search

in-toto / apt-transport-in-toto

in-toto transport for apt
Other
8 stars 6 forks source link

One of the default rebuilders is offline (https://reproducible-builds.engineering.nyu.edu/) #38

Open axelsimon opened 2 years ago

axelsimon commented 2 years ago

Description of issue or feature request: The default apt configuration file (installed at /etc/apt/apt.conf.d/intoto) uses two rebuilders:

  Rebuilders {
    "http://158.39.77.214";
    "https://reproducible-builds.engineering.nyu.edu";
  };

One of these two rebuilders, https://reproducible-builds.engineering.nyu.edu/, appears to be offline.

Current behaviour: /etc/apt/apt.conf.d/intoto should points to an offline rebuilder, leaving only one rebuilder to compare with, which a very small set.

Expected behaviour: /etc/apt/apt.conf.d/intoto should point to active rebuilders, and have more than 1.

Small extra note I believe it's customary to add a priority number on an apt.conf.d file, to provide apt information as to when to run / how important a configuration file is. Currently, the in-toto apt.conf.d file is just named /etc/apt.conf.d/intoto which isn't ideal.

SantiagoTorres commented 2 years ago

Hi, @axelsimon !

Thanks for pointing this out. I think the NYU rebuilder should be back soon™. I'm also deploying one in the Purdue infrastructure, which I expect to see on either late Aug or early Sep. Realistically speaking, it'd be great if we had more than 2/3. Originally we were hoping to have a threshold of 3/5. Once rebuilderd starts maturing enough (specially after this gsoc!) I think we should be able to see more rebuilders deployed for both Debian and Arch :)

As for the extra note, I agree, though I wonder if we'd like to move it to a separate ticket.

axelsimon commented 2 years ago

Ok, that's good to hear, thanks @SantiagoTorres! Soon™ is always the best timeframe.

I suggest we leave this ticket open for now a reminder, and check the situation again in a couple months.