Merge branch 'master' into chore-team-repo-ci-update-to-nodejs-runtim…

…e-20

.github/workflows/main.yml

@@ -1,4 +1,8 @@
-on: [push, pull_request]
+on:
+  push:
+    branches:
+      - master
+  pull_request:
 
 jobs:
   rust:

ansible/apply

@@ -5,6 +5,8 @@ import shutil
 import subprocess
 import sys
 import tempfile
+import os
+import platform
 
 BASE_PATH = pathlib.Path(__file__).resolve().parent
 VENV_PATH = BASE_PATH / ".venv"
@@ -74,7 +76,13 @@ def run_playbook(args):
             ansible_args += ["-u", args.user]
         if args.start_at_task is not None:
             ansible_args += ["--start-at-task", args.start_at_task]
-        res = subprocess.run(ansible_args, cwd=str(tempdir))
+
+        env = os.environ.copy()
+        # Set environment variable if running on macOS to avoid python crash
+        if platform.system() == "Darwin":
+            env["OBJC_DISABLE_INITIALIZE_FORK_SAFETY"] = "true"
+
+        res = subprocess.run(ansible_args, cwd=str(tempdir), env=env)
         if res.returncode != 0:
             exit(1)
     finally:

ansible/requirements.txt

@@ -1,3 +1,3 @@
-ansible==7.3.0
+ansible==8.7.0
 boto3==1.26.94
 passlib==1.7.4

ansible/roles/dev-desktop/files/podman/storage.conf

@@ -1,5 +1,7 @@
 [storage]
   driver = "overlay"
+  runroot = "/run/containers/storage"
+  graphroot = "/var/lib/containers/storage"
 
 [storage.options.overlay]
   mount_program = "/usr/bin/fuse-overlayfs"

ansible/roles/dev-desktop/tasks/dependencies.yml

@@ -16,6 +16,7 @@
       - clang
       - cmake
       - gcc-mingw-w64-x86-64 # Allows running `x check --target x86_64-pc-windows-gnu`
+      - earlyoom # Earlyoom kills processes using too much memory before they can cause trouble.
       - jq
       - libssl-dev
       - llvm
@@ -42,7 +43,7 @@
       - libgbm1
       - libpango-1.0-0
       - libcairo2
-      - libasound2
+      - libasound2t64
       - libatspi2.0-0
       - libelf-dev  # Allows building tools that link against libelf
       - libsecret-1-dev # used by cargo
@@ -59,6 +60,12 @@
       - zsh
     state: present
 
+# we don't need it because we don't need to send emails
+- name: Uninstall postfix
+  apt:
+    name: postfix
+    state: absent
+
 - name: Uninstall fish from apt
   apt:
     name: fish

ansible/roles/dev-desktop/tasks/main.yml

@@ -12,4 +12,3 @@
 - include_tasks: github.yml
 - include_tasks: motd.yml
 - include_tasks: scripts.yml
-- include_tasks: fix_llvm_55575.yml

terraform/crater/main.tf

@@ -18,17 +18,17 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "~> 4.20"
+      version = "~> 5.65"
     }
 
     google = {
       source  = "hashicorp/google"
-      version = "~> 4.23"
+      version = "~> 6.0.1"
     }
 
     dns = {
       source  = "hashicorp/dns"
-      version = "~> 3.2.3"
+      version = "~> 3.4.1"
     }
   }