From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp10.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms5.migadu.com with LMTPS id KDyGJINl/2IslwAAbAwnHQ (envelope-from ) for ; Fri, 19 Aug 2022 12:27:15 +0200 Received: from aspmx1.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp10.migadu.com with LMTPS id yOSxI4Nl/2JynwAAG6o9tA (envelope-from ) for ; Fri, 19 Aug 2022 12:27:15 +0200 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 0D9A925604 for ; Fri, 19 Aug 2022 12:27:15 +0200 (CEST) Received: from localhost ([::1]:36806 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1oOzDd-0001TY-TK for larch@yhetil.org; Fri, 19 Aug 2022 06:27:13 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:45340) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1oOzC1-0001Ri-UT for guix-devel@gnu.org; Fri, 19 Aug 2022 06:25:33 -0400 Received: from mail-wm1-x331.google.com ([2a00:1450:4864:20::331]:51188) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1oOzBy-0004Gx-T9; Fri, 19 Aug 2022 06:25:33 -0400 Received: by mail-wm1-x331.google.com with SMTP id j26so2092655wms.0; Fri, 19 Aug 2022 03:25:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=content-transfer-encoding:mime-version:message-id:date:references :in-reply-to:subject:cc:to:from:from:to:cc; bh=BiI8IBfqM6EpQug/EPs/OzwWQScXR47HMAKpCbvKGXk=; b=S1e2uf7NuXBCto/NeeGoko6EBGvO+qZIAiMG3hRCciFi4kjLq2yqgI7s/XxH20zSh4 AM9WOZa4L6Vgo8MEIhAZeO37BQRpKRhhcCtWB1M3ocFMJzfOk5PD5SuYenTGGX1qqlUn qm4R028v4dPSyVW2Kir2Scgew50hwloE5S/rYfxsSvmuocc5n+Y3C2JjJzd6Y8ntcLo4 THi99AMnM0YWCXEGp2PI+SZk21jeRvpuc66oowWQBQeVg98bFhkSvxptP5SZR8+H8n2x cyfXk6+bW7cseuAB48bf7FX9MPDAW2GCKzKLNrpEhUqkswzza/arZvkYH/MlNNWv8wjR qxGg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=content-transfer-encoding:mime-version:message-id:date:references :in-reply-to:subject:cc:to:from:x-gm-message-state:from:to:cc; bh=BiI8IBfqM6EpQug/EPs/OzwWQScXR47HMAKpCbvKGXk=; b=po+f0ETmrDYbMHk+64tSF44Yg9ChQWrNJbN3zS670QmaFi9wqtvQR3y//OFtadyrcu 0CRiD0LVkSTc4N5gZXPap2voDwizbDasWYMeBvgGM03l3qTTDdwNdHYUXChM3ssbqmwM GI6RcqN3r9C/45HyrBQJ1nKrQIEMlfjIQqw6MinSVeN9qiPgyLcv2IE274s555X9rqrN Ohoxf2xQErvmepy7yl80KqgCirJmZNGTZ6KMo1WYtZu+aiQOQ358SLOocPqH9ZXYBuem r6N/FFGzOjDw64mV+6x7ZiXAir/Omo5QmSnoey22BdVUBE+jBhHffiIELdfxEIlmxzks SZsQ== X-Gm-Message-State: ACgBeo1fNAZVKF4zL1boSzsMaBZ4AAhrIWaghBWB60rkv5b/PPQoR4ec FGzNZ1g62LLQ9qSfjc/LJIEOqwBhr9I= X-Google-Smtp-Source: AA6agR5Ag+Q0khyxklmErOgwCUSevwfO2QbId4yunVRkMYv1AxBZKQS+vsIgUpVUMyXAmxA15iKgTA== X-Received: by 2002:a05:600c:b4f:b0:3a5:c31f:b565 with SMTP id k15-20020a05600c0b4f00b003a5c31fb565mr4430564wmr.186.1660904728408; Fri, 19 Aug 2022 03:25:28 -0700 (PDT) Received: from pfiuh07 ([193.48.40.241]) by smtp.gmail.com with ESMTPSA id n13-20020a05600c4f8d00b003a5f3f5883dsm8617364wmq.17.2022.08.19.03.25.27 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 19 Aug 2022 03:25:27 -0700 (PDT) From: zimoun To: Konrad Hinsen , Ludovic =?utf-8?Q?Court?= =?utf-8?Q?=C3=A8s?