News for hackers. Stuff that matters.

A comment on Remote Code Execution as a Service. Parent comment

Re:Remote Code Execution as a Service by preseinger on Tuesday March 07, 2023 @06:56PM (#35063187)
how do you prevent build 1 from modifying the VM in a way that impacts build 2?

if a build 1 happens to install a specific libc, do you un-install that libc before running build 2?

if you just say that stuff is the responsibility of the user, okay, but then the artifacts produced by this system aren't deterministic, which seems like a problem?

[ Parent | on HN ]
Re:Remote Code Execution as a Service by adamgordonbell on Wednesday March 08, 2023 @06:46AM (#35067864)
Good question, so the builds are specified in Earthfiles, which are run by our buildkit backend.

Buildkit runs the builds in runC, so basically containers are used to keep things deterministic, but the buildkit backend isn't shared, each is in own EC2 instance.

[ Parent | on HN ]