I keep basically all of my shit on Gitlab, so depending on who they sell it to, that might be a goodbye. I’ve really enjoyed the platform, but if it goes into hands of either some clueless business people, data aggregator, or “AI-first” bullshit, i’m migrating to something else.
deleted by creator
I can’t think of a single reason that wouldn’t happen.
There would be no other incentive for companies to buy it.
A company might want to extend it’s service offering with a build pipeline/CICD system, and buying GitLab would get them the best-in-class service.
Microsoft bought GitHub for much of the same reasons, and GitHub didn’t went to hell after the acquisition.
deleted by creator
? Nothing about such private repo access listed there.
Every open source license grants permission for AI training, and GitHub copilot by default rejects completions that exactly match code from its training. You can’t pretend to be pro-open source or pro-free software but at the same time be upset that people are using licensed software within its license terms.
If you use agplv3 for training your LLC, shouldn’t the code you spit out also be agplv3?
Only if you can reasonably argue that the output is the input (even with exact matches over a certain size being auto-rejected), and that it is enough to qualify as a copyrightable work. I’d argue line completions can never be enough to be copyrightable, and even a short function barely meets the bar unless it is considered creative in some way.
deleted by creator
If a license forbids LLM training, it is by definition not open source.
deleted by creator
So many errors in what you’ve written aren’t with the fact that one can INSTALL a copy of gitlab and get the CI/CD features, but actually with simple English.
I’m in the same boat. I migrated all my stuff to Gitlab the day it was announced that Github was being acquired by Microsoft. I hadn’t even really heard of Codeberg at the time. So I migrated to Gitlab.
And it sounds now like there’s a high likelikhood I’ll need to move it all again.
I hadn’t even really heard of Codeberg at the time.
That would explain it.
I’ve had my stuff on Gitlab way before that ever even happened, just because I’ve already had issues with the platform before, and knew it would eventually change hands. Shame it’ll likely happen again with this too
Come to Codeberg! I’m a member of the co-op and we’re not for sale.
I’ve been casually taking a look at it for a bit, so it’s definitely on the radar
Edit: Overall i’m happy, at first proper glance, but not having access to even barebones CI is kind of a pain. I can’t really deploy my own at the moment, and having to request access to their own Woodpecker instance is something that seems unlikely to be approved
Codeberg is where I will be next. A nonprofit ownership created because they didn’t like the commercialization of other providers that’s getting more and more popular. Seems like they likely won’t go down this rabbit hole.
You shouldn’t wait because it’s going to happen. I moved all of my projects off of Github and Gitlab, and now self-hosting my own gitea instance. It’s been great and never looked back!
Btw gitea has been involved in some shit, most of the Devs quit and created Forgejo. AFAIK you can seamlessly switch from gitea without needing to completely reset it.
Oh wow, I didn’t know that! Is there any official statement? Search didn’t turn up anything. I guess I don’t necessarily need to know exactly how it went down, but I wanna be nosy. :D
you can seamlessly switch from gitea without needing to completely reset it.
For now; Forgejo is hard forking, which may break things soon.
come to https://sr.ht/
I actually have an account on there with almost nothing, just my nix configuration, plus a repo I cloned to commit a bug fix on software I used. But it seemed like the most responsible solution as in the price is reasonable, plus I actually like the interface. Codeberg also looks good and claims to be better in some regards, but these are the only choices nowadays.
Anyhow, I’m still waiting for Pijul to have a final 1.0 release and independent hosting solutions to appear.
Same here. Gitlab CI was a game-changer for me, too. Any thoughts on where else you’d consider going? Aside from GitHub, that is.
I suspect that in the worst case scenario, i’ll be moving stuff to Codeberg and hosting my own CI to support it
It’s funny because despite all the fearmongering about Microsoft’s Github acquisition it feels like it only improved since then, while Gitlab has done a shitton of questionable and shitty decisions, a ton of critical security issues and in general feels like (at best) they don’t know what they are doing.
The only thing Gitlab has going for itself is that it’s self-hostable, but they still retain a large amount of control.
Time to federate repos?
I hope they get true federation up running soon.
Absolutely.
I’ll self host my own forgejo instance soon.
It’s also what codeberg uses under the hood for those that don’t self host.
GitLab has been working on support for ActivityPub/ForgeFed federation as well, currently only implemented for releases though.
