07:35 <bentiss> pushing gitlab security update 17.3.3 in a minute. I'll wait a little bit more for 17.4.0 because I won't be able to monitor much today/tomorrow

07:42 <bentiss> and done

07:46 <pq> thanks for that note, I managed to try access during that exact time :-D

07:46 <bentiss> heh, sorry

07:46 <pq> not at all, my first thought on seeing errors was to check here, and you had already answered

08:27 <bentiss> daniels, whot: BTW, I gave a small test the other day for the runner config. Even if so far the load seems to match "cpu = 8", nproc still returns 64. So it's much better, but "make -j$(nproc)" is still not fixed

08:30 <daniels> bentiss: yeah, it looks like people can still DoS themselves but not others

08:30 <bentiss> which is still a good thing :)

08:48 <MrCooper> how many jobs does meson spawn by default?

08:50 <MrCooper> spawning 64+ could still DoS other CI jobs via memory usage, couldn't it?

08:51 <bentiss> MrCooper: whot saw last week that ninja (at least now) looks for cgroups for knowing the proc count. And so it's seeing 64. That's on the table to fix that as well, but Lennart wasn't very optimistic because it's a hard problem

08:53 <bentiss> though we need to investigate more https://stackoverflow.com/questions/72332642/how-can-i-assign-cgroup-resource-limits-per-gitlab-runner-job-to-ensure-fair-sha because if all stars align, this might solve the ninja issue

09:03 <JanC> alias nproc="echo 4" # ;)

09:16 <bentiss> JanC: yep https://gitlab.freedesktop.org/freedesktop/ci-templates/-/issues/73

09:17 <bentiss> but that doesn't solve the ninja problem as it's not relying on nproc apparently

09:17 <JanC> ah

09:18 <bentiss> daniels: BTW, regarding the "let's use chilc pipelines in ci-templates to fast-track the container check", maybe instead of using placeholder jobs we should have a "quick and easy jobs" jobs, that are like placeholders, but which have a much lower time limit (like a couple of minutes)

09:19 <bentiss> *child pipelines

09:25 <bentiss> looks like the minimum timeout is 10 minutes, but that could work to prevent some abuses

09:27 <JanC> aha https://github.com/ninja-build/ninja/blob/6a31acc06cb903283dc1b61936ef0b6ae2715ac9/src/util.cc#L724

09:34 <JanC> and https://github.com/ninja-build/ninja/blob/6a31acc06cb903283dc1b61936ef0b6ae2715ac9/src/util.cc#L805

09:36 <bentiss> JanC: thanks

09:36 <bentiss> that CPU_COUNT is interesting :)

09:36 <bentiss> anyway, going afk until tomorrow afternoon

12:44 <Ford_Prefect> bilboed: or just "Moderation Bot" :)

17:58 <alanc> https://www.freedesktop.org/wiki/Infrastructure/git/ should probably note the deprecation of the old git servers/services