What is the status of Forge? I was listening to a podcast yesterday that was talking about Gitea beg

What is the status of Forge? I was listening to a podcast yesterday that was talking about Gitea beginning the process of trying to 1:1 github actions and it made me think "huh, I wanna have my ublue running entirely self hosted, maybe this'll work"

WaffleophagusOP•9/6/23, 4:36 PM

https://docs.gitea.com/next/usage/actions/overview I'd love to look into it, and maybe help push forge along if it fits

Gitea Actions | Gitea Documentation

Starting with Gitea 1.19, Gitea Actions are available as a built-in CI/CD solution.

WWaffleophagus What is the status of Forge? I was listening to a podcast yesterday that was tal...

j0rge•9/6/23, 4:37 PM

someone needs to try it and see if it works.

WaffleophagusOP•9/6/23, 4:38 PM

I'm down. On the "vision" I won't be doing 4 though PXE boot the clients, select ublue in the menuPXE boot the clients, select ublue in the menu

WaffleophagusOP•9/6/23, 4:39 PM

so this looks like it'd be deployed via podman cluster?

WaffleophagusOP•9/6/23, 4:39 PM

ok, so ucore VM

WaffleophagusOP•9/6/23, 4:40 PM

Really I just want to in house my image creation

j0rge•9/6/23, 4:42 PM

it should run on any linux with podman or docker iirc

WaffleophagusOP•9/6/23, 4:43 PM

Is it a single container? Cause if so, I'll just attempt to throw it in the mix on unraid

WaffleophagusOP•9/6/23, 4:43 PM

if its orchastrating multiple containers I may throw a VM at it for testing

j0rge•9/6/23, 4:43 PM

https://github.com/ublue-os/forge/blob/main/forge-pod.yml

GitHub

forge/forge-pod.yml at main · ublue-os/forge

On-prem Universal Blue. Contribute to ublue-os/forge development by creating an account on GitHub.

j0rge•9/6/23, 4:43 PM

it's a few

WaffleophagusOP•9/6/23, 4:43 PM

yea, I'll just spin up a VM to test it in

WaffleophagusOP•9/6/23, 4:43 PM

keep it contained

WWaffleophagus https://docs.gitea.com/next/usage/actions/overview I'd love to look into it, and...

bsherman•9/6/23, 4:44 PM

I use gitea for git and their actions with act_runner for CI builds and as a container registry...

i can tell you that the buildah actions we use today don't work on act_runner, but could almost certainly be swapped out for docker's builder action (and still probably run against podman, if you like)

WaffleophagusOP•9/6/23, 4:45 PM

Honestly if Forge does what it advertises (and if it doesn't, I bet its way further along than me starting from scratch) I think its probably the better starting point than trying to slam gitea in

WaffleophagusOP•9/6/23, 4:45 PM

¯\_(ツ)_/¯

WaffleophagusOP•9/6/23, 4:45 PM

but that conversation made me really curious to get it all building locally

WaffleophagusOP•9/6/23, 4:46 PM

Especially since I'll have multiple machines on the same image, save internet bandwidth

WaffleophagusOP•9/6/23, 4:46 PM

have it build locally then distribute to the entire house

bsherman•9/6/23, 4:46 PM

yea, i'd like to build locally too... i'd kinda like to get the workflows setup so theyd run on either github or gitea if possible

WWaffleophagus have it build locally then distribute to the entire house

bsherman•9/6/23, 4:46 PM

this is related

bsherman•9/6/23, 4:46 PM

I saw an interesting post by Walters today: https://github.com/coreos/fedora-coreos-tracker/issues/1263#issuecomment-1680999863

The important line is:

[Users can] mirror the OS update containers on their own to a registry and update it on their own timeframe and schedule. Which is what they already need to know how to do for application containers!

the context is replacing zincati/simplifying its function and instead of having complexity, managing things in a better way.

Got me thinking, having frequent upgrades of ucore/ublue is great, but the best way to gate them is to install from a local mirror, and then I choose when I want to sync the mirror with ghcr... it not only provides a buffer between build and install, but saves bandwidth for those are are running ublue/ucore on multiple systems.

WaffleophagusOP•9/6/23, 4:46 PM

yea, read that

bsherman•9/6/23, 4:46 PM

so, even if building in github, could just mirror to a local container registry

WaffleophagusOP•9/6/23, 4:47 PM

My inclination, at least with some of this, is to get it off of github

WaffleophagusOP•9/6/23, 4:47 PM

Personally I don't love the idea of "hey, my entire system configuration is in a public repo"

WaffleophagusOP•9/6/23, 4:48 PM

the tradeoffs right now are totally in the "worth it" camp, but if I can help get it to where its entirely onprem I'll happily be a guinea pig.

WaffleophagusOP•9/6/23, 4:50 PM

really dumb question... how large are these images? Like I'm looking at one of the images on github and for the life of me it doesn't show a filesize.

WWaffleophagus really dumb question... how large are these images? Like I'm looking at one of t...

bsherman•9/6/23, 4:52 PM

total size is around 6GB depending which variant and nvidia or no

bsherman•9/6/23, 4:52 PM

you can just podman pullpodman pull an image to see

WaffleophagusOP•9/6/23, 4:52 PM

ah, larger than I thought.

WaffleophagusOP•9/6/23, 4:52 PM

Not huge though.

bsherman•9/6/23, 4:53 PM

and really most of the work I do for ublue involves locally running podman build Containerfilepodman build Containerfile from our various repos with different build args

bsherman•9/6/23, 4:53 PM

usually only the github workflows themselves need to be in github for testing

WaffleophagusOP•9/6/23, 4:55 PM

at ~6gb, to replicate github's 90 day retention, that's about a half a TB per image

WaffleophagusOP•9/6/23, 4:55 PM

ouch

WaffleophagusOP•9/6/23, 4:55 PM

I'd probably cut back a bit

WaffleophagusOP•9/6/23, 4:57 PM

one of the things I've been thinking of doing, which is really dumb, is to do a local cached repo for dnf, then once you have that, in theory you could build N images on the fly from from it, but that sounds like hyper-overkill

bsherman•9/6/23, 4:58 PM

I am spoiled with fast internet now, and i've already considered caching container registries and DNF repos, etc...

but I may be moving somewhere with much restricted internet... if so, it'll be imperative to figure that out

j0rge•9/6/23, 5:01 PM

transparent inhouse registry would be dope, I filed an issue for that in the website repo.

WaffleophagusOP•9/6/23, 5:01 PM

but yea, baby steps, for now Imma test forge

WaffleophagusOP•9/6/23, 5:01 PM

if not tonight, then maybe this weekend

WaffleophagusOP•9/6/23, 5:04 PM

my setup at home is unraid, and it has some oddities when it comes to docker, you wanna know going in its templated for unraid

WaffleophagusOP•9/6/23, 5:04 PM

so I'll just setup a ucore VM

WaffleophagusOP•9/6/23, 5:04 PM

to remove that from the oddities