For code hosting, doesn’t that just mean you’re self-hosting + others can utilize you space for a backup?
I think the benefits of federation is discoverability. I can spin up my gitea or forgejo (or something else!) Instance, but when people look for code in their instances, they can still discover my public repositories, and if they want to contribute, they can fork and open PRs from their instances.
So yeah, it means mostly you can selfhost and provide space to others, but with the same benefits that right now github offers (I.e., everything is there).
No, it means people can contribute issues and pull requests to projects on other servers. Repositories would only be created on the server your account is on if I’m not mistaken. I believe it uses activitypub internally, so should work the same as Lemmy/mastodon.
Yes, it uses ActivityPub with the ForgeFed extension.
Maybe you would be able to disable other users from creating repos.
The chances of a deal are said to be weeks away, if not non-existent.
What kind of non-sentence is that?
It’s an existing sentence if it’s not non-exisent.
Big if true and big.
Seems like a perfectly cromulent English sentence to me.
Looked up “cromulent” in the dictionary. Wasn’t disappointed!!
The fact it’s now in the dictionary proper is bizarre… but I mean… so is “okay.” And that’s almost the same ascended joke.
The kind of sentence you write when you’re still 20 words from the target your editor set for the article
It’s what they most not the least
The chances of the coin flip yielding heads are roughly 50%, if coins don’t not exist.
It means when the author was waiting for his order at Popeyes, the guy in front who did small talk with him introduced himself as a Gitlab employee and told the author “Gitlab might sell in weeks. It is a deal or no deal”
It feels like it’s saying “if rumors are true, the deal is weeks away.” A reminder that it might not be the case.
Fuck
I literally made an account the day before and transferred from GitHub, then wake up and see this. FFS just my luck.
Wait, this is YOUR fault?!! 😋
Codeberg!
Does Codeberg have anything like Gitlab CI, or does it need to be paired with other build tools like Jenkins, TeamCity, etc?
Yes, but you need to manually request it and there are a handful of things that need to be true. See here for them all: https://codeberg.org/Codeberg-e.V./requests#woodpecker-ci
In summary, it needs to be a public repo with FOSS code and the README must match the project’s intended goal.
You should all incorporate and buy it.
I feel like sourcehut really ought to be mentioned more. It federates issue and PRs by email and has a wonderful interface while not having any ads—which is why hosting one’s own repo (and their CI and IRC but nothing else) requires $2 a month, unfortunately.
I don’t think it makes any sense to mention source hut because none of the features you mentioned are killer features (or relevant. Why should I care about implementation details of feature tracking?) and it completely fails to address GitLab’s main value proposition: it’s CICD system.
Anyone can put up any ticketing system. They are a dime a dozen. Some version control systems even ship with their own. CICD is a whole different ballgame. It’s very hard to put together a CICD system that’s easy to manage and has a great developer experience. Not even GitHub managed to pull that off. GitLab is perhaps the only one who pulled this off. A yams file with a dozen or so lines is all it takes to get a pipeline that builds, tests, and delivers packages, and it’s easy to read and understand what happens. On top of that, it’s trivial to add your own task runners hosted anywhere in the world, in any way you’d like. GitLab basically solved this problem. That’s why people use it.
I use gitlab ci mainly and dabble in github actions. Can you clarify how “Not even Github managed to pull that off”? IIRC, actions is quite featureful and it’s open-source, so I assume that can be run with self-hosted runners as well.
Yep, at my previous job I moved a pretty complex build system from Jenkins to github actions. It worked fine and was much simpler to maintain.
And yes there are ways to run github actions on your own machine, but I haven’t tried it.
Can you clarify how “Not even Github managed to pull that off”?
GitHub actions has an atrocious user experience, to the point that even a year or so ago people where doubting it was production-ready.
Sure, you can put together a pipeline. But I challenge anyone to try it out with GitHub actions and then just try to do the same with GitLab or even CircleCI or Travis.
The fact that people compare GitHub Actions go Jenkins of all things is everything anyone needs to know about it’s user experience.
Using email for anything is a non-feature for me. I want nothing to do with that outdated, confusing piece of tech that has been shoved in all sorts of places it doesn’t belong
Email is confusing? Since when?
