Why does forking cause a GitHub actions schedule to run? This is pretty unexpected. I wonder what % of actions builds are useless runs like this? Edit: to the shadowbanned guy who hasn’t realised he’s been shadowbanned for years, that’s not correct.
It’s a cron workflow
The GMP library's repository is under attack by a single GitHub user
41–50 of 91 posts
Re: The GMP library's repository is under attack by a single GitHub user
#42Earlier quoted context omitted.
I’m a bit confused as to why 700 automated clone requests per day would be an unreasonable amount of traffic for a project like GMP. That doesn’t sound like much traffic to me, especially since they reportedly have a 24 core CPU with 256GB of RAM. Is cloning a mercurial repo highly server intensive?
Those 700 clones would all hit at exactly the same time. That's quite a load for a single server, especially since Mercurial can't be cached that easily.
Re: The GMP library's repository is under attack by a single GitHub user
#43More context: https://github.com/BtbN/FFmpeg-Builds/issues/278 The FFmpeg-Builds repo has a GitHub Actions Workflow which clones the Mercurial repo. However, this runs as a (daily?) cronjob. In addition, this repo has 700 forks and now all of them are running the same workflow. This is out of control for the original author of the repo as there’s no way to change those 700 forks… EDIT: Also relevant is that there’s n…
Re: The GMP library's repository is under attack by a single GitHub user
#44The whole thread is curated yet again (as all Microsoft criticism threads are). Shame on everyone who does not appreciate the volunteer work on gmp and ridicules their servers.
The problem started with someone making a poorly built automated build script for another project, and that build script getting forked hundreds of times, triggering a huge load all by the lack of spread in the upstream build script.
This is nothing compared to an actual DDoS attack, which Microsoft was partially blamed for in the previous email. I can see why someone over at MS would be annoyed to find out the supposed DDoS was just 700 requests.
Re: The GMP library's repository is under attack by a single GitHub user
#45Why does forking cause a GitHub actions schedule to run? This is pretty unexpected. I wonder what % of actions builds are useless runs like this? Edit: to the shadowbanned guy who hasn’t realised he’s been shadowbanned for years, that’s not correct.
Re: The GMP library's repository is under attack by a single GitHub user
#46Earlier quoted context omitted.
It's totally reasonable to say that it isn't malicious and they aren't going to stop it, but it's unreasonable and unhelpful to add "seems like your servers just suck". They also missed or failed to mention that there are 700 forks of the project running the same thing at the same time.
I’m a bit confused as to why 700 automated clone requests per day would be an unreasonable amount of traffic for a project like GMP. That doesn’t sound like much traffic to me, especially since they reportedly have a 24 core CPU with 256GB of RAM. Is cloning a mercurial repo highly server intensive?
Re: The GMP library's repository is under attack by a single GitHub user
#47Re: The GMP library's repository is under attack by a single GitHub user
#48Earlier quoted context omitted.
It’s a cron workflow
Yes?
Re: The GMP library's repository is under attack by a single GitHub user
#49Sounds like GitHub actions should be caching clones of foreign Git repos. People already trust GH CI enough to run their code, so why not trust their cache as well?
FWIW, it’s not a git repo, it’s a mercurial repo.
Re: The GMP library's repository is under attack by a single GitHub user
#50You should totally move to MS Azure!