@cryptotaxi247 / infra-1
Code Commits Issues Pulls Sessions CI/CD
main
main
md 7.61 KB
View source Raw

2024-04-18

Attendees: delroth, Janik, dgrig, vcunat, raitobezarius, hexa, Linus, Weija

Topics

  • [delroth] Bringing up the topic of Keycloak / Kanidm again

    • We'll probably want it for Jitsi? I'd also love to drop user management stuff from Hydra.
    • Other use cases:
    • Wiki? (I'm guessing mediawiki can SAML)
    • Pads? (for meeting notes that we'd rather not have vandalized)
    • Calendar?
    • Hydra? https://github.com/NixOS/hydra/pull/1298
    • [hexa] Requirements:
    • GitHub login, and being able to read organization membership info
    • Maybe Dex can do what we want as well? Proxy to backend apps
      • @raitobezarius in chat: oauth2-proxy as well exist
      • @raitobezarius in chat: SATOSA Proxy can be used to do SAML2<->Social Login

  • [delroth] releases.nixos.org S3 costs

    • tl;dr discovered last week that the bandwidth costs rose significantly for no known reason
    • Shape of the growth looks organic but there shouldn't really be anything causing it.
    • Fastly logs analysis showed nothing interesting.
    • Some access is blocked by eelco not sharing credentials
    • Enabled S3 logging, haven't analyzed yet.
    • Cost Explorer might be indicating that this isn't actually releases.nixos.org but something else in eu-west-1 also using S3? But then what? (or is Cost Explorer broken? wouldn't be too surprising)

  • [Janik] Jitsi on non-critical-infra

    • nixpkgs+infra PRs were reviewed
    • Still blocked on tracking down a bug
    • Probably will land soon (if someone helps with debugging)

  • [delroth] What do we still not have access to?

| Hostname | System | Location | Purpose | Access
infra-build | Access
infra | Comment | | ------------------------------ | -------------- | ---------- | --------------------------- | ---------------------- | ---------------- | ----------------------------------------- | | haumea.nixos.org | x86_64-linux | Hetzner | Hydra database | have | - | | | makemake.nixos.org | x86_64-linux | Hetzner | NGI Hydra | - | - | via https://github.com/ngi-nix/ngi0-infra | | intense-heron.mac.nixos.org | aarch64-darwin | Hetzner | Hydra builder | want | - | | | sweeping-filly.mac.nixos.org | aarch64-darwin | Hetzner | Hydra builder | want | - | | | maximum-snail.mac.nixos.org | aarch64-darwin | Hetzner | Hydra builder | want | - | | | growing-jennet.mac.nixos.org | aarch64-darwin | Hetzner | Hydra builder | want | - | | | enormous-catfish.mac.nixos.org | aarch64-darwin | Hetzner | Hydra builder | want | - | | | rhea.nixos.org | x86_64-linux | Hetzner | Hydra | have | - | | | caliban.nixos.org | x86-64-linux | Hetzner | NC-Infra | have | x | | | aa-hetzner-1.nixos.org | aarch64-linux | Hetzner | Hydra | have | - | config import infra repo todo | | pluto.nixos.org | x86_64-linux | Hetzner | Monitoring, Channel-Scripts | have | - | | | aarch64.nixos.community | aarch64-linux | Equinix | Community/ofborg builder | - | - | on demand | | 208.83.1.145 | aarch64-darwin | Macstadium | OfBorg builder | want | - | | | 208.83.1.173 | x86_64-darwin | Macstadium | OfBorg builder | want | - | | | 208.83.1.175 | x86_64-darwin | Macstadium | OfBorg builder | want | - | | | 208.83.1.181 | aarch64-darwin | Macstadium | OfBorg builder | want | - | | | 208.83.1.186 | x86_64-darwin | Macstadium | OfBorg builder | want | - | | | ofborg-core | x86_64-linux | Equinix | OfBorg controller | want | - | on demand | | netboot-foundation | x86_64-linux | Equinix | ? | - | - | on demand | | ofborg-evaluator0 | x86_64-linux | Equinix | OfBorg evaluator/builder | want | | on demand | | ofborg-evaluator1 | x86_64-linux | Equinix | OfBorg evaluator/builder | want | | on demand | | ofborg-evaluator2 | x86_64-linux | Equinix | OfBorg evaluator/builder | want | | on demand | | ofborg-evaluator3 | x86_64-linux | Equinix | OfBorg evaluator/builder | want | | on demand | | ofborg-evaluator4 | x86_64-linux | Equinix | OfBorg evaluator/builder | want | | on demand | | small-c3.large.arm64 | aarch64-linux | Equinix | Hydra builder | have | - | on demand | | big-parallel-c3.large.arm64 | aarch64-linux | Equinix | Hydra builder | have | - | on demand |

Changelog: