| 26 Apr 2023 |
 Jan Tojnar | yeah, looks like it is another limitation of builtins.fetchGit, it should not be an issue if you replace it with a direct fetching | 08:55:18 |
 Pol | hum.... going to check that. | 08:55:41 |
| Pol | I replaced builtins.fetchGit with fetchgit but that doesn't seem to fix any issue. | 09:32:35 |
| Pol | no it's not. | 09:35:54 |
| Jan Tojnar | fetchgit will require a FOD hash, won’t it? I think you cannot get away from reimplementing the algorithm in something other than Nix | 09:56:42 |
| Pol | Oh man :( | 10:02:11 |
| Pol | So basically, you're telling me that I should write a script that would download all the dependencies with git, and then only we compute the hash on that ? | 10:02:42 |
| Jan Tojnar | yup | 10:03:19 |
| Pol | Damn :( | 10:04:46 |
| Pol | I don't think this is going to work since a "git repo" is not reproducable without a hash. | 10:09:14 |
| Jan Tojnar | you would get the hash for the FOD | 10:15:21 |
| Jan Tojnar | looks like we have this now: https://github.com/NixOS/nixpkgs/blob/9eec23bf5c978829abbb4e90a1d3d418e05a9069/pkgs/build-support/fetchgit/deterministic-git | 10:16:01 |
 tgerbet | For git it can be simplified by removing the .git folder | 10:19:44 |
| tgerbet | It is not really needed for composer | 10:20:00 |
| Pol | In reply to @jtojnar:matrix.org
you would get the hash for the FOD That is ok, but let's say we clone master branch today, and then some commits are pushed, and we clone it again, the hash will be different. I don't see how we could make it reproducable. If there were only one, we could use a revision, but since there are multiple repos to clone... | 10:39:56 |
| Pol | Ok I need some break | 11:22:46 |
| Pol | Too much for me today ;) | 11:22:55 |
| Jan Tojnar | Pol: the composer.lock contains the commit to fetch | 12:41:38 |
| Pol | Yes, I got that, and I have those files locally in the PR.
I just don't understand why it would fail when trying to download phpstan/phpstan, and how to fix all the things.
I think I need a break, there's too much information right now | 14:05:13 |
| Pol | (and some frustrations as well) | 14:05:23 |
| Pol | I made a Composer plugin that does what composition-c4 is doing. And it works well. | 14:16:45 |
| Pol | Would it be part of the solution? | 14:16:53 |
| Jan Tojnar | I guess it could be implemented as a composer plug-in | 14:21:21 |
| Pol | yeahh that's what I did | 14:21:31 |
| Pol | Basically, I provide a new command which create a local composer repo. | 14:21:53 |
| Pol | Then you can use it as an offline composer repo. | 14:22:04 |
| Pol | It works. | 14:22:07 |
| Pol | 
Download image.png | 14:22:33 |
| Pol | So basically, the plugin just uses the downloading capabilities of Composer and download the package sources.
Then it creates a tree structure with all the files etc etc. | 14:40:53 |
| Pol | 
Download image.png | 14:46:46 |
