| ▲ | latchkey 2 days ago |
| People keep wanting to replace GitHub, but with what? If GH is getting RCE's this late in the game who wants to take the chance something else won't? |
|
| ▲ | skrrtww 2 days ago | parent | next [-] |
| A "reasonable" answer is probably a primary self-hosted Forgejo instance as the canonical forge, while using GitHub as a mirror solely to take advantage of its free CI, while that lasts, while hosting secrets with a dedicated secret-hosting provider (I don't know what the provider du jour for this is these days). |
| |
| ▲ | embedding-shape 2 days ago | parent | next [-] | | > solely to take advantage of its free CI, while that lasts Eh, if you want to be able to continue working, deploy and what not as normal during weekdays, I'd suggest also moving to Forgejo Actions if you're moving anyways. Not 100% compatible, but more or less the same, and even paying the same but with dedicated hardware you'd get way faster runners. | | |
| ▲ | skrrtww 2 days ago | parent [-] | | For companies with resources for infrastructure, sure. For OSS, the unlimited free minutes of multiplatform CI offered by GitHub are literally impossible to replace. Maintaining runners yourself to do the same things would be somewhere between a part- and full-time job. | | |
| ▲ | embedding-shape 2 days ago | parent | next [-] | | > For OSS, the unlimited free minutes of multiplatform CI offered by GitHub are literally impossible to replace. Yeah, how you think the ecosystem got by before GitHub even had actions? Y'all don't remember Travis CI et al anymore? There are more CI services than what Microsoft offers the world, sometimes it's worth looking around a bit. | |
| ▲ | esseph a day ago | parent | prev [-] | | > https://docs.codeberg.org/ci/ "Codeberg is a non-profit, community-led effort that provides services to free and open-source projects, such as Git hosting (using Forgejo), Pages, CI/CD and a Weblate instance." Never say impossible. Github is still "new" to a lot of us. OSS existed well before it, and will continue to exist well after. | | |
| ▲ | skrrtww a day ago | parent [-] | | If Codeberg starts offering Mac and Windows runners alongside their Linux ones for free (or at an achievable price point) for a modest OSS project I'll certainly look at it very closely. If all I needed was a Linux runner, I'd probably be on there already. And yes, if we make OSS just about hosting the code, things are much simpler. If you're a piece of desktop software though, and you have users, they'll typically (and reasonably) want auditable signed binaries on all the platforms you support, which requires multiplatform CI. |
|
|
| |
| ▲ | latchkey 2 days ago | parent | prev [-] | | Replace a whole 24/7 team of devops people with myself? As much as I'd like to believe that I'm worthy, I'm not. | | |
| ▲ | rnhmjoj a day ago | parent | next [-] | | It's the devops team can manage a measly 87% uptime [1] you're talking about, you can do a lot better on your homeserver. [1]: https://mrshu.github.io/github-statuses/ | |
| ▲ | skrrtww 2 days ago | parent | prev | next [-] | | If the primary forge's only job is to host the actual Git infrastructure (the code, the MRs, the issues, maybe a wiki), it's a lot more simple than GitHub, and probably more within the scope of what people can reasonably administer themselves. | | |
| ▲ | latchkey 2 days ago | parent [-] | | I hosted the first "java.apache.org". I was an early employee at CollabNet, and in the first discussions around starting subversion. I worked on Cloud Foundry. This stuff isn't easy and I'm more than happy letting someone else do it at the expense of some downtime. |
| |
| ▲ | slopinthebag a day ago | parent | prev [-] | | 24/7 devops team for a forgejo instance? Come on mate... | | |
| ▲ | latchkey a day ago | parent [-] | | 24/7 devops team for github? Come on mate... | | |
| ▲ | slopinthebag a day ago | parent [-] | | Is running a small forgejo instance for a team the same as running GitHub? | | |
| ▲ | odie5533 a day ago | parent [-] | | Will I have to patch machines, keep packages updated, deal with SSL certs, maintain action runner infra, deal with billing for the machines, add monitoring, alerts, logging, etc No, I don't want to be in the business of running my own Github clone. That's what I pay Github for. Why do you pay salary to employees to buy food when you can just run a farm next to the office and save money by operating the farm and giving the employees food directly? You'd save money by not having to pay as high of salaries, and farms don't even need 24/7 devops teams. | | |