Since forever. It’s very slow, I’m still not sure replying is actually in the spec or email clients fake it with Re: and then force you to quote the entire history of the conversation back and forth. Also very easy to break if you don’t like the Re: or something. People are constantly replying to the wrong person or persons, sometimes even to themselves. You have weirdly named fields “cc” and “bcc” that are present all the even though I use them like 4x and 1x a year, respectively. You can’t unsend or delete emails.
And all this is before I get into doing git or calendars over email.
Email is in fact one of the reasons I’m not sure I want the fediverse to succeed right now, because then all the faults of activitypub will be forced on us for centuries, like they are with email.
FYI you can self-host GitLab, for example in a Docker container.
Or you could make your life a lot easier and use Forgejo
You can also just make bare got repositories on any server you can ssh into.
make bare got repositories
got it
Coincidentally, this is what git is short for.
Source: “git” can mean anything, depending on your mood.
https://github.com/git/git/commit/e83c5163316f89bfbde7d9ab23ca2e25604af290
It’s the worst example, but it’s an example, sure.
Much like that comment. Can you give a better example, or express why it’s a bad example? That would bring some quality in.
https://forgejo.org/ here’s a little better example, though you did a great job doing some proposal, gotta love those who do at least some initiative
Forgejo is a gitea fork, it’s got nothing to do with gitlab
deleted by creator
Are they “forks” or are they “built on top of”?
Forgejo used to be built on top of Gitea (soft fork) but since this year have been starting to go their own way, which may break things (hard fork).
Gitlab is very complex and a heavy resource hog. You probably don’t need it. Most small to medium enterprises can comfortably host their projects on lightweight forgejo or gitea (speaking from experience). They even have functionality similar to github actions. If you need anything more complex, you are better off integrating another self hosted external service to the mix.
In my experience the other alternatives tend to lack solid CI integration. I have yet to find an open source alternative as good as Gitlab’s.
GitLab still doesn’t even support leaving comments on a commit message. Like, what? GitLab and GitHub have all these fancy shiny features but still suck at offering basic code review functionality.
I never understood the appeal.
I mean, I get it, but that’s also not a thing of git, right? Just because GitHub does something doesn’t mean every other hosting provider needs to. If your code review process is to comment upon specific commits, maybe it’s the code review process that’s wrong?
Git kinda has it? Have you seen git notes? https://git-scm.com/docs/git-notes
GitHub doesn’t let you comment on the commit message either. The only one I’ve seen do this properly this is Gerrit. And of course regular old mailing list reviews.
There are so many blogs and posts about writing good commit messages, using Conventional Commits, etc, and the two most popular forges don’t even let you comment in-line on the commit message during a review.
You can leave comments on a commit message. What do you mean exactly?
You can not highlight text in a commit message and leave an in-line comment in the same way you can for code changes in the diff.
Ohhhhh you can’t comment on a specific line of a commit message. I see. I mean… yeah I guess not. That seems like a super niche feature though. How long are your commit messages? I’ve never even tried to do that. Commit messages are short enough you can pretty much just write a normal message not tied to a specific line.
There are waaaaay bigger issues with Gitlab. Here’s one I ran into recently, you can’t search for pipelines. It’s got a search box and everything but you literally can’t search; only filter. So stupid.
I actually just went to take a look at Gitlab issues I have commented on to see what my worst ones are. Guess what… you can’t even search for issues you have commented on!!!
Still, overall it’s the best self-hostable option out there at the moment IMO. I guess Forgejo (truly abysmal name) may overtake it at some point.
Ive been meaning to move to codeberg, self hosted forgejo, or sourcehut so this will only accelerate that if things get worse.
I just flipped my home git to forgejo from gitlab, gitlab just had a bunch of features I wasn’t using, forgejo was easy to setup and it has a nice interface. I’m just using it for source control right now, still probably huge overkill but eh
How did you set it up? I’ve been wanting to setup forgejo in a docker container but wasn’t sure how easy the process is.
I was originally going to to go the docker route but honestly just ended up going the binary route and leaving it using sqlite as it’s good enough for now. It’s pretty well documented and a chunk of the prereqs I already had, like the git user creation.
