompa wrote: On Thu, Sep 9, 2021 at 2:06 PM PGNet Dev wrote: On 9/9/21 13:53, Florian Weimer wrote: Can the Firefox build be distributed among multiple machines? I frequently deploy FF from upstream builds, with updates managed from within the app. Q: Is there any historical _measure_ of security issues fixed in @Fedora FF pkgs, before upstream gets around to fixing them? Considering that Fedora Firefox packages don't bundle as much as Mozilla's Firefox bundles do, I would say yes. We fix issues all the time in its dependency graph at a much faster pace than Mozilla does. noted. never gave it a sufficient, closer look. yet. tgif. ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
Re: FF builds
On Thu, Sep 9, 2021 at 2:23 PM Kevin Fenzi wrote: > > On Thu, Sep 09, 2021 at 07:53:02PM +0200, Florian Weimer wrote: > > * Neal Gompa: > > > > > On Thu, Sep 9, 2021 at 12:55 PM Demi Marie Obenour > > > wrote: > > >> Can the Firefox build be distributed among multiple machines? > > >> > > > > > > We'd need icecream[1] support enabled in Koji. I am not even sure Mock > > > (the build engine) supports icecream right now. > > > > I think for Firefox, what's taking most of the time is the %check phase. > > Has that even been parallelized using icecream? > > One thing to note here... this is not just one firefox build taking 2 > days. It's one firefox build taking a number of hours, failing and then > the maintainer fixing that issue and resubmitting. You don't see the > failed builds because you can try and rebuild the same N-V-R in koji as > many times as you like until it is successfull. > Chromium would probably benefit from icecream, though. -- 真実はいつも一つ！/ Always, there's only one truth! ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
Re: FF builds
On Thu, Sep 9, 2021 at 2:06 PM PGNet Dev wrote: > > On 9/9/21 13:53, Florian Weimer wrote: > >>> Can the Firefox build be distributed among multiple machines? > > I frequently deploy FF from upstream builds, with updates managed from within > the app. > > Q: Is there any historical _measure_ of security issues fixed in @Fedora FF > pkgs, before upstream gets around to fixing them? Considering that Fedora Firefox packages don't bundle as much as Mozilla's Firefox bundles do, I would say yes. We fix issues all the time in its dependency graph at a much faster pace than Mozilla does. -- 真実はいつも一つ！/ Always, there's only one truth! ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
Re: FF builds
On Thu, Sep 09, 2021 at 07:53:02PM +0200, Florian Weimer wrote: > * Neal Gompa: > > > On Thu, Sep 9, 2021 at 12:55 PM Demi Marie Obenour > > wrote: > >> Can the Firefox build be distributed among multiple machines? > >> > > > > We'd need icecream[1] support enabled in Koji. I am not even sure Mock > > (the build engine) supports icecream right now. > > I think for Firefox, what's taking most of the time is the %check phase. > Has that even been parallelized using icecream? One thing to note here... this is not just one firefox build taking 2 days. It's one firefox build taking a number of hours, failing and then the maintainer fixing that issue and resubmitting. You don't see the failed builds because you can try and rebuild the same N-V-R in koji as many times as you like until it is successfull. kevin signature.asc Description: PGP signature ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
Re: FF builds
On Thu, Sep 9, 2021 at 1:01 PM Neal Gompa wrote: > We'd need icecream[1] support enabled in Koji. I am not even sure Mock > (the build engine) supports icecream right now. This is on my list of things to investigate one day. Ceph has the same problem - builder machines with 16GB RAM can barely build Ceph. https://news.ycombinator.com/item?id=25603162 has some other useful info about icecream. - Ken ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
Re: FF builds
On 9/9/21 13:53, Florian Weimer wrote: Can the Firefox build be distributed among multiple machines? I frequently deploy FF from upstream builds, with updates managed from within the app. Q: Is there any historical _measure_ of security issues fixed in @Fedora FF pkgs, before upstream gets around to fixing them? ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
Re: FF builds
* Neal Gompa: > On Thu, Sep 9, 2021 at 12:55 PM Demi Marie Obenour > wrote: >> Can the Firefox build be distributed among multiple machines? >> > > We'd need icecream[1] support enabled in Koji. I am not even sure Mock > (the build engine) supports icecream right now. I think for Firefox, what's taking most of the time is the %check phase. Has that even been parallelized using icecream? Thanks, Florian ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
Re: FF builds
On Thu, 9 Sept 2021 at 13:01, Neal Gompa wrote: > > On Thu, Sep 9, 2021 at 12:55 PM Demi Marie Obenour > wrote: > > Also, could the Fedora project itself perform at least > > basic QA for critical security patches? > > > > Who do you think is the "Fedora Project"? It's us in the community! > > > > Two days for builds is not great, but it's not the end of the world. > > > Would it be nice if we had more powerful builders? Sure. But it still > > > would take a minimum of 2 days for something to go out since it needs > > > to get pushed, pass tests, and get karma to autopush to stable > > > releases. > > > > Can the Firefox build be distributed among multiple machines? > > > > We'd need icecream[1] support enabled in Koji. I am not even sure Mock > (the build engine) supports icecream right now. > > [1]: https://github.com/icecc/icecream > > It would require more than that. It would require having our networking and build systems able to talk to other systems when they are building. For security reasons we turn off networking inside the mock so that we don't get packages pulling in crap during the build. A distributed build by definition is pulling in 'crap' from other systems so you have to not just have networking turned on, you have to have tools to make sure the 'crap' is really the stuff you wanted. I don't see that happening anytime soon. The issue with builds being stuck is a problem but it needs a systematic fix across the board versus just for 'Firefox'. -- Stephen J Smoogen. I've seen things you people wouldn't believe. Flame wars in sci.astro.orion. I have seen SPAM filters overload because of Godwin's Law. All those moments will be lost in time... like posts on a BBS... time to shutdown -h now. ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
