!LemuOOvbWqRXodtSsw:nixos.org

NixOS Reproducible Builds

461 Members
Report: https://reproducible.nixos.org Project progress: https://github.com/orgs/NixOS/projects/3096 Servers

Load older messages


SenderMessageTime
13 Aug 2024
@ironbound:hackerspace.pl@ironbound:hackerspace.pl set a profile picture.07:58:39
14 Aug 2024
@peddie:matrix.orgpeddie changed their profile picture.00:34:59
17 Aug 2024
@nam3l33ss:matrix.org@nam3l33ss:matrix.org changed their profile picture.08:27:21
22 Aug 2024
@emilazy:matrix.orgemilywe don't want PGO by default on packages in the installation ISO right?15:54:15
@emilazy:matrix.orgemilycf. https://github.com/NixOS/nixpkgs/pull/33656415:54:16
@qyliss:fairydust.spaceAlyssa RossPGO can be reproducible, and if so there's not a problem.15:57:35
@qyliss:fairydust.spaceAlyssa RossBut in most cases it's not.15:57:43
@raboof:matrix.orgraboofIdeally not indeed - indeed I've heard rumours of reproducible PGO builds, but that's probably only if you specifically work towards that, and even then I'm sceptical 😄15:58:03
@emilazy:matrix.orgemily
In reply to @qyliss:fairydust.space
PGO can be reproducible, and if so there's not a problem.
by having someone record a profile and shipping that as an input, right?
15:58:05
@emilazy:matrix.orgemilyor is there another way?15:58:08
@qyliss:fairydust.spaceAlyssa RossBy having the thing you run to profile be deterministic15:58:22
@qyliss:fairydust.spaceAlyssa Rosswhich mostly means single threaded15:58:27
@emilazy:matrix.orgemilyI see15:58:29
@emilazy:matrix.orgemilythat sounds hard15:58:31
@qyliss:fairydust.spaceAlyssa Rossour foot pgo is reproducible15:58:33
@qyliss:fairydust.spaceAlyssa RossBut there's also an option for more complete foot PGO, which we don't use, that is not reproducible.15:58:52
@emilazy:matrix.orgemilyjust run all our PGO profiling on Antithesis 🙃15:58:56
@emilazy:matrix.orgemily
In reply to @emilazy:matrix.org
by having someone record a profile and shipping that as an input, right?
this does work though, right? it seems like a benign kind of blob to me since the optimization decisions "shouldn't" affect the actual behaviour of the program (and because you can always reproduce an ~equivalent blob, a la bootstrap tarballs)
15:59:47
@emilazy:matrix.orgemilyI think Firefox PGO works like that or something?15:59:55
@qyliss:fairydust.spaceAlyssa RossI don't think it's benign at all.16:00:11
@qyliss:fairydust.spaceAlyssa RossIt's not auditable to my knowledge, and compilers are not generally written to be secure against malicious input.16:00:45
@qyliss:fairydust.spaceAlyssa RossFirefox PGO in Nixpkgs profiles during the build.16:00:53
@emilazy:matrix.orgemilygood point re: malicious input. (I don't have any idea of how elaborate the PGO files actually are)16:05:23
@niko:puppygock.gaynyanbinary 🏳️‍⚧️ left the room.17:18:57
@atemu12:matrix.orgAtemuAn idea that sprung to my mind just now is that we could install the pgo files generated during a build into an output which should allow reproducing the binary if it's otherwise deterministic18:53:09
@atemu12:matrix.orgAtemuThough that again hinges on PGO files not having the ability to make the compiler produce arbitrary output18:54:32
23 Aug 2024
@nam3l33ss:matrix.org@nam3l33ss:matrix.org left the room.09:22:00
24 Aug 2024
@h33p:matrix.orgh33p joined the room.10:19:04
@adbjesus:matrix.org@adbjesus:matrix.org left the room.15:53:46
25 Aug 2024
@von.dev:matrix.orgvon.dev joined the room.08:30:41

Show newer messages


Back to Room ListRoom Version: 6