From: Ricardo Wurmus <rekado@elephly.net>
To: zimoun <zimon.toutoune@gmail.com>
Cc: help-guix@gnu.org
Subject: Re: persistent reproducibility ?
Date: Thu, 23 Mar 2017 13:32:11 +0100 [thread overview]
Message-ID: <87k27grx6c.fsf@elephly.net> (raw)
In-Reply-To: <CAJ3okZ2erRX_oPveaFR7RDNGCrm10BPSDQjB-iKSSPCDd2esbA@mail.gmail.com>
zimoun <zimon.toutoune@gmail.com> writes:
> One of the issues is that the Guix packages tree will never include
> some softwares, even if they are open source. Because the authors
> apply weird licences or non-GNU compliant licences, or simply because
> authors are not so motivated to push. Even if I totally agree with the
> paragraph about Proprietary Softwares in your cited paper, it is just
> a fact from my humble opinion.
If you mean “open source” in the sense of “using a license that is
certified by the Open Source Initiative” then that software is probably
Free Software. There is no such thing as GNU compliance in licenses.
We do however follow the GNU FDSG (Free System Distribution Guidelines),
which may result in some software to be excluded or modified in rare
cases. (One example is “Shogun”, which we modify to remove included
non-free software.)
> Therefore, what should be the "standard" way to manipulate against
> history version external and decentralised packages ? and guix repo
> packages too ?
>
>
> Well, if I understand your both answers, the correct process should
> be: Alice publishes a paper containing the exact version (commit hash
> or revision number or origin hash) of both the source tree and the
> recipe tree, and their both uri location, and then, Joe "just" needs
> to check out each (manually for now or possibly by nice UI glue).
It would be sufficient to provide two things: a manifest and the Guix
version (“git -C /path/to/guix.git describe”). If additional package
repositories are used (such as guix-bimsb for my institute), their
versions have to be recorded as well.
Joe would then check out Guix and any additional package repositories at
the specified versions and then instantiate the manifest. Provided that
all source tarballs are still obtainable (either directly or through a
mirror) and the builds are in fact bit-reproducible Joe would end up
with the same software environment that Alice fully specified in the
paper.
--
Ricardo
GPG: BCA6 89B6 3655 3801 C3C6 2150 197A 5888 235F ACAC
https://elephly.net
next prev parent reply other threads:[~2017-03-23 12:32 UTC|newest]
Thread overview: 14+ messages / expand[flat|nested] mbox.gz Atom feed top
2017-03-21 11:15 persistent reproducibility ? zimoun
2017-03-21 14:49 ` Alex Sassmannshausen
2017-03-21 16:19 ` Ludovic Courtès
2017-03-22 17:39 ` zimoun
2017-03-23 8:44 ` Alex Sassmannshausen
2017-03-23 15:33 ` zimoun
2017-03-23 12:32 ` Ricardo Wurmus [this message]
2017-03-23 16:46 ` zimoun
2017-03-24 15:45 ` Ludovic Courtès
2017-03-25 13:07 ` zimoun
2017-03-24 5:39 ` Chris Marusich
2017-03-24 12:05 ` Quiliro
2017-03-26 9:39 ` Chris Marusich
2017-03-26 15:03 ` Quiliro
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
List information: https://guix.gnu.org/
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=87k27grx6c.fsf@elephly.net \
--to=rekado@elephly.net \
--cc=help-guix@gnu.org \
--cc=zimon.toutoune@gmail.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).