<ynezz>
is there any reason to keep this subtarget?
<ynezz>
there are no images, so why to waste time on that? even IB is unusable openwrt-24.10-snapshot-r27997-a923d1f9ec-ramips-rt288x-airlink101_ar670w-squashfs-factory.bin is too big: 5242884 > 3932160
<ynezz>
(I'm actually testing 24.10, but it applies to snapshot as well)
<KanjiMonster>
ynezz: the ToH lists one device with 8 MiB flash (belkin f5d8235-4), the rest has 4 MiB. Ram-wise all have 32 MiB, so I doubt that even the belkin one will be usable in practice
<ynezz>
so making it source-only should be ok, right?
<KanjiMonster>
yeah
<KanjiMonster>
not sure if it is even worth to keep in source. it has a few quirks that are probably easy to break, and noone around to test it (e.g. its memory window doesn't start at 0 like on most platforms)
wille-io has quit [Quit: bye!]
<robimarko_>
ynezz: I guess we should update the actions to use 3.11.8 v20?
<ynezz>
robimarko_: are you seeing some issues?
<ynezz>
it should be actually v21 (not tagged yet)
<robimarko_>
ynezz: Look at CI builds, a lot of them are failling on GLIBC mismatch
<ynezz>
v20 is Debian 12
<ynezz>
v21 is Debian 11
<robimarko_>
Ok, to me it just makes sense to keep them in sync
<ynezz>
robimarko_: do you've such CI build handy?
<robimarko_>
ynezz: any of the packages PR-s fails with like half of the builds failling
<efahl>
First error in that log is: 4001: /builder/staging_dir/host/bin/bash /lib/x86_64-linux-gnu/libc.so.6: version `GLIBC_2.34' not found (required by /builder/staging_dir/host/lib/libfakeroot.so)
<robimarko_>
Yeah, that is the same error on all that are failing
<ynezz>
we didn't switched buildbots to Debian 12, I would like to find out, how this happened, but currently have no clue
<robimarko_>
Its a bit confusing as we have multiple versions in use all over the place
<robimarko_>
Actions are on 3.8.0 v9, this docker repo is on 3.11.8 now
<ynezz>
aparcar[m]: buildworker-v3.11.8:latest is not good idea, not all tags are working/should be used
<ynezz>
aparcar[m]: latest basically means v20 tag = Debian 12 now, probably v21 tag = Debian 11 tomorrow
<robimarko_>
Can we sync all of the buildworker images that are used with the same one?
<robimarko_>
So we avoid this kind of a mess
<ynezz>
well, that mess started somewhere else and continued propagating because of this quick fixes/merging
<robimarko_>
Well, the thing is that this happened before the 3.11.8 bump
<robimarko_>
Since none of the actions to build new images with it have not even started
Stat_headcrabbed has joined #openwrt-devel
<ynezz>
could be, maybe it was some stray buildworker having image configured for staging environment (using Debian 12) and connecting to the production environment (using Debian 11)
<robimarko_>
Its most likely openwrt/docker catching the v20 tag couple of days ago
<aparcar[m]>
ynezz: I'm happy to change it to whatever you prefer, the point for Docker is to always use what the buildbots use, so I'd love a stable tag there, even if the underlying Debain version or so changes
<robimarko_>
Last time it built was 3 days ago
gromero_ has quit [Ping timeout: 480 seconds]
<ynezz>
aparcar[m]: simply revert and use pinned version, not the latest :)
<ynezz>
I've not anticipated, that someone is going to use it this way
aiyion_ has quit [Ping timeout: 480 seconds]
<aparcar[m]>
ok. well I need to rework this docker stuff anyway, why not now..
gromero has joined #openwrt-devel
gromero_ has joined #openwrt-devel
gromero has quit [Ping timeout: 480 seconds]
n3ph has joined #openwrt-devel
goliath has quit [Quit: SIGSEGV]
<schmars[m]>
unrelated question about source only devices
<schmars[m]>
oops i wanted to type more :-) later
Sawzallz has quit [Read error: Connection reset by peer]
Ansuel has quit [Quit: ZNC 1.9.x-git-253-750eac08 - https://znc.in]
Ansuel has joined #openwrt-devel
ptudor has quit [Ping timeout: 480 seconds]
<Ansuel>
ynezz my 2 cent... (maybe already said) it would be sensible to have a less versioned tag for container. something like buildbot:production buildbot:staging and we update the hash as we produce more version. That was we should be able to deploy new buildbot version easier (maybe?) (and for the sake of security we can sign and verify tag signature ?) This way we can have a single tag that will both used by the sdk container, CI actions and the main
<Ansuel>
buildbot runner
<Ansuel>
we can still keep the current version way, but just production tag will be force-updated every time to point to the new release. Any user will point to the production tag instead of a specific version
<Ansuel>
(this is commonly used for github actions to release new major version of an action by updating the tag)
<ynezz>
Ansuel: this is how its being consumed: docker_image_buildmaster: 'ghcr.io/openwrt/buildbot/buildmaster-v3.11.8:v20@sha256:43d435434b5235b256620eaca99cfe6145230d0dc629305170bd2d2995e501be'
<Ansuel>
eh i guess we would lose too much security with ghcr.io/openwrt/buildbot/buildmaster:production ?
<ynezz>
how do you notice it moved?
<Ansuel>
we wouldn't (my compromise idea was verify the signature of the tag)
<ynezz>
having the key stored on github?
<ynezz>
don't take me wrong, we can have those additional tags for CI purposes, but we consider something stable once it passes some tests
<ynezz>
so we would need to add some additional step and do something like release?
<Ansuel>
ynezz just trying to find a way to have an easy way to have synced version and cause less manual intervention from your side
<Ansuel>
we can start using additional tag to sync everything that is not the main buildbot but it would be half the solution
AtomiclyCursed has quit [Quit: ZNC 1.9.1 - https://znc.in]
AtomiclyCursed has joined #openwrt-devel
<Ansuel>
ynezz also if we want to be totally detached from github sign system (and still keep automated deploy), their sign tool (cosign) supports HW key and you can insert all kind of info (for example the hash the container targets). Then to sign the image we would trigger it from the action and make the actualy sign externally (on the local server where the key is installed) Probably totally not worth it but something to consider ahahhaha
nwf_ has quit [Ping timeout: 480 seconds]
Stat_headcrabbed has quit [Quit: Stat_headcrabbed]