ChanServ changed the topic of #freedesktop to: https://www.freedesktop.org infrastructure and online services || for questions about freedesktop.org projects, please see each project's contact || for discussions about specifications, please use https://gitlab.freedesktop.org/xdg or xdg@lists.freedesktop.org
* mupuf
needs to file an issue there to say that the new way of handling running is great, but we can't be expected to hand out admin tokens to people who want to expose their runners at the instance level
<emersion>
what can people do with instance-wide CI runner tokens, apart from registering new runners?
<emersion>
i suppose register a default runner and then steal CI secrets maybe?
<mupuf>
emersion: the whole runner thing will be reworked. Users will registers runners via their own user
<mupuf>
and only admins will be able to create instance-wide runners
<emersion>
isn't that already the case?
<mupuf>
no, admins can give you a registration token, and then you can register anything you want
<mupuf>
if you want to replicate that with the new way of doing things, they would have to give you an admin API token
<emersion>
oh, i see
<mupuf>
... which means full access to everything, not just runners
<emersion>
they're changing things up
<emersion>
that would affect me as well, i have instance-wide runners for sr.ht
<mupuf>
no worries, the existing runners won't go away fast
<emersion>
hm, not great
<mupuf>
nor will they deprecate the old ways fast
<mupuf>
but... that's the plan
<emersion>
and there is no "runner" scope?
<mupuf>
no, API is RO or RW, no inbetween
<emersion>
yeah but there are scopes for various other things already
<mupuf>
that's why I was thinking they could add a boolean to allow users to register instance-wide runners
<emersion>
e.g. "read_registry"
<mupuf>
yeah, that's another option
<mupuf>
I'll let them decide what they prefer :D
<emersion>
okay. would be really nicer to have something at least
vkareh has joined #freedesktop
tintou has joined #freedesktop
<tintou>
The `aarch64` runner is not happy (I'm getting "Cannot connect to the Docker daemon […] Is the docker daemon running?")
<bentiss>
tintou: restarted podman on arm-7, thanks!
alanc-away has quit [Remote host closed the connection]
alanc-away has joined #freedesktop
ximion has joined #freedesktop
tzimmermann has quit [Quit: Leaving]
todi has joined #freedesktop
DemiMarie has left #freedesktop [#freedesktop]
alanc-away has quit []
alanc has joined #freedesktop
AbleBacon has joined #freedesktop
mvlad has quit [Remote host closed the connection]
todi has quit [Remote host closed the connection]
todi has joined #freedesktop
vkareh has quit [Quit: WeeChat 3.6]
todi has quit [Remote host closed the connection]
damian has joined #freedesktop
todi has joined #freedesktop
todi has quit []
damian has quit []
i509vcb has joined #freedesktop
danvet has quit [Ping timeout: 480 seconds]
alatiera2 has joined #freedesktop
alatiera has quit [Ping timeout: 480 seconds]
alatiera2 is now known as alatiera
alanc has quit [Remote host closed the connection]