Here are my notes on today's meeting: casulana.d.o status -------------------
The top issue is that casulana is out of commission. As a result, we're unable to do any official image builds. A case is open for repair, but we don't know when it will be complete. Previously, we discussed using petterson as another build host. Bastian thought there might be some challenges with additional setup required. But it looks like the required setup may be complete. See [1] for details. Since the images are copied from casulana -> petterson for cdimage.d.o distribution, this might be a good long-term change anyhow. salsa secret storage -------------------- Bastian raised an issue with the present state of salsa's secret storage. An arbitrary file read bug may expose secrets. For now, the public cloud secrets used for uploads have been disabled or revoked. This means that our image builds cannot complete successfully even if the above issues are resolved. The bug is not believed to affect runner credentials. Since the bullseye release is close, a short-term solution may be needed. If required, Bastian has agreed to issue new credentials, trigger the builds, and then revoke them after completion. A longer term solution is still required. Public AWS SSM parameters ------------------------- AWS Secure Systems Manager (SSM) has added public parameters to help users find pre-loaded images for EC2. Noah reported that our access has been setup, and we should be able to publish data on the Debian AMIs that we upload. No data been published yet though. For more information see [2]. AWS hosted docker images ------------------------ Debian images are now available on Amazon's public image gallery [3]. If Docker Hub's image pull rate limits have caused you pain, this may be a useful alternative. There are a few outstanding issues, but basic functionality is working. Thanks to Tianon Gravi for providing this! Thanks, Ross [1] https://rt.debian.org/Ticket/Display.html?id=7826 [2] https://docs.aws.amazon.com/systems-manager/latest/userguide/parameter-store-public-parameters.html [3] https://gallery.ecr.aws/debian/
