Hi, on the ApacheCon we were told that it is possible for any Apache Project to get a dedicated VM ... perhaps this would be something we should use? And it would be definitely possible to setup a build agent on that VM and have Infra set that up in the public Jenkins (That agent would be flagged with "ApacheFlex" or something like that and our builds would be flagged with "needs ApacheFlex". Then we would be using the public CI server but be running on our own Agents. Think that's a sensible solution. I even mentioned the option to Add external Agents, this would be possible, but Infra would prefer Apache Internal VMs in order to avoid any unwanted Influence of external parties (Namely a company sponsoring a vm and using that to influence votes ... well I guess it was a little paranoid, but a valid thought)
Chris -----Ursprüngliche Nachricht----- Von: Alex Harui [mailto:aha...@adobe.com] Gesendet: Montag, 21. April 2014 08:22 An: dev@flex.apache.org Betreff: Re: Build Servers Hi Erik, Om, I actually spent my evenings this weekend trying to set it up. Figured I'd learn something about Jenkins and Azure in the process. I'll post the info on private@ and we should just send emails when/if you guys have time to spend on it. I'll be poking at it for another 40 minutes or so this evening. Feel free to change just about anything. Thanks, -Alex On 4/20/14 11:46 AM, "OmPrakash Muppirala" <bigosma...@gmail.com> wrote: >On Sun, Apr 20, 2014 at 11:35 AM, Erik de Bruin <e...@ixsoftware.nl> >wrote: > >> Just CI and nightlies, to replace 'builds@a.o'. >> >> Then if that is working reliably, we can start experimenting with >>your plan to add more Mustella nodes... >> >> >Great. Can you make sure that the VMs are clone-able? You might have >to create a fully working system, stop it, do a sysprep and create a >clone before use that. It is a little bit of upfront work, but makes >it so much easier to bring new systems online and get them working off the bat. > >Thanks, >Om > > >> EdB >> >> >> >> >> On Sun, Apr 20, 2014 at 7:48 PM, OmPrakash Muppirala >> <bigosma...@gmail.com>wrote: >> >> > On Apr 20, 2014 10:24 AM, "Erik de Bruin" <e...@ixsoftware.nl> wrote: >> > > >> > > Alex, >> > > >> > > I may be able to free up some time this week to (help) create the >> > > CI >> VM. >> > > "All" I need are your Azure account credentials, so I can set up >> > > the >> VM, >> > > after which I can use RDP to set up the software for the builds. >> > > >> > > Free from 'builds@a.o', free at last! >> > > >> > > EdB >> > > >> > > >> > >> > What about Mustella? Our is this just for CI? >> > >> > > >> > > >> > > On Sat, Apr 19, 2014 at 6:56 AM, Alex Harui <aha...@adobe.com> >>wrote: >> > > >> > > > After seeing this latest run of failures, does anybody still >> > > > want >>to >> > rely >> > > > on build.a.o for anything? >> > > > >> > > > If anything, we should ask builds@ to email their list when >> > > > they >>do >> > > > critical security upgrades so we can try to keep up on our >> > > > build >> > machine. >> > > > I think there's a chance that a multi-project server is likely >> > > > to >> have >> > a >> > > > huge pile of jars from all over the place which is more exposed >>than >> > the >> > > > few jars for our flex-only server. We just have to learn how >> > > > to >> harden >> > it >> > > > at least as well as builds.a.o. Shouldn't that be possible? >> > > > >> > > > And I have to admit that I'm tempted to point the next version >> > > > of >>the >> > > > installer out to our Flex CI server for its config or mirror >> > > > the >> whole >> > > > site. We can't even modify our site right now. >> > > > >> > > > -Alex >> > > > >> > > > On 4/17/14 3:58 PM, "Justin Mclean" <jus...@classsoftware.com> >> wrote: >> > > > >> > > > >HI, >> > > > > >> > > > >> Do we want to at least use the ASF build server for >> > > > >> providing >> > official >> > > > >> nightly dev builds? >> > > > >+1 We can resonably trust infra machines to be secure and >> > > > >+that >>non >> > one >> > > > >has fiddled with the nightly builds. Our own set up machines >> > > > >are >> > likely >> > > > >to be less secure and there's a small risk that something bad >>could >> > > > >happen. >> > > > > >> > > > >Thanks, >> > > > >Justin >> > > > >> > > > >> > > >> > > >> > > -- >> > > Ix Multimedia Software >> > > >> > > Jan Luykenstraat 27 >> > > 3521 VB Utrecht >> > > >> > > T. 06-51952295 >> > > I. www.ixsoftware.nl >> > >> >> >> >> -- >> Ix Multimedia Software >> >> Jan Luykenstraat 27 >> 3521 VB Utrecht >> >> T. 06-51952295 >> I. www.ixsoftware.nl >>