!LemuOOvbWqRXodtSsw:nixos.org

NixOS Reproducible Builds

533 Members
Report: https://reproducible.nixos.org Project progress: https://github.com/orgs/NixOS/projects/30118 Servers

Load older messages


SenderMessageTime
6 Oct 2021
@qyliss:fairydust.spaceAlyssa Rossthe one that it's doing export-subst on16:25:18
@robert:funklause.dedotlambda And you don't think it's worth always checking for that line in .gitattributes and deleting the respective files 16:28:05
@robert:funklause.dedotlambda* And you don't think it's worth always checking for that line in `.gitattributes` and deleting the respective files?16:28:11
@qyliss:fairydust.spaceAlyssa Rossno, I don't think that's a good idea17:30:25
@qyliss:fairydust.spaceAlyssa Rossit would break existing hashes, and also be very confusing -- what if you have a 10000 line main.c file that's export-subst?17:30:48
@qyliss:fairydust.spaceAlyssa Ross one thing we could do would be to scan for export-subst and just fail the fetcher if it was found 17:31:22
@qyliss:fairydust.spaceAlyssa Rosswith a nice explanatory error message saying to either: · use a static release tarball; · use fetchgit; · carefully adjust the tarball, and then sed the export-subst line out of .gitattributes17:32:32
7 Oct 2021
@baloo_:matrix.orgbaloo https://github.com/NixOS/nixpkgs/pull/140868 back to 100% tomorrow?19:43:48
@rick:matrix.ciphernetics.nl@rick:matrix.ciphernetics.nlWould be nice :)19:46:32
@rick:matrix.ciphernetics.nl@rick:matrix.ciphernetics.nlSaw that the gnome_iso wasn't updated for a while either19:46:47
@baloo_:matrix.orgbaloo Yeah but this is a different issue 20:47:26
@baloo_:matrix.orgbalooThe builders are running out of disk space20:47:41
@tomberek:matrix.orgtomberekI'll run mine: https://buildkite.com/tomberek/r13y/builds/2220:47:59
@trofi:matrix.org@trofi:matrix.org

is there an easy way to make all local builds to check for reproducibility? (I'd like to check every package my system uses). I tried specifying --repeat 1 and did not notice any effect. Example command:

$ nix-build -E 'with import <nixpkgs> {}; builtins.derivation { name = "flaky-foo"; builder = "${bash}/bin/bash"; args = [ "-c" "${coreutils}/bin/date +%N > $out" ]; system = builtins.currentSystem; }' --repeat 10

20:52:46
@rick:matrix.ciphernetics.nl@rick:matrix.ciphernetics.nlRan it (iso_minimal) a couple of days ago and it looked all good then :)20:53:58
@rick:matrix.ciphernetics.nl@rick:matrix.ciphernetics.nl
In reply to @trofi:matrix.org

is there an easy way to make all local builds to check for reproducibility? (I'd like to check every package my system uses). I tried specifying --repeat 1 and did not notice any effect. Example command:

$ nix-build -E 'with import <nixpkgs> {}; builtins.derivation { name = "flaky-foo"; builder = "${bash}/bin/bash"; args = [ "-c" "${coreutils}/bin/date +%N > $out" ]; system = builtins.currentSystem; }' --repeat 10

I think there are nix config options for that
20:54:27
@trofi:matrix.org@trofi:matrix.org The option is repeat =. Does it get a different handling when in nix.conf? 20:55:46
@qyliss:fairydust.spaceAlyssa Ross for nix.conf options usually you want to do e.g. --option repeat 1, don't you? 20:57:26
@trofi:matrix.org@trofi:matrix.org Does it work for you? nix-build -E 'with import <nixpkgs> {}; builtins.derivation { name = "flaky-foo-42"; builder = "${bash}/bin/bash"; args = [ "-c" "${coreutils}/bin/date +%N > $out" ]; system = builtins.currentSystem; }' --option repeat 10 Does not fail here. 20:58:45
@trofi:matrix.org@trofi:matrix.org(and I would expect option handling error if flag was not recognised)20:59:10
@qyliss:fairydust.spaceAlyssa Ross> output '/nix/store/z9bwffzdzbm37c6gm1xjvg036v8n8kz2-flaky-foo-42' of '/nix/store/vsc0487zpr80fjxn6xj7wl7rcad5lsmd-flaky-foo-42.drv' differs from previous round20:59:21
@qyliss:fairydust.spaceAlyssa Rossnix-build (Nix) 2.3.1520:59:36
@trofi:matrix.org@trofi:matrix.org Thank you! Will try a rollback of nix (Nix) 2.4pre20211006_53e4794 locally. 21:09:20
@trofi:matrix.org@trofi:matrix.org Heh, warning: ignoring the user-specified setting 'repeat', because it is a restricted setting and you are not a trusted user. 21:12:59
@trofi:matrix.org@trofi:matrix.orgFiled https://github.com/NixOS/nix/issues/535221:17:34
8 Oct 2021
@j-k:matrix.orgj-k The SOURCE_DATE_EPOCH env var is just falling back to 315532800. Does it not get set properly when using fetchFromGithub? 11:23:27
@toonn:matrix.orgtoonn j-k: I think that's 0 for Windows' version of the epoch. 13:57:40
@toonn:matrix.orgtoonn There was some Windows reason for this. Maybe to do with zip archives? 13:58:01
@j-k:matrix.orgj-kI saw an issue say it's the earliest some zip archive could take yeah13:58:12
@j-k:matrix.orgj-k

I was just wondering if there's a good way to actually get an accurate SOURCE_DATE_EPOCH?

I've seen chroma uses leaveDotGit and grabs details and then deletes it to avoid issues: https://github.com/NixOS/nixpkgs/blob/nixos-unstable/pkgs/tools/text/chroma/default.nix#L17-L29

e.g. for SOURCE_DATE_EPOCH I'd swap the git command to $(git log -1 --pretty=%ct) etc https://reproducible-builds.org/docs/source-date-epoch/

14:00:57

Show newer messages


Back to Room ListRoom Version: 6