Did have SSH auth issues though, probably becauae I didn’t fully cleanup after uninstalling gitlab (oops), had them in parallel for a bit to migrate the repos, gitlab had it trying to use gitlab-shell which didn’t exist anymore. Probably a better/proper solution but what worked was changing the git user’s home directory back to /home/git as gitlab had it using a gitlab config directory. I welcome anyone giving me a better/cleaner solution for this, on my to do list to do some more cleanup.
I preemptively moved to codeberg, very nice and pro IMO.
The only “downside” about Codeberg is that (for the most part) you’re only allowed to host projects that as FOSS or projects you intend to make FOSS. (Stuff like personal notes and config files are fine too.)
Love me some codeberg.
Don’t worry everyone! It’ll get bought by some investment firm or by a large company (Microsoft [to shutter it], Google, etc) and everything will be just fine.
Right?
sigh
An other one bites the dust :'(
GitLab is a security nightmare, good luck to whoever purchases that.
Elon has entered the chat…how many labs of this git kind can you make for him within 3 months? Can git be somehow monetized?
Could you elaborate? I use Gitlab bit i’m not a security expert.
Here is the one where I decided to never trust their code: https://arstechnica.com/security/2024/05/0-click-gitlab-hijacking-flaw-under-active-exploit-with-thousands-still-unpatched/
As if that isn’t bad enough, I am pretty sure they have had other incidents.
I used to host a Gitlab instance at work. It was dog slow so I started digging into it and discovered they had a serious memory leak in some of their “unicorns,” aka Ruby tasks. Instead of fixing the source of the leak they tacked on a “unicorn killer” that periodically killed tasks. The tasks were supposed to be atomic anyway, so this is technically fine (and maybe a good thing in the long run for correctness a la Netflix’s Chaos Monkey) but I found myself kind of disgusted by the solution. I dropped it and went for a much sparser Git repo web server.
lmao! Man that’s hilarious!
“We have a memory leak that could lead to a security issue.We should do something about it.”
“I made a process that periodically kills those tasks. No one will notice the problem now.”
The unicorn killer will have a memory leak as well. 💀
I had to look it up to check my memory. Yup! https://about.gitlab.com/blog/2015/06/05/how-gitlab-uses-unicorn-and-unicorn-worker-killer/
I don’t think memory leaks could ever amount to a security vulnerability, but it just feels yucky. I guess I shouldn’t cast stones, I write C++ at work.
I don’t think memory leaks could ever amount to a security vulnerability
In theory it could, after all there are technically denial-of-service vulnerabilities (not DoS/DDoS attacks, that is something different) according to CVE Numbering Athorities.
Maybe I’m misunderstanding you, but DoS is exactly the same thing as “denial of service”.
My point is that memory leaks can only degrade availability; they are categorically distinct from security vulnerabilities.
That’s disappointing. They are pretty consistently choosing the wrong thing. I don’t think they know what they’re doing.
Unicorn killer does sound great for testing. If they wrote tests around anything I’d be surprised, though. LOL.
If you don’t need all the user management and whatever else it definitely doesn’t make sense to run their junk.
They do have a ton of tests actually. In their defence, if this task is doing Git things then just killing it when it goes badly is probably the best you can do. Git itself is quite buggy if you stray from the most basic setup. I’ve had it almost completely destroy my .git directory in the past when using submodules.
On the other hand, Gitlab itself is an enormous entirely untyped Ruby monster, with extremely difficult to follow code. Not in terms of individual functions - except for the lack of types mean you can’t really know what they do, they are quite clear and well written. The issue is the control flow between parts of the system. It’s difficult to know what calls what, so I’m not surprised they occasionally have to give up.
I had a play with Deno’s Fresh web framework recently (Typescript/TSX but mainly server rendered). IMO it’s light years ahead of other solutions.
You get full amazing Typescript typing, including in templates (unlike Go for example), but unlike React you don’t have to deal with JavaScript tooling or complex client side state management. It’s a real breath of fresh air. (Ha that wasn’t even intentional.)
I thought github is worse than gitlab in terms of security
Could be! But that doesn’t excuse a massive security failure like sending password reset emails to attacker-supplied addresses. I am pretty sure they have had other large failures.
They are writing code with zero/negative regard for security and that makes me want to use any alternative FOSS git host.
Gitea
ಠ╭╮ಠ
GGs
I would like to say I’m not too concerned by this personally, as long as all their data remains public to all.
@obbeel Oh that’s not a good sign
