Astro Hacker News - The RISE RISC-V Runners: free, native RISC-V CI on GitHub

woodruffw |next [-]

I’m a fan of this, although I’m concerned about the security/trust model: using a third-party CI orchestrator on top of GHA means trusting them with all of your secrets, potentially sensitive logs, etc. Those concerns are somewhat lessened in the context of public repos, but even public repos contain nontrivial workflows that use configured secrets.

stabbles |next |previous [-]

My experience with RISC-V so far is that the chips are not much faster than QEMU emulation. In other words, it's very slow.

LeFantome |root |parent |next [-]

That has been the case so far but is changing this year.

The SpacemiT K3 is faster than QEMU. Much faster chips are expected to release over the next few months.

I mean things like the Milk-V Pioneer were already faster but expensive.

One thing that has been frustrating about RISC-V is that many companies close to releasing decent chips have been bought and then those chips never appear (Ventana, Rivos, etc). That and US sanctions (eg. Sophgo SG2380).

OsrsNeedsf2P |root |parent |previous [-]

Oftentimes slow is fine, when the work is parallel and the hardware is cheap

camel-cdr |next |previous [-]

Sadly still on quite old hardware, with no RVV. Hopefully scaleway will have some newer servers in the future and this can be simply updated to the new devices.

LeFantome |root |parent [-]

You can get RVV instances from Saleway.

camel-cdr |root |parent [-]

Oh, cool, I didn't see them on the website. (https://labs.scaleway.com/en/em-rv1/)

IshKebab |next |previous [-]

Very good move. Hopefully GitHub won't ruin this with their CI charging changes.

singpolyma3 |next |previous [-]

GitHub only :(

boredatoms |next |previous [-]

..is this RVA23?

LeFantome |root |parent [-]

Not yet

RV64GC (C910 cores)

Western0 |previous [-]

Perfect for snooping on other people’s projects. No one in their right mind would touch this. It’s cheaper to buy the board yourself.

jubilanti |root |parent |next [-]

Yes, what a devious plan: give open source software projects a free CI service so you can... read their open source software code?

downrightmike |root |parent [-]

diabolical

throawayonthe |root |parent [-]

devious

mhitza |root |parent |next |previous [-]

It seems to be a Linux Foundation project, my trust is implicit higher than what you're claiming. Why wouldn't you trust them?

It's also aimed at open-source projects, for free, with the intent to improve RISC-V support.

ctz |root |parent |next |previous [-]

people better not be snooping on my public open source projects!

LeFantome |root |parent |next |previous [-]

RISE is supported by many legit companies. Stealing is for sure not the intent.

The idea is to promote testing on RISC-V and to eliminate lack of hardware for being the reason not to. Obviously, low budget projects and Open Source are the primary targets. Commercial products can afford real RISC-V hardware.

This is who you are trusting: https://riseproject.dev/members/