From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp1.migadu.com ([2001:41d0:303:e16b::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms8.migadu.com with LMTPS id QE3yB8Aa72VYswAA62LTzQ:P1 (envelope-from ) for ; Mon, 11 Mar 2024 15:52:48 +0100 Received: from aspmx1.migadu.com ([2001:41d0:303:e16b::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp1.migadu.com with LMTPS id QE3yB8Aa72VYswAA62LTzQ (envelope-from ) for ; Mon, 11 Mar 2024 15:52:48 +0100 X-Envelope-To: larch@yhetil.org Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=gmail.com header.s=20230601 header.b=hrKCvgSt; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org"; dmarc=pass (policy=none) header.from=gmail.com ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1710168768; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:list-id:list-help: list-unsubscribe:list-subscribe:list-post:dkim-signature; bh=qXbQwCvN9E8whPOD4/vnsBbOrgYR6O9OGAjf4ZRKntU=; b=R8a+fO14z1VBjfXbsQrwEs9xoHoCBeK2P+TJcnXiCGMKQUQa3CRC1ItLZc1RzgBbZykd3M dmTtB/6CL4fK/FRwYNMQjgDox4W7oZOH3On+8gTW+IG4AksrB9iAZld2lhP3j3kUZ8Wnmz cL77B86RyUzKO2rlKGnoRFYQZIONi01ILmGWgh3KbssBV1vVl62ZhUDfWxcDvQNi3wDaS7 tWC913Ty6933ZQ9iybG16k84RtNu8EC7FiJ7srpbxemJsLJ13Xo4Q9wSs9kZRE90zx40j7 xYRnLrSHm05nfViaUTDWuCiiKH9GVmRxR6Wh3mXWRdz4T/At2TdSh65gmMK3uw== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=gmail.com header.s=20230601 header.b=hrKCvgSt; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org"; dmarc=pass (policy=none) header.from=gmail.com ARC-Seal: i=1; s=key1; d=yhetil.org; t=1710168768; a=rsa-sha256; cv=none; b=Kt8FIEFiFU1Xhu4c8NZVZZD+Eku7LxPt5jOJjRPogVeo7cH8fPrIYsKR9KnFvGGrmiZEdZ h+DgYs3J3jql/3svsLvNuwf43iByMSy2wVST1ibjEuk4MlOi1fYdIlWYrLTLtMII9b1zVa N3GB/ZknUnwEYZNP7lsnfegBT0EYL2f9A7UwVpv0Qgw05fkGh2IjFuYAvjdsh6/QiDXygy XBbBNz5FP4aCQGIuemM0HLBBvt+pafcjwOTvHwYlLdQJGeSFCqLi7p1jzx7alrGX64jDuw yLSbEcmK7CtfJXI7XXvibFGIaZgJOTjLJZ9RAp66AfbFU3kowH7cT3BglQXb/w== Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 0C51767369 for ; Mon, 11 Mar 2024 15:52:48 +0100 (CET) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1rjh0p-0005NX-Kl; Mon, 11 Mar 2024 10:52:23 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1rjh0o-0005ND-Kj for guix-devel@gnu.org; Mon, 11 Mar 2024 10:52:22 -0400 Received: from mail-wr1-x433.google.com ([2a00:1450:4864:20::433]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1rjh0X-0005HL-E5 for guix-devel@gnu.org; Mon, 11 Mar 2024 10:52:16 -0400 Received: by mail-wr1-x433.google.com with SMTP id ffacd0b85a97d-33e97e3d97fso243174f8f.1 for ; Mon, 11 Mar 2024 07:52:04 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1710168723; x=1710773523; darn=gnu.org; h=content-transfer-encoding:mime-version:message-id:date:references :in-reply-to:subject:cc:to:from:from:to:cc:subject:date:message-id :reply-to; bh=qXbQwCvN9E8whPOD4/vnsBbOrgYR6O9OGAjf4ZRKntU=; b=hrKCvgStUX5XCcug7jQ9e/qzZw/L0vU+s79x69p9iHGtWXX+NVBVq6OsQBAFBYr/+S EQdzuWhOQ+eeQPZF0Pj75kbTS11a31jV8xm3VfV8AqzoR5IDXO1qVwUepS0QK8OZjk/U n0Ss/wZAyglNsGgokUNxH3gZyb3Ntwjk9vL9HJRBJVj4iUjuQH1usreHZEgV6Y/jx6qT kgs6F6X0eCLezLSb8aSkfT/I6+QyE+vRFWXsqKkVzH14Aq1Pth4CHFl4YXdWJOAZoKoL FK/0D6DikWgU7A0LT1lnhkrMpGazkTJUntWisVst+VNyW2SdRd1Lzil4AvD+CSZqFGmo