From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp11.migadu.com ([2001:41d0:403:4789::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms9.migadu.com with LMTPS id cNsyDp7xqmTRpQAASxT56A (envelope-from ) for ; Sun, 09 Jul 2023 19:42:54 +0200 Received: from aspmx1.migadu.com ([2001:41d0:403:4789::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp11.migadu.com with LMTPS id UHcMDp7xqmTxPAEA9RJhRA (envelope-from ) for ; Sun, 09 Jul 2023 19:42:54 +0200 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 4750747BF1 for ; Sun, 9 Jul 2023 19:42:53 +0200 (CEST) Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=lease-up.com header.s=2017 header.b=nwtQFLel; dmarc=pass (policy=none) header.from=gnu.org; spf=pass (aspmx1.migadu.com: domain of "help-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="help-guix-bounces+larch=yhetil.org@gnu.org" ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1688924574; h=from:from:sender:sender:reply-to:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:list-id:list-help: list-unsubscribe:list-subscribe:list-post:dkim-signature; bh=rmLX2x9CBnviW+qd1god3OCGYUzv30pcJW96/4tdZf0=; b=nE+YLcmedeQj1HtQgEQdNmwNji4c3Yg7xzCNvz11W74LAPPvYfHnwF1CEJ6EDGPbym0dRW G39VfTzi61BPpoh++YerGuNASvjzuVQDtYG6VJ99fq7NrlLH99skCP2/ncVbp8/rw2BaZs 2eQPeq8dxAipYZtS3aBVj/JUTPIp19W2XGqh5FCloSTCX3zWzL+LpwsioROnaRJMNtqRlK 7JFv0XdAlyDUzfCw/SzNSdaoK29DD9X1t2ZK2ZAQG9DRgFsamSqWPqwCtWuCaKgTbpVd8D ngsKwfN49JV2xm7J/FpUD155BptbI9/YB+q6K8ttOTjIYKOBdzdUw3/fUD1CfQ== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=lease-up.com header.s=2017 header.b=nwtQFLel; dmarc=pass (policy=none) header.from=gnu.org; spf=pass (aspmx1.migadu.com: domain of "help-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="help-guix-bounces+larch=yhetil.org@gnu.org" ARC-Seal: i=1; s=key1; d=yhetil.org; t=1688924574; a=rsa-sha256; cv=none; b=D3912RSPNWXa9Z7b6UemlIeFDgbiHulBGMC8c3BeocCY0trbV+rJ0g8ud9td7hoLwLaFdz dEHkqkzB64TvgjR8ukrCmKyJLGAATuiNnPRS41pu57GfohzVJzWBB+A/xJ1y8dUHin1N62 oGxqvLnQqtRfxnA7f87yUAxcHMiE9cA/VM23shg25ttRUwSdnG3Bj4qy6djQuYMOa29hBc y4GMFzElqqJi0RzqX8KIUwMWAOqgHxd3vzfChnHzNRnkMrgjXbKio3mQhxqLhTCgZl59/N BTnQ+yq34IuaZ3zlHFNnyMsItMPhwMi2h8eT+2OtzxJbSWwSjcahAQXveEAdkQ== Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1qIYQW-0000UK-Pw; Sun, 09 Jul 2023 13:42:28 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1qIYQV-0000UC-FA for help-guix@gnu.org; Sun, 09 Jul 2023 13:42:27 -0400 Received: from sail-ipv4.us-core.com ([208.82.101.137]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_CHACHA20_POLY1305:256) (Exim 4.90_1) (envelope-from ) id 1qIYQN-0005rX-OG for help-guix@gnu.org; Sun, 09 Jul 2023 13:42:25 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; s=2017; bh=rmLX2x9CBnviW+q d1god3OCGYUzv30pcJW96/4tdZf0=; h=cc:to:subject:date:from:in-reply-to: references; d=lease-up.com; b=nwtQFLelSxhOOhsptKYrZ3j4w5X/KpGJYM29zHF1 XiRveQW6sLP998s0oUA/tWaBRkvtQLXHWkSWoEecX+JeSt7egR/VVUdubQSd4fFzdBltv6 VMkGbyaAk86eRzZCehNpbEkAzFHToG4dN+ykoil/ZzgHQLS6GMBuuqq5OeUSs= Received: by sail-ipv4.us-core.com (OpenSMTPD) with ESMTPSA id 5221f2c7 (TLSv1.3:TLS_CHACHA20_POLY1305_SHA256:256:NO) for ; Sun, 9 Jul 2023 17:42:11 +0000 (UTC) Received: