ChanServ changed the topic of #freedesktop to: https://www.freedesktop.org infrastructure and online services || for questions about freedesktop.org projects, please see each project's contact || for discussions about specifications, please use https://gitlab.freedesktop.org/xdg or xdg@lists.freedesktop.org
ngcortes has quit [Quit: Leaving]
vsyrjala_ has joined #freedesktop
vsyrjala has quit [Ping timeout: 480 seconds]
miracolix has joined #freedesktop
ximion has quit []
kem has quit [Ping timeout: 480 seconds]
kem has joined #freedesktop
vsyrjala_ is now known as vsyrjala
ofourdan has quit [Ping timeout: 480 seconds]
Guest3442 has joined #freedesktop
alanc has quit [Remote host closed the connection]
<bentiss>
gallo[m]: not sure what daniels was saying about the new "logging"
<daniels>
bentiss: *login
<bentiss>
daniels: oh, OK. But I think I sorted it out, no?
<bentiss>
I mean, it seems to be working :)
<daniels>
indeed you did :) his question though was looking for the exact pointers you gave so he could convert all the direct usage in Mesa CI so we can kill the old host completely
<bentiss>
oh
<bentiss>
gallo[m]: so there are a couple of things: 1. when the CI is relying on "ci-fairy minio", we need to remove all "ci-fairy minio login" and replace "ci-fairy minio cp" with "ci-fairy s3cp --token-file $token src dst", with one of the src or the dst being https://s3.freedesktop.org/{bucket}/{path}
<bentiss>
and 2. if you are using direct upload and not ci-fairy, you should ditch the STS attribution, and rely on a single PUT with "Authorization: Bearer $TOKEN" as header
<bentiss>
gallo[m]: and no, there are no upstream documentation about this, because this is an unusual approach, that relies on upstream components, but likely not common to put them together
<bentiss>
gallo[m]: last thing that comes to my mind: to be able to test this, you need a JWT token. So either you do that in effective gitlab pipelines, or you extract one from a job that will be valid for 1 hour (I do `echo $CI_JOB_JWT_V1 | base64 -w 0` to bypass the masking mechanism from gitlab that hides the token in the logs)
danvet has joined #freedesktop
<bentiss>
daniels: IIRC you had some docs on the MinIO approach for the projects (with how you build the proxies and what not), where was it? and do they need updating?
<daniels>
bentiss: so that doc is out there but we didn't implement the tiering because it turned out that RO mirroring with no policy was no better than nginx ...
<daniels>
the new caching is just nginx that passes on the HEAD from every req to validate access, then serves cached content if it has it
<bentiss>
daniels: OK. So it should be similar with in the new requests too
<daniels>
yep
<bentiss>
\o/
MajorBiscuit has joined #freedesktop
MajorBiscuit has quit [Ping timeout: 480 seconds]
MajorBiscuit has joined #freedesktop
chipxxx has joined #freedesktop
chipxxx has quit [Read error: Connection reset by peer]
pkira has joined #freedesktop
chipxxx has joined #freedesktop
chipxxx has quit [Remote host closed the connection]
chipxxx has joined #freedesktop
MajorBiscuit has quit [Ping timeout: 480 seconds]
GNUmoon has quit [Read error: Connection reset by peer]
MajorBiscuit has joined #freedesktop
fahien has joined #freedesktop
fahien has quit []
MajorBiscuit has quit [Read error: Connection reset by peer]
MajorBiscuit has joined #freedesktop
MajorBiscuit has quit []
mvlad has joined #freedesktop
MajorBiscuit has joined #freedesktop
karolherbst has quit [Read error: Connection reset by peer]
karolherbst has joined #freedesktop
itoral has quit [Remote host closed the connection]
AbleBacon has quit [Remote host closed the connection]
ximion has joined #freedesktop
GNUmoon has joined #freedesktop
MajorBiscuit has quit [Ping timeout: 480 seconds]
MajorBiscuit has joined #freedesktop
m5zs7k has quit [Ping timeout: 480 seconds]
m5zs7k has joined #freedesktop
chipxxx has quit [Ping timeout: 480 seconds]
danilo has quit [Read error: No route to host]
dakr has joined #freedesktop
<gallo[m]>
Thank you for the detailed answer bentiss. I will take a look into it.
<bentiss>
\o/ thanks!
<bentiss>
gallo[m]: I have seen that you made some comments on ci-fairy. Is that all (should I start fixing your comments) or do you still have some more comments?
<jenatali>
Out of curiosity, is there another gstreamer hackfest going on? Seems like all of the shared CI runners are way overloaded
pkira has quit [Ping timeout: 480 seconds]
dakr has quit [Quit: ZNC 1.8.2+deb2build5 - https://znc.in]
<bentiss>
gallo[m]: great, thanks. I'll let you finish the multipart so I do not force push while you are reviewing then
ximion has quit []
<daniels>
jenatali: it's the same gstreamer hackfest, but it looks like it's just a lot of everything all at once. probably points to us being underprovisioned and needing more capacity across the board.