26 replies

do you think we can get a CNAME record

do you think we can get a CNAME record from

iso.universalblue.org

iso.universalblue.org

iso.universalblue.org

iso.universalblue.org ->

s3.wasabisys.com

s3.wasabisys.com

s3.wasabisys.com

s3.wasabisys.com ? it would allow us to use the url

https://iso.universalblue.org/$ISO_FILE_NAME

https://iso.universalblue.org/$ISO_FILE_NAME

https://iso.universalblue.org/$ISO_FILE_NAME

https://iso.universalblue.org/$ISO_FILE_NAME to get the ISOs from the bucket

j0rge•8/28/23, 12:59 PM

cc @marcoceppi

Marco (马可)•8/28/23, 1:00 PM

What is wasabisys?

akdevOP•8/28/23, 1:01 PM

S3-compatible storage provider

akdevOP•8/28/23, 1:02 PM

These guys: https://wasabi.com

j0rge•8/28/23, 1:03 PM

can we do shared admin like we have for the arm builder so we're not bus factored?

Marco (马可)•8/28/23, 1:03 PM

Before we can point a CNAME, we'll need to make sure either Jorge or myself have admin on the system and that the billing is setup through Jorge. Preferrable the account is owned by Jorge

j0rge•8/28/23, 1:03 PM

hey we can cost-limit wasabi right?

j0rge•8/28/23, 1:04 PM

like if it blows up I won't wake up with a nix-like bill?

Marco (马可)•8/28/23, 1:04 PM

It's a security and longevity issue. If the bucket goes away there's a potential that another account could hijack the S3 target. If we're distributing ISOs need to make sure we secure what / who uploads to it

j0rge•8/28/23, 1:04 PM

I am hoping to convince fcix to mirror our ISOs

Jj0rge can we do shared admin like we have for the arm builder so we're not bus factore...

akdevOP•8/28/23, 1:10 PM

We can yeah, you could create the new bucket and take care of the admin stuff

Jj0rge hey we can cost-limit wasabi right?

akdevOP•8/28/23, 1:18 PM

mm I don't think any of the s3 providers does that, but the bill is based on storage only - you can get alerts based on utilization (and set an expiration policy to avoid issues with lingering artifacts)

j0rge•8/28/23, 1:18 PM

oh ok

j0rge•8/28/23, 1:26 PM

I'm pretty slammed today but over lunch or after work I can bust this out

akdevOP•8/28/23, 1:31 PM

https://public.akdev.xyz/UBlue-bluefin-dx-38-x86_64.iso - I set this up for myself a while back and forgot, this is how it works

akdevOP•8/28/23, 1:31 PM

let me know if you need help or anything

j0rge•8/28/23, 5:18 PM

ok it's all set, I've got it in my account, we've got the proper bucket policies in place, so that's all good to go

j0rge•8/28/23, 5:18 PM

trying to find shared account info for you marco but will sort that after work

Marco (马可)•8/29/23, 3:55 PM

whats next steps here?

akdevOP•8/29/23, 4:01 PM

Jorge created the bucket and created access keys and we put them in the repo secrets for the main repo

akdevOP•8/29/23, 4:02 PM

I think they actually limit public access now since a couple months ago so Jorge reached out to them

akdevOP•8/29/23, 4:02 PM

To see if we can actually enable it in his account

akdevOP•8/29/23, 4:02 PM

(I guess mine is grandfathered in)

akdevOP•8/29/23, 4:03 PM

Not sure if he heard back from them, if they can enable the access then we just need a cname record to have a pretty url

j0rge•8/29/23, 5:45 PM

waiting on them still

Marco (马可)•8/29/23, 5:45 PM

Cool

j0rge•8/29/23, 5:47 PM

but they acked my ticket

do you think we can get a CNAME record

Similar Threads

Similar Threads

Similar Threads