Yuvi

Switch to using eventstreams

2

Eventstreams are a much better fit for this than polling via HTTP requests as we do now. We should switch to it (plus a polyfill for IE users)

Very helpful when trying to auto-update helm charts, as they take the tag and the image separately

Transfer issues from https://github.com/yuvipanda/jupyter-desktop-server/issues

2

We moved the upstream of that repo here, but there are more issues in that repo. We should transfer them. I'm not sure how. EDIT: Link is https://github.com/yuvipanda/jupyter-desktop-server/issues

Protects against vulnerabilities such as https://arstechnica.com/information-technology/2022/01/a-bug-lurking-for-12-years-gives-attackers-root-on-every-major-linux-distro/ or the previous sudo vulnerability. Equivalent of https://github.com/jupyterhub/kubespawner/pull/545 This should be counted as a braking change.

According to https://github.com/systemd/systemd/blob/master/NEWS, 1. We need at least systemd 211 to use systemd-run 2. We need at least systemd 217 to isolate /tmp for all the notebook services

Add ability to set aside a slice for all the single user servers

1

If we spawn all single user notebooks into a slice and set cpu / memory limits on that slice, we can guarantee that notebook users can never, individually or in...

We should have some unit tests. Specific ones I can think of: 1. Write a JSON Schema for gallery.yaml and enforce it 2. ???

Currently, the super specific version pins prevent installation of okpy on latest datahub at Berkeley with newer versions of pip.

Log user in automatically after sign-up

2

Right now, when a user signs up, they are then asked to manually go to the login page and log in. If they don't need explicit admin approval, we should...