| 4 Feb 2025 |
| pveierland joined the room. | 04:56:47 |
pveierland | Are there any ways to check whether certain store paths are considered reproducible, without running the checks locally? | 05:02:16 |
raboof | Not currently AFAIK | 07:55:02 |
| 6 Feb 2025 |
| SomeoneSerge (back on matrix) changed their display name from SomeoneSerge (Gand St. Pieters) to SomeoneSerge (UTC+U[-12,12]). | 17:47:56 |
| 7 Feb 2025 |
| diamond (it/its) changed their profile picture. | 23:10:28 |
| diamond (it/its) changed their profile picture. | 23:18:43 |
| diamond (it/its) changed their profile picture. | 23:19:49 |
| 8 Feb 2025 |
| terrorjack joined the room. | 01:24:32 |
| terrorjack set a profile picture. | 02:24:19 |
| terrorjack removed their profile picture. | 02:24:54 |
dish [Fox/It/She] | will there be updated builds of https://reproducible.nixos.org reports generated? Seems like the last ones were generated over a year or two ago at this point, would be good to see if they're substantially different from what's on the website | 20:16:35 |
dish [Fox/It/She] | * will there be updated builds of the https://reproducible.nixos.org reports generated? Seems like the last ones were generated over a year or two ago at this point, would be good to see if they're substantially different from what's on the website | 20:16:43 |
raboof | I agree that would be good! I've been focusing on https://github.com/JulienMalka/lila (which should replace those reports eventually) and some upstream work - but happy to take PRs? | 21:31:32 |
dish [Fox/It/She] | I'll see if I can, yeah | 21:37:16 |
dish [Fox/It/She] | running a build now(on my laptop 🥴) | 22:17:36 |
| 9 Feb 2025 |
dish [Fox/It/She] | regenerated the minimal ISO reports(https://github.com/NixOS/reproducible.nixos.org/pull/7) | 15:59:41 |
dish [Fox/It/She] | haven't regenerated the GNOME reports(idk if I will, the minimal ISO reports took like an entire day to generate) but these should be helpful | 16:00:25 |
raboof | thanks, merged! | 21:49:01 |
| @tired:fairydust.space left the room. | 22:50:19 |
| 10 Feb 2025 |
raboof | created issues for the failures affecting the runtime closure of the minimal iso, https://github.com/NixOS/nixpkgs/issues/380852 https://github.com/NixOS/nixpkgs/issues/380854 and https://github.com/NixOS/nixpkgs/issues/380856 | 10:08:30 |
| 11 Feb 2025 |
pveierland | Is reproducible compression a topic? Can any popular algorithms be configured to be reproducible? | 12:05:18 |
@r522:matrix.org | there's discussion of this over at https://github.com/facebook/zstd/issues/2949 for zstd
zstd is deterministic... given the same version which for the sake of reproducible builds isn't an issue, you can just use the older version
| 12:43:47 |
pveierland | Interesting, thank you! | 12:46:01 |
@r522:matrix.org | reproducible across all versions is quite a niche requirement, especially since that means you can't ever make the compression more efficient space-wise
for that i guess you'd just pick a given zstd(or other library) version and fork it, applying changes as needed, but having tests that ensure you never break reproducability
| 12:47:57 |
pveierland | It does sound a bit fickle. Seems like a case similar to e.g. the NAR format where it would make sense to make a dedicated reproducible compression format (even if it's just a fork of an existing algorithm with frozen parameters) | 12:50:09 |
pveierland | Good to know that it should be possible out-of-the box with zstd 👍️ | 12:50:34 |
@r522:matrix.org | that being said: unless you're doing encryption, you could define hashes to be over the uncompressed content | 13:26:44 |
pveierland | It was just something I was thinking about since I was doing some stuff with binary build caches. E.g. nix binary caches sets the file name of a compressed NAR based on the file hash of the compressed NAR, meaning that when the compression is not reproducible, you cannot directly infer the location of the data, but need to depend on metadata | 13:38:30 |
Martin Schwaighofer | In reply to @pveierland:matrix.org It was just something I was thinking about since I was doing some stuff with binary build caches. E.g. nix binary caches sets the file name of a compressed NAR based on the file hash of the compressed NAR, meaning that when the compression is not reproducible, you cannot directly infer the location of the data, but need to depend on metadata If you want to associate a computation with its outcome, but not run the computation yourself, you always need to rely on some metadata for that association.
That's not only true for the kind of compression you describe, but also for the build steps themselves, even with content-addressed derivations in Nix. | 14:13:40 |
| @lunchtime:envs.net left the room. | 19:07:32 |