Live data from Hacker News

Show HN: Open-source x64 and Arm GitHub runners

ubicloud.com

21–30 of 128 posts

Re: Show HN: Open-source x64 and Arm GitHub runners

#21
post #3

> wipe out the block storage device attached to the VM Does this provide guarantee that subsequent job won't be able to recover the data?

If the data is also encrypted at rest (as they claim it is), then even if the raw data is recovered it shouldn't be useable without a combination of key leak.

I work at Ubicloud.

Although we have a KEK and DEK code for regular VMs, they are not operative on GHA...yet. The reason has to do with a technical conflict with copy-on-write we aim to close, not least of which because Ubicloud needs to grow its own copy-on-write features for block device snapshots, things we lack today.

I expect within a few months, all expired GHA vms will be cryptoshredded upon their deletion. This is already true for regular virtual machines or managed postgres machines.

Re: Show HN: Open-source x64 and Arm GitHub runners

#22
post #18

Earlier quoted context omitted.

The docs still say the Elastic license is used but looking at https://github.com/ubicloud/ubicloud/blob/main/LICENSE it looks like the project might have switched to GNU Affero General Public License v3.0 in the last day.

thank you and that's correct, just updated the docs as well.

That's wonderful news, thank you very much for switching to an actually open license!

The linked page at https://www.ubicloud.com/docs/github-actions-integration/qui... still says "Source open under the Elastic V2 license", and https://www.ubicloud.com/docs/about/pricing still says "it's open and free under the Elastic V2 license". Not sure if those were missed or if the docs just need some time to refresh from their sources.

Re: Show HN: Open-source x64 and Arm GitHub runners

#23
We've been happily using BuildJet [0] for over a year now.

Saved over $25k in CI costs compared to GH Actions - they're also using super powerful bare metal servers with Hetzner - we got about a 94% reduction in build time!

Absolutely chuffed, good to see more companies on the market though.

[0] https://buildjet.com

Re: Show HN: Open-source x64 and Arm GitHub runners

#25
post #24

Gitlab + Home laptop runners = free Been using this setup for year, very happy with it. I don't see the point of Github to be honest?

For what it's worth, you can also self host your runners without Ubicloud on Github. That doesn't remove other reasons to not run Gitlab, but it's also not unique. I've self hosted runners for a variety of reasons on Github with great success.

Re: Show HN: Open-source x64 and Arm GitHub runners

#26
post #15

Feels like there is another one of these every week.

Might be a sweet spot. I'm thinking (a) well-understood problem (b) hardware's rented, and scales with use (c) lots of teams have CI costs high enough to be annoying, but not so high that they need authorization to change their supplier (d) github are marking up the service so hard that it's easy to compete on price.

Re: Show HN: Open-source x64 and Arm GitHub runners

#28
post #8
post #3

> wipe out the block storage device attached to the VM Does this provide guarantee that subsequent job won't be able to recover the data?

Yes, a subsequent job won't be able to recover the data. We completely shut down the VM and remove the block device (all files associated with the block device).

I think the concern is that a subsequent allocation would have blocks from a previous allocation that could be readable.

Re: Show HN: Open-source x64 and Arm GitHub runners

#29
post #16

We've been using Ubicloud builders for our Rust project [0] for several months, and it's worked very well. We've seen CI times go from 10-15 minutes to 6-7, and our bill has gone from $300/month to $30. One counter-intuitive thing we found is that it's slow to save and restore caches, but the machines have good CPU, so for us it's been faster to disable cache entirely and just redo everything on each build. [0] https…

> One counter-intuitive thing we found is that it's slow to save and restore caches, but the machines have good CPU, so for us it's been faster to disable cache entirely and just redo everything on each build.

The link to SPDK was very interesting: https://www.ubicloud.com/blog/building-block-storage-for-clo.... I use filesystems for very high performance applications, and I've found ZFS to often be the limiting factor when compared to simpler solutions of XFS +- mdadm +- encryption.

It's a controversial point, but others have made similar findings: https://klarasystems.com/articles/virtualization-showdown-fr... : "Although I suspect this will surprise many readers, it didn’t surprise me personally—I’ve been testing guest storage performance for OpenZFS and Linux KVM for more than a decade, and zvols have performed poorly by comparison each time I’ve tested them"

OpenZFS seems to be starting to consider optimizations to better perform on modern drivers (SSD, NVMe) which have very different performance profiles to what ZFS was built for (spinning rust)

In the SPDK summary they say "To make VM provisioning times go faster, we changed our host OS from ext4 to btrfs" (...) "Also, when we switched the host filesystem to btrfs, our disk performance degraded notably. Our disk throughput dropped to about one-third of what it was with ext4."

Ubicloud: the problem seems to be generic to CoW filesystems, and it's interesting you came with a slight variation (CoA) but have you considered the even simpler alternative of any journaling filesystems (XFS, Ext4...) with overlays?

Or just UFS2 + snapshots to restore from a given state (initialized, ready for each test) then restore to this state between tests?

I think customers finding that disabling cache works better means the CoA has similar issues to CoW.

Personally, I'd have just tried to using SR-IOV with a namespace per customer, and call it a day instead of bringing extra complexity, but there must be good reasons for it. I'd love to know what these reasons are.

Re: Show HN: Open-source x64 and Arm GitHub runners

#30
post #16

We've been using Ubicloud builders for our Rust project [0] for several months, and it's worked very well. We've seen CI times go from 10-15 minutes to 6-7, and our bill has gone from $300/month to $30. One counter-intuitive thing we found is that it's slow to save and restore caches, but the machines have good CPU, so for us it's been faster to disable cache entirely and just redo everything on each build. [0] https…

> so for us it's been faster to disable cache entirely and just redo everything on each build.

I wonder what the consequential "carbon footprint" of this is, but at scale for all companies/all jobs of similar nature

Post reply on HN