Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (Cyborg)
  • No Skin
Collapse
Brand Logo

CIRCLE WITH A DOT

  1. Home
  2. Uncategorized
  3. #copyfail is why the Forgejo Actions runner service i'm setting up will be using kvm and single shot VMs rather than containers

#copyfail is why the Forgejo Actions runner service i'm setting up will be using kvm and single shot VMs rather than containers

Scheduled Pinned Locked Moved Uncategorized
copyfail
36 Posts 13 Posters 0 Views
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • whitequark@social.treehouse.systemsW whitequark@social.treehouse.systems

    #copyfail is why the Forgejo Actions runner service i'm setting up will be using kvm and single shot VMs rather than containers

    wren6991@types.plW This user is from outside of this forum
    wren6991@types.plW This user is from outside of this forum
    wren6991@types.pl
    wrote last edited by
    #15

    @whitequark containers: the convenience of a VM and the security of rawdogging userspace 😎

    whitequark@social.treehouse.systemsW 1 Reply Last reply
    0
    • whitequark@social.treehouse.systemsW whitequark@social.treehouse.systems

      #copyfail is why the Forgejo Actions runner service i'm setting up will be using kvm and single shot VMs rather than containers

      chaos@gts.schizofucked.monsterC This user is from outside of this forum
      chaos@gts.schizofucked.monsterC This user is from outside of this forum
      chaos@gts.schizofucked.monster
      wrote last edited by
      #16

      @whitequark dunno what copyfail is but we're gonna end up doing the same
      currently working on migration to our alpine+libvirt+scripts hypervisor os on main server specifically to allow for stuff like this
      eventually plan to make a thing to let us do docker compose style services, but as a full VM per service or a container runtime if required

      chaos@gts.schizofucked.monsterC 1 Reply Last reply
      0
      • whitequark@social.treehouse.systemsW whitequark@social.treehouse.systems

        @thejpster yep, the plan is to do something like that with microVMs (or the closest approximation if the obvious solution is non-viable)

        thejpster@hachyderm.ioT This user is from outside of this forum
        thejpster@hachyderm.ioT This user is from outside of this forum
        thejpster@hachyderm.io
        wrote last edited by
        #17

        @whitequark I suspect you won't be using VMware vSphere and the VMware Perl SDK though 😕

        whitequark@social.treehouse.systemsW autumnwinds@mathstodon.xyzA 2 Replies Last reply
        0
        • whitequark@social.treehouse.systemsW whitequark@social.treehouse.systems

          @janl yes (already underway) and uh want to buy me a motherboard?

          alex@feed.yopp.meA This user is from outside of this forum
          alex@feed.yopp.meA This user is from outside of this forum
          alex@feed.yopp.me
          wrote last edited by
          #18

          @whitequark I have my old box collecting dust while waiting for a crazy enough buyer. Im slowly lowering price, but probably it’s not going to be sold in next few months.

          If it’s any use for you in meantime, I can give you direct access to bcm webui so you can do whatever you like with it 🙂

          We can figure out how much of heads up you need in case someone would be willing to buy it. And I have second low power box that can be used for backups

          EPYC 7551P (1gen, 32C/64T) on Gigabyte MZ01-CE1 (with browser based KVM)
          RAM 256G: 8× 32G M393A4K40BB2-CTD DDR4-2666
          NVME 2T: 1× WD Black SN850X
          HDD 12T: 4× 3TB HGST Ultrastar 7K300

          • 2× Tesla P40 (if you are in a mood for messing with sharing gpu with workers)
          whitequark@social.treehouse.systemsW 1 Reply Last reply
          0
          • chaos@gts.schizofucked.monsterC chaos@gts.schizofucked.monster

            @whitequark dunno what copyfail is but we're gonna end up doing the same
            currently working on migration to our alpine+libvirt+scripts hypervisor os on main server specifically to allow for stuff like this
            eventually plan to make a thing to let us do docker compose style services, but as a full VM per service or a container runtime if required

            chaos@gts.schizofucked.monsterC This user is from outside of this forum
            chaos@gts.schizofucked.monsterC This user is from outside of this forum
            chaos@gts.schizofucked.monster
            wrote last edited by
            #19

            @whitequark hoping there is a way to speed up vm launch time though, if you have any resources that might be useful, feel free to send us, medical issues are making it almost impossible for us to focus enough to find resources on how to best do this kinda thing securely and decently

            while we'd love to use xcp-ng, the old kernel / xen kinda limits its use on little guys (fucked cpu freq scaling), and proxmox requires so much host configuration for our weird setups which we'd rather avoid, so making our own embedded style alpine distro with A/B boot specifically for this

            whitequark@social.treehouse.systemsW 1 Reply Last reply
            0
            • wren6991@types.plW wren6991@types.pl

