!LemuOOvbWqRXodtSsw:nixos.org

NixOS Reproducible Builds

544 Members
Report: https://reproducible.nixos.org Project progress: https://github.com/orgs/NixOS/projects/30125 Servers

Load older messages


SenderMessageTime
6 Oct 2021
@qyliss:fairydust.spaceAlyssa Rosswe can already do that in a single derivation15:05:00
@qyliss:fairydust.spaceAlyssa Rossryantm: can we just delete that file in fetchFromGitHub's postFetch?15:05:01
@j-k:matrix.orgj-kadding the wasm evaluation feature to open-policy-agent breaks reproducability. I have no idea what I'm looking at here:16:11:17
@j-k:matrix.orgj-kimage.png
Download image.png
16:11:21
@j-k:matrix.orgj-kLooks like this article might help actually https://blog.filippo.io/reproducing-go-binaries-byte-by-byte/16:12:41
@robert:funklause.dedotlambda joined the room.16:20:21
@robert:funklause.dedotlambda
In reply to @qyliss:fairydust.space
ryantm: can we just delete that file in fetchFromGitHub's postFetch?
I think we should, but do you mean for this package only or for fetchFromGithub in general?
16:24:51
@qyliss:fairydust.spaceAlyssa RossI mean for this package16:25:04
@qyliss:fairydust.spaceAlyssa Rossnot the gitattributes file, that wouldn't help16:25:11
@qyliss:fairydust.spaceAlyssa Rossthe one that it's doing export-subst on16:25:18
@robert:funklause.dedotlambda And you don't think it's worth always checking for that line in .gitattributes and deleting the respective files 16:28:05
@robert:funklause.dedotlambda* And you don't think it's worth always checking for that line in `.gitattributes` and deleting the respective files?16:28:11
@qyliss:fairydust.spaceAlyssa Rossno, I don't think that's a good idea17:30:25
@qyliss:fairydust.spaceAlyssa Rossit would break existing hashes, and also be very confusing -- what if you have a 10000 line main.c file that's export-subst?17:30:48
@qyliss:fairydust.spaceAlyssa Ross one thing we could do would be to scan for export-subst and just fail the fetcher if it was found 17:31:22
@qyliss:fairydust.spaceAlyssa Rosswith a nice explanatory error message saying to either: · use a static release tarball; · use fetchgit; · carefully adjust the tarball, and then sed the export-subst line out of .gitattributes17:32:32
7 Oct 2021
@baloo_:matrix.orgbaloo https://github.com/NixOS/nixpkgs/pull/140868 back to 100% tomorrow?19:43:48
@rick:matrix.ciphernetics.nlRick (Mindavi)Would be nice :)19:46:32
@rick:matrix.ciphernetics.nlRick (Mindavi)Saw that the gnome_iso wasn't updated for a while either19:46:47
@baloo_:matrix.orgbaloo Yeah but this is a different issue 20:47:26
@baloo_:matrix.orgbalooThe builders are running out of disk space20:47:41
@tomberek:matrix.orgtomberekI'll run mine: https://buildkite.com/tomberek/r13y/builds/2220:47:59
@trofi:matrix.org@trofi:matrix.org

is there an easy way to make all local builds to check for reproducibility? (I'd like to check every package my system uses). I tried specifying --repeat 1 and did not notice any effect. Example command:

$ nix-build -E 'with import <nixpkgs> {}; builtins.derivation { name = "flaky-foo"; builder = "${bash}/bin/bash"; args = [ "-c" "${coreutils}/bin/date +%N > $out" ]; system = builtins.currentSystem; }' --repeat 10

20:52:46
@rick:matrix.ciphernetics.nlRick (Mindavi)Ran it (iso_minimal) a couple of days ago and it looked all good then :)20:53:58
@rick:matrix.ciphernetics.nlRick (Mindavi)
In reply to @trofi:matrix.org

is there an easy way to make all local builds to check for reproducibility? (I'd like to check every package my system uses). I tried specifying --repeat 1 and did not notice any effect. Example command:

$ nix-build -E 'with import <nixpkgs> {}; builtins.derivation { name = "flaky-foo"; builder = "${bash}/bin/bash"; args = [ "-c" "${coreutils}/bin/date +%N > $out" ]; system = builtins.currentSystem; }' --repeat 10

I think there are nix config options for that
20:54:27
@trofi:matrix.org@trofi:matrix.org The option is repeat =. Does it get a different handling when in nix.conf? 20:55:46
@qyliss:fairydust.spaceAlyssa Ross for nix.conf options usually you want to do e.g. --option repeat 1, don't you? 20:57:26
@trofi:matrix.org@trofi:matrix.org Does it work for you? nix-build -E 'with import <nixpkgs> {}; builtins.derivation { name = "flaky-foo-42"; builder = "${bash}/bin/bash"; args = [ "-c" "${coreutils}/bin/date +%N > $out" ]; system = builtins.currentSystem; }' --option repeat 10 Does not fail here. 20:58:45
@trofi:matrix.org@trofi:matrix.org(and I would expect option handling error if flag was not recognised)20:59:10
@qyliss:fairydust.spaceAlyssa Ross> output '/nix/store/z9bwffzdzbm37c6gm1xjvg036v8n8kz2-flaky-foo-42' of '/nix/store/vsc0487zpr80fjxn6xj7wl7rcad5lsmd-flaky-foo-42.drv' differs from previous round20:59:21

Show newer messages


Back to Room ListRoom Version: 6