Patch Wednesday!
From: Ed King Via chugalug ------------------------------------------------------=============================================================== From: Tyler Holcomb Via chugalug ------------------------------------------------------ From: Tyler Holcomb tyler tholcomb.com: - - - - - - - - - - - - - - - - - - - - - - - - - - - - Fun lesson from today. Background: I've been using Ondrej's PHP repos for about a decade. More rec= ently, I moved my servers to ARM in order to reap those dope Graviton disco= unts. After all, what the hell do I care about the instruction set; I'm 50 = layers above the metal. Well, my fellow geeks, enter the FOSS sausage factory. This is the way, ste= p inside. After diligently patching the RCE on my lone x86_64 running EOL PHP (thanks= Ondrej), I moved on to my shiny new ARM servers with supported versions of= PHP. apt update && apt list --upgradable... Hmm, that doesn't look right. = 3 emails later, same thing. After tracking down the staging performance iss= ue (autovacuum =3D off), same thing. Time to go digging.=20 It turns out that the ARM builds are virtualized and take somewhere between= forever and an eternity to complete. "Took 5 hr 12 min on mononoke". There are 10 - combinations bui= lt out of ~110. https://codeberg.org/oerdnj/deb.sury.org/issues/145#issuecomment-26086184 As a very serious professional who can't wait a day or two, I decided to ta= ke matters into my own hands. You're thinking I'm going to compile it mysel= f? Wrong. I rebuilt the servers on amd64 (One boolean flag, because yes, I = am that good.) and tofu'd them back into AWS. This problem never crossed my mind when switching to ARM. I'm not sure what= the moral of this story is other than dependencies are a bitch. At least m= y boxes are "safe," albeit, slower and more expensive. With regards to the great Ond=C5=99ej Sur=C3=BD and Col. Taylor, Happy Patc= h Wednesday! - Tyler