!LemuOOvbWqRXodtSsw:nixos.org

NixOS Reproducible Builds

496 Members
Report: https://reproducible.nixos.org Project progress: https://github.com/orgs/NixOS/projects/30108 Servers

Load older messages


SenderMessageTime
22 Oct 2025
@abaris99f:matrix.org@abaris99f:matrix.org removed their display name JannikH (Abaris).10:35:49
@abaris99f:matrix.org@abaris99f:matrix.org left the room.10:36:09
28 Oct 2025
@dawnofmidnight:catgirl.cloud@dawnofmidnight:catgirl.cloud joined the room.18:01:33
31 Oct 2025
@raboof:matrix.orgraboofreproducible builds report for the build closure of minimal iso: https://reproducibility.nixos.social/reports/nixos-minimal-25.11pre878042.544961dfcce8-x86_64-linux.iso.drv-build-closure17:08:15
@raboof:matrix.orgraboof it's mostly the haskell stuff, and the upstream -fobject-determinism work is looking very promising, but will still take quite a while to make it into nixpkgs proper 17:09:14
@raboof:matrix.orgraboof * it's looking really good: the main remaining issues are mostly the haskell stuff. The upstream -fobject-determinism work is looking very promising, but will still take quite a while to make it into nixpkgs proper 17:12:28
@emilazy:matrix.orgemilyit may be possible to backport to older GHCs17:16:30
@emilazy:matrix.orgemilysince major GHC upgrades happen fairly infrequently in Nixpkgs17:16:41
@emilazy:matrix.orgemily llvm.dev reproducibility is something I have an in-flight patch for a similar issue (though only really relevant on Darwin since Linux tends to use a fixed build directory), I can probably take at fixing that one too. 17:17:55
@emilazy:matrix.orgemily(but no promises, I am overallocated time-wise to begin with)17:18:06
@raboof:matrix.orgraboofas long as it's "only" the build closure I'm kinda fine with fixes taking a long time to land, as long as they're on their way.17:21:17
@raboof:matrix.orgraboofI can relate ;)17:21:46
@raboof:matrix.orgraboofLuckily I can justify setting aside some time for this latest push in reporting improvements through https://discourse.nixos.org/t/transforming-global-software-distribution-with-nixpkgs/6498917:24:32
@emilazy:matrix.orgemily if you want to feel true despair, try building stuff with a different sandbox-build-dir sometime – there is a whole lot of stuff that is unreproducible if not for sandboxed Linux fixing the build directory by default 17:24:51
@emilazy:matrix.orgemilywhich is much of what makes Darwin reproducibility a mess right now (and which I have WIP patches for)17:25:12
@emilazy:matrix.orgemilymight be possible to use a randomized build directory on Linux in the future to surface more of that stuff if I can get the fixes that have helped for Darwin landed17:25:52
@raboof:matrix.orgraboofyeah you shared that before... I'm a bit torn on it as I essentially don't care about mac 😆, but from a holistic point of view it's probably the wise thing to do.17:30:17
@emilazy:matrix.orgemilyit's also relevant for e.g. Linux builds inside environments that can't use the sandbox, although those situations are pretty cursed17:45:45
@emilazy:matrix.orgemily(some rootless container environments, for instance)17:45:54
@emilazy:matrix.orgemilysince those already cannot enforce a coherent build directory17:46:07
@pyrox:pyrox.devdish [Fox/It/She] I'm wondering if it would be reasonable to disable the checkPhase in writeShellApplication for pre-switch-checks, which is the only user of haskell in the default system closure. While having shellcheck is a good idea, system.preSwitchChecks is only used in two repos outside of nixpkgs(according to a quick sourcegraph search), and I feel like if this is something you're using, you're generally better at shell scripting and don't need to worry as much about shellcheck. Just a thought though, and would allow us to cut off the entire ghc repro issue for minmal isos 19:00:34
@pyrox:pyrox.devdish [Fox/It/She] I'm wondering if it would be reasonable to disable the checkPhase in writeShellApplication for pre-switch-checks, which is the only user of haskell in the default system closure. While having shellcheck is a good idea, system.preSwitchChecks is only used in two repos outside of nixpkgs(according to a quick sourcegraph search), and I feel like if this is something you're using, you're generally better at shell scripting and don't need to worry as much about shellcheck. Just a thought though, and would allow us to cut off the entire ghc/haskell repro issue for minmal isos 19:00:40
@emilazy:matrix.orgemilyhow much would that shrink the minimal ISO?22:26:25
@grimmauld:grapevine.grimmauld.deGrimmauld (any/all)it would save me annoying ghc compiles on my minimalism adventures, i approve22:26:55
@emilazy:matrix.orgemily I am frankly not sure we need preSwitchChecks at all 22:27:23
@grimmauld:grapevine.grimmauld.deGrimmauld (any/all) Do we use buildShellApplication outside systemd.enableStrictShellChecks = true in the default closure? 22:27:57
@grimmauld:grapevine.grimmauld.deGrimmauld (any/all)actually wait no that is false by default huh22:28:25
@emilazy:matrix.orgemily
          --set PRE_SWITCH_CHECK ${lib.escapeShellArg config.system.preSwitchChecksScript} \
22:29:56
@emilazy:matrix.orgemily I think we actually just need to conditionalize this on config.system.preSwitchChecks22:30:19
@emilazy:matrix.orgemily the same way it is in nixos/modules/system/activation/top-level.nix 22:30:24

Show newer messages


Back to Room ListRoom Version: 6