From mboxrd@z Thu Jan 1 00:00:00 1970 From: ng0 Subject: Re: Status update on reproducible builds in Guix Date: Sun, 5 Nov 2017 19:17:05 +0000 Message-ID: <20171105191705.gmdb4qa2uhn4g6bw@abyayala> References: <87bmknzjx1.fsf@gnu.org> <87y3nqwmb7.fsf@gnu.org> <87efpcsp3m.fsf@gnu.org> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="n6x6wltej7ykufxj" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:58492) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1eBQQ3-0001cf-Lt for guix-devel@gnu.org; Sun, 05 Nov 2017 14:17:20 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1eBQQ2-0004UJ-LR for guix-devel@gnu.org; Sun, 05 Nov 2017 14:17:19 -0500 Content-Disposition: inline In-Reply-To: List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: =?utf-8?B?R8OhYm9y?= Boskovits Cc: Guix-devel --n6x6wltej7ykufxj Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable G=C3=A1bor Boskovits transcribed 5.3K bytes: > Yesteday we had a discussion about that on irc. > Here it goes: >=20 >=20 > [15:15:16] hello guix! > [15:16:01] do we have a proposed way to build pyc files > reproducibly? > [15:16:50] I've read in the report, that we are not there yet, but > is someone working on it? > [15:17:58] g_bor: This is the report you mention? < > https://bugs.gnu.org/22533> > [15:18:10] I'm not sure if anyone has been working on it since the > last message > [15:20:26] * Guest74 has joined #guix > [15:23:05] thx, just what i was looking for. > [15:23:26] It's possible that some work in this area is pending on > the 'core-updates' Git branch, but I'm not sure > [15:37:41] At this stage we might as well wait for this to land > upstream: https://www.python.org/dev/peps/pep-0552/ >=20 > So, it seems, that we are waiting for this pep to land upstream. PEP Status: Accepted. I'm not familar with PEPs, other than that their sometimes very long discussions on the mailinglists. Does this mean that the missing pieces now are: implementation inclusion of this implementation in a new python release > 2017-11-05 16:49 GMT+01:00 Ludovic Court=C3=A8s : >=20 > > Jan Nieuwenhuizen skribis: > > > > > Ludovic Court=C3=A8s writes: > > > > > >> Here=E2=80=99s an update on reproducibility in Guix: > > >> > > >> https://www.gnu.org/software/guix/news/reproducible-builds- > > a-status-update.html > > > > > > At least 78% to possibly 91% reproduciblility of packages is not bad. > > > > > > Is there a (small) core that is already 100% reprocucible, like the > > > installation binaries/USB installer, bare-bones.tmpl or even > > > lightweight-desktop.tmpl? > > > > Good question! I think as soon as you have Python .pyc files in the > > dependency graph (reference graph), there are non-reproducible bits. We > > certainly have Python stuff in the base system reference graph, so > > that=E2=80=99s one thing we should fix most urgently I guess. > > > > Ludo=E2=80=99. > > > > --=20 ng0 GnuPG: A88C8ADD129828D7EAC02E52E22F9BBFEE348588 GnuPG: https://dist.ng0.infotropique.org/dist/keys/ https://www.infotropique.org https://ng0.infotropique.org --n6x6wltej7ykufxj Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEqIyK3RKYKNfqwC5S4i+bv+40hYgFAln/Y7EACgkQ4i+bv+40 hYhJCQ//UzacenoV0K9EMcpav5uKsp5fFvpGpiS3dxu4/MPPk0kekZmsqrXyk8Wf IPK1bnYCxgySI2++6lg1Zu0WbEg/G8uq0AAksTHHPgVETJtEn5oLEMqiWMFaHxJr m8GdtP+Lr9LcWwz+r6WX+fIUW4fWngctdT4BKJvCBmX7gaRqxpgi9V3wfnnsZ8DV E5rLSP7f6eLnXXSbXPpRz5bXFVeYDcbITy0JygxGczbPxr/qk3u37xUhZB5ty235 Japg78ZEMxXOv6f2CBS3zhvjAaYeAv7akvHtJFuXF/GMzfeqyoPJ57mFoZdAdnZQ FUbiji6RsfNX0tAnjEUAqsBmj46z0ppF+ikWjlQGq24KmbSXJyTqbMejbJv2O1VG HhvwICun1rzOGz1/gzpICtumVOewX//cb3rmj4db1evmDLKex1uLUn2eSpEWhDDz JSfJBciY2uMT1ig+yAkwdwXFwJoEv9o7EMNqw6q7GItfhkXxiF16kOiIM3WL8GC0 N+gKjLFAOUljaN1RnZZvQUAV1E7+17bBLpXjYaPTsBOUV/pi0otytbLrnUMIs03/ 6QN4kT/cOhXNPsUeTHsE/r8SYJ4Zv0Gj0QlylYO0j/WSkG52lUaR6qKeIcnoOVIW BYYXnO6SiDTQ7QA1huf3bsR1yb3sI6a9SQhdopbmEWjOO9XnLXc= =L1vg -----END PGP SIGNATURE----- --n6x6wltej7ykufxj--