Conversation

Notices

1. Embed this notice
   Rich Felker (dalias@hachyderm.io)'s status on Thursday, 08-Jan-2026 01:28:34 JST Rich Felker

   • Luna :neofox_snug:

   @lunareclipse And if your problem motivating better compression is something like "environmental impact of downloads from kernel.org", your problem isn't insufficient compression. It's the mentality of putting CI shit everywhere (and now AI scrapers everywhere) downloading the same thing a million times. If you make the data smaller with better compression, they'll just download it more times.

   • Embed this notice
     Rich Felker (dalias@hachyderm.io)'s status on Saturday, 10-Jan-2026 00:30:24 JST Rich Felker

     in reply to

     • Luna :neofox_snug:
     • Demi Marie Obenour

     @alwayscurious @lunareclipse A good CI system would disallow any network access, only allow requests of content addressed storage.

   • Embed this notice
     Demi Marie Obenour (alwayscurious@infosec.exchange)'s status on Saturday, 10-Jan-2026 00:30:25 JST Demi Marie Obenour

     in reply to

     • Luna :neofox_snug:

     @dalias @lunareclipse One of the reasons CI does that is that it is so inconvienent to cache things nowadays. CI boxes are stateless by design, and using a network cache requires either an MITM certificate or changing the URLs one uses. Better tooling for this would really help.

   • Embed this notice
     Rich Felker (dalias@hachyderm.io)'s status on Saturday, 10-Jan-2026 12:22:20 JST Rich Felker

     in reply to

     • Luna :neofox_snug:
     • Demi Marie Obenour

     @alwayscurious @lunareclipse It's the responsibility of folks wanting to use CI not to be externalizing cost onto volunteer projects/maintainers or onto the world at large through bad behavior. If fixing this is too much of a burden, then don't use CI.

   • Embed this notice
     Demi Marie Obenour (alwayscurious@infosec.exchange)'s status on Saturday, 10-Jan-2026 12:22:21 JST Demi Marie Obenour

     in reply to

     • Luna :neofox_snug:

     @dalias @lunareclipse Who is going to change all of the programs that run in that CI? Things like NPM, Cargo, git, curl, and the like.

     I like the idea, but implementing it is a massive amount of work, and most of it falls not on the CI provider but on its users.