COPR

[Richard W.M. Jones]

On Wed, Sep 04, 2013 at 04:29:27PM +0200, Lukas Zapletal wrote:
> On Wed, Sep 04, 2013 at 09:04:10AM +0200, Miroslav Suchy wrote:
> > Compare it to Copr and OBS approach, when package is build in VM and
> > after that backend will retrieve the results from VM. So on builder
> > (of OBS and COPR) is no sensitive information at all.
> 
> Are we able to evaluate, how much slower this is? Currently Fedora Koji
> is pretty fast, I usually get near-to-instant build pick-ups.
> 
> I can imagine spawning a VM can be slower. At least when using full
> QEMU/KVM. I see the point that containers/selinux and such technologies
> can do better in here.

Please measure this before making incorrect statements.

I have done, and you should be able to boot up a Fedora VM in 3-5
seconds on c.2010 Intel hardware (which is what libguestfs does).
Alternately you can restore the VM from a saved image in even less
time.

There's no significant advantage to using containers for this.
Containers are also *not* secure -- see Dan Berrange's reply a few
days ago for the full details about that.

Rich.

-- 
Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones
Read my programming blog: http://rwmj.wordpress.com
Fedora now supports 80 OCaml packages (the OPEN alternative to F#)