#copyfail is why the Forgejo Actions runner service i'm setting up will be using kvm and single shot VMs rather than containers
-
@whitequark dunno what copyfail is but we're gonna end up doing the same
currently working on migration to our alpine+libvirt+scripts hypervisor os on main server specifically to allow for stuff like this
eventually plan to make a thing to let us do docker compose style services, but as a full VM per service or a container runtime if required@whitequark hoping there is a way to speed up vm launch time though, if you have any resources that might be useful, feel free to send us, medical issues are making it almost impossible for us to focus enough to find resources on how to best do this kinda thing securely and decently
while we'd love to use xcp-ng, the old kernel / xen kinda limits its use on little guys (fucked cpu freq scaling), and proxmox requires so much host configuration for our weird setups which we'd rather avoid, so making our own embedded style alpine distro with A/B boot specifically for this -
@whitequark containers: the convenience of a VM and the security of rawdogging userspace
-
@whitequark hoping there is a way to speed up vm launch time though, if you have any resources that might be useful, feel free to send us, medical issues are making it almost impossible for us to focus enough to find resources on how to best do this kinda thing securely and decently
while we'd love to use xcp-ng, the old kernel / xen kinda limits its use on little guys (fucked cpu freq scaling), and proxmox requires so much host configuration for our weird setups which we'd rather avoid, so making our own embedded style alpine distro with A/B boot specifically for this@chaos firecracker or crosvm is the current plan but i'm not recommending either until i get actual operational experience
-
@whitequark I suspect you won't be using VMware vSphere and the VMware Perl SDK though
@thejpster mercifully, no
-
@whitequark I have my old box collecting dust while waiting for a crazy enough buyer. Im slowly lowering price, but probably it’s not going to be sold in next few months.
If it’s any use for you in meantime, I can give you direct access to bcm webui so you can do whatever you like with it
We can figure out how much of heads up you need in case someone would be willing to buy it. And I have second low power box that can be used for backups
EPYC 7551P (1gen, 32C/64T) on Gigabyte MZ01-CE1 (with browser based KVM)
RAM 256G: 8× 32G M393A4K40BB2-CTD DDR4-2666
NVME 2T: 1× WD Black SN850X
HDD 12T: 4× 3TB HGST Ultrastar 7K300- 2× Tesla P40 (if you are in a mood for messing with sharing gpu with workers)
@alex access would help a lot for testing, yeah!
-
@chaos firecracker or crosvm is the current plan but i'm not recommending either until i get actual operational experience
@whitequark let us know how you get on with em
we did some hacking on crosvm and used it a while ago but knowledge gained never sync'd -
@whitequark let us know how you get on with em
we did some hacking on crosvm and used it a while ago but knowledge gained never sync'd@chaos ack, I will be sharing it here
-
#copyfail is why the Forgejo Actions runner service i'm setting up will be using kvm and single shot VMs rather than containers
@whitequark Wow... that one is pretty bad.
Guess I'm deleting some kernel modules today.
-
@whitequark I suspect you won't be using VMware vSphere and the VMware Perl SDK though
@thejpster i have to say Solaris zones are surprisingly slow for this
-
@alex access would help a lot for testing, yeah!
@whitequark awesome! Gimme some time, I'll prepare everything. How can I reach you to hand over access credentials?
-
R relay@relay.mycrowd.ca shared this topic
