From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp10.migadu.com ([2001:41d0:403:4876::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms8.migadu.com with LMTPS id GEseHxWLSmVTZgAAG6o9tA:P1 (envelope-from ) for ; Tue, 07 Nov 2023 20:08:05 +0100 Received: from aspmx1.migadu.com ([2001:41d0:403:4876::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp10.migadu.com with LMTPS id GEseHxWLSmVTZgAAG6o9tA (envelope-from ) for ; Tue, 07 Nov 2023 20:08:05 +0100 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 0F76431B8A for ; Tue, 7 Nov 2023 20:08:05 +0100 (CET) Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=gmail.com header.s=20230601 header.b=k03jckNY; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1699384085; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:list-id:list-help: list-unsubscribe:list-subscribe:list-post:dkim-signature; bh=++A+GIUAY5QoVHbcqs3qKZAjJph6QCTGyOSFKz1/2Ws=; b=Cio1vxPSqb3p67c+/3aFpWe0WstxMPPi1c7uebhkm+1jqsoaim9IyHq1DjcKVcB5mfpoP8 C9D+uNH5zMIKTJQWc00BBIDSjIOKIAmY8/ymXRRa937iEHVZBBStnb0BTWNTSCcvaw4Kzi 0N6Y7Ls54OrZlnW0eqFELrmmqvoon5QMh0FTPXcjETCWpqVS4l2z04rIGMcHLxIB0U8hvC LxGzMO2hA3fQLc1gZUL3cp22dP+oitkdJ1YgCQRgcc2DAoJ/8PWDsdAi8bZc/GrC0SXR8o EId6TZR0gSK2H/Vhu7vPFFoREFHjp0kyCPYQ0z01/rgte1HEp484o0AW5cg2Eg== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=gmail.com header.s=20230601 header.b=k03jckNY; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" ARC-Seal: i=1; s=key1; d=yhetil.org; t=1699384085; a=rsa-sha256; cv=none; b=QgB2SeDXKClJBbrSh1L6b3guS6t2qJMY4LEVIDwR+ISuONWpOfBtfAg9zHTBach0iJsT6u kEXDvr6+Wt8ZJizJOJnnmtoLTs8RWjVDKRUmJ/aVBgUd/E9BYX7B5Qhlc9x39TE9FAYhkQ /x00vrB28KqZqcUGTs7WGC6UTRPUJLXvdU8raz3JqaTXg5LPORM9rupEqWuFRfzaRYK2m7 mNUhfeCvU6XQPGWwkwnhDF1poZtBsSryuPqT+OqP06wu5i3uPaVkPIhEuJS1G2QkN//bam BfG5f1gx5mf00qzZHbtIfPH7kWC5vJoGwi26/wAMOo8GXXSqeGhp7+sYFKJ1tA== Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1r0RQB-0003kW-Kx; Tue, 07 Nov 2023 14:07:31 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1r0RQA-0003kA-AC for guix-devel@gnu.org; Tue, 07 Nov 2023 14:07:30 -0500 Received: from mail-qt1-x82c.google.com ([2607:f8b0:4864:20::82c]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1r0RQ8-0005dl-Ph for guix-devel@gnu.org; Tue, 07 Nov 2023 14:07:30 -0500 Received: by mail-qt1-x82c.google.com with SMTP id d75a77b69052e-41cd4446cf5so37994861cf.3 for ; Tue, 07 Nov 2023 11:07:28 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1699384047; x=1699988847; darn=gnu.org; h=content-transfer-encoding:mime-version:user-agent:message-id:date :references:in-reply-to:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to; bh=++A+GIUAY5QoVHbcqs3qKZAjJph6QCTGyOSFKz1/2Ws=; b=k03jckNYhmSjm2psrvU5yBB7TQOK2sHMVgQJZsgd8FYqHp5xfW5esRRLT1qR77ziB0 I2uDAjU6EagjB0hzgej43tKZPf3eY3NVxn2m+nI0UQtrjzuSq3pgDpO9BmAM5vbFXS24 gJedpeCc7lAoiY+heKYfQ4kQN5GAQHtlK1vymwE73U//q987rKP0JXFFIiin9MKHzwhT DOL5EPjfG6xhMAWuYeBfqvayFIta26QuWWcvDNas3j+WdhLBnsifAFLqzxwLhtxsuxmt uI0pD4tXjEwpaOiF77nWl5366v47+tmjsBpmUWYM7M6MAQPkjMN7U0f3QihD1YdsoJO1 QQZg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1699384047; x=1699988847; h=content-transfer-encoding:mime-version:user-agent:message-id:date :references:in-reply-to:subject:cc:to:from:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to; bh=++A+GIUAY5QoVHbcqs3qKZAjJph6QCTGyOSFKz1/2Ws=; b=p+34pCuC1zpWcizwG8uzMTBGIkr6z6cLuNLHa08JiuOkKmaXEEGuG1cXbcJjmwPGjd WiBKAQN1vk62JOHMorI65LSWO36rUG9lHlnjQupx2xxkTe2ytgPXP24rrdMidpodqejY