#34176: Tor Browser Nightly external server support
-------------------------------------------------+---------------------
Reporter: sysrqb | Owner: tpa
Type: task | Status: new
Priority: Medium | Milestone:
Component: Internal Services/Tor Sysadmin Team | Version:
Severity: Normal | Resolution:
Keywords: | Actual Points:
Parent ID: | Points:
Reviewer: | Sponsor:
-------------------------------------------------+---------------------
Comment (by anarcat):
> To be clear, the current plan is we (Tor Browser devs) get an external
server and we maintain it ourselves, in the short-term. I'll take on this
responsibility. At some time in the future (but not too far in the
future), TPA receive additional budget for adding a machine large enough
for building Tor Browser Nightly. We then migrate the nightly build setup
onto the new server and cancel the old machine.
Works for me! :)
> Currently, the build system runs the following programs as root (in
addition to executing dynamically created build (shell) scripts at run-
time):
> {{{
> sudo tar
> ...
> }}}
... game over! might as well just give you root at that point...
> I've never tried runc-in-docker, but maybe? ticket:23631#comment:2
describes some problems with directly using Docker.
Thanks for the pointer! I admit I haven't read the entire thread so I
hadn't caught that. I'm surprised to hear Docker can't run inside a i386
machine... but as for the container escapes, the point would be that the
container would run as as a regular user so that you wouldn't need to do
all that pesky `runc` and `netns` stuff yourself. ;)
But of course, I have no idea what I'm talking about here... That build
seems to do some hairy stuff that maybe I will be happier not knowing
about until I need to. :)
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/34176#comment:6>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs
