Monorepo

In revision control systems, a monorepo ("mono" from Greek μόνος, mónos, 'single, alone' and "repo" short for repository) is a software development strategy where code for many projects is stored in the same repository. As of 2017 some forms of this software engineering practice were over a decade old, but the general concept had only recently been named.[1] Many attempts have been made to differentiate between monolithic applications and other, newer forms of monorepos. [2][3][4]

Google,[5] Facebook,[6] Microsoft,[7] Uber,[8] Airbnb and Twitter[9] all employ very large monorepos with varying strategies to scale build systems and version control software with a large volume of code and daily changes.

Advantages

There are a number of potential advantages to a monorepo over individual repositories:[5][10]

  • Ease of code reuse – Similar functionality or communication protocols can be abstracted into shared libraries and directly included by projects, without the need of a dependency package manager.
  • Simplified dependency management – In a multiple repository environment where multiple projects depend on a third-party dependency, that dependency might be downloaded or built multiple times. In a monorepo the build can be easily optimized, as referenced dependencies all exist in the same codebase.
  • Atomic commits – When projects that work together are contained in separate repositories, releases need to sync which versions of one project work with the other. And in large enough projects, managing compatible versions between dependencies can become dependency hell.[8] In a monorepo this problem can be negated, since developers may change multiple projects atomically.[11]
  • Large-scale code refactoring – Since developers have access to the entire project, refactors can ensure that every piece of the project continues to function after a refactor.
  • Collaboration across teams – In a monorepo that uses source dependencies (dependencies that are compiled from source),[9] teams can improve projects being worked on by other teams. This leads to flexible code ownership.

Limitations and disadvantages
  • Loss of version information – Although not required, some monorepo builds use one version number across all projects in the repository. This leads to a loss of per-project semantic versioning.[12]
  • Lack of per-project security – With split repositories, access to a repository can be granted based upon need. A monorepo allows read access to all software in the project, possibly presenting new security issues.[13]
  • More storage needed – With split repositories, you can fetch only the project you are interested in. With a monorepo, you might need to fetch all projects.

Note that there are versioning systems in which the second and third limitations are not an issue. E.g. when Subversion is used, it's possible to download any part of the repo (even a single directory), and path-based authorization can be used to restrict access to certain parts of a repository.

Scalability challenges

Companies with large projects have come across hurdles with monorepos, specifically concerning build tools and version control systems.[6] Google's monorepo, speculated to be the largest in the world, meets the classification of an ultra-large-scale system[5] and must handle tens of thousands of contributions every day in a repository over 80 terabytes large.[14]

Scaling version control software
See also: Version control

Companies using or switching to existing version control software found that software could not efficiently handle the amount of data required for a large monorepo. Facebook and Microsoft chose to contribute to or fork existing version control software Mercurial and Git respectively, while Google eventually created their own version control system.

For more than ten years, Google had relied on Perforce hosted on a single machine. In 2005 Google's build servers could get locked up to 10 minutes at a time. Google improved this to 30 seconds–1 minute in 2010.[15] Due to scaling issues, Google eventually developed its own in-house distributed version control system dubbed Piper.[5]

Facebook ran into performance issues with the version control system Mercurial and made upstream contributions to the client,[16] and in January 2014 made it faster than a competing solution in Git.[17]

In March 2014 Microsoft announced that it switched over to using Git for its monorepo.[18][7] In the transition, Microsoft made substantial upstream contributions to the Git client to remove unnecessary file access and improve handling of large files with Virtual File System for Git.[19]

Scaling build software
See also: Build automation

Few build tools work well in a monorepo,[9] and flows where builds and continuous integration testing of the entire repository are performed upon check-in will cause performance problems.[12][13] Directed graph builds systems like Buck, Bazel, Pants and Please solve this by compartmentalizing builds and tests to the active area of development.[1]

Twitter began development of Pants in 2011, as both Facebook's Buck and Google's Bazel were closed-source at the time.[20] Twitter open-sourced Pants in 2012 under the Apache 2.0 License.[21]

Please, a Go-based build system, was developed in 2016 by Thought Machine who was also inspired by Google's Bazel and dissatisfied with Facebook's Buck.[22]

Bazel, Buck, Pants and Please all use the same Starlark (formerly Skylark) build language, a domain-specific language based on Python.

