FYI It hurts to pay for 43 minutes of Python test ...
# development
b
FYI It hurts to pay for 43 minutes of Python test time when making PRs to Pants šŸ˜¬ https://github.com/pantsbuild/pants/runs/4791148287?check_suite_focus=true#step:14:476 Is remote caching supposed to be enabled? I see
15:13:33.51 [WARN] [auth-plugin] Failed to load Toolchain token from env var 'TOOLCHAIN_AUTH_TOKEN'. Please make sure the env var is set in your environment.
āž• 1
w
so: yes, it is enabled. but it uses delegated auth to confirm that the PR submitter is authorized to use the Toolchain cache.
and: we began a process last week to open that up to all Contributors
the caching helps quite a bit: https://github.com/pantsbuild/pants/runs/4783397469?check_suite_focus=true ā€¦ sorry that you havenā€™t had access to it so far
b
Why does the PR submitter matter in this case?
w
a malicious PR could write whatever it wanted to into the cache, and corrupt it
šŸ¤” 1
you canā€™t corrupt the CAS, since itā€™s verified by the server as content addressable.
but the cache itself cannot be checked by the serverā€¦ process in, ā€œsome process outputā€ out.
but yea. stay tuned here: hopefully we can have it enabled in the next few weeks
šŸ™Œ 2