<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0cm;
margin-right:0cm;
margin-bottom:0cm;
margin-left:36.0pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:821893614;
mso-list-type:hybrid;
mso-list-template-ids:-227665012 67698689 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:\F0B7 ;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Symbol;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:"Courier New";}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:\F0A7 ;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Wingdings;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:\F0B7 ;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Symbol;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:"Courier New";}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:\F0A7 ;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Wingdings;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:\F0B7 ;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Symbol;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:"Courier New";}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:\F0A7 ;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Wingdings;}
ol
{margin-bottom:0cm;}
ul
{margin-bottom:0cm;}
--></style>
</head>
<body lang="en-ES" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"><span lang="EN-US">Hi,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Thanks Ryan.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">My answer is very similar to Ben’s:<o:p></o:p></span></p>
<ul style="margin-top:0cm" type="disc">
<li class="MsoListParagraph" style="margin-left:0cm;mso-list:l0 level1 lfo1"><span lang="EN-US">I’d be happy to provide you exclusive access to the resources (encrypted VMs, your own users, network and machine are UPS-protected, firewalled, etc.)<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-left:0cm;mso-list:l0 level1 lfo1"><span lang="EN-US">I completely agree with you about the safety concerns: those should not be relaxed.<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-left:0cm;mso-list:l0 level1 lfo1"><span lang="EN-US">I volunteered because I thought they were needed: I love MacPorts, and I want it to thrive.<o:p></o:p></span></li></ul>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Bye,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Enrico<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal" style="margin-bottom:12.0pt"><b><span style="font-size:12.0pt;color:black">From:
</span></b><span style="font-size:12.0pt;color:black">Ben Greenfield <ben@cogs.com><br>
<b>Date: </b>Friday, 21 May 2021 at 13:26<br>
<b>To: </b>Ryan Schmidt <ryandesign@macports.org><br>
<b>Cc: </b>Andrew Janke <floss@apjanke.net>, Enrico Maria Crisostomo <enrico.m.crisostomo@gmail.com>, MacPorts Developers <macports-dev@lists.macports.org><br>
<b>Subject: </b>Re: Buildbot hardware (was: Re: Framing the MacPorts discussion)<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt">Hey All,<br>
<br>
Thanks for the direction Ryan.<br>
<br>
> On May 21, 2021, at 12:46 AM, Ryan Schmidt <ryandesign@macports.org> wrote:<br>
> <br>
> On May 19, 2021, at 12:38, Andrew Janke wrote:<br>
> <br>
>> I have a small stack of Mac Minis I got to use as a buildbot farm for Octave.app; I might be able to have them pull double duty for MacPorts depending on your change volume.<br>
> <br>
> <br>
> On May 20, 2021, at 08:10, Enrico Maria Crisostomo wrote:<br>
> <br>
>> I've got an iMac Pro in my LAN with 16 vCores and 64GB or RAM which is quite often idle.<br>
>> I'm not privy with how our build system work, but if we could get to a point where agents can be added, stopped, throttled, trusted members of our community could volunteer the computational power they have at their disposal without fully dedicating a machine.<br>
>> In my specific case: I'm happy to offer VMs on that machine to volunteer computational resources.<br>
> <br>
> <br>
> On May 20, 2021, at 08:20, Ben Greenfield wrote:<br>
> <br>
>> I can definitely donate the facilities if not the talent.<br>
>> <br>
>> I have a symmetrical fiber connection and a static ip. I also have battery backup.<br>
>> I’m in the final weeks of making the building legal and I haven’t configured the final network set-up for the building. I was going to set-up a vlan on my hp procurve switch.<br>
>> I’m still shopping for a router to run OPNsense I think.<br>
>> <br>
>> I have been a mac sysadmin long time.<br>
> <br>
> <br>
> There seem to be a lot of people suddenly volunteering hardware for our build system. First, thank you; I didn't know we had people interested in that.<br>
> <br>
> Our build system has never been designed to accommodate external hardware. It has always been designed as a centralized system controlled by one administrator. When it was first set up in 2011-12 it was under the control of our Apple administrator at macOS
forge. I became the macOS forge administrator temporarily in late 2015, and MacPorts left macOS forge in late 2016 as that service shut down, and I recreated the buildbot system on my own hardware and have run it since then.<br>
> <br>
> We now have one external Apple Silicon build machine hosted at another data center, but it's still under my exclusive control so that I can keep everything working together.<br>
> <br>
<br>
I would be happy to provide the same service. I don’t need a log-in and I can probably provide out of band power reset. The system could be on it’s own vlan.<br>
<br>
<br>
> There are currently many situations where the build system gets into a state that requires manual intervention. Because I control all the machines, I'm able to make those fixes and get things back up and running quickly.<br>
> <br>
> We currently have all the builders we need: one for each OS version / arch combination. The system was never designed to have more than that. If for example we added a second macOS 11 / x86_64 builder, there could be confusion and problems if the two machines
have different OS / Xcode / command line tools / java versions installed.<br>
> <br>
> There are security issues to consider. The binaries produced by our buildbot workers are signed on the master with our private key. This is our "seal of approval" that says we believe these binaries to be good and safe. Users trust that. If we start allowing
other people to run build machines, then we have the problem that we do not know for certain whether those other build machines are free of malware or other problems. We would be signing binaries for distribution to users without being certain of their safety
or correctness. I'm not very comfortable with that.<br>
<br>
Yes, that safety should be maintained.<br>
<br>
> <br>
> Why is this discussion happening? Why do people think we need more hardware? If we need more or faster CPUs or more memory, I can make those changes to the hardware I already manage.<br>
<br>
I volunteered because it sounded like resources might be needed:).<br>
<br>
Let me know if the free-hosting is needed.<br>
<br>
Ben<br>
<br>
> <o:p></o:p></p>
</div>
</div>
</body>
</html>