meeting-notes: add 2024-04-18
Martin Weinelt committed
Apr 20, 2024 at 13:10 UTC
ec4f72047ca2b8e68d61904b44cc2c1ac70cd224
1 file changed
+78
docs/meeting-notes/2024-04-18.md
new
+78
@@ -0,0 +1,78 @@
1
+# 2024-04-18
2
+
3
+Attendees: delroth, Janik, dgrig, vcunat, raitobezarius, hexa, Linus, Weija
4
+
5
+## Topics
6
+
7
+- [delroth] Bringing up the topic of Keycloak / Kanidm again
8
+ - We'll probably want it for Jitsi? I'd also love to drop user management stuff from Hydra.
9
+ - Other use cases:
10
+ - Wiki? (I'm guessing mediawiki can SAML)
11
+ - Pads? (for meeting notes that we'd rather not have vandalized)
12
+ - Calendar?
13
+ - Hydra? https://github.com/NixOS/hydra/pull/1298
14
+ - [hexa] Requirements:
15
+ - GitHub login, and being able to read organization membership info
16
+ - Maybe Dex can do what we want as well? Proxy to backend apps
17
+ - @raitobezarius in chat: [oauth2-proxy](https://oauth2-proxy.github.io/oauth2-proxy/configuration/providers/github/) as well exist
18
+ - @raitobezarius in chat: [SATOSA Proxy](https://github.com/IdentityPython/SATOSA) can be used to do SAML2<->Social Login
19
+
20
+- [delroth] releases.nixos.org S3 costs
21
+ - tl;dr discovered last week that the bandwidth costs rose significantly for no known reason
22
+ - Shape of the growth looks organic but there shouldn't really be anything causing it.
23
+ - Fastly logs analysis showed nothing interesting.
24
+ - Some access is blocked by [eelco not sharing credentials](https://github.com/NixOS/infra/pull/388#discussion_r1545856527)
25
+ - Enabled S3 logging, haven't analyzed yet.
26
+ - Cost Explorer might be indicating that this isn't actually releases.nixos.org but something else in eu-west-1 also using S3? But then what? (or is Cost Explorer broken? wouldn't be too surprising)
27
+
28
+- [Janik] Jitsi on non-critical-infra
29
+ - nixpkgs+infra PRs were reviewed
30
+ - Still blocked on tracking down a bug
31
+ - Probably will land soon (if someone helps with debugging)
32
+
33
+- [delroth] What do we still not have access to?
34
+
35
+ | Hostname | System | Location | Purpose | Access <br>infra-build | Access <br>infra | Comment |
36
+ | --- | --- | --- | --- | --- | --- | --- |
37
+ | haumea.nixos.org | x86_64-linux | Hetzner | Hydra database | have | \- | |
38
+ | makemake.nixos.org | x86_64-linux | Hetzner | NGI Hydra | \- | \- | via https://github.com/ngi-nix/ngi0-infra |
39
+ | intense-heron.mac.nixos.org | aarch64-darwin | Hetzner | Hydra builder | want | \- | |
40
+ | sweeping-filly.mac.nixos.org | aarch64-darwin | Hetzner | Hydra builder | want | \- | |
41
+ | maximum-snail.mac.nixos.org | aarch64-darwin | Hetzner | Hydra builder | want | \- | |
42
+ | growing-jennet.mac.nixos.org | aarch64-darwin | Hetzner | Hydra builder | want | \- | |
43
+ | enormous-catfish.mac.nixos.org | aarch64-darwin | Hetzner | Hydra builder | want | \- | |
44
+ | rhea.nixos.org | x86_64-linux | Hetzner | Hydra | have | \- | |
45
+ | caliban.nixos.org | x86-64-linux | Hetzner | NC-Infra | have | x | |
46
+ | aa-hetzner-1.nixos.org | aarch64-linux | Hetzner | Hydra | have | \- | config import infra repo todo |
47
+ | pluto.nixos.org | x86_64-linux | Hetzner | Monitoring, Channel-Scripts | have | \- | |
48
+ | aarch64.nixos.community | aarch64-linux | Equinix | Community/ofborg builder | \- | \- | on demand |
49
+ | 208.83.1.145 | aarch64-darwin | Macstadium | OfBorg builder | want | \- | |
50
+ | 208.83.1.173 | x86_64-darwin | Macstadium | OfBorg builder | want | \- | |
51
+ | 208.83.1.175 | x86_64-darwin | Macstadium | OfBorg builder | want | \- | |
52
+ | 208.83.1.181 | aarch64-darwin | Macstadium | OfBorg builder | want | \- | |
53
+ | 208.83.1.186 | x86_64-darwin | Macstadium | OfBorg builder | want | \- | |
54
+ | ofborg-core | x86_64-linux | Equinix | OfBorg controller | want | \- | on demand |
55
+ | netboot-foundation | x86_64-linux | Equinix | ? | \- | \- | on demand |
56
+ | ofborg-evaluator0 | x86_64-linux | Equinix | OfBorg evaluator/builder | want | | on demand |
57
+ | ofborg-evaluator1 | x86_64-linux | Equinix | OfBorg evaluator/builder | want | | on demand |
58
+ | ofborg-evaluator2 | x86_64-linux | Equinix | OfBorg evaluator/builder | want | | on demand |
59
+ | ofborg-evaluator3 | x86_64-linux | Equinix | OfBorg evaluator/builder | want | | on demand |
60
+ | ofborg-evaluator4 | x86_64-linux | Equinix | OfBorg evaluator/builder | want | | on demand |
61
+ | small-c3.large.arm64 | aarch64-linux | Equinix | Hydra builder | have | \- | on demand |
62
+ | big-parallel-c3.large.arm64 | aarch64-linux | Equinix | Hydra builder | have | \- | on demand |
63
+
64
+## Changelog:
65
+
66
+- Removed unused apps on the infra repo
67
+ - Slack (unused)
68
+- Removed apps from release-wiki repo
69
+ - HackMD (unused)
70
+- Removed unused apps on the org level
71
+ - Bors (discontinued)
72
+ - Marvin-MK2 (discontinued)
73
+ - Travis-CI (unused)
74
+- Hydra web UI is fast^W not as slow now (+ other improvements)
75
+ - https://github.com/NixOS/hydra/commit/6189ba9c5e5308e17a7d1fb7f38443272a70f072
76
+ - Queue runner CPU-heavy operations throttling: https://github.com/NixOS/hydra/commit/a51bd392a22fba5b0a0d90e2204a608b78c37ce1
77
+- Fastly shielding location fixed for releases.nixos.org and tarballs.nixos.org (used to go transatlantic for no good reason)
78
+- http:// redirects to https:// for all our S3 buckets except cache.nixos.org (broke nix-index, temporarily reverted)