lfrJ5DI7zRh0EhA0e3l3qV8+vXyKTQGCtyYpahB89RKczrgUS4YaSyy/Se8fuX7uIDtK qT2+JljqMEliWDj0YiJ0KHqN5FTQyJOVbc5aGTLPIkPWhyGcYNclTamZAEAmjZ6sv0Cc a4NY4SRHySoACKpDx/HzlRcP43uHqgsgAwQzXjRkKr2S28HAeMsDlbgXQ5kSh/Gh/GUc 4UNg== X-Gm-Message-State: AOJu0YzgY0XsuOMwKx/JFdDZWUok5rqI3WZ4mQsqZHessaIPeirYcO/6 IAiOCNrqOI+OChI5kkBXOx94plSJC+Ly6g== X-Google-Smtp-Source: AGHT+IHhav4GdbYUBkDFgIiEFzmcmS5FHb6VNeP/W9Ir5V30x2P038/b2gDaBAW8rY1JT52+YnrrfQ== X-Received: by 2002:a05:622a:1d4:b0:417:c16a:c2c9 with SMTP id t20-20020a05622a01d400b00417c16ac2c9mr37670318qtw.62.1699384047324; Tue, 07 Nov 2023 11:07:27 -0800 (PST) Received: from hurd (dsl-10-130-87.b2b2c.ca. [72.10.130.87]) by smtp.gmail.com with ESMTPSA id fu31-20020a05622a5d9f00b0040399fb5ef3sm202017qtb.0.2023.11.07.11.07.26 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 07 Nov 2023 11:07:27 -0800 (PST) From: Maxim Cournoyer To: Ricardo Wurmus Cc: guix-devel@gnu.org Subject: Re: Better support remote deployment In-Reply-To: <87sf5pu06o.fsf@elephly.net> (Ricardo Wurmus's message of "Wed, 01 Nov 2023 13:19:49 +0100") References: <87sf5pu06o.fsf@elephly.net> Date: Tue, 07 Nov 2023 14:07:26 -0500 Message-ID: <87v8adidqp.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Received-SPF: pass client-ip=2607:f8b0:4864:20::82c; envelope-from=maxim.cournoyer@gmail.com; helo=mail-qt1-x82c.google.com X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: guix-devel-bounces+larch=yhetil.org@gnu.org X-Migadu-Flow: FLOW_IN X-Migadu-Country: US X-Migadu-Spam-Score: -9.42 X-Spam-Score: -9.42 X-Migadu-Queue-Id: 0F76431B8A X-Migadu-Scanner: mx10.migadu.com X-TUID: n0FOYSQattH4 Hi Ricardo, Ricardo Wurmus writes: > Hi Guix, > > I build software locally and deploy the result to a remote system with > =E2=80=9Cguix copy=E2=80=9D. This works pretty well but has a few rough = edges: > > 1. =E2=80=9Cguix build -m manifest.scm=E2=80=9D does not generate a profi= le. It only > builds the list of packages. To build a profile from a manifest file we > need to resort to something like this: > > guix shell -m $(PWD)/etc/container-server-manifest.scm -- sh -c 'echo= $GUIX_ENVIRONMENT' > > 2. =E2=80=9Cguix package=E2=80=9D cannot install an existing profile stor= e item as the > current generation of the profile. It can, however, install individual > package items into a profile. > > 3. =E2=80=9Cguix package --remove=E2=80=9D does not support regular expre= ssions, so > removing packages that were installed with =E2=80=9Cguix install /gnu/sto= re/=E2=80=A6=E2=80=9D > cannot easily be removed. > > Because of these limitations I cannot make use of a Guix profile symlink > forest on the target system. Instead I build a profile locally (with > the =E2=80=9Cguix shell=E2=80=9D trick above), copy it to the remote with= =E2=80=9Cguix copy > --to=3Dremote /gnu/store/=E2=80=A6-profile=E2=80=9D, and then link that p= rofile to a fixed > location on the remote system. > > I would like to change this workflow so that I can benefit from roll > backs without having to manually mess with symlinks. > > What do you think about changing =E2=80=9Cguix package=E2=80=9D and/or = =E2=80=9Cguix copy=E2=80=9D to > better support deployment of remote profiles? I like the use case, but perhaps it'd be best implemented via hooking 'guix home' configs with 'operating-system' ? So you could say, for this user, I want the following packages and services installed? Would that work for your use case? --=20 Thanks, Maxim