Re: FF builds
On Thu, Sep 9, 2021 at 12:55 PM Demi Marie Obenour wrote: > > On 9/9/21 12:45 PM, Neal Gompa wrote: > > On Thu, Sep 9, 2021 at 12:42 PM Demi Marie Obenour > > wrote: > >> > >> On 9/8/21 10:49 PM, Bojan Smojver via devel wrote: > >>> Just being devil's advocate for a second here... > >>> > >>> Two days to build FF in koji? Has it gotten that big or are the builds > >>> that slow? > >>> > >>> :-) > >> > >> This is also a security problem: consider a 0day exploit found in the wild. > >> > >> Should the FF builds be given more resources? Does Mozilla provide a > >> signed > >> Flatpak that could be used instead? > >> > > > > Security is not worth anything if the application doesn't work. We > > don't ship updates immediately to users after they're built *no matter > > what*. They go through the update manager (Bodhi) to get validated for > > release. > > There are users (such as myself) who have the equivalent of > > $ sudo dnf -y --best --refresh --enablerepo=updates-testing --security -- > upgrade > $ sudo dnf -y --best -- upgrade > > in their update scripts. So then you'll get it after your mirror synchronizes after a push to testing (which happens at midnight UTC every night). As soon as a build is submitted to Bodhi successfully, it is queued to be pushed to testing in the *next* push. > Also, could the Fedora project itself perform at least > basic QA for critical security patches? > Who do you think is the "Fedora Project"? It's us in the community! > > Two days for builds is not great, but it's not the end of the world. > > Would it be nice if we had more powerful builders? Sure. But it still > > would take a minimum of 2 days for something to go out since it needs > > to get pushed, pass tests, and get karma to autopush to stable > > releases. > > Can the Firefox build be distributed among multiple machines? > We'd need icecream[1] support enabled in Koji. I am not even sure Mock (the build engine) supports icecream right now. [1]: https://github.com/icecc/icecream -- 真実はいつも一つ！/ Always, there's only one truth! ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
Re: FF builds
On 9/9/21 12:45 PM, Neal Gompa wrote: > On Thu, Sep 9, 2021 at 12:42 PM Demi Marie Obenour > wrote: >> >> On 9/8/21 10:49 PM, Bojan Smojver via devel wrote: >>> Just being devil's advocate for a second here... >>> >>> Two days to build FF in koji? Has it gotten that big or are the builds that >>> slow? >>> >>> :-) >> >> This is also a security problem: consider a 0day exploit found in the wild. >> >> Should the FF builds be given more resources? Does Mozilla provide a signed >> Flatpak that could be used instead? >> > > Security is not worth anything if the application doesn't work. We > don't ship updates immediately to users after they're built *no matter > what*. They go through the update manager (Bodhi) to get validated for > release. There are users (such as myself) who have the equivalent of $ sudo dnf -y --best --refresh --enablerepo=updates-testing --security -- upgrade $ sudo dnf -y --best -- upgrade in their update scripts. Also, could the Fedora project itself perform at least basic QA for critical security patches? > Two days for builds is not great, but it's not the end of the world. > Would it be nice if we had more powerful builders? Sure. But it still > would take a minimum of 2 days for something to go out since it needs > to get pushed, pass tests, and get karma to autopush to stable > releases. Can the Firefox build be distributed among multiple machines? Sincerely, Demi Marie Obenour she/her/hers OpenPGP_0xB288B55FFF9C22C1.asc Description: OpenPGP public key OpenPGP_signature Description: OpenPGP digital signature ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
Re: FF builds
On Thu, Sep 9, 2021 at 12:42 PM Demi Marie Obenour wrote: > > On 9/8/21 10:49 PM, Bojan Smojver via devel wrote: > > Just being devil's advocate for a second here... > > > > Two days to build FF in koji? Has it gotten that big or are the builds that > > slow? > > > > :-) > > This is also a security problem: consider a 0day exploit found in the wild. > > Should the FF builds be given more resources? Does Mozilla provide a signed > Flatpak that could be used instead? > Security is not worth anything if the application doesn't work. We don't ship updates immediately to users after they're built *no matter what*. They go through the update manager (Bodhi) to get validated for release. Two days for builds is not great, but it's not the end of the world. Would it be nice if we had more powerful builders? Sure. But it still would take a minimum of 2 days for something to go out since it needs to get pushed, pass tests, and get karma to autopush to stable releases. -- 真実はいつも一つ！/ Always, there's only one truth! ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
Re: FF builds
On 9/8/21 10:49 PM, Bojan Smojver via devel wrote: > Just being devil's advocate for a second here... > > Two days to build FF in koji? Has it gotten that big or are the builds that > slow? > > :-) This is also a security problem: consider a 0day exploit found in the wild. Should the FF builds be given more resources? Does Mozilla provide a signed Flatpak that could be used instead? Sincerely, Demi Marie Obenour she/her/hers OpenPGP_0xB288B55FFF9C22C1.asc Description: OpenPGP public key OpenPGP_signature Description: OpenPGP digital signature ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
FF builds
Just being devil's advocate for a second here... Two days to build FF in koji? Has it gotten that big or are the builds that slow? :-) -- Bojan ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
