**** BEGIN LOGGING AT Fri Apr 12 02:59:57 2019 Apr 12 06:21:02 Morning! Apr 12 07:32:04 morning Apr 12 07:59:49 Morning! Apr 12 08:26:57 ah, well, good luck Matrix.org... Apr 12 08:34:34 Tofe: Yeah... I guess we'd need to make sure our Jenkins is up to date ;) Apr 12 08:35:46 novaldex: ^ Apr 12 08:49:23 novaldex: Might be good to upgrade to the 2.164.2 LTS version from the one that we have. I don't think we need the weekly ones with all the fancy new features. Apr 12 08:49:31 JaMa: ^ Your thoughts Apr 12 09:15:25 * JaMa checking backlog Apr 12 09:15:54 Matrix.org ? Apr 12 09:17:04 I've upgraded my jenkins to 2.164.2 yesterday, so I would recommend the same for jenkins on nas-admin, but I think that ka6sox and novaldex plan to replace jenkins with buildbot.. Apr 12 09:19:09 https://matrix.org/jenkins 404 did someone delete them through jenkins security issues, or what did I miss? Apr 12 09:19:27 JaMa: OK, never worked with buildbot Apr 12 09:19:53 ok I see https://matrix.org/blog/2019/04/11/security-incident/index.html Apr 12 09:20:02 JaMa: yes, they removed their jenkins instance Apr 12 09:21:13 looks like they also had bridges between their CI and the prod servers, which maybe were on the same computer Apr 12 09:21:41 Herrie|Laptop: neither did I, but Yocto autobuilder uses that and ka6sox wants to use the same to simplify infra Apr 12 09:23:01 I'm not too happy about it, but mostly because I don't know buildbot and it will be some extra work to adjust our jenkins-job.sh to be compatible with it (like receiving job names and build numbers etc) Apr 12 09:23:28 I've never used (or heard of) matrix.org Apr 12 09:23:52 but it's true there are often very serious security issues in jenkins (or rather its plugins) Apr 12 09:24:42 unfortunatelly some plugins weren't updated in years and even with the plugin center no longer providing them, they are installed in existing jenkins deployments Apr 12 09:24:45 There are quite some issues with Jenkins at times Apr 12 09:24:46 Never used it either (matrix.org or buildbot...) but matrix is quite has become quite a thing these last few months/years Apr 12 09:25:09 at lge we have all jenkinses in private VPN and still I update the ones I care about Apr 12 09:25:31 Morning.. Apr 12 09:25:40 novaldex: Morning! Apr 12 09:25:56 I Apr 12 09:25:59 I thought matrix was another communications platform with all sorts of plugins to other systems Apr 12 09:26:05 I've never used Matrix.org either Apr 12 09:26:12 Then again I was on IRC back in '94 I think :P Apr 12 09:26:15 e.g. http://wiki.jenkins-ci.org/display/JENKINS/Scriptler+Plugin is vulnerable for long time and still we have it installed, because it's dependency of some other plugin which we need Apr 12 09:26:16 So I'm old school ;) Apr 12 09:26:34 and yes, while buildbot is what we're looking at (the guys at OE use it as well), we're still happy to keep Jenkins updated Apr 12 09:26:48 i'm on the their mailing list, I swear i'm getting daily security emails from jenkins! Apr 12 09:27:22 it won't be the first time when someone was mining some crypto on our jenkins.. Apr 12 09:27:26 if there's a gap in builds just now (that's the biggest problem, scheduling updates), I can do some updates on it todaY? Apr 12 09:28:08 I'd be fine Apr 12 09:28:15 I can stop and re-schedule luneos builds, khem's builds will take couple more hours Apr 12 09:28:25 will ping you when it's free Apr 12 09:28:35 thanks! Apr 12 09:29:26 Seems buildbot is used by large projects such as Mozilla and Chromium as well, so it cannot be that bad ;) Apr 12 09:31:23 Guess it will take time to get used to, but might be beneficial in the long run Apr 12 09:32:04 It'll mostly take time to migrate our scripts, I guess Apr 12 09:33:18 shouldn't take very long as the "api" we use is very thin (just job name, workspace dir, job number IIRC) Apr 12 09:33:51 if buildbot can fetch our jenkins-job.sh from github, export these 3 variables, then the same script should in theory work fine Apr 12 09:34:46 but I'm not really interested in buildbot, so if someone else wants to play with it, I'll be happy to let him Apr 12 09:40:13 I can't say it would be useful on my little machine either :p Apr 12 09:40:39 Same here I guess, but well Apr 12 09:46:29 A new tool is always interesting in some ways, but these days I just won't have the time for that :) Apr 12 09:52:41 it would be more interesting if it fixes or improves something for us, but I'm quite happy with jenkins :) Apr 12 09:53:20 but I understand that it's easier to maintain single tool in infra instead of 2 Apr 12 10:00:14 I don't know enough about buildbot to give decent answers yet, but i'll try for a couple Apr 12 10:00:34 it's supposed to be lighter in weight, runs as python instead of java Apr 12 10:01:05 I've never been a big fan of Java ;) Apr 12 10:01:25 I think ka6sox's aim is also make it a little more dynamic, sort of not having dedicated builders, but a large pool of builders that can be used Apr 12 10:01:33 (tbh i'm not a big fan of java either) Apr 12 10:02:09 I know the pain at having to adjust to a new system, but it is git integrated & I don't see why it couldn't pull the existing scripts down & run them Apr 12 10:02:49 novaldex: The scripts JaMa made are pretty straight forward like he said, so API wise it shouldn't be rocket science to adjust them to get them to work Apr 12 11:12:16 hmm khem's jobs will take more than few hours Apr 12 11:40:38 okay, perhaps something to take care of come Monday instead, will be a bit busy over the weekend Apr 12 21:15:54 novaldex|away: still around? Apr 12 21:16:10 khem's jobs should finish soon, I can stop LuneOS ones as well Apr 12 21:16:48 if not, I'll let them run over the weekend **** ENDING LOGGING AT Sat Apr 13 02:59:57 2019