Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

GitHub Actions has a package manager, and it might be the worst

nesbitt.io

Post reply on HN
Print view View original

191–200 of 267 posts

Re: GitHub Actions has a package manager, and it might be the worst

#191

Post by andrewaylett »

gcr wrote: post #104
ChrisMarshallNY wrote: post #78

Earlier quoted context omitted.

> VSS I just had trauma! I will say that SourceSafe had one advantage: You could create "composite" proxy workspaces. You could add one or two files from one workspace, and a few from another, etc. The resulting "avatar" workspace would act like they were all in the same workspace. It was cool. However, absolutely everything else sucked. I don't miss it.

So it’s a workspace that includes changes from multiple branches at once, like `jj new revset-1 revset-2 revset-3 …` ? (Git has octopus merges, jj just calls them “merge commits” even though they may have more than two parents)

No, it let you continue to follow the main branch for most files, while files you edited would have their changes saved to a different location. And was just about as horrible as you might imagine.

We moved from VSS to SVN, and it took a little encouraging for the person who had set up our branching workflow using that VSS feature to be happy losing it if that freed us from VSS.

Re: GitHub Actions has a package manager, and it might be the worst

#192

Post by ironmagma »

baq wrote: post #188
ironmagma wrote: post #184

Earlier quoted context omitted.

No, that's actually the same issue. "Entitled to tell them what to do without contributing" is not a problem. Let them tell whoever what to do, the response is always the same: "patches welcome," or if that isn't even true (which it doesn't have to be), "feel free to fork."

OTOH if you didn't pay for support you shouldn't expect support. 'patches welcome' is a very valid response.

Is not the whole FOSS movement about receiving something you did not pay for? Going as far as to say that’s even what users deserve?

Re: GitHub Actions has a package manager, and it might be the worst

#193

Post by cyberax »

battesonb wrote: post #25
cyberax wrote: post #9

Yep. I'm switching our workflows to instead use regular utilities running inside a Docker container. This works well for _most_ things. There are some issues with doing docker-in-docker for volume mapping, but they're mostly trivial. We're using taskfiles to run tasks, so I can just rely on it for that. It also has a built-in support for nice output grouping ( https://taskfile.dev/docs/reference/schema#output ) that…

Do you have a write up about this? Actions are great, but my #2 gripe with actions, after the tenuous security posture, is that the default practice is not to run/validate actions locally.

I don't. Will do soon.

Re: GitHub Actions has a package manager, and it might be the worst

#194

Post by 999900000999 »

cyberpunk wrote: post #190
999900000999 wrote: post #182

Earlier quoted context omitted.

Jenkins is open source and very well documented. GitHub Actions are really for just short scripts. Don't take your Miata off road.

Jenkins! For the love of god don’t listen to this.

Always open to learning, what's wrong with Jenkins?

It's a bit bloated, but it's free and works.

Re: GitHub Actions has a package manager, and it might be the worst

#195

Post by Marsymars »

IshKebab wrote: post #105
dimgl wrote: post #99

Earlier quoted context omitted.

I tried to use CircleCI and I gotta say, it is absolutely not better than GitHub Actions…

I have also used Travis. Ditto. Github Actions is actually one of the better CI options out there, even if on an absolute scale it is still pretty bad. As far as I can tell nobody has made a CI system that is actually good .

I quite liked Bitrise for mobile apps when I used that.

Re: GitHub Actions has a package manager, and it might be the worst

#196

Post by lijok »

999900000999 wrote: post #162
samhh wrote: post #16

Earlier quoted context omitted.

I was surprised to learn that Depot runners, which are much faster, are also much cheaper. Would highly recommend them for anyone trapped on GitHub.

Yeah, but I have to set that up. GitHub actions more or less just work for what most people need. If you have a complex setup, use a real CI/CD system.

I haven’t use depot but I’m pretty sure the setup is literally just switching out the runs-on value in your workflows

Re: GitHub Actions has a package manager, and it might be the worst

#197

Post by lijok »

999900000999 wrote: post #182
bastardoperator wrote: post #177

Earlier quoted context omitted.

Such as?

Jenkins is open source and very well documented. GitHub Actions are really for just short scripts. Don't take your Miata off road.

Why is gha just for short scripts, out of interest?

Re: GitHub Actions has a package manager, and it might be the worst

#198

Post by baq »

ironmagma wrote: post #192
baq wrote: post #188

Earlier quoted context omitted.

OTOH if you didn't pay for support you shouldn't expect support. 'patches welcome' is a very valid response.

Is not the whole FOSS movement about receiving something you did not pay for? Going as far as to say that’s even what users deserve?

don't confuse 'receiving something you did not pay for' with 'being allowed to feel entitled to anything' is all. 'open source' is just that, nothing more. if you want a service with your source, be prepared to sponsor it.

Re: GitHub Actions has a package manager, and it might be the worst

#199

Post by theamk »

phantasmish wrote: post #178
amarant wrote: post #175

Earlier quoted context omitted.

Hey at least we can all expect lots of extra days off because "GitHub is down" once they're done with that migration!

They had working infra and a great case for keeping fairly "close to the metal". Complicated files-heavy workload that needs tons of clever caching to perform well, lots of writes, lots of non-HTTP TCP traffic. Retrofitting that into "cloud" bullshit is such a bad idea.

meh, I dunno.

Using bare-metal requires competent Unix admins, and Actions team is full of javascript clowns (see: decision to use dashes in environment variable; lack of any sort of shell quoting support in templates; keeping logs next to binaries in self-hosted runners). Perhaps they would be better off using infra someone else maintains.

Re: GitHub Actions has a package manager, and it might be the worst

#200

Post by hinkley »

nijave wrote: post #116
themafia wrote: post #47

Earlier quoted context omitted.

AWS is great for this. IAM policies can allow IP Addresses or more safely just named EC2 instances. Our deploy server requires nothing.

CircleCI and I believe GHA support injecting signed JWTs you can use to bootstrap identity be it an IAM role or some other platform where you can trust an OIDC issuer

> injecting signed JWTs

How is that not secrets management?

Post reply on HN