Project

General

Profile

Bug #17434

Building many IUKs (v2) takes a while on Jenkins

Added by intrigeri 3 months ago.

Status:
Confirmed
Priority:
Normal
Assignee:
Sysadmins
Category:
Continuous Integration
Target version:
-
Start date:
Due date:
% Done:

0%

Feature Branch:
Type of work:
Sysadmin
Blueprint:
Starter:
Affected tool:

Description

With the new "single SquashFS diff" upgrade scheme (#15281 and friends), during the release process, the RM has to build many IUKs on Jenkins:

  • to ensure they match those the RM has built locally
  • to publish them without having to upload gigabytes of data

For example, when we'll release 4.20, we'll be building more than 2 dozens IUKs.

The first iteration (#15287) of the https://jenkins.tails.boum.org/job/build_IUKs/ job builds all the needed IUKs sequentially, on one single isobuilder, which takes about 15 minutes per IUK ⇒ more than 6 hours in my 4.20 example. That's going to be pretty bad both wrt. time to remediation for security flaws and wrt. RMs' nerves.

Now that we've learned about this problem, we should iterate and improve on this.

The obvious solution is to parallelize these builds.

Potential sources of inspiration:

Worst case, if implementing this on Jenkins is too feasible soon enough, we can document in the release process how to split the set of IUKs to build into several runs of build_IUKs. This would also require extra work on bin/copy-iuks-to-rsync-server-and-verify.


Related issues

Related to Tails - Bug #17361: Streamline our release process Confirmed
Related to Tails - Bug #17435: Building many IUKs (v2) takes a while on the RM's system Confirmed
Related to Tails - Bug #17437: Check which 4.x base versions we need to support upgrades for Confirmed

History

#1 Updated by intrigeri 3 months ago

  • Related to Bug #17361: Streamline our release process added

#2 Updated by intrigeri 3 months ago

  • Related to Bug #17435: Building many IUKs (v2) takes a while on the RM's system added

#3 Updated by intrigeri 3 months ago

  • Related to Bug #17437: Check which 4.x base versions we need to support upgrades for added

Also available in: Atom PDF