moneromooo: please also open the fixes you want in v0.16 against the branch

I did. I just don't think the lock one needs to, it's pedantic.

Research meeting in #monero-research-lab begins at 17:00 UTC (about 20 minutes from now)

it's been sugggested (selsta I think) to use backhub.co for backup of repos, it's 15$ / month. We could also reach out to them and ask for a free offer or a discount, and in exchange they could be listed on the sponsor page. Anyway reasonably priced and could be a good use for general fund

Backup of public repositories ?

They also backup issues and pull requests which I think is valuable.

moneromooo: yes

All metadata is nice. Otherwise just for repo let's all do it somewhere :)

If github data is gone, would be quite hard to get productive again with purely the git repo

Yes and monero has a higher chance of getting deleted than the average repo.

Are the backups compatible with anything else?

If the repo were to be removed from GitHub and the only use for the backup is a restore to GitHub, that doesn't seem very useful

It’s in JSON so we could parse it.

There is no standardized format so direct compatibility is unlikely.

We could also restore to Github and then use some Github -> ??? tool to transfer data.

I think sarang's point was that we'd need that if github goes poof. Then being able to restore to github and then transfer from it is not worth much.

I suppose it could be useful if someone wrote a tool to extract the necessary data and make it work with some other repo management tool

but who knows

It’s better than not having a backup and $15/month sounds reasonable.

looks like $12/mo for me

pretty sure dsc_ runs a git service of sorts that has everything from github

Not metadata.

like issues / pull requests / ...

it's cheap enough, so the question is what does it gain us and is it separate from github itself?

Yes, separate from Github and there is also the option that they backup to a S3 location.

So there was discussion a while back about using GitHub for hosting binaries

AFAIK this didn't lead to anything

Worth bringing up again?

We already use it as backup. Why is main website?

I’m against it unless there is a good reason for it.

The getmonero.org download problem has been fixed for a while now

s/is/as/

Sure, but it did exist

I'm wondering if there's really any practical advantage to self-hosting the binaries

My devil's-advocate argument is that GitHub offers free bandwidth for this, is integrated directly with the rest of the development workflow, and has not been subjected to an actual successful attack

that you know of

true

But you could say the same for self-hosting, no?

Yes.

(except for the one known attack...)

Why was there a switch to self-hosted in the first place?

IMO there seems to be little added risk, and free bandwidth

AFAIK it always was self hosted?

If the website is hacked they can change the link anyway.

In that case, why not take advantage of the free bandwidth?

I guess my question is why pay for self-hosted when it's been successfully exploited at least once, and there's free hosting available from the same entity that already manages the rest of the workflow?

I suppose it has been there for a long time, according to the ol' wayback machine. I've always grabbed releases from Github :/

FWIW getmonero.org is noticeably faster than Github on my connection.

If fluffy decides to stop paying for it then I would also use github.

Also one point brought up in the past is that the CDN we currently use has multiple PoPs in China.

Interesting; I did not know that

What's a PoP ? Or a PoPs.

points of presence / datacenters

China has blocked Github in the past.

And DoSed it.