llvm dev - Feb 2021 - Buildbot worker security

We are looking into creating an LLVM buildbot worker, to build and test with
XCore as the default target.

I understand the process in [1]. I have a worker building correctly under a
local master.

Can we authenticate lab.llvm.org when the worker connects? That is, can we be
sure we are connecting to the real master, and not to something that will send
malicious commands? Can we use the --use-tls option or equivalent [2]? I
haven't seen authentication mentioned or found "tls" in zorg
files.

Thanks,

Nigel

[1] https://llvm.org/docs/HowToAddABuilder.html
[2]
http://docs.buildbot.net/current/manual/installation/worker.html#cmdoption-buildbot-worker-create-worker-use-tls

-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.llvm.org/pipermail/llvm-dev/attachments/20210201/93b92e3d/attachment.html>

+Galina Kistanova <gkistanova at gmail.com>

On Mon, Feb 1, 2021 at 3:59 AM Nigel Perks via llvm-dev <
llvm-dev at lists.llvm.org> wrote:
> We are looking into creating an LLVM buildbot worker, to build and test
> with XCore as the default target.
>
>
>
> I understand the process in [1]. I have a worker building correctly under
> a local master.
>
>
>
> Can we authenticate lab.llvm.org when the worker connects? That is, can
> we be sure we are connecting to the real master, and not to something that
> will send malicious commands? Can we use the --use-tls option or equivalent
> [2]? I haven’t seen authentication mentioned or found “tls” in zorg files.
>
>
>
> Thanks,
>
>
>
> Nigel
>
>
>
> [1] https://llvm.org/docs/HowToAddABuilder.html
>
> [2]
>
http://docs.buildbot.net/current/manual/installation/worker.html#cmdoption-buildbot-worker-create-worker-use-tls
>
>
> _______________________________________________
> LLVM Developers mailing list
> llvm-dev at lists.llvm.org
> https://lists.llvm.org/cgi-bin/mailman/listinfo/llvm-dev
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.llvm.org/pipermail/llvm-dev/attachments/20210201/f10de132/attachment.html>