From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp0.migadu.com ([2001:41d0:403:4876::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms1.migadu.com with LMTPS id SN7eE5qbUGYoEAAAqHPOHw:P1 (envelope-from ) for ; Fri, 24 May 2024 15:52:26 +0200 Received: from aspmx1.migadu.com ([2001:41d0:403:4876::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp0.migadu.com with LMTPS id SN7eE5qbUGYoEAAAqHPOHw (envelope-from ) for ; Fri, 24 May 2024 15:52:26 +0200 X-Envelope-To: larch@yhetil.org Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=gnu.org header.s=fencepost-gnu-org header.b=ABUToZd4; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org"; dmarc=pass (policy=none) header.from=gnu.org ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1716558746; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=Y5wD/j9YZqtFBnnX2Xv8el6HS9hYnXpXiuQfh2tQiXg=; b=MC97rf6tGFUFiu3E9KNPmXbF/R91vT9wgn4mUUzRoDH1o+W8siVSoadYpv0Z/jhc3rDaVZ OAUIQdWoaK58dd2sGq52Q72kBBO4tWUReoSVEnj4e55ulD7uQ5mj1UlNBRn6RujE+D7Z16 xKk9qOsD+SM7jhSdQ69jY0yK7WEBbwG8/RVPSzDbw00kS4haY5NH4V95e/5Bdl4W1YFQFI U8r/3gVhScE92ldLQvkVXqUAVnVi/x5lleG2j16LddR7CaTB+bMuwGsPOyNoLJtizNrOaP U8jxF36/5jAC7y9Imt6A3iN/CRcl3r/i4DmQ1q2S8n4l0C0PaZqLP2RYstpN2A== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=gnu.org header.s=fencepost-gnu-org header.b=ABUToZd4; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org"; dmarc=pass (policy=none) header.from=gnu.org ARC-Seal: i=1; s=key1; d=yhetil.org; t=1716558746; a=rsa-sha256; cv=none; b=cFrGrK6OjMsFByEer9l9JfYL8kW+71L/efvNZ6ws4Ap/oS1Me4ImbLcAiX7leM/dqkZ9oV kgQqsz0Ec0tZQZL1NvrTSggQfh3O8S8W6dEQo2Aipjps+rqEPXovEBb5abkywCgOESEgPS Q4iNt8Dl88aCPvJeUfkryMWk1vIavplyxlSZC+TFgs+HW0hu7pSQNvH4YMJ+LdWOxs0AYT UvIREEeptRAG6jx+YA6NSRS5VP8OaEgjebSYdKhvaWSm2QHVydkcFkMJZtYu17Sr7znyQL 3ahgo3A3anKKh4iT1fO1OWTkRB4SOS4RvccB84TWqzLyXQnZAHy6/5/XLZfKVQ== Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 997376E327 for ; Fri, 24 May 2024 15:52:25 +0200 (CEST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1sAVKq-0005rs-7C; Fri, 24 May 2024 09:51:52 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1sAVKn-0005mx-HQ for guix-devel@gnu.org; Fri, 24 May 2024 09:51:49 -0400 Received: from fencepost.gnu.org ([2001:470:142:3::e]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1sAVKn-0003qG-7C for guix-devel@gnu.org; Fri, 24 May 2024 09:51:49 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org; s=fencepost-gnu-org; h=MIME-Version:Date:Subject:To:From:in-reply-to: references; bh=Y5wD/j9YZqtFBnnX2Xv8el6HS9hYnXpXiuQfh2tQiXg=; b=ABUToZd4jZb3IU fZ5NfXTSc3dihoFempdzIXzIsR16jQJsBZbRvq0SxNnTV17qw29jIUxuDvzF8l6EkJUhdq4EQ48K+ 62C88FZyOCzEwfRiAjNtgnvNhVCk8W1oNrMTDp2w8bDXSZvmT7ArsFjgLsw45BsDjv/OtaM3ftZxp MnpQJSBxifJ2RDSaVCu12NBLbc6IqK+pgsNi6h8VsKdDzRCStwoQPd6oKNsSQP5Bb2ngiU+nCDbOc ifP9OVEtwld56jZPZ/hLgz2N75D/BdyT4fOZoXK0ZDBNnZLy+3FlW7wdm+41L7zGWwJ9z9bzlj92t Shea+5oIz3WAohlONBng==; From: =?utf-8?Q?Ludovic_Court=C3=A8s?= To: guix-devel@gnu.org Subject: Call for contribution to the Guix infrastructure X-URL: http://www.fdn.fr/~lcourtes/ X-Revolutionary-Date: Sextidi 6 Prairial an 232 de la =?utf-8?Q?R=C3=A9vol?= =?utf-8?Q?ution=2C?= jour de la =?utf-8?Q?M=C3=A9lisse?