!LemuOOvbWqRXodtSsw:nixos.org

NixOS Reproducible Builds

555 Members
Report: https://reproducible.nixos.org Project progress: https://github.com/orgs/NixOS/projects/30128 Servers

Load older messages


SenderMessageTime
4 Dec 2021
@immae:immae.euimmae left the room.10:59:16
5 Dec 2021
@teevorian:matrix.orgsvhe joined the room.03:47:04
7 Dec 2021
@cypher25519:matrix.orgcypher joined the room.22:54:24
8 Dec 2021
@arcz:matrix.orgarcz joined the room.16:22:53
@arcz:matrix.orgarczhey, I'm wondering if r13y is really verifying that NixOS image is reproducible. It seems that only the direct dependencies are rebuilt, not the whole tree down to some root bootstrap package, is that right? Is it possible to rebuild the whole tree, is it even worth it?16:33:55
@raboof:matrix.orgraboof
In reply to @arcz:matrix.org
hey, I'm wondering if r13y is really verifying that NixOS image is reproducible. It seems that only the direct dependencies are rebuilt, not the whole tree down to some root bootstrap package, is that right? Is it possible to rebuild the whole tree, is it even worth it?
https://r13y.com/ doesn't check everything. One thing you could do is take an 'old' image, install Nix, download nixpkgs, disable cachix, and build the image. I have found a couple of issues like that in the past (e.g. around the way we used mksquashfs IIRC), but I'm not aware of any remaining.
16:58:04
@arcz:matrix.orgarcz raboof: not sure if I understood you correctly, so you tried to build everything from source and it reproduced, but it's not automated in r13y? 17:09:50
9 Dec 2021
@raboof:matrix.orgraboof
In reply to @arcz:matrix.org
raboof: not sure if I understood you correctly, so you tried to build everything from source and it reproduced, but it's not automated in r13y?
I don't think I ever got around to actually successfully reproducing end-to-end, but AFAIK we did fix all the problems I found when I tried it the last time. Indeed r13y does not automate everything (but quite a lot).
08:18:35
10 Dec 2021
@siraben:matrix.orgsiraben
In reply to @raboof:matrix.org
https://r13y.com/ doesn't check everything. One thing you could do is take an 'old' image, install Nix, download nixpkgs, disable cachix, and build the image. I have found a couple of issues like that in the past (e.g. around the way we used mksquashfs IIRC), but I'm not aware of any remaining.
A similar situation I ran into was when I was testing out CA, several URLs were broken because our caching kept it longer than upstream did
00:56:10
12 Dec 2021
@srid:matrix.orgsrid changed their display name from Moved to @srid:one.ems.host to Sridhar Ratnakumar.23:54:09
@srid:matrix.orgsrid set a profile picture.23:54:16
14 Dec 2021
@baloo_:matrix.orgbaloo https://github.com/NixOS/nix/pull/5702 merged \o/ now we just need the backport and a release 11:15:47
@baloo_:matrix.orgbalooand back to 100%11:15:51
@rick:matrix.ciphernetics.nlRick (Mindavi)Most of the gnome_iso issues seem to be related to haskell19:27:53
@tomberek:matrix.orgtomberek
In reply to @rick:matrix.ciphernetics.nl
Most of the gnome_iso issues seem to be related to haskell
Typical, people not caring about purity.....err...... wait a sec!!
21:48:42
15 Dec 2021
@muhammadrahim:matrix.orgMuhammad Rahim joined the room.16:58:26
16 Dec 2021
@kenmacd:matrix.org@kenmacd:matrix.org joined the room.03:22:35
@maximsmol:matrix.org@maximsmol:matrix.org joined the room.21:42:14
19 Dec 2021
@atemu12:matrix.orgatemu12https://github.com/NixOS/nixpkgs/issues/15134717:22:29
@rick:matrix.ciphernetics.nlRick (Mindavi)Thanks for opening an issue about it17:24:03
@artturin:matrix.orgArtturinhttps://github.com/NixOS/nixpkgs/pull/15135619:10:52
20 Dec 2021
@ercao:matrix.orgercao joined the room.17:21:25
@baloo_:matrix.orgbalooNix2.5.1 merged in master. So the man build for nix should be fixed soon21:06:31
@rick:matrix.ciphernetics.nlRick (Mindavi)I made an issue about an interaction between separateDebugInfo and ca-derivations: https://github.com/NixOS/nixpkgs/issues/15147522:53:33
@rick:matrix.ciphernetics.nlRick (Mindavi)I think it would be really nice to solve that issue to be able to really get consistent ca-derivations working, reducing the influence of the input-addressed path on the derivations.22:54:15
21 Dec 2021
@artturin:matrix.orgArtturinPosted a link to a mailing list where they say the build_id is not the cause but the sympton07:26:54
@artturin:matrix.orgArtturin* Posted a link to a mailing list where they say the build_id is not the cause but the symptom07:27:02
@artturin:matrix.orgArtturin* Posted a link to a mailing list where they say the build_id is not the cause but the symptom07:27:18
@rick:matrix.ciphernetics.nlRick (Mindavi)I guess it is a symptom of how the build process works, but it may be worth 'generating' the build ID based on a hash of the source contents, or something like it. This could also be fixed on the nix side by using a non-input-addressed but deterministic folder name for the 'scratch space' build folder, which doesn't depend on the derivation or it dependents. But that seems a lot more intrusive and it's of no value for normal non-ca builds07:43:49
22 Dec 2021
@sonomicheleya:matrix.orgsonomicheleya joined the room.08:17:11

Show newer messages


Back to Room ListRoom Version: 6