LeHA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1710168723; x=1710773523; h=content-transfer-encoding:mime-version:message-id:date:references :in-reply-to:subject:cc:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=qXbQwCvN9E8whPOD4/vnsBbOrgYR6O9OGAjf4ZRKntU=; b=vZextGuDuuse+Mnufiinyswbgw6UalJKgqFc1ypg639Nga5OCsWYPhRrkAke4TYXeN svOCl/fZWcrruUQEmJStnWQlmm6bPM+XOatd091WRTAD/NWcX8YRdk3GJY5+kDTx9666 +FDeMKePIfBg8qtHvE78p5jAkfhbmoZMOamxxxYdIIydZ0aLKALHLljaCU03E5dPfogc 36cl7NzToxE52pFLTDgZtFaTmkhcB9b2DT5JIPoVn4sODrQhm594tbHL0FJCi8WrVpMk j3gc9+eY7sXQEH/PHUN9M/IeD0y4lNHi01X8TDHp+jGqjxNbnprN6eH0S3wG4LbhnKBv dX7w== X-Gm-Message-State: AOJu0YzbyWAW0TMoMuDk8l52PEKzpbtQ5u+HpI/xVRqW1nTUMJYoCcdH JGKodUQig1EjZeUKUocEXaaHBF/cW8+7w8wdptW1GVFhrnPUavYe3fhPNVQ0 X-Google-Smtp-Source: AGHT+IG0LZ8/TfWit6TmUccrDmj07VzSw0rrvtBP3VcqtSQRfpJaVmfWfath1laz0FBdToVp+rwUDg== X-Received: by 2002:a05:600c:5113:b0:412:c327:4064 with SMTP id o19-20020a05600c511300b00412c3274064mr5129902wms.3.1710168723343; Mon, 11 Mar 2024 07:52:03 -0700 (PDT) Received: from lili (roam-nat-fw-prg-194-254-61-42.net.univ-paris-diderot.fr. [194.254.61.42]) by smtp.gmail.com with ESMTPSA id fa5-20020a05600c518500b00413298e9c8esm4092298wmb.35.2024.03.11.07.52.02 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 11 Mar 2024 07:52:02 -0700 (PDT) From: Simon Tournier To: Antoine Eiche , Ricardo Wurmus Cc: guix-devel@gnu.org Subject: Re: Building container images with nix2container In-Reply-To: <87o7c36sgu.fsf@gmail.com> References: <8734tijjpy.fsf@tilia> <87wmqszwif.fsf@elephly.net> <87plwjilke.fsf@tilia> <87o7c36sgu.fsf@gmail.com> Date: Fri, 08 Mar 2024 11:31:04 +0100 Message-ID: <87cys5817b.fsf@gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Received-SPF: pass client-ip=2a00:1450:4864:20::433; envelope-from=zimon.toutoune@gmail.com; helo=mail-wr1-x433.google.com X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: guix-devel-bounces+larch=yhetil.org@gnu.org X-Migadu-Flow: FLOW_IN X-Migadu-Country: US X-Migadu-Spam-Score: -5.56 X-Spam-Score: -5.56 X-Migadu-Queue-Id: 0C51767369 X-Migadu-Scanner: mx13.migadu.com X-TUID: 56Xtz0ISqdy5 Hi Antoine, Reading this blog post: https://lewo.abesis.fr/posts/nix-build-container-image/ and from my understanding, =E2=80=9Cguix pack=E2=80=9D is currently somethi= ng similar to =E2=80=99dockerTools.buildImage=E2=80=99 [1] On lun., 26 f=C3=A9vr. 2024 at 18:33, Simon Tournier wrote: > Well, I have not followed on which strategy Guix relies. What is the > one of nix2container? The one described here: > > https://grahamc.com/blog/nix-and-layered-docker-images/ To answer to my question, the way to build the container image is different, hence it does not make much sense to speak about a =E2=80=9Cstrategy=E2=80=9C. :-) However, the blog post says: To address this issue, we could add a nonReproducible option in the containerTools.buildLayer function. Instead of only storing the digest, we would also store the tar. Note in practice, an important part of nixpkgs is bit reproducible and this would rarely be needed. And so the question is how do you know beforehand if the flag =E2=80=99nonReproducible=E2=80=99 must be applied or not? Indeed, the approach of nix2container could be helpful in addition to =E2=80=98guix pack=E2=80=99. Maybe an extension=E2=80=A6 :-) Cheers, simon