Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (Cyborg)
  • No Skin
Collapse
Brand Logo

CIRCLE WITH A DOT

  1. Home
  2. Uncategorized
  3. #copyfail is why the Forgejo Actions runner service i'm setting up will be using kvm and single shot VMs rather than containers

#copyfail is why the Forgejo Actions runner service i'm setting up will be using kvm and single shot VMs rather than containers

Scheduled Pinned Locked Moved Uncategorized
copyfail
36 Posts 13 Posters 0 Views
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • thejpster@hachyderm.ioT thejpster@hachyderm.io

    @whitequark copy-on-write shallow clones of VMs works great for CI. I was doing it back in 2011 or so.

    whitequark@social.treehouse.systemsW This user is from outside of this forum
    whitequark@social.treehouse.systemsW This user is from outside of this forum
    whitequark@social.treehouse.systems
    wrote last edited by
    #14

    @thejpster yep, the plan is to do something like that with microVMs (or the closest approximation if the obvious solution is non-viable)

    thejpster@hachyderm.ioT 1 Reply Last reply
    0
    • whitequark@social.treehouse.systemsW whitequark@social.treehouse.systems

      #copyfail is why the Forgejo Actions runner service i'm setting up will be using kvm and single shot VMs rather than containers

      wren6991@types.plW This user is from outside of this forum
      wren6991@types.plW This user is from outside of this forum
      wren6991@types.pl
      wrote last edited by
      #15

      @whitequark containers: the convenience of a VM and the security of rawdogging userspace 😎

      whitequark@social.treehouse.systemsW 1 Reply Last reply
      0
      • whitequark@social.treehouse.systemsW whitequark@social.treehouse.systems

        #copyfail is why the Forgejo Actions runner service i'm setting up will be using kvm and single shot VMs rather than containers

        chaos@gts.schizofucked.monsterC This user is from outside of this forum
        chaos@gts.schizofucked.monsterC This user is from outside of this forum
        chaos@gts.schizofucked.monster
        wrote last edited by
        #16

        @whitequark dunno what copyfail is but we're gonna end up doing the same
        currently working on migration to our alpine+libvirt+scripts hypervisor os on main server specifically to allow for stuff like this
        eventually plan to make a thing to let us do docker compose style services, but as a full VM per service or a container runtime if required

        chaos@gts.schizofucked.monsterC 1 Reply Last reply
        0
        • whitequark@social.treehouse.systemsW whitequark@social.treehouse.systems

          @thejpster yep, the plan is to do something like that with microVMs (or the closest approximation if the obvious solution is non-viable)

          thejpster@hachyderm.ioT This user is from outside of this forum
          thejpster@hachyderm.ioT This user is from outside of this forum
          thejpster@hachyderm.io
          wrote last edited by
          #17

          @whitequark I suspect you won't be using VMware vSphere and the VMware Perl SDK though 😕

          whitequark@social.treehouse.systemsW autumnwinds@mathstodon.xyzA 2 Replies Last reply
          0
          • whitequark@social.treehouse.systemsW whitequark@social.treehouse.systems

            @janl yes (already underway) and uh want to buy me a motherboard?

            alex@feed.yopp.meA This user is from outside of this forum
            alex@feed.yopp.meA This user is from outside of this forum
            alex@feed.yopp.me
            wrote last edited by
            #18

            @whitequark I have my old box collecting dust while waiting for a crazy enough buyer. Im slowly lowering price, but probably it’s not going to be sold in next few months.

            If it’s any use for you in meantime, I can give you direct access to bcm webui so you can do whatever you like with it 🙂

            We can figure out how much of heads up you need in case someone would be willing to buy it. And I have second low power box that can be used for backups

            EPYC 7551P (1gen, 32C/64T) on Gigabyte MZ01-CE1 (with browser based KVM)
            RAM 256G: 8× 32G M393A4K40BB2-CTD DDR4-2666
            NVME 2T: 1× WD Black SN850X
            HDD 12T: 4× 3TB HGST Ultrastar 7K300

            • 2× Tesla P40 (if you are in a mood for messing with sharing gpu with workers)
            whitequark@social.treehouse.systemsW 1 Reply Last reply
            0
            • chaos@gts.schizofucked.monsterC chaos@gts.schizofucked.monster

              @whitequark dunno what copyfail is but we're gonna end up doing the same
              currently working on migration to our alpine+libvirt+scripts hypervisor os on main server specifically to allow for stuff like this
              eventually plan to make a thing to let us do docker compose style services, but as a full VM per service or a container runtime if required

              chaos@gts.schizofucked.monsterC This user is from outside of this forum
              chaos@gts.schizofucked.monsterC This user is from outside of this forum
              chaos@gts.schizofucked.monster
              wrote last edited by
              #19

