80 points by thebeardisred 3 days ago | 7 comments
woodruffw 2 hours ago
I’m a fan of this, although I’m concerned about the security/trust model: using a third-party CI orchestrator on top of GHA means trusting them with all of your secrets, potentially sensitive logs, etc. Those concerns are somewhat lessened in the context of public repos, but even public repos contain nontrivial workflows that use configured secrets.
stabbles 2 hours ago
My experience with RISC-V so far is that the chips are not much faster than QEMU emulation. In other words, it's very slow.
LeFantome 1 hour ago
That has been the case so far but is changing this year.

The SpacemiT K3 is faster than QEMU. Much faster chips are expected to release over the next few months.

I mean things like the Milk-V Pioneer were already faster but expensive.

One thing that has been frustrating about RISC-V is that many companies close to releasing decent chips have been bought and then those chips never appear (Ventana, Rivos, etc). That and US sanctions (eg. Sophgo SG2380).

OsrsNeedsf2P 2 hours ago
Oftentimes slow is fine, when the work is parallel and the hardware is cheap
pelasaco 33 minutes ago
which, sadly, isnt the case right now
camel-cdr 2 hours ago
Sadly still on quite old hardware, with no RVV. Hopefully scaleway will have some newer servers in the future and this can be simply updated to the new devices.
LeFantome 1 hour ago
You can get RVV instances from Saleway.
camel-cdr 1 hour ago
Oh, cool, I didn't see them on the website. (https://labs.scaleway.com/en/em-rv1/)
IshKebab 2 hours ago
Very good move. Hopefully GitHub won't ruin this with their CI charging changes.
singpolyma3 1 hour ago
GitHub only :(
boredatoms 1 hour ago
..is this RVA23?
LeFantome 1 hour ago
Not yet

RV64GC (C910 cores)

Western0 2 hours ago
Perfect for snooping on other people’s projects. No one in their right mind would touch this. It’s cheaper to buy the board yourself.
jubilanti 2 hours ago
Yes, what a devious plan: give open source software projects a free CI service so you can... read their open source software code?
downrightmike 1 hour ago
diabolical
throawayonthe 1 hour ago
devious
sethops1 30 minutes ago
duplicitous
mhitza 2 hours ago
It seems to be a Linux Foundation project, my trust is implicit higher than what you're claiming. Why wouldn't you trust them?

It's also aimed at open-source projects, for free, with the intent to improve RISC-V support.

LeFantome 2 hours ago
RISE is supported by many legit companies. Stealing is for sure not the intent.

The idea is to promote testing on RISC-V and to eliminate lack of hardware for being the reason not to. Obviously, low budget projects and Open Source are the primary targets. Commercial products can afford real RISC-V hardware.

This is who you are trusting: https://riseproject.dev/members/

ctz 2 hours ago
people better not be snooping on my public open source projects!
2 hours ago