!LemuOOvbWqRXodtSsw:nixos.org

NixOS Reproducible Builds

536 Members
Report: https://reproducible.nixos.org Project progress: https://github.com/orgs/NixOS/projects/30122 Servers

Load older messages


SenderMessageTime
4 May 2023
@witcher:envs.net@witcher:envs.net left the room.17:37:10
@raboof:matrix.orgrabooffinally hacked in a way to get a report of just the runtime dependencies, https://reproducible.nixos.org/nixos-iso-minimal-runtime/ - no surprises there, the Linux BPF/BTF problem and Python remaining. Hoping to do the graphical iso later.20:41:36
@raitobezarius:matrix.orgraitobezariuswhat does runtime means?20:42:08
@baloo_:matrix.orgbaloodependencies pulled in the image, filtering out the dependencies necessary to build the image but not included in the image. At least that's what I understand.20:44:40
@raitobezarius:matrix.orgraitobezariusoh makes sense20:44:57
@raitobezarius:matrix.orgraitobezariusso that would potentially take care of haskell stuff20:45:05
@baloo_:matrix.orgbaloowould still be appreciated for haskell to pull their thing together :D20:48:05
@baloo_:matrix.orgbaloofor all the talks about purity and what not20:48:13
@raitobezarius:matrix.orgraitobezariusafaik it's a very complicated and non actionable problem20:48:38
@raitobezarius:matrix.orgraitobezariusmaybe I'm soft for Haskell but I am not really concerned about it, the existing workaround is to build with 1 core20:49:02
@baloo_:matrix.orgbaloolast time I've checked, that was fixed in recent version of ghc but not the whole ecosystem was compatible20:49:49
@baloo_:matrix.orgbalooor at least, the few leads I followed were leading to me fixes made in 9.X (don't remember which version that was)20:50:38
@artturin:matrix.orgArtturinhttps://github.com/NixOS/nixpkgs/issues/15134720:52:12
@baloo_:matrix.orgbalooshit my own commit :D20:52:36
@baloo_:matrix.orgbaloo * shit my own comment :D20:52:40
@artturin:matrix.orgArtturinthe issue is still open20:52:49
@artturin:matrix.orgArtturin * the ghc issue is still open20:52:55
@baloo_:matrix.orgbaloohttps://gitlab.haskell.org/ghc/ghc/-/merge_requests/7353 that was the commit I had in mind20:53:28
@baloo_:matrix.orgbaloowhich merged in ghc 9.4.120:53:54
@baloo_:matrix.orgbalooin any case, raboof seems like he tried.20:55:33
@baloo_:matrix.orgbaloo * in any case, raboof says he tried.20:55:47
5 May 2023
@raboof:matrix.orgraboofhttps://reproducible.nixos.org/nixos-iso-gnome-runtime/ <- gnome runtime report 🎉. No haskell it seems, though plenty of other goodies ;)16:28:11
@raboof:matrix.orgraboof
In reply to @artturin:matrix.org
http://reproducible.nixos.org/ doesn't redirect to https
fixed!
16:28:59
@rnhmjoj:maxwell.ydns.eu@rnhmjoj:maxwell.ydns.eu

xserver.conf

I think this is due to find order being essentially undefined behavior in nixos/modules/services/x11/xserver.nix. it needs a | sort to be deterministic.

16:55:05
@trofi:matrix.org@trofi:matrix.org Yeah. I think find does filesystem order (and each does it's own ordering). 16:57:48
@delroth:delroth.netdelroth
In reply to @raboof:matrix.org
finally hacked in a way to get a report of just the runtime dependencies, https://reproducible.nixos.org/nixos-iso-minimal-runtime/ - no surprises there, the Linux BPF/BTF problem and Python remaining. Hoping to do the graphical iso later.
I worry a bit that this might be trading off false positives for false negatives. Let's say I have a derivation "drv" which does "cp ${otherdrv}/foo $out/foo" (unlikely, but in practice this could be e.g. gzip, or static linking, or some other kind of bundling). As far as I understand now the report wouldn't catch unreproducibility of "otherdrv", and it would happily say that "drv" is reproducible, which is irrelevant (since its "non-runtime dependencies" are what matters).
20:11:29
@delroth:delroth.netdelroth(Does that happen in practice in nixpkgs? I don't know, I wouldn't be surprised if it did. Is it a major issue? No clue either.)20:11:54
@raitobezarius:matrix.orgraitobezarius(Yes, it happens through trivial builders sometimes I suppose)20:15:21
@raitobezarius:matrix.orgraitobezarius(Though I'm okay if we keep both pieces ?)20:15:33
@delroth:delroth.netdelrothBy "both pieces" here do you mean "both types of report, runtime-only and all"? As long as people understand that the "runtime dependencies" report actually might exclude some runtime dependencies, then sure :)20:20:40

Show newer messages


Back to Room ListRoom Version: 6