IRC logs for #buildstream for Monday, 2020-03-02

*** narispo has joined #buildstream02:33
*** delli3 has quit IRC05:34
*** traveltissues has joined #buildstream08:30
*** benschubert has joined #buildstream09:11
*** santi has joined #buildstream09:44
*** tme5 has joined #buildstream09:48
*** tpollard has joined #buildstream10:07
*** jonathanmaw has joined #buildstream10:10
*** paulsherwood has quit IRC11:34
*** paulsherwood has joined #buildstream11:35
*** ikerperez has quit IRC12:07
*** traveltissues has quit IRC13:15
*** traveltissues has joined #buildstream13:15
coldtomhi, i've just realised that using host tools to fetch sources means that buildstream potentially loses reproducibility, is there any thought about how to mitigate/solve this?13:46
*** traveltissues has quit IRC13:55
*** traveltissues has joined #buildstream13:58
*** traveltissues has quit IRC14:00
benschubertcoldtom: in *theory*, the step of fetching the sources should be repeatable and give you the same data, whatever the version of the tool you are using to retrieve it. Combined with the 'ref' it should be enough to ensure repeatable builds at least.14:00
benschubertFor reproducible builds, well... we can't beat the tools that are under us anyways (gcc/etc)14:00
benschubertFor more details:14:00
benschubert1) The Remote Asset API should standardize a part of the source fetching, which might help14:00
benschubert2) There had been talks of also running the source fetchs in a sandbox, with allowed network access. Nothing concrete until now though14:00
coldtombenschubert: i don't think that that theory holds up in practice, if we just use the host tools then we also get whatever configuration and extra plugins are installed on a host, for example cloning a repo with/without git-lfs could give some pretty huge differences14:03
coldtombut, i like the sound of (2), i think that that seems like a sensible way to do things14:03
benschubert> cloning a repo with/without git-lfs could give some pretty huge differences14:31
benschubertShould not be a problem, the plugin should be able to tell14:31
benschubert> 2:03 PM <coldtom> but, i like the sound of (2), i think that that seems like a sensible way to do things14:32
benschubertIs not ideal either: How do you create this sandbox? By pulling something without a sandbox? -> shifting the problem. Moreover, I'm not sure how it would work with the RemoteAsset API14:32
coldtomi don't think it's reasonable for plugin authors to need to handle every single host tool config/plugin/add-on to ensure that things are fixed, as for sandboxing fetching i think it would need to be optional really for bootstrapping purposes14:47
benschubert> every single host tool config/plugin/add-on14:49
benschubertdefinitely, but we can have a plugin/setup14:49
benschubertlike for lfs, you would have a "git lfs" source transform, and it would bail out if you don't support that14:50
tme5from what i gather, coldtom's concern is that the user configuration could significantly affect the fetch14:52
coldtomthe issue comes when i have lfs installed, and configured to clone with git, then the base git plugin is going to clone that in a different way whether i have a source transform or not, isn't it?14:52
coldtomyup, what tme5 said14:53
tme5coldtom, idk if that example works, pretty sure it doesn;t automatically pull lfs objects14:53
tme5but i think it's a reasonable concern in general - if i have a really funky .gitconfig could this break bst?14:54
coldtomtme5, i'm pretty sure you can at least configure it so that it does, and i definitely have had `git clone foo` at least pull lfs objects in the past (in any case, this was just a stab at an example)14:55
benschubertAbout breaking: you still pin to a ocmmit sha. Unless you rewrite git to do funky things.... but hey :)14:56
benschubertFor LFS, I'm surprised that the pull would be automatic14:56
coldtommaybe not for git-lfs in specific, but i don't think it's too hard to consider someone having, say, a plugin for a tool that alters the content of a fetched commit15:03
*** phildawson-ct has joined #buildstream16:48
*** phildawson_ has quit IRC16:49
*** hergertme|vaca is now known as hergertme17:05
jjardonhi, who is the maintainer of the current buildstream CI?17:38
*** tme5 has quit IRC17:40
benschubertjjardon: the CI runners?17:51
jjardonyup17:51
benschubertvalentind: If I remember correctly?17:55
valentindjjardon, What is the matter?17:55
*** santi has quit IRC17:56
jjardonI will PM you18:01
gitlab-br-botjuergbi opened MR !1826 (juerg/buildbox-signals->master: _sandboxbuildboxrun.py: Fix signal handling) on buildstream https://gitlab.com/BuildStream/buildstream/-/merge_requests/182618:03
*** narispo has quit IRC18:07
*** narispo has joined #buildstream18:07
*** jonathanmaw has quit IRC18:21
*** phildawson-ct has quit IRC18:31
*** narispo has quit IRC19:24
*** benschubert has quit IRC21:09

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!