CI system for PR builds

Sat Apr 7 05:47:42 UTC 2018

On 3 April 2018 at 21:45, db wrote:
> On 3 Apr 2018, at 18:04, Mojca Miklavec wrote:
>> Travis has lots of limitations, but it offers both (a) and (b) for free.
>
> Couldn't (b) be the current infrastructure?

No, because that would make the infrastructure that distributes
binaries to all our users susceptible to malicious PRs.

Except if we modify the current setup to stop a VM after each build in
case there are no pending jobs, and fire a new clean VM to build the
PRs in the meantime, with different build instructions and without any
uploads.

I believe it would also be ok to have a second set of isolated
builders whose images would only be reset once in a while. But that
still calls for additional hardware.

Mojca