              @whitequark hoping there is a way to speed up vm launch time though, if you have any resources that might be useful, feel free to send us, medical issues are making it almost impossible for us to focus enough to find resources on how to best do this kinda thing securely and decently

              while we'd love to use xcp-ng, the old kernel / xen kinda limits its use on little guys (fucked cpu freq scaling), and proxmox requires so much host configuration for our weird setups which we'd rather avoid, so making our own embedded style alpine distro with A/B boot specifically for this

              whitequark@social.treehouse.systemsW 1 Reply Last reply
              0
              • wren6991@types.plW wren6991@types.pl

                @whitequark containers: the convenience of a VM and the security of rawdogging userspace 😎

                whitequark@social.treehouse.systemsW This user is from outside of this forum
                whitequark@social.treehouse.systemsW This user is from outside of this forum
                whitequark@social.treehouse.systems
                wrote last edited by
                #20

                @wren6991 yep

                1 Reply Last reply
                0
                • chaos@gts.schizofucked.monsterC chaos@gts.schizofucked.monster

                  @whitequark hoping there is a way to speed up vm launch time though, if you have any resources that might be useful, feel free to send us, medical issues are making it almost impossible for us to focus enough to find resources on how to best do this kinda thing securely and decently

                  while we'd love to use xcp-ng, the old kernel / xen kinda limits its use on little guys (fucked cpu freq scaling), and proxmox requires so much host configuration for our weird setups which we'd rather avoid, so making our own embedded style alpine distro with A/B boot specifically for this

                  whitequark@social.treehouse.systemsW This user is from outside of this forum
                  whitequark@social.treehouse.systemsW This user is from outside of this forum
                  whitequark@social.treehouse.systems
                  wrote last edited by
                  #21

                  @chaos firecracker or crosvm is the current plan but i'm not recommending either until i get actual operational experience

                  chaos@gts.schizofucked.monsterC 1 Reply Last reply
                  0
                  • thejpster@hachyderm.ioT thejpster@hachyderm.io

                    @whitequark I suspect you won't be using VMware vSphere and the VMware Perl SDK though 😕

                    whitequark@social.treehouse.systemsW This user is from outside of this forum
                    whitequark@social.treehouse.systemsW This user is from outside of this forum
                    whitequark@social.treehouse.systems
                    wrote last edited by
                    #22

                    @thejpster mercifully, no

                    1 Reply Last reply
                    0
                    • alex@feed.yopp.meA alex@feed.yopp.me

                      @whitequark I have my old box collecting dust while waiting for a crazy enough buyer. Im slowly lowering price, but probably it’s not going to be sold in next few months.

                      If it’s any use for you in meantime, I can give you direct access to bcm webui so you can do whatever you like with it 🙂

                      We can figure out how much of heads up you need in case someone would be willing to buy it. And I have second low power box that can be used for backups

                      EPYC 7551P (1gen, 32C/64T) on Gigabyte MZ01-CE1 (with browser based KVM)
                      RAM 256G: 8× 32G M393A4K40BB2-CTD DDR4-2666
                      NVME 2T: 1× WD Black SN850X
                      HDD 12T: 4× 3TB HGST Ultrastar 7K300

                      • 2× Tesla P40 (if you are in a mood for messing with sharing gpu with workers)
                      whitequark@social.treehouse.systemsW This user is from outside of this forum
                      whitequark@social.treehouse.systemsW This user is from outside of this forum
                      whitequark@social.treehouse.systems
                      wrote last edited by
                      #23

                      @alex access would help a lot for testing, yeah!

                      alex@feed.yopp.meA 1 Reply Last reply
                      0
                      • whitequark@social.treehouse.systemsW whitequark@social.treehouse.systems

                        @chaos firecracker or crosvm is the current plan but i'm not recommending either until i get actual operational experience

                        chaos@gts.schizofucked.monsterC This user is from outside of this forum
                        chaos@gts.schizofucked.monsterC This user is from outside of this forum
                        chaos@gts.schizofucked.monster
                        wrote last edited by
                        #24

                        @whitequark let us know how you get on with em

                        we did some hacking on crosvm and used it a while ago but knowledge gained never sync'd

                        whitequark@social.treehouse.systemsW 1 Reply Last reply
                        0
                        • chaos@gts.schizofucked.monsterC chaos@gts.schizofucked.monster

                          @whitequark let us know how you get on with em

                          we did some hacking on crosvm and used it a while ago but knowledge gained never sync'd

                          whitequark@social.treehouse.systemsW This user is from outside of this forum
                          whitequark@social.treehouse.systemsW This user is from outside of this forum
                          whitequark@social.treehouse.systems
                          wrote last edited by
                          #25

                          @chaos ack, I will be sharing it here

                          1 Reply Last reply
                          0
                          • whitequark@social.treehouse.systemsW whitequark@social.treehouse.systems

                            #copyfail is why the Forgejo Actions runner service i'm setting up will be using kvm and single shot VMs rather than containers

                            snowfox@tech.lgbtS This user is from outside of this forum
                            snowfox@tech.lgbtS This user is from outside of this forum
                            snowfox@tech.lgbt
                            wrote last edited by
                            #26

                            @whitequark Wow... that one is pretty bad.