by mail-lf1-f47.google.com with SMTP id 2adb3069b0e04-4fb7589b187so5671848e87.1 for ; Sun, 09 Jul 2023 10:42:11 -0700 (PDT) X-Gm-Message-State: ABy/qLbUYk7MKag/+o2B9nk/j6cq+sbds8JxcPCz415TWzrHreLHW4Vc DHsOIVZpfhOOY3Fp1QgptUCSFQ1Dcu0RjFAznBU= X-Google-Smtp-Source: APBJJlFZ79t4t5C2f0n6HQ4DZIEufruViLmOwjaJ5MQsElfYnfmvyVIUSgF8Sa+k6B4OckiGhX2kmrArF13MoPz5Iwo= X-Received: by 2002:ac2:4e08:0:b0:4fb:7381:4c69 with SMTP id e8-20020ac24e08000000b004fb73814c69mr8664870lfr.28.1688924529272; Sun, 09 Jul 2023 10:42:09 -0700 (PDT) MIME-Version: 1.0 References: <4511E578-636C-4B09-AAAD-FAD740749667@gmail.com> In-Reply-To: <4511E578-636C-4B09-AAAD-FAD740749667@gmail.com> Date: Sun, 9 Jul 2023 10:41:32 -0700 X-Gmail-Original-Message-ID: Message-ID: Subject: Re: System-wide config To: "Etienne B. Roesch" Cc: help-guix@gnu.org Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Received-SPF: pass client-ip=208.82.101.137; envelope-from=felix.lechner@lease-up.com; helo=sail-ipv4.us-core.com X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: help-guix@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Felix Lechner From: Felix Lechner via Errors-To: help-guix-bounces+larch=yhetil.org@gnu.org Sender: help-guix-bounces+larch=yhetil.org@gnu.org X-Migadu-Country: US X-Migadu-Flow: FLOW_IN X-Spam-Score: -5.09 X-Migadu-Queue-Id: 4750747BF1 X-Migadu-Scanner: mx1.migadu.com X-Migadu-Spam-Score: -5.09 X-TUID: pI3xSY7x5WbM Hi Etienne, On Sun, Jul 9, 2023 at 5:38=E2=80=AFAM Etienne B. Roesch wrote: > > I am working my way through our IT department to convince them to provide= guix as a > service to our researchers. Congratulations! You should find some like-minded folks here. > Specifically, we provide vms as a service and we also have a shared slurm= resource. > One question I haven=E2=80=99t managed to answer fully is about system-wi= de configurations. > We currently use puppet to pull configs on the fly and various scripts to= turn on or off > services. I use neither puppet, slurm or a lot of VMs and am therefore not a good person to address your questions. I hope someone else steps up to help you out. > What is the recommended way to do this with guix system? I am not sure it's possible to combine Guix System with such a setup. > Does guix system play nicely with packages installed outside of guix? Guix System will tolerate static third-party binaries that rely solely on system calls. Providing prerequisites to scripts or dynamically linked third-party software, however, may be a challenge. Most Guix packaging replaces paths to prerequisites by absolute paths into our store. It happens when packages are built. There are ways to fake a standard Linux file system hierarchy, but I have not used it. > The alternative of simply using guix on a host debian is appealing, of co= urse. I would start with that. You will lose out on some benefits in the beginning, but the goodwill you will swiftly earn with your IT department may allow you to switch to Guix System later. Guix System is an IT administrator's dream. Just make sure they see the "roll-back" features at some point. Please have a good week also, and thank you for promoting Guix! Kind regards Felix