| 1 Jul 2021 |
siraben | It should be easier for people to check reproducibility of their own packages as well | 04:53:13 |
raboof | In reply to @siraben:matrix.org It should be easier for people to check reproducibility of their own packages as well for a leaf package nix-build '<nixpkgs>' -A mypackage --check, is a good start, right? seems pretty easy :) | 14:59:32 |
raboof | but making it easier to do a 'recursive' rebuild would be cool, too, things like "given a derivation, I trust cache.nixos.org, but I want to rebuild the rest and compare the result with the results from other builders" | 15:06:05 |
raboof | adisbladis' trustix project (https://github.com/tweag/trustix) seems super interesting in that area, but I get the impression that it's not really ready for collaboration yet? | 15:06:53 |
raboof | I would also like it if we could somehow integrate reproducibility in the review process more - not requiring it yet, but at least making it visible. I think there were some approaches to that discussed above (doing something in nixpkgs-review and/or adding a flag somewhere that a package is intended to be reproducible) | 15:09:00 |
adisbladis | In reply to @raboof:matrix.org adisbladis' trustix project (https://github.com/tweag/trustix) seems super interesting in that area, but I get the impression that it's not really ready for collaboration yet? I'd say it's ready for collaboration but recently I've not been able to give it quite the attention it deserves | 15:09:54 |
raboof | and of course there's https://github.com/NixOS/nixpkgs/issues/125380 - I hope I haven't scared you all away with all my chatter in that issue :D | 15:15:19 |
fzakaria | --check is kind of frustrating | 16:02:04 |
fzakaria | because it has to already be in the store | 16:02:10 |
fzakaria | I think there's opportunity in the newer CLI to make it a better experience here. | 16:02:23 |
fzakaria | maybe integrate with diffoscope directly. | 16:02:30 |
Synthetica | Yeah, I want a "no-really-build-this-even-if-you-think-you-already-have-it" flag | 16:45:57 |
Synthetica | maybe a bit less verbose | 16:46:02 |
siraben | Boss level: https://github.com/ligurio/unreliablefs | 17:23:24 |
raboof | nix-build '<nixpkgs>' -A mypackage && nix-build '<nixpkgs>' -A mypackage --check? ;) | 17:31:42 |
siraben | --check is nice but barely adds variation to the build setup | 17:45:22 |
siraben | I want to be able to automatically test on different kernels and at different times somehow | 17:45:42 |
afontain | In reply to @siraben:matrix.org Boss level: https://github.com/ligurio/unreliablefs that's like disorderfs, but much more evil | 17:48:19 |
afontain | I'd expect many software not to be able to survive this | 17:48:35 |
siraben | radiation hardening time | 17:51:09 |
siraben | level Cthulhu: survive the van Allen belt | 17:52:16 |
fzakaria | I posted that I like git's model of allowing subcommands so people can create their own.
It lets you have very ergonomic naming commands | 17:54:42 |
fzakaria | (git searches for any tool on $PATH that is prefixd with git-) | 17:54:50 |
fzakaria | something like:
nix verify-reproducible <PACKAGE> [--repeat 0] sounds a lot better | 17:55:15 |
fzakaria | When it does repeat, losing all the previous attempts was frustrating; but i'm being nitpicky | 17:56:18 |
fzakaria | --check was pretty good | 17:56:23 |
| 2 Jul 2021 |
| Irenes joined the room. | 09:21:34 |
| immae changed their display name from immae (he/him) to immae. | 17:46:04 |
| immae changed their profile picture. | 17:46:14 |
| immae changed their profile picture. | 17:47:53 |