= , Timothy Sample Cc: Guix Devel Subject: Re: A real-life test of long-term reproducibility In-Reply-To: References: <87iln3bwrm.fsf@gnu.org> Date: Fri, 19 Aug 2022 12:25:01 +0200 Message-ID: <87tu685y4i.fsf@gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Received-SPF: pass client-ip=2a00:1450:4864:20::331; envelope-from=zimon.toutoune@gmail.com; helo=mail-wm1-x331.google.com X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: "Guix-devel" X-Migadu-Flow: FLOW_IN X-Migadu-To: larch@yhetil.org X-Migadu-Country: US ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1660904835; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:list-id:list-help: list-unsubscribe:list-subscribe:list-post:dkim-signature; bh=BiI8IBfqM6EpQug/EPs/OzwWQScXR47HMAKpCbvKGXk=; b=kq0KCupR58V/6upa3VAK4sdvKF+xOGpKt1FL0iNSV+c3wojhbnZDpfEMV60eXHpjVptcaF qnxmQbBptkFjdSzzcqO2BciYwdo6j5+2SaHdX8WiR/F091Midl7GaCzeIpUcEc5HPTP4XI iSf3IE/6yMziXN6AwGos7de5DBnePUG5ek3YmuVOoTkbz3gFOC71BCz9QgobYALNpvv/xI +bK8rWM/oQp9P6cjEItN20Cdzcs1G0UrlNki8aIQH/9LVyKRHs4J9yfBSH3svDhzCGTAvF Fi1vJOJD/9Nm/AQDPj2MiweVnvYFdL6koAWxA8nO+0lhut7n72iuLvf3NJjW+w== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1660904835; a=rsa-sha256; cv=none; b=lpUbhikhgEF3Pu5X7d8aXRLT8aYtK+m0W796Be5BAOmDyTBLDzNvXRLgv3OgYEJeMypQDy 0ZQb/Pidj/ceZ7DYkFsQQ5kEmrGoFu+q2tl9e6lMaZfPtOqrCKYvxue7S2ovtGqiegv9Rn 2a8WLkxUIvBJIxWJ3slyVv/HZUdS3HeyJSDc4ldgqd5nkX3b5AjGNz5OPEaDC+pn4MI2Mh twsqvxLdustvike7zRXg7JfAm51+yw710Z3Rd96aw0LurqfsWUNBqvHdzcPaTgJDVlhSY7 zudNMHWG8+D9aC0A3Uwqe7+8toZWcViK8qDMjumH+AgtwOfoE+o+3V0ANkETfw== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=gmail.com header.s=20210112 header.b=S1e2uf7N; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: -5.35 Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=gmail.com header.s=20210112 header.b=S1e2uf7N; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" X-Migadu-Queue-Id: 0D9A925604 X-Spam-Score: -5.35 X-Migadu-Scanner: scn0.migadu.com X-TUID: 6r9JRZ0ergSK Hi Konrad, On lun., 08 ao=C3=BBt 2022 at 10:44, Konrad Hinsen wrote: >> Besides, I recently added =E2=80=98etc/time-travel-manifest.scm=E2=80=99= and added a >> corresponding jobset at > > Nice! Guix will be certified for time travel! [...] >> For best practices, I do have one suggestion. The Guix package >> collection is not uniformly reproducible or archived. The best thing >> you can do to ensure the long-term prospects of your projects is to >> actually check how much of the source code is archived and how many of >> the builds are reproducible. There is no turn-key solution for this > > Yes, that's a good idea, and I have done it for my most recent packages. > Time will tell if this is enough. Now, Guix is checking that =E2=80=9Cguix time-machine=E2=80=9D does not bre= ak; i.e, be able to rebuild a previous Guix using inferior. That=E2=80=99s cool! However, many things can be out of rail. This claim about reproducibility over the time assumes: 1. compatibility of the Linux kernel 2. availability