Matthew James Briggs
Matthew James Briggs
Design the integration of TestSys into the Bottlerocket CI workflow. One possible initial step would be to run sonobuoy on qemu during GitHub actions since this would not require any...
Review the security of the system. Make improvements as needed. This might include a formal internal security review. - depends on #51 `id: security_review`
Migrate apiclient to a server client model, to allow the client to be model agnostic apiclient needs to no longer depend on the `models` crate. To do this it will...
Currently `twoliter build variant` and `twoliter build kit` default to `x86_64`. Instead they should default to the machine architecture (for example the architecture that `twoliter` was built for). --- Can...
Bottlerocket has been fine because it is using `twoliter make` and can change the Infra.toml path via the env var in the twoliter's Makefile.toml. However for OOTB builds using the...
The `ManifestInfo` type deserializes certain sections from Cargo.toml - `package.metadata.build-package` - `package.metadata.build-kit` - `package.metadata.build-variant` Currently the differences between build-package, build-kit and build-variant is not constrained by an enum. This leads...
We are doing this too many times: ```rust let project = project::load_or_find_project(self.project_path.clone()).await?; let toolsdir = project.project_dir().join("build/tools"); install_tools(&toolsdir).await?; ``` @webern can you suggest a way to factor out the `load_or_find_project` and...
Currently, if a user wants to override the location of the lookaside cache, they have to do so with a BUILDSYS_ environment variable that is passed to the Twoliter build...
**Background** Issue bottlerocket-os/bottlerocket#2617 was caused when we used `pubsys promote-ssm` while AMIs were not publicly available. This could be prevented if pubsys would check AMI ID availability before promoting SSM...
This issue is catalyzed by this experience: https://github.com/bottlerocket-os/bottlerocket/discussions/1573 In the case that the admin container is not starting or unusable, there are no good facilities for - Knowing the state...