= X-PGP-Key-ID: 0x090B11993D9AEBB5 X-PGP-Key: http://www.fdn.fr/~lcourtes/ludovic.asc X-PGP-Fingerprint: 3CE4 6455 8A84 FDC6 9DB4 0CFB 090B 1199 3D9A EBB5 X-OS: x86_64-pc-linux-gnu Date: Fri, 24 May 2024 15:51:39 +0200 Message-ID: <87h6en5ndg.fsf@inria.fr> User-Agent: Gnus/5.13 (Gnus v5.13) MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: guix-devel-bounces+larch=yhetil.org@gnu.org X-Migadu-Country: US X-Migadu-Flow: FLOW_IN X-Spam-Score: -13.21 X-Migadu-Queue-Id: 997376E327 X-Migadu-Scanner: mx10.migadu.com X-Migadu-Spam-Score: -13.21 X-TUID: HMoOjvBmqjqD --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Since its inception, the Guix project has always valued its autonomy, and that reflects in its infrastructure: our servers run Guix System and exclusively free software, none of them is hosted by one of these transnational companies, and they=E2=80=99re administered by volunteers. Of course this comes at a cost and this is why we=E2=80=99re sending this c= all for contributions. Our hope is to make infrastructure-related activity more legible so that maybe you can picture yourself helping in one of these areas. =E2=80=A2 Coding We run many Guix-specific services; this is all lovely Scheme code but it tends to receive less attention than Guix itself: Build Farm Front-End: https://git.cbaines.net/guix/bffe Cuirass: https://guix.gnu.org/cuirass/ Goggles (IRC logger): https://git.savannah.gnu.org/cgit/guix/maintena= nce.git/tree/hydra/goggles.scm Guix Build Coordinator: https://git.savannah.gnu.org/cgit/guix/build-= coordinator.git/ Guix Data Service: https://git.savannah.gnu.org/git/guix/data-service= .git/ Guix Packages Website: https://codeberg.org/luis-felipe/guix-packages= -website.git mumi: https://git.savannah.gnu.org/cgit/guix/mumi.git/ nar-herder: https://git.savannah.gnu.org/cgit/guix/nar-herder.git/ QA Frontpage: https://git.savannah.gnu.org/git/guix/qa-frontpage.git There is no time constraint on this coding activity: any improvement is welcome, whenever it comes. Most of these code bases are relatively small, which should make it easier to get started. Prerequisites: Familiarity with Guile, HTTP, and databases. If you wish to get started, check out the README of the project of your choice and get in touch with guix-devel and the primary developer(s) of the tool as per =E2=80=98git shortlog -s | sort -k1 -n= =E2=80=99. =E2=80=A2 System administration Guix System configuration for all our systems is held in this repository: https://git.savannah.gnu.org/cgit/guix/maintenance.git/tree/hydra/ The two front-ends are berlin.scm (the machine behind ci.guix.gnu.org) and bayfront.scm (the machine behind bordeaux.guix.gnu.org, guix.gnu.org, hpc.guix.info, qa.guix.gnu.org, and more). Both connect to a number of build machines and helpers. Without even having SSH access to the machine, you can help by posting patches to improve the configuration (you can test it with =E2=80=98guix system vm=E2=80=99). Here are ways you can help: - Improve infra monitoring: set up a dashboard to monitor all the infrastructure, and an out-of-band channel to communicate about downtime. - Implement web site redundancy: guix.gnu.org should be backed by several machines on different sites. Get in touch with us and/or send a patch! - Implement substitute redundancy: likewise, bordeaux.guix.gnu.org and ci.guix.gnu.org should be backed by several head nodes. - Improve backup: there=E2=80=99s currently ad-hoc backup of selected pieces over rsync between the two head nodes; we can improve on that, for example with a dedicated backup site and proper testing of recoverability. - Support mirroring: We=E2=80=99d like to make it easy for others to mirror substitutes from ci.guix and bordeaux.guix, perhaps by offering public rsync access. - Optimize our web services: Monitor the performance of our services and tweak nginx config or whatever it takes to improve it. There is no time constraint on this activity: any improvement is welcome, whenever