              @whitequark containers: the convenience of a VM and the security of rawdogging userspace 😎

              whitequark@social.treehouse.systemsW This user is from outside of this forum
              whitequark@social.treehouse.systemsW This user is from outside of this forum
              whitequark@social.treehouse.systems
              wrote last edited by
              #20

              @wren6991 yep

              1 Reply Last reply
              0
              • chaos@gts.schizofucked.monsterC chaos@gts.schizofucked.monster

                @whitequark hoping there is a way to speed up vm launch time though, if you have any resources that might be useful, feel free to send us, medical issues are making it almost impossible for us to focus enough to find resources on how to best do this kinda thing securely and decently

                while we'd love to use xcp-ng, the old kernel / xen kinda limits its use on little guys (fucked cpu freq scaling), and proxmox requires so much host configuration for our weird setups which we'd rather avoid, so making our own embedded style alpine distro with A/B boot specifically for this

                whitequark@social.treehouse.systemsW This user is from outside of this forum
                whitequark@social.treehouse.systemsW This user is from outside of this forum
                whitequark@social.treehouse.systems
                wrote last edited by
                #21

                @chaos firecracker or crosvm is the current plan but i'm not recommending either until i get actual operational experience

                chaos@gts.schizofucked.monsterC 1 Reply Last reply
                0
                • thejpster@hachyderm.ioT thejpster@hachyderm.io

                  @whitequark I suspect you won't be using VMware vSphere and the VMware Perl SDK though 😕

                  whitequark@social.treehouse.systemsW This user is from outside of this forum
                  whitequark@social.treehouse.systemsW This user is from outside of this forum
                  whitequark@social.treehouse.systems
                  wrote last edited by
                  #22

                  @thejpster mercifully, no

                  1 Reply Last reply
                  0
                  • alex@feed.yopp.meA alex@feed.yopp.me

                    @whitequark I have my old box collecting dust while waiting for a crazy enough buyer. Im slowly lowering price, but probably it’s not going to be sold in next few months.

                    If it’s any use for you in meantime, I can give you direct access to bcm webui so you can do whatever you like with it 🙂

                    We can figure out how much of heads up you need in case someone would be willing to buy it. And I have second low power box that can be used for backups

                    EPYC 7551P (1gen, 32C/64T) on Gigabyte MZ01-CE1 (with browser based KVM)
                    RAM 256G: 8× 32G M393A4K40BB2-CTD DDR4-2666
                    NVME 2T: 1× WD Black SN850X
                    HDD 12T: 4× 3TB HGST Ultrastar 7K300

                    • 2× Tesla P40 (if you are in a mood for messing with sharing gpu with workers)
                    whitequark@social.treehouse.systemsW This user is from outside of this forum
                    whitequark@social.treehouse.systemsW This user is from outside of this forum
                    whitequark@social.treehouse.systems
                    wrote last edited by
                    #23

                    @alex access would help a lot for testing, yeah!

                    alex@feed.yopp.meA 1 Reply Last reply
                    0
                    • whitequark@social.treehouse.systemsW whitequark@social.treehouse.systems

                      @chaos firecracker or crosvm is the current plan but i'm not recommending either until i get actual operational experience

                      chaos@gts.schizofucked.monsterC This user is from outside of this forum
                      chaos@gts.schizofucked.monsterC This user is from outside of this forum
                      chaos@gts.schizofucked.monster
                      wrote last edited by
                      #24

                      @whitequark let us know how you get on with em

                      we did some hacking on crosvm and used it a while ago but knowledge gained never sync'd

                      whitequark@social.treehouse.systemsW 1 Reply Last reply
                      0
                      • chaos@gts.schizofucked.monsterC chaos@gts.schizofucked.monster

                        @whitequark let us know how you get on with em

                        we did some hacking on crosvm and used it a while ago but knowledge gained never sync'd

                        whitequark@social.treehouse.systemsW This user is from outside of this forum
                        whitequark@social.treehouse.systemsW This user is from outside of this forum
                        whitequark@social.treehouse.systems
                        wrote last edited by
                        #25

                        @chaos ack, I will be sharing it here

                        1 Reply Last reply
                        0
                        • whitequark@social.treehouse.systemsW whitequark@social.treehouse.systems

                          #copyfail is why the Forgejo Actions runner service i'm setting up will be using kvm and single shot VMs rather than containers

                          snowfox@tech.lgbtS This user is from outside of this forum
                          snowfox@tech.lgbtS This user is from outside of this forum
                          snowfox@tech.lgbt
                          wrote last edited by
                          #26

                          @whitequark Wow... that one is pretty bad.

                          Guess I'm deleting some kernel modules today.

