Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Attune - Build and publish APT repositories in seconds

github.com

Post reply on HN
Print view View original

11–20 of 35 posts

Re: Show HN: Attune - Build and publish APT repositories in seconds

#11

Post by benwilber0 »

ilikebits wrote: post #8
benwilber0 wrote: post #7

Maybe I'm wrong, but aren't apt repositories just files in a web root? There are many scripts in the Debian ecosystem to generate and maintain such web directories. Maybe the actual package building would be interesting, but I don't know about just "we'll host your .deb files and keep the index updated"

You are correct. The reason we built this tool is because all of the scripts we found had sharp edges when we tried to use them in production at scale (I talk about some of them here: https://news.ycombinator.com/item?id=43730136 ). Most of these scripts were designed for a world where there was A Blessed Deployment Machine that acted as its own de facto centralized control plane. We're designed for a newer world whe…

What is an example of something that would require "distributed signing"?

Re: Show HN: Attune - Build and publish APT repositories in seconds

#12

Post by ilikebits »

jauntywundrkind wrote: post #9

Yes, it's Rust ;). Sign of quality to me. Excited to try. I ran a reprepo for a couple of years & it wasn't the worst to run, but not fun either. My confidence in efficiently publishing packages was super low, never improved much. It also mandated running a web server (configuring my nginx to point at the repo filesystem), not very batteries included. https://wiki.debian.org/DebianRepository/SetupWithReprepro

Thanks for trying, and sorry in advance for the rough edges :)

We're also working on a hosted service! If you'd like a sneak peek, send us a message at founders@attunehq.com (or email me directly at eliza@attunehq.com). I'm happy to talk about your specific needs and see if we can build something for them.

(And yes, it is Rust. I keep trying to find projects where I get to stretch my Haskell wings again, but unfortunately I keep working on things with silly requirements such as "easily understandable performance" and "a cross-compilation story" and "not making my collaborators sit through another monad tutorial".)

Re: Show HN: Attune - Build and publish APT repositories in seconds

#13

Post by ilikebits »

benwilber0 wrote: post #11
ilikebits wrote: post #8

Earlier quoted context omitted.

You are correct. The reason we built this tool is because all of the scripts we found had sharp edges when we tried to use them in production at scale (I talk about some of them here: https://news.ycombinator.com/item?id=43730136 ). Most of these scripts were designed for a world where there was A Blessed Deployment Machine that acted as its own de facto centralized control plane. We're designed for a newer world whe…

What is an example of something that would require "distributed signing"?

Our use case is customers who (1) want to use a managed cloud hosting service that we provide, but (2) are not willing to give us their signing keys. Our design allows them to keep all of their signing keys local to their environment.

To our knowledge, we have not found another provider who supports both of these requirements. It's not some amazing technical innovation, but it is one of those annoying paper cuts that builds up with all the others.

Re: Show HN: Attune - Build and publish APT repositories in seconds

#14

Post by [deleted] »

benwilber0 wrote: post #11
ilikebits wrote: post #8

Earlier quoted context omitted.

You are correct. The reason we built this tool is because all of the scripts we found had sharp edges when we tried to use them in production at scale (I talk about some of them here: https://news.ycombinator.com/item?id=43730136 ). Most of these scripts were designed for a world where there was A Blessed Deployment Machine that acted as its own de facto centralized control plane. We're designed for a newer world whe…

What is an example of something that would require "distributed signing"?

[deleted]

Re: Show HN: Attune - Build and publish APT repositories in seconds

#17

Post by eMPee584 »

jauntywundrkind wrote: post #9

Yes, it's Rust ;). Sign of quality to me. Excited to try. I ran a reprepo for a couple of years & it wasn't the worst to run, but not fun either. My confidence in efficiently publishing packages was super low, never improved much. It also mandated running a web server (configuring my nginx to point at the repo filesystem), not very batteries included. https://wiki.debian.org/DebianRepository/SetupWithReprepro

.. for the repo github pages can be used as well, although the disgust when pushing huge .deb files up there is real.

Re: Show HN: Attune - Build and publish APT repositories in seconds

#18

Post by 0x6c6f6c »

frabona wrote: post #16

Curious how different is this from mise and ubi? https://github.com/jdx/mise I have a few pain points with that for installing cua ( https://github.com/trycua/cua/issues/27 ), so if it can remove the initial friction happy to chat!

I've never heard of mise used for creating and managing APT repositories. Where does that figure in?

Re: Show HN: Attune - Build and publish APT repositories in seconds

#19

Post by Hackbraten »

ilikebits wrote: post #6
Hackbraten wrote: post #4

How is this different to aptly, especially if one already has object storage?

One of the tools we tried was Aptly! A couple issues we had with Aptly: 1. Aptly needs to rebuild the entire repository before it can do any changes. One of our customers builds packages for every Linux OS, and every architecture, and each release contains 10-something separately packaged tools, and they do regular releases. This means their repository of packages is _huge_. When they try to do small maintenance acti…

Thanks for the detailed response!
Post reply on HN