[arch-devops] Reproducible Build nodes
Hi all, We promised two PIA boxes to be used for reproducible build rebuilding nodes. [1] The boxes are already defined in ansible's hosts and don't have to be converted to Debian if we can get them working with Arch. [2] [3] The boxes should be added to their Jenkins server via ssh. We should setup a user with sudo rights and ssh key access to set the box up as slave. My plan if no one objects is: 1) Update the boxes and hope they come back up (~ 200 updates). 2) Add DNS entries for the two boxes {repro1,2}.pkgbuild.com. 3) add holger to this box with sudo rights (an ansible role probably). [4] 4) Add them to monitoring I suppose. Some background about reproducible builds and the usage of the boxes. The boxes will detect package updates, rebuild these packages twice and check if they are reproducible. These rebuilds have already found failing to build from source packages, 404 urls and other issues which improves are packages! [1] https://tests.reproducible-builds.org/archlinux/archlinux.html [2] https://git.archlinux.org/infrastructure.git/tree/hosts [3] https://salsa.debian.org/qa/jenkins.debian.net/blob/master/bin/reproducible_... [4] https://salsa.debian.org/qa/jenkins.debian.net/blob/master/authorized_keys/h... -- Jelle van der Waa
On Thu, Nov 22, 2018 at 08:19:35PM +0100, Jelle van der Waa <jelle@vdwaa.nl> wrote:
1) Update the boxes and hope they come back up (~ 200 updates). 2) Add DNS entries for the two boxes {repro1,2}.pkgbuild.com.
Sounds good.
3) add holger to this box with sudo rights (an ansible role probably). [4]
Yes, please put everything in ansible if possible. I guess sudo means holger will perform the setup of the repro stuff afterwards, which means we won't have that as a role in our ansible repo?
4) Add them to monitoring I suppose.
Yeah, we should also monitor the other unused boxes. I'm planning to move zabbix' host configuration to ansible soonish to fix that. Florian
On 11/23/18 at 11:26am, Florian Pritz via arch-devops wrote:
On Thu, Nov 22, 2018 at 08:19:35PM +0100, Jelle van der Waa <jelle@vdwaa.nl> wrote:
1) Update the boxes and hope they come back up (~ 200 updates). 2) Add DNS entries for the two boxes {repro1,2}.pkgbuild.com.
Sounds good.
Sad news, the boxes where not super useful for reproducible-builds.org since they have more powerful boxes now and Debian is a lot easier for their debian centric deployment. I want to still dedicate these boxes though for our reproducible builds effort but to reproduce .pkg.tar.xz packages. But we haven't made a CI solution with repro yet. [1] My hope is that somewhere this year, we will be able to continiously test if our repo packages are reproducible! [1] https://github.com/archlinux/archlinux-repro Greetings, Jelle van der Waa
participants (2)
-
Florian Pritz
-
Jelle van der Waa