Some specialized monorepo build tools, such as Lerna, solve fetching of duplicate dependencies, but lack any directed graph capabilities.[13]

gollark: I'm not, blame "Dimaguy"
gollark: It protects you against the case where someone can somehow *read* your network traffic but not *alter* it, maybe. But that's not really worth lots of (rather horrible) code, probable insecurity, and extra complexity.
gollark: Yes, I'm aware, but if your TEA thing is exploitable somehow, then someone can probably use that to log in, since you authenticate that way.
gollark: Huh, I did *not* know that `>>>` was a JS operator which existed.
gollark: I'm not sure if your "iterate through all the keys and try decryption" thing is broken somehow, I'm not really a cryptographer.

References
  1. Hammant, Paul; Smith, Steve. "Trunk Based Development". trunkbaseddevelopment. Retrieved 24 July 2018.
  2. https://medium.com/@brockreece/from-monolith-to-monorepo-19d78ffe9175
  3. https://blog.nrwl.io/misconceptions-about-monorepos-monorepo-monolith-df1250d4b03c
  4. https://medium.com/@maoberlehner/monorepos-in-the-wild-33c6eb246cb9
  5. Levenberg, Rachel Potvin, Josh (July 2016). "Why Google Stores Billions of Lines of Code in a Single Repository". Communications of the ACM. Retrieved 20 July 2018.
  6. GOODE, DURHAM; Rain. "Scaling Mercurial at Facebook – Facebook Code". fb code. Retrieved 24 July 2018.
  7. Cooper, Matt. "How We Use Git at Microsoft - Azure DevOps". Microsoft Docs. Retrieved 20 July 2018.
  8. Aimee Lucido (7 April 2017). Uber Technology Day: Monorepo to Multirepo and Back Again. Retrieved 24 July 2018.
  9. Dorothy Ordogh (5 April 2018). Pants and Monorepos. Retrieved 24 July 2018.
  10. Brousse, Nicolas. "The issue of monorepo and polyrepo in large enterprises". ACM Digital Library. Retrieved 7 September 2019.
  11. Santacroce, Ferdinando; Olsson, Aske; Voss, Rasmus; Narebski, Jakub (2016). Git: Mastering Version Control. Packt Publishing Ltd. p. 756. ISBN 9781787122796.
  12. Farina, Matt. "Dangers of Monorepo Projects - DZone DevOps". DZone. Retrieved 20 July 2018.
  13. 点融黑帮 (16 August 2017). "浅谈monorepo" [Talking about monorepo]. Sohu (in Chinese). Retrieved 20 July 2018.
  14. Metz, Cade (16 September 2015). "Google Is 2 Billion Lines of Code—And It's All in One Place". WIRED. Retrieved 20 July 2018.
  15. Bloch, Dan. "Still All on One Server: Perforce at Scale" (PDF). Retrieved 23 July 2018.
  16. Claburn, Thomas. "Facebook is writing a Mercurial server in Rust. This is not a drill". The Register. Retrieved 20 July 2018.
  17. Blewitt, Alex (9 Jan 2014). "Facebook makes Mercurial faster than Git". InfoQ. Retrieved 24 July 2018.
  18. Lardinois, Frederic (24 March 2017). "Microsoft now uses Git and GVFS to develop Windows". TechCrunch. Retrieved 20 July 2018.
  19. Bright, Peter. "Windows switch to Git almost complete: 8,500 commits and 1,760 builds each day". Ars Technica. Retrieved 20 July 2018.
  20. Mohilo, Dominik (10 June 2016). "8 Build-Tools im Vergleich: Ant – Buildr – Maven – Bazel – Buck – Gradle – Pants – sbt - JAXenter" [8 build tools compared: Ant - Buildr - Maven - Bazel - Buck - Gradle - Pants - sbt]. JAXenter (in German). Retrieved 20 July 2018.
  21. Moore, Madison (3 May 2016). "GitLab releases security fixes, Pants 1.0, and Sauce Labs integration for JIRA—SD Times news digest: May 3, 2016 - SD Times". SD Times. Retrieved 20 July 2018.
  22. Ebden, Peter (December 2017). "Please - the Thought Machine Build System". Blog. Thought Machine. Retrieved 2019-12-28.
This article is issued from Wikipedia. The text is licensed under Creative Commons - Attribution - Sharealike. Additional terms may apply for the media files.