[05:55:35] <_joe_> you need to specifically allow it to /v2, same as the restricted user. [08:37:52] yep Dawid filed https://gerrit.wikimedia.org/r/c/operations/puppet/+/1228549, we were unsure at first but docker-pkg is clear about where to login :) [08:38:13] the downside is that the ml-build node will be able to push other things other than the images under /ml, but not a big deal [09:04:11] i'll rollout the change on a node and check that all is good [09:05:48] okok perfect [09:06:04] I'll file another patch later on to clarify the nginx config [09:09:58] <_joe_> elukey: I don't think it's a big issue tbh [09:10:22] <_joe_> but yeah at some point we need to have a serious conversation about the docker registry. Where "at some point" is relatively soon [09:13:34] https://gerrit.wikimedia.org/r/c/operations/puppet/+/1229068 small fix, wrong declaration order [09:13:58] not sure how it passed the test [09:14:06] in the previous change [09:16:48] very weird [09:18:52] indeed, basicallty when running on an actual target it gave `Evaluation Error: Unknown variable: 'ml_build_user_hash'.` which makes sense [09:27:12] _joe_ re: registry we can discuss it in Lisbon, I personally would love to see if docker-distribution 3.0 and S3 improves the current status before taking big changes [09:39:59] change is deployed, htpasswd has the updated content [10:04:46] nice! Let us know if docker-pkg works for vllm [10:13:09] <_joe_> btw, I would like, eventually, to allow docker-pkg to run as gitlab CI for repos [10:13:37] <_joe_> but I don't think I'll ever have time to work on it :( [10:14:39] <_joe_> more or less, that means either building a buildkit backend for docker-pkg or allowing it to run dependent jobs via the gitlab api. The former being the easier route [13:29:18] would like the same :) [16:28:36] Using the buildkitd backend is easy [16:28:54] We (releng) can help with that if desired [16:40:22] <_joe_> dancy: I might ask you for advice on a couple things yeah if I ever find the time, or ofc if you want to pick that up yourself, you're welcome [16:40:49] Is there an existing ticket for the idea? [16:40:58] <_joe_> I don't remember tbh [16:41:10] ok. I'll wait until you have time to think about it. [16:41:15] <_joe_> I've always assumed it would be one of my weekend specials, so maybe not [16:41:37] But definitely feel free to hit us up when the time comes! [16:41:41] <_joe_> yeah I have the SRE summit next week, and 4 hours of presentations to give overall. It's gonna be hard before [16:41:43] <_joe_> that's over