                            Guess I'm deleting some kernel modules today.

                            1 Reply Last reply
                            0
                            • thejpster@hachyderm.ioT thejpster@hachyderm.io

                              @whitequark I suspect you won't be using VMware vSphere and the VMware Perl SDK though 😕

                              autumnwinds@mathstodon.xyzA This user is from outside of this forum
                              autumnwinds@mathstodon.xyzA This user is from outside of this forum
                              autumnwinds@mathstodon.xyz
                              wrote last edited by
                              #27

                              @thejpster i have to say Solaris zones are surprisingly slow for this

                              1 Reply Last reply
                              0
                              • whitequark@social.treehouse.systemsW whitequark@social.treehouse.systems

                                @alex access would help a lot for testing, yeah!

                                alex@feed.yopp.meA This user is from outside of this forum
                                alex@feed.yopp.meA This user is from outside of this forum
                                alex@feed.yopp.me
                                wrote last edited by
                                #28

                                @whitequark awesome! Gimme some time, I'll prepare everything. How can I reach you to hand over access credentials?

                                whitequark@social.treehouse.systemsW 1 Reply Last reply
                                1
                                0
                                • R relay@relay.mycrowd.ca shared this topic
                                • alex@feed.yopp.meA alex@feed.yopp.me

                                  @whitequark awesome! Gimme some time, I'll prepare everything. How can I reach you to hand over access credentials?

                                  whitequark@social.treehouse.systemsW This user is from outside of this forum
                                  whitequark@social.treehouse.systemsW This user is from outside of this forum
                                  whitequark@social.treehouse.systems
                                  wrote last edited by
                                  #29

                                  @alex whitequark@whitequark.org, you can encrypt to https://codeberg.org/whitequark.keys

                                  alex@feed.yopp.meA 1 Reply Last reply
                                  0
                                  • whitequark@social.treehouse.systemsW whitequark@social.treehouse.systems

                                    #copyfail is why the Forgejo Actions runner service i'm setting up will be using kvm and single shot VMs rather than containers

                                    jorijn@toot.communityJ This user is from outside of this forum
                                    jorijn@toot.communityJ This user is from outside of this forum
                                    jorijn@toot.community
                                    wrote last edited by
                                    #30

                                    @whitequark wanna tell me a bit more about that forgejo runner system? 🙂 interested.

                                    whitequark@social.treehouse.systemsW 1 Reply Last reply
                                    0
                                    • whitequark@social.treehouse.systemsW whitequark@social.treehouse.systems

                                      #copyfail is why the Forgejo Actions runner service i'm setting up will be using kvm and single shot VMs rather than containers

                                      ananas@scicomm.xyzA This user is from outside of this forum
                                      ananas@scicomm.xyzA This user is from outside of this forum
                                      ananas@scicomm.xyz
                                      wrote last edited by
                                      #31

                                      @whitequark What do you use the orchestrate the VMs? Every time I try to do this I end up trying to reinvent half of libvirt.

                                      whitequark@social.treehouse.systemsW 1 Reply Last reply
                                      0
                                      • jorijn@toot.communityJ jorijn@toot.community

                                        @whitequark wanna tell me a bit more about that forgejo runner system? 🙂 interested.

                                        whitequark@social.treehouse.systemsW This user is from outside of this forum
                                        whitequark@social.treehouse.systemsW This user is from outside of this forum
                                        whitequark@social.treehouse.systems
                                        wrote last edited by
                                        #32

                                        @jorijn it's very much WIP

                                        jorijn@toot.communityJ 1 Reply Last reply
                                        0
                                        • ananas@scicomm.xyzA ananas@scicomm.xyz

                                          @whitequark What do you use the orchestrate the VMs? Every time I try to do this I end up trying to reinvent half of libvirt.

                                          whitequark@social.treehouse.systemsW This user is from outside of this forum
                                          whitequark@social.treehouse.systemsW This user is from outside of this forum
                                          whitequark@social.treehouse.systems
                                          wrote last edited by
                                          #33

                                          @ananas nothing specific yet, trying out some stuff

                                          1 Reply Last reply
                                          0
                                          Reply
                                          • Reply as topic
                                          Log in to reply
                                          • Oldest to Newest
                                          • Newest to Oldest
                                          • Most Votes


                                          • Login

                                          • Login or register to search.
                                          • First post
                                            Last post
                                          0
                                          • Categories
                                          • Recent
                                          • Tags
                                          • Popular
                                          • World
                                          • Users
                                          • Groups