From mboxrd@z Thu Jan 1 00:00:00 1970 From: =?UTF-8?Q?G=C3=A1bor_Boskovits?= Subject: Re: Status update on reproducible builds in Guix Date: Sun, 5 Nov 2017 20:04:47 +0100 Message-ID: References: <87bmknzjx1.fsf@gnu.org> <87y3nqwmb7.fsf@gnu.org> <87efpcsp3m.fsf@gnu.org> Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="001a1140ac38fb16ff055d41020e" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:54633) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1eBQE1-0008J2-Nm for guix-devel@gnu.org; Sun, 05 Nov 2017 14:04:54 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1eBQE0-0006my-IE for guix-devel@gnu.org; Sun, 05 Nov 2017 14:04:53 -0500 In-Reply-To: <87efpcsp3m.fsf@gnu.org> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: =?UTF-8?Q?Ludovic_Court=C3=A8s?= Cc: Guix-devel --001a1140ac38fb16ff055d41020e Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Yesteday we had a discussion about that on irc. Here it goes: [15:15:16] hello guix! [15:16:01] do we have a proposed way to build pyc files reproducibly? [15:16:50] I've read in the report, that we are not there yet, but is someone working on it? [15:17:58] g_bor: This is the report you mention? < https://bugs.gnu.org/22533> [15:18:10] I'm not sure if anyone has been working on it since the last message [15:20:26] * Guest74 has joined #guix [15:23:05] thx, just what i was looking for. [15:23:26] It's possible that some work in this area is pending on the 'core-updates' Git branch, but I'm not sure [15:37:41] At this stage we might as well wait for this to land upstream: https://www.python.org/dev/peps/pep-0552/ So, it seems, that we are waiting for this pep to land upstream. 2017-11-05 16:49 GMT+01:00 Ludovic Court=C3=A8s : > Jan Nieuwenhuizen skribis: > > > Ludovic Court=C3=A8s writes: > > > >> Here=E2=80=99s an update on reproducibility in Guix: > >> > >> https://www.gnu.org/software/guix/news/reproducible-builds- > a-status-update.html > > > > At least 78% to possibly 91% reproduciblility of packages is not bad. > > > > Is there a (small) core that is already 100% reprocucible, like the > > installation binaries/USB installer, bare-bones.tmpl or even > > lightweight-desktop.tmpl? > > Good question! I think as soon as you have Python .pyc files in the > dependency graph (reference graph), there are non-reproducible bits. We > certainly have Python stuff in the base system reference graph, so > that=E2=80=99s one thing we should fix most urgently I guess. > > Ludo=E2=80=99. > > --001a1140ac38fb16ff055d41020e Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Yesteday we had a discussion about that on irc.
Here i= t goes:


[15:15:16] <g_bor> = hello guix!
[15:16:01] <g_bor> do we have a propo= sed way to build pyc files reproducibly?
[15:16:50] <g_bor> I've read in the report, that we are not there yet, but is someone = working on it?
[15:17:58] = <lfam> g_bor: This is the repo= rt you mention? <https://bugs.gnu= .org/22533>
[15:18:10] <lfam> I'm not sure if= anyone has been working on it since the last message
[15:20:26]<= span style=3D"white-space:pre"> * Guest74 has joined #guix
[15:23:05] <g_bor> thx, just what i was looking for.
[1= 5:23:26] <lfam> It's possible that some work in this area is p= ending on the 'core-updates' Git branch, but I'm not sure
=
[15:37:41] <mb[m]1> At this stage we might as well wait for t= his to land upstream: https://www.python.org/dev/peps/pep-0552/

So, it seems, that we are wa= iting for this pep to land upstream.


2017-11-05 16= :49 GMT+01:00 Ludovic Court=C3=A8s <ludo@gnu.org>:
Jan Nieuwenhuizen <janneke@gnu.org> skribis:

> Ludovic Court=C3=A8s writes:
>
>> Here=E2=80=99s an update on reproducibility in Guix:
>>
>>=C2=A0 =C2=A0= https://www.gnu.org/software/guix/news/reproducible-builds-a-stat= us-update.html
>
> At least 78% to possibly 91% reproduciblility of packages is not bad.<= br> >
> Is there a (small) core that is already 100% reprocucible, like the > installation binaries/USB installer, bare-bones.tmpl or even
> lightweight-desktop.tmpl?

Good question!=C2=A0 I think as soon as you have Python .pyc files i= n the
dependency graph (reference graph), there are non-reproducible bits.=C2=A0 = We
certainly have Python stuff in the base system reference graph, so
that=E2=80=99s one thing we should fix most urgently I guess.

Ludo=E2=80=99.


--001a1140ac38fb16ff055d41020e--