of all the source code 3. compatibility of the hardware Well, until now, nothing had been reported about #1. But, we have examples of issues about #2 and #3. For instance, about #2, Timothy reported the loss of the source code of ImageMagick 6.9.9-30 =E2=80=93 some time ago, I reported another issue with another ImageMagick version from 2020 (). Although the project is making many efforts to archive all the source, the coverage is not 100%: https://ngyro.com/pog-reports/latest/ and only one tiny loss of only one node in the graph of dependencies, then all the efforts are ruined. About #3, the new NVMe disks leads to an issue with bootstrapping; as reported by . It means that, if the binary substitutes are lost and I have only a machine with NVMe, then I cannot rebuild from scratch. All that said, Guix is the best and most advanced solution on the market for reproducible time-traveling. :-) For most of the cases, it is awesome to just type =E2=80=9Cguix time-machine=E2=80=9D and rebuild a comp= lete computational environment exactly as it was 2 or 3 years ago. On lun., 08 ao=C3=BBt 2022 at 10:49, Konrad Hinsen wrote: > Even 1.0.0 isn't obvious: > > $ guix time-machine --commit=3Dversion-1.0.0 -- environment guix > guix time-machine: error: Git error: unable to parse OID - contains inv= alid characters > > OK, so let's try the commit hash: > > $ guix time-machine --commit=3D48aa30ce73d45dc5f126f42f01e65f1be4a9b578= -- environment guix > Updating channel 'guix' from Git repository at 'https://git.savannah.gn= u.org/git/guix.git'... > Authenticating channel 'guix', commits 9edb3f6 to 48aa30c (6 new commit= s)... > guix time-machine: error: commit > 48aa30ce73d45dc5f126f42f01e65f1be4a9b578 is not a descendant of > introductory commit 9edb3f66fd807b096b48283debdcddccfea34bad That=E2=80=99s because version-1.0.0 (48aa30ce73) is a branch and indeed no= t a descendant. --8<---------------cut here---------------start------------->8--- * 746ac457cc Merge branch 'version-1.0.0'=20 |\=20 * | c457f109be gnu: php: Update to 7.3.5.=20 [...] * | 1a8984536f gnu: Add sdl2-net.=20 | | * 48aa30ce73 build: Add 'doc/build.scm' to build on-line copies of the= manual. (origin/version-1.0.0) | | * adf577dcc4 doc: Update htmlxref.cnf.=20 | | * 1a9fc8e228 doc: Warn about missing entries in htmlxref.cnf.=20 | | * 2921b6a611 doc: Adjust cross-references for GNU triplets.=20 | | * 3aa11dfbed doc: Provide the actual URL to the VM image.=20 | | * 542e7fb57f doc: Add note about .=20 | | /=20=20 | |/=20=20=20 | * 3a3e9f2bb5 guix-install.sh: Update URL.=20 | * 9c941364bf vm: Build ISOs and VM images in a UTF-8 environment.=20 | * 17acc215bf gnu: guix: Update to 326dcbf.=20 | * 326dcbf1b3 gnu: guix: Update to 1.0.0.=20 | * 6298c3ffd9 Update NEWS. (tag: v1.0.0) --8<---------------cut here---------------end--------------->8--- What you want is tag v1.0.0 (6298c3ffd9). Otherwise, you need the option =E2=80=99--disable-authentication=E2=80=99.=20 Cheers, simon