From mboxrd@z Thu Jan 1 00:00:00 1970 From: Christopher Baines Subject: Re: Patchwork + automated checking and testing of patches Date: Mon, 03 Dec 2018 00:51:36 +0000 Message-ID: <87tvjvo2jr.fsf@cbaines.net> References: <87h8h29z2j.fsf@cbaines.net> <87tvjvzgwu.fsf@gmail.com> Mime-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:56395) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1gTcSh-0007Ql-Eb for guix-devel@gnu.org; Sun, 02 Dec 2018 19:51:48 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1gTcSe-0007nA-3v for guix-devel@gnu.org; Sun, 02 Dec 2018 19:51:47 -0500 Received: from mira.cbaines.net ([2a01:7e00::f03c:91ff:fe69:8da9]:45176) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1gTcSd-0007jl-RA for guix-devel@gnu.org; Sun, 02 Dec 2018 19:51:44 -0500 In-reply-to: <87tvjvzgwu.fsf@gmail.com> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Chris Marusich Cc: Guix-devel --=-=-= Content-Type: text/plain Chris Marusich writes: > Hi Chris, > > This is really cool stuff! Thanks for looking into it. > > Christopher Baines writes: > >> I don't intend to do anything with Jenkins, as I think that wouldn't be >> maintainable, but I think setting up some system to check some of the >> following would be beneficial: > > I'm actually a little hesitant to ask, since I don't have time to > contribute to this right now, and I don't want to bike-shed. However, > I'm just curious: why do you think using Jenkins wouldn't be > maintainable? I've read about Jenkins but haven't used it personally, > and I've heard good things about it, so I'm curious to know why you > prefer to avoid it entirely. Sure, I've used Jenkins in different contexts, and indeed currently use Jenkins, so I've got some experience here. I'm obviously ignoring all the good parts here, but one source of data is Debian. It used to have a package for Jenkins, and you can see some of the work/issues here [1] and the thread about it's removal here [2]. One issue in particular to call out is some potential bootstrapping issues [3] that seem to have been encountered. It seems sensible to me to use Guix when doing things related to the Guix project, like automated testing of patches (dogfooding, if you know the term). Some of the things I've mentioned here lead me to doubt that Jenkins will at some point be available through Guix. So that's something about the maintainability of a Guix package, but there's an operational component to this as well. The attack surface it offers is maybe larger than sometimes necessary, if you only need a read-only web interface for example. 1: https://bugs.debian.org/cgi-bin/pkgreport.cgi?archive=both;dist=unstable;ordering=normal;repeatmerged=0;src=jenkins 2: https://lists.debian.org/debian-java/2016/01/msg00019.html 3: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=714596 --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEEPonu50WOcg2XVOCyXiijOwuE9XcFAlwEfhhfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDNF ODlFRUU3NDU4RTcyMEQ5NzU0RTBCMjVFMjhBMzNCMEI4NEY1NzcACgkQXiijOwuE 9Xe44A//TdAD9dAfuc/4XHtfM2eByGGHsw+lJ599DYbVPNOOATOQLPJhKkpSLb/g GCNh96uIfzuGf3ua4NdxuyiTVqwt68zvsjRi21V5mur7UjmR1wmFw+NC+QfXUUTW EhWOwaTxDds8WpaI81PkMCtnZdImL1WGH5hd9GYadXl1SEx0h9HCAwQ/KmAREeo0 PL5RvR7CcL1H8i0ej8J4Xd9ItJ2se6mEy2SlozDVriC2H6NQT/OyU5YN2uByHuCy 0n83PZ1652F4o1QE0+uGZWr2DFiw1bBUsV+ad2FgnHP0B3CQ4Mze8Sa4wlKsfXOq +/ploI+e6ldwfV7UV7ZuxqH/6gDpj42r8z9JcSHwinJGwZ6lQV7s9s6DPFnjOTej qVwReOhMPrxmAjpUOCfkBHux80QVBqcTSCBNRLEcNx0fzEneVCsDw7wM9o/T4b/B mu5nqwWPtTPqytyasI8mC45qakbH6BGH7wp6ItjZTke4Z6B1apHhuw24UkaK/oUc yZlTQU+eQbsOF0bljnWirH6QtCFkdmeQp9VxoOxrJKtJGNAj/jHWxYsmYMVdpFnT Wkd6KFCgbIbrsfYnTBPrd7Q3k0gdkuTqXzwLR1wkiP3HBTQyAi0vq8nE381tzoHK Ufcr4dqUZ8eDOxDTXqZaOLNYCGcJPTBQphwZ+1uWqn4q6Lj6ReA= =AAcg -----END PGP SIGNATURE----- --=-=-=--