Create flag for single use VM in Swarming (ephemeral bot) |
|||||
Issue descriptionThis is needed for destructive tests. For example, testing an installer or running partially trusted payload. This requires integration with MP, a new flag, and improvement to the bot scheduling logic, then releasing the lease.
,
Apr 4 2017
Design proposal: http://go/single-use
,
Apr 4 2017
Do we really want this now, only for Linux? E.g. installer use case is not even applicable to Linux (I think we use Debian packages, or something, there). IMHO, it's better to make rest of the fleet (at least virtualized Windows and OSX) be as supported as GCE VMs, before adding more features there. Without doing so, we are just growing the pile of technical debt.
,
Apr 4 2017
The proposal is hypervisor-agnostic, it's entirely Swarming-side. If we support single-use first then add other support in MP (e.g. Windows on GCE, Mac on vSphere) we would get single-use for free for those platforms. Alternately like you suggest we could support other OSes first and then the proposed single-use design could be implemented later. Linux is the most represented OS on chromium-swarm with 1500/3500 bots being Linux, and 1300/3500 managed by MP. There are only about 700 Windows and 800 Mac. Far fewer if you only count VMs, because bare metal cannot easily be refreshed even if managed by MP.
,
Apr 4 2017
I think this is a lower priority item as well. Swarming Linux GCE is already our most reliable platform, in part because of the 24-hour leases MP is already providing. I'd much rather see projects that reduce labs team or trooper toil (e.g. MP for non-GCE or running Win10 on GCE).
,
Jun 28 2017
The proposal is theoretically viable but in practice the startup delay for new VMs is significant. We likely can't do single-use VMs until we get the startup time way down.
,
Feb 12 2018
keywords: delete, one use, reap
,
Nov 19
I'll dupe this issue into issue 906747, as I feel it is a slightly better design. It doesn't require keeping a counter of the number of tasks run on a bot, it just deletes it. As such, it's a slightly different use case than what is described at http://go/single-use but I think it better defines what is needed: the caller can ask for the bot's VM to be reaped. |
|||||
►
Sign in to add a comment |
|||||
Comment 1 by mar...@chromium.org
, Mar 29 2017Components: Infra>Platform>MachineProvider
Labels: -Type-Bug -Pri-3 OS-Linux Pri-2 Type-Feature
Status: Available (was: Untriaged)