Jthey all rebuild.
Jbut say kinoite is red or something.
Jso bazzite sees silverblue updates, and also automerges and builds
Jbut it's behind on kinoite now
Jthough I guess we'll just see how it works, I am overthinking it
RNo, you're right. That could happen...
RThere's a few things we could do.
JI know we're getting rid of it, but basically with a huge matrix like hwe has
JI can see renovate PRing a downstream like 3 times given the churn or something.
Ti think we should gate it behind the merge queue
Tso it wont get automerged if it fails to build
RWe can stop the merge queue from pushing to the "production" tags (latest, stable etc), and re-tag the merge-queue builds as those prod tags in the push trigger.
So:
So:
- Merge queue builds all images, pushes to merge-queue only tags
- Push trigger re-tags merge queue tags with production tags
Jit does, it PRs and if checks fail it doesn't merge
Tso it should be fine then, right?
RThere's things we can do, but we just need to decide what behaviour we would want
JI like grouping them together
Jbut also we could keep the production tags on the daily/weekly timer right?
Jthough I guess that would negate the advantage
Jbut also :latest would legit be latest.
Jlet's see how this feels with main/akmods, that will be convenient right away
Jand aurora needs to follow just kinoite, and bluefin can follow silverblue, bazzite will be more complex
RBazzite could have separate image-versions.yaml files for each DE, and the workflows say "if image-versions.kinoite.yaml is changed, build kinoite images"
Jooooh!
RThis is the sort of thing I did for three years at my last job.
Building out solutions to these annoying problems in GitHub and AWS.
Now I teach people why they need to rotate their passwords if they are committed to GitHub, or write reports on why patching a critical server is important
(pls hire me <big tech company>)
Building out solutions to these annoying problems in GitHub and AWS.
Now I teach people why they need to rotate their passwords if they are committed to GitHub, or write reports on why patching a critical server is important
(pls hire me <big tech company>)
JI mean those 2 things happen all the time
JI think even at big tech companies, heh
TYeah at AWS we had Charlie Bell yelling at people for not rotating certs or patching servers.
TUBlue got a shoutout in the official F42 announcement!
https://fedoramagazine.org/whats-new-for-fedora-atomic-desktops-in-fedora-42/
https://fedoramagazine.org/whats-new-for-fedora-atomic-desktops-in-fedora-42/
Fedora MagazineTimothée Ravier
Description of new variants of Fedora Atomic Desktops, and new features and changes in current variants.
RPlease could anybody with access to Podman check if you're able to pull an image using both the tag and digest?
I.E.
Or does it only allow using one or the other?
I.E.
podman pull <image>:<tag>@<digest>Or does it only allow using one or the other?
TFINALLY
Tthey are finally using bootupd oh my GOD
Tdo you have an example?
Rpodman pull quay.io/fedora/fedora:42@sha256:999c32a870abe038e2694d838d0109f47838fb4f433c7f5597c59853bf0624c8Tworks!
MCan docker do that as well?
MNo. Apparently. Digest only
RThis seems to be working now.
https://github.com/ublue-os/main/pull/792
It may turn out to be a terrible idea, or saturate the builders... If that's the case, it's an easy revert.
https://github.com/ublue-os/main/pull/792
It may turn out to be a terrible idea, or saturate the builders... If that's the case, it's an easy revert.
Tlets see!
Ti hope this works LOL
Tcuz maintaining ublue by just click click click renovate would be amazing
RHow important is it to have the updated images immediately?
Just thinking if Timothee builds F40 and F41 at different times, it may cause duplicated builds (unless we implement the split image-versions files here too).
If we're okay with checking for images every 3 hours or so, that would reduce the duplicated builds while still ensuring we slirp up the new images that day
Just thinking if Timothee builds F40 and F41 at different times, it may cause duplicated builds (unless we implement the split image-versions files here too).
If we're okay with checking for images every 3 hours or so, that would reduce the duplicated builds while still ensuring we slirp up the new images that day
Tthat sounds good to me tbh
RI guess we merge my current PR and see how it goes. Can easily be tweaked later
Jneeds and ack
J@tulip ack it
Thow did you ping me without pinging me?
Jdunno
JI turned off F40 workflow in main
RI really hope this thing works well enough...
RIn theory it's exactly what we wanted, but right now, all I can think about is the things that could go wrong with it
