← Back to team overview

canonical-ci-engineering team mailing list archive

Upstream Merger testing of Community Core Apps

 

James and I discussed the possibility of moving the pre-commit and
merger testing of the core apps [1] from the core-apps jenkins [2]
into the internal jenkins.

The separate infrastructure is required because the core apps
contributors are not necessarily canonical employees. Before the code
is executed by jenkins, it does have to be committed or reviewed by a
member of one of the core-apps teams. These teams are sometimes
managed by community members.

The issues are that the separation of the two infrastructures is added
work to duplicate services and keep them running and we're unable to
test inside the VPN on actual touch devices.

<elmo> fginther: so, to me, the VPN or not is irrelevant - what's
interesting is how much we trust the people who upload the code we're
testing, and how well isolated the test runs are
<elmo> fginther: a good comparison would be buildds - for Ubuntu, the
buildds are run de-virtualized because we de facto trust everyone who
can upload to Ubuntu
<elmo> fginther: but for PPAs, where anyone in the world can upload
anything, they're run in a locked down VM which is torn down and
thrown away after every build


<elmo> fginther: does the AA protection apply to the tests the app run?
<fginther> elmo, yes, if we did this, I expect us to install the apps
via click and therefor the apparmor would be in effect


<fginther> elmo, does the answer change if we had a touch emulator instead of HW
<elmo> fginther: yeah, if we can virtualize/sandbox it somehow, that
makes it way way saner, IMO


<elmo> fginther: would we be re-flashing the devices between installs?
 (I assume not, but worth asking)
<fginther> elmo, that's an unknown, currently the answer is yes


For now, nothing is changed. We need to revisit when the emulator is available.

[1] - https://launchpad.net/ubuntu-phone-coreapps
[2] - http://91.189.93.70:8080/

Francis
-- 
Francis Ginther
Canonical - Ubuntu Engineering - Continuous Integration Team


Follow ups