| ▲ | altmanaltman a day ago | parent [-] | | Don't you think the farm example was a bit too extreme for it to make sense? A tech company probably does not have expertise in farming but devOps is something they already know how to do and can easily manage it in-house. Also how fast do you think farms produce food that you can drip feed it to employees constantly |
|
|
|
|
|
|
|
| ▲ | asa977 a day ago | parent | prev | next [-] |
| We moved from github to a self-hosted forgejo instance about 6 months ago, works like a charm. Still can't belive how snappy forgejo is / laggy github has become |
| |
|
| ▲ | Caligatio 2 days ago | parent | prev | next [-] |
| I am personally now drawing a clear delineation between projects for my internal consumption (e.g. ansible scripts) and projects that have potential use for the general populace. For the prior, I now host a private Forgejo instance. For the latter, I'll put it on GitHub but mirror it to my Forgejo instance. I was pleasantly shocked that Forgejo is literally a single binary with a relatively easy config. All my internal services reference my Forgejo instance so, if I need to bail on GitHub, it's low friction for me. |
|
| ▲ | trashb a day ago | parent | prev | next [-] |
| No worries Thomas Dohmke has you covered with his new project. https://news.ycombinator.com/item?id=46961345 https://news.ycombinator.com/item?id=47712656 |
|
| ▲ | crimsonnoodle58 a day ago | parent | prev | next [-] |
| Self hosted gitlab behind a VPN. The all-in-docker image and a couple of gitlab runners is all small to medium sized teams need. (Don't overcomplicate it with the kubernetes version unless you really need it) |
|
| ▲ | gtech1 2 days ago | parent | prev | next [-] |
| GitLab ? |
| |
| ▲ | himata4113 a day ago | parent | next [-] | | Me and my friends call it CveLab because there was a time where there was a critical security update every week or multiple times a week. | |
| ▲ | latchkey 2 days ago | parent | prev [-] | | The people who suggest gitlab, haven't used it. But I guess I could be tempted to try again... https://status.gitlab.com/pages/history/5b36dc6502d06804c083... | | |
| ▲ | capitalhilbilly 2 days ago | parent | next [-] | | If you could only choose from github, gitlab and atlassan then I suppose.. But really anything newer that stays in existance has to be focused on quality from early enough to not be defined by path dependence problems and bad choices like those 3. | | |
| ▲ | latchkey 2 days ago | parent [-] | | Given that github is imploding under a lot of load, everyone leaving github for something else, actually makes github better. |
| |
| ▲ | gtech1 a day ago | parent | prev [-] | | Ah, you assumed I meant SaaS GitLab. I meant the self-hosted version. I would never host our source code on a remote service. | | |
| ▲ | latchkey a day ago | parent [-] | | Why not? | | |
| ▲ | gtech1 20 hours ago | parent [-] | | Because I don't trust someone else to not train or steal our source code, or, even legally, introduce some silly cause after we are invested/locked into their infra, that allows them to do whatever with our property. And on equal footing, I trust our security more than theirs. Case in point. |
|
|
|
|
|
| ▲ | TZubiri 2 days ago | parent | prev | next [-] |
| just git |
|
| ▲ | chucky_z 2 days ago | parent | prev [-] |
| .... git? replace it with git. if you want a whole ui you can use something like forgejo which has far fewer features likely leading to less issues. |
| |
| ▲ | debugnik 2 days ago | parent | next [-] | | You probably meant Forgejo. Codeberg is a Forgejo instance exclusive for FOSS projects. | |
| ▲ | latchkey 2 days ago | parent | prev [-] | | i want what github offers. | | |
| ▲ | heliumtera 2 days ago | parent [-] | | Enjoy your experience, there will certainly be no end to it. | | |
| ▲ | latchkey 2 days ago | parent [-] | | I've had my account since 2008. ¯\_(ツ)_/¯ updated: changed the date to 2008. my account shows 2001, but that's probably from projects I moved over... proof: https://github.com/lookfirst | | |
| ▲ | necubi 2 days ago | parent | next [-] | | GitHub launched in 2008, so that seems unlikely? | |
| ▲ | seanclayton 2 days ago | parent | prev | next [-] | | Just be careful your patronage doesn't lead to a sunk cost fallacy---a middle manager might just be betting on it | | |
| ▲ | latchkey 2 days ago | parent [-] | | I have no ingrained loyalty, I just haven't found something better. |
| |
| ▲ | sitzkrieg a day ago | parent | prev [-] | | i just deleted my account of 2008. github sucks |
|
|
|
|
