Getting started with Remote Build Execution (RBE) is less daunting than it may seem. We've put together a guide that not only helps you get started with BuildBuddy RBE, but also helps you understand what is going on under the hood.
This guide assumes you're using BuildBuddy Cloud or BuildBuddy Enterprise on-prem.
The very simplest Bazel command needed to enable RBE is the following:
bazel build //... --remote_executor=grpcs://remote.buildbuddy.io
This points Bazel at BuildBuddy Cloud as a remote executor. A simple repo that has no C/C++/CGO or Java dependencies will build just fine like this. Most interesting repos have some dependencies on C/C++/CGO or Java - so we'll need to tell our remote executors where to find tools like gcc or the JRE. We do this with platforms and toolchains.
Configuring your workspace
There are several options for configuring your platforms and toolchains, the most fully features of which being bazel-toolchains. It comes with an
rbe_autoconfig rule that works nicely with BuildBuddy.
Unfortunately, bazel-toolchains has a dependency on Docker and can take quite some time to start up in a clean workspace, so we provide a simple and easy-to-use BuildBuddy toolchain that enables you to get up and running quickly, and works for most use cases.
To get started with the BuildBuddy Toolchain, add the following lines to your
name = "io_buildbuddy_buildbuddy_toolchain",
sha256 = "e899f235b36cb901b678bd6f55c1229df23fcbc7921ac7a3585d29bff2bf9cfd",
strip_prefix = "buildbuddy-toolchain-fd351ca8f152d66fc97f9d98009e0ae000854e8f",
urls = ["https://github.com/buildbuddy-io/buildbuddy-toolchain/archive/fd351ca8f152d66fc97f9d98009e0ae000854e8f.tar.gz"],
buildbuddy(name = "buildbuddy_toolchain")
The first thing you'll want to do is tell BuildBuddy RBE in what environment you'll want to run your build actions. This is tools can be found in different locations on different platforms. This is done with the
BuildBuddy's default platform is Ubuntu 16.04 with Java 8 installed. We can specify this platform with the
If you want to use a different environment, you can specify a custom Docker container image to use. More information on how to do this can be found in our platforms documentation.
Toolchains sound complicated (and they can be) - but the concept is simple. We're telling our remote executors where to find tools that are needed to build our code.
The first toolchain you'll likely run into the need for is a C/C++ compiler. Even if your code isn't written in one of these languages, it's likely that one of your dependencies is - or calls some C code with something like cgo.
You'll know you need a C toolchain when you see an error for a missing gcc or clang that looks like:
exec: "/usr/bin/gcc": stat /usr/bin/gcc: no such file or directory
To use BuildBuddy's default C toolchain, we can use the
If you're looking for an llvm based toolchain instead, take a look at this project.
If your project depends on Java code, you'll need 4 more flags to tell the executors where to look for Java tools.
Using BuildBuddy's default Java 8 config:
If you need a different version of Java, we recommend using bazel-toolchains for now.
Some tools like Bazel's zipper (@bazel_tools//tools/zip:zipper) use an attribute to determine whether or not they're being run remotely or not. For tools like these to work properly, you'll need to define an attribute called
EXECUTOR and set it to the value
Putting it all together
This can be a lot of flags to tack onto each bazel build, so instead you can move these to your
.bazelrc file under the
remote config block:
bazel build //... --config=remote
You'll want to authenticate your RBE builds with either API key or certificate based auth. For more info on how to set this up, see our authentication guide.
This determines the number of parallel actions Bazel will remotely execute at once. If this flag is not set, Bazel will use a heuristic based on the number of cores on your local machine. Your builds & tests can likely be parallelized much more aggressively when executing remotely. We recommend starting with
50 and working your way up.
This determines the maximum time Bazel will spend on any single remote call, including cache writes. The default value is 60s. We recommend setting this high to avoid timeouts when uploading large cache artifacts.
By default, bazel will download intermediate results of remote executions - so in case an artifact isn't found in the remote cache, it can be re-uploaded. This can slow down builds in networks constrained environments.
This can be turned off with the flag:
While this flag can speed up your build, it makes them more sensitive to caching issues - and likely shouldn't be used in production yet.
If you'd like separate remote caches, whether it's for CI builds vs local builds or other reasons, you can use the
remote_instance_name flag to namespace your cache artifacts:
While setting a local disk cache can speed up your builds, when used in conjunction with remote execution - your local and remote state has the opportunity to get out of sync. If you suspect you're running into this problem, you can disable your local disk cache by setting this to an empty value.
Some rules (like protobuf) are particularly sensitive to changes in environment variables and will frequently be rebuilt due to resulting cache misses. To mitigate this, you can use the
incompatible_strict_action_env which sets a static value for
You can set environment variables that are available to actions with the
--action_env flag. This is commonly used to set
BAZEL_DO_NOT_DETECT_CPP_TOOLCHAIN which tells bazel not to auto-detect the C++ toolchain.
Define allows you to assign build variables. This is commonly use to set
EXECUTOR to compile singlejar and ijar from source.
Sets the list of strategies in priority order from highest to lowest. Each action picks the highest priority strategy that it can execute. The default value is
Explicitly setting strategies should no longer be needed for Bazel versions post 0.27.0. It can be used to force certain bazel mnemonics to be build remotely.
If enabled, C++ .d files will be passed through in memory directly from the remote build nodes instead of being written to disk. This flag is automatically set when using
If enabled, .jdeps files generated from Java compilations will be passed through in memory directly from the remote build nodes instead of being written to disk. This flag is automatically set when using
- buildbuddy-io/buildbuddy .bazelrc --config=remote
- graknlabs/grakn .bazelrc --config=rbe
- wix/exodus .bazlerc.remote
If you need a more advanced configuration than provided by the basic BuildBuddy toolchain, we recommend exploring Bazel's bazel-toolchains repo. Its
rbe_autoconfig rule is highly configurable and works nicely with BuildBuddy.
Here's a quick snippet you can add to your
WORKSPACE file if using bazel 3.6.0:
name = "bazel_toolchains",
sha256 = "4fb3ceea08101ec41208e3df9e56ec72b69f3d11c56629d6477c0ff88d711cf7",
strip_prefix = "bazel-toolchains-3.6.0",
urls = [
# Creates a default toolchain config for RBE.
# Use this as is if you are using the rbe_ubuntu16_04 container,
# otherwise refer to RBE docs.
rbe_autoconfig(name = "rbe_default")
And to your
# Depending on how many machines are in the remote execution instance, setting
# this higher can make builds faster by allowing more jobs to run in parallel.
# Setting it too high can result in jobs that timeout, however, while waiting
# for a remote machine to execute them.
# Set several flags related to specifying the platform, toolchain and java
# These flags should only be used as is for the rbe-ubuntu16-04 container
# and need to be adapted to work with other toolchain containers.
# Platform flags:
# The toolchain container used for execution is defined in the target indicated
# by "extra_execution_platforms", "host_platform" and "platforms".
# More about platforms: https://docs.bazel.build/versions/master/platforms.html
# Starting with Bazel 0.27.0 strategies do not need to be explicitly
# defined. See https://github.com/bazelbuild/bazel/issues/7480
# Enable remote execution so actions are performed on the remote systems.
# Enforce stricter environment rules, which eliminates some non-hermetic
# behavior and therefore improves both the remote cache hit rate and the
# correctness and repeatability of the build.
# Set a higher timeout value, just in case.
And then run:
bazel build //... --config=remote