you can work on it. Prerequisite: Familiarity with Guix System administration and ideally with the infrastructure handbook: . =E2=80=A2 Day-to-day system administration We=E2=80=99re also looking for people who=E2=80=99d be willing to have = SSH access to some of the infrastructure to help with day-to-day maintenance: restarting a build, restarting the occasional service that has gone wild (that can happen :-)), reconfiguring/upgrading a machine, rebooting, etc. This day-to-day activity requires you to be available some of the time (during office hours or not, during the week-end or not), whenever is convenient for you, so you can react to issues reported on IRC, on the mailing list, or elsewhere, and synchronize with other sysadmins. Prerequisite: Being a =E2=80=9Cknown=E2=80=9D member of the community, = familiarity with Guix System administration, with some of the services/web sites being run, and with the infrastructure handbook: . =E2=80=A2 On-site intervention The first front-end is currently generously hosted by the Max Delbr=C3=BCck Center (MDC), a research institute in Berlin, Germany. Only authorized personnel can physically access it. The second one, bordeaux.guix.gnu.org, is hosted in Bordeaux, France, in a professional data center shared with non-profit ISP Aquilenet. If you live in the region of Bordeaux and would like to help out when we need to go on-site, please make yourself known by emailing guix-sysadmin@gnu.org. On-site interventions are rare, but they=E2=80=99re usually in response= to an emergency. =E2=80=A2 Hosting We=E2=80=99re looking for people who can host machines and help out whe= never physical access is needed. More specifically: - We need hosting of =E2=80=9Csmall=E2=80=9D machines such as single-= board computers (AArch64, RISC-V) for use as build machines. - We need hosting for front-ends and x86_64 build machines in a data center where they can be racked and where, ideally, several local Guix sysadmins can physically access them. The machines should be accessible over Wireguard VPN most of the time, so longer power or network interruptions should be the exception. Prerequisites: Familiarity with installing and remotely administering Guix System. =E2=80=A2 Administrative tasks The infra remains up and running thanks to crucial administrative tasks, which includes: - Selecting and purchasing hardware, for example build machines. - Renewing domain names. - Securing funding, in particular via the Guix Foundation: . Prerequisites: Familiarity with hardware, and/or DNS registrars, and/or sponsorship, and/or crowdfunding. The more we are, the less any single one of us has to do! Ludo=E2=80=99, on behalf of the infrastructure team. --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQJBBAEBCgArFiEEPORkVYqE/cadtAz7CQsRmT2a67UFAmZQm2wNHGx1ZG9AZ251 Lm9yZwAKCRAJCxGZPZrrtTrMEACfaFPQvtIyZKWQJCs4nRjvgbA9IPTx1qbaPFaB iOCWsW2v/LEwILmUpatgnY11DGed22y/btPzLwCxW1WWsp7s5Q9Ivsb6nOFiyxfU fmFZlDsgS9yqz8ZUO3ag0NANTROTcRNFoIC+dqevEz8sbohm3nRvwwhEUT9rT2ym H+1sA61kgGtDpPE+HCFjJBakJMfno0ZhtSc9Ow//Kg+w8W66KW2uUIvbLr8TXMvE aoOo69FYJDZhSrYQpUrvXfiPdTWi7pLlwWasyByWxgeiwTUXefE8ua315dwfh0W+ r6sperNoJsE+/cOi3etq6cv8JVnHrJscrdaj8VzotLacFFcSCziJc4D4P/J7ZJan ppfoue0EINjW/dI+rD5CZ8y1XUwIjLEnemMHSlbBUjwdK4zGNRm83KEHFv/qHa2d kOR6eD6GpjikS5GUN5C2UZbh+uOwkt+3+6/cRigd78F6VIbxjBNexCHEl4sdc4wW HxSzfy8LSGr9rg4Ccxg+brA7WR9ydgwCvGMb6Giuj4jkLYl+2SHV0X2VydA++n+c cG7Y0DhJWUf+a+oXcruqMsntW8mSx3qBBPyDzMeC763Jarovx+4JX0YLgb4VUe6D aWXT6bnwvNdAPAmVY3/fHQVVGRFTFqo9M7QVQli3QAhMqXQo4uCcsQN4w+WhA1t8 w0lMEQ== =JOSM -----END PGP SIGNATURE----- --=-=-=--