                          1 Reply Last reply
                          0
                          • thejpster@hachyderm.ioT thejpster@hachyderm.io

                            @whitequark I suspect you won't be using VMware vSphere and the VMware Perl SDK though 😕

                            autumnwinds@mathstodon.xyzA This user is from outside of this forum
                            autumnwinds@mathstodon.xyzA This user is from outside of this forum
                            autumnwinds@mathstodon.xyz
                            wrote last edited by
                            #27

                            @thejpster i have to say Solaris zones are surprisingly slow for this

                            1 Reply Last reply
                            0
                            • whitequark@social.treehouse.systemsW whitequark@social.treehouse.systems

                              @alex access would help a lot for testing, yeah!

                              alex@feed.yopp.meA This user is from outside of this forum
                              alex@feed.yopp.meA This user is from outside of this forum
                              alex@feed.yopp.me
                              wrote last edited by
                              #28

                              @whitequark awesome! Gimme some time, I'll prepare everything. How can I reach you to hand over access credentials?

                              whitequark@social.treehouse.systemsW 1 Reply Last reply
                              1
                              0
                              • R relay@relay.mycrowd.ca shared this topic
                              • alex@feed.yopp.meA alex@feed.yopp.me

                                @whitequark awesome! Gimme some time, I'll prepare everything. How can I reach you to hand over access credentials?

                                whitequark@social.treehouse.systemsW This user is from outside of this forum
                                whitequark@social.treehouse.systemsW This user is from outside of this forum
                                whitequark@social.treehouse.systems
                                wrote last edited by
                                #29

                                @alex whitequark@whitequark.org, you can encrypt to https://codeberg.org/whitequark.keys

                                alex@feed.yopp.meA 1 Reply Last reply
                                0
                                • whitequark@social.treehouse.systemsW whitequark@social.treehouse.systems

                                  #copyfail is why the Forgejo Actions runner service i'm setting up will be using kvm and single shot VMs rather than containers

                                  jorijn@toot.communityJ This user is from outside of this forum
                                  jorijn@toot.communityJ This user is from outside of this forum
                                  jorijn@toot.community
                                  wrote last edited by
                                  #30

                                  @whitequark wanna tell me a bit more about that forgejo runner system? 🙂 interested.

                                  whitequark@social.treehouse.systemsW 1 Reply Last reply
                                  0
                                  • whitequark@social.treehouse.systemsW whitequark@social.treehouse.systems

                                    #copyfail is why the Forgejo Actions runner service i'm setting up will be using kvm and single shot VMs rather than containers

                                    ananas@scicomm.xyzA This user is from outside of this forum
                                    ananas@scicomm.xyzA This user is from outside of this forum
                                    ananas@scicomm.xyz
                                    wrote last edited by
                                    #31

                                    @whitequark What do you use the orchestrate the VMs? Every time I try to do this I end up trying to reinvent half of libvirt.

                                    whitequark@social.treehouse.systemsW 1 Reply Last reply
                                    0
                                    • jorijn@toot.communityJ jorijn@toot.community

                                      @whitequark wanna tell me a bit more about that forgejo runner system? 🙂 interested.

                                      whitequark@social.treehouse.systemsW This user is from outside of this forum
                                      whitequark@social.treehouse.systemsW This user is from outside of this forum
                                      whitequark@social.treehouse.systems
                                      wrote last edited by
                                      #32

                                      @jorijn it's very much WIP

                                      jorijn@toot.communityJ 1 Reply Last reply
                                      0
                                      • ananas@scicomm.xyzA ananas@scicomm.xyz

                                        @whitequark What do you use the orchestrate the VMs? Every time I try to do this I end up trying to reinvent half of libvirt.

                                        whitequark@social.treehouse.systemsW This user is from outside of this forum
                                        whitequark@social.treehouse.systemsW This user is from outside of this forum
                                        whitequark@social.treehouse.systems
                                        wrote last edited by
                                        #33

                                        @ananas nothing specific yet, trying out some stuff

                                        1 Reply Last reply
                                        0
                                        • whitequark@social.treehouse.systemsW whitequark@social.treehouse.systems

                                          @jorijn it's very much WIP

                                          jorijn@toot.communityJ This user is from outside of this forum
                                          jorijn@toot.communityJ This user is from outside of this forum
                                          jorijn@toot.community
                                          wrote last edited by
                                          #34

                                          @whitequark interesting nonetheless, does it resemble https://codeberg.org/forgejo/discussions/issues/152?

                                          whitequark@social.treehouse.systemsW 1 Reply Last reply
                                          0
                                          Reply
                                          • Reply as topic
                                          Log in to reply
                                          • Oldest to Newest
                                          • Newest to Oldest
                                          • Most Votes


                                          • Login

                                          • Login or register to search.
                                          • First post
                                            Last post
                                          0
                                          • Categories
                                          • Recent
                                          • Tags
                                          • Popular
                                          • World
                                          • Users
                                          • Groups