From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp0 ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms11 with LMTPS id eM3vBs5HwV9aFwAA0tVLHw (envelope-from ) for ; Fri, 27 Nov 2020 18:39:10 +0000 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp0 with LMTPS id 7hbGAs5HwV/+PAAA1q6Kng (envelope-from ) for ; Fri, 27 Nov 2020 18:39:10 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 872EE94051B for ; Fri, 27 Nov 2020 18:39:09 +0000 (UTC) Received: from localhost ([::1]:36366 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1kiieC-0003cM-7Z for larch@yhetil.org; Fri, 27 Nov 2020 13:39:08 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]:46902) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1kiie2-0003bj-0e for help-guix@gnu.org; Fri, 27 Nov 2020 13:38:58 -0500 Received: from mail-wm1-x32f.google.com ([2a00:1450:4864:20::32f]:53057) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1kiidy-0001tn-Uw for help-guix@gnu.org; Fri, 27 Nov 2020 13:38:57 -0500 Received: by mail-wm1-x32f.google.com with SMTP id 10so5890191wml.2 for ; Fri, 27 Nov 2020 10:38:53 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=B5sDEslEGCl1zhhyPlXxnVk7bq0GYFk2c/2y00owkIw=; b=dSLOR/gnB8Tgbry9aPSk+rdKKMmm/mFgazGLs/Ddsop0ZQN57I2TtreUkkhhCR5oev VsDgU7JeEklZ6hA9iSsKbeyxg1RzYXBjQgfTg6VXrOshgUTZuU5BOewl5JuPBLApqVLE rN8tQUPRf4iHjELhtwEc/MvRZprrKfAszTG0xCEqTpWbuJMN9+nTXK00YfsiLFJ8CiJ6 +ZxARjlZnUeB0WO28LV3LtEzyG/Dkfj21EeEgy5dEwsv7vcbpgKFf9J6kHlh1tPATm+R XUDfjKn6LqIH5Nkh2ATJBs+6nGLchKeELPDyJy6r3NpHAbdIfiFdwM3KTrnWEzgw3pWF gOqQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=B5sDEslEGCl1zhhyPlXxnVk7bq0GYFk2c/2y00owkIw=; b=qeGOMQWJzWi5nj89J9kjyLO/NvKLAzA+Nj9sh1FHfCmDK1eZBRTwLrZvkmi6LH8zDT TOjvJnP8NlJFAMKoaMiO6KyIwy+bMEcjgUvX2wQ2IS2nVBbQ5kn+uKlT9/jxclcl7MLh DWWVQRl/KehZg3Cj+4ARMwYBQEVK9iXo272dF7a9NpRnof1t+vW1rN+GyZe8q3++yYY6 ZWnYnuag5+c0EMlL6jWBBB+B0jPB9g9cboDIbYGte0sHXRvRNIJI9Yz1MRCL5jSkRL1r qFe2DSecJCQEsZQ3BQdHuvut7qRqD6qYQDC6+rXF2KVwaq7xZgwUu8n9KOBmj/p1Mqqj xtuQ== X-Gm-Message-State: AOAM5312yF60B+u+jigOUkdrzLxdCKMNs7JVSm+5rCOA+pny6C87LLFI sefcPGEZKivYEy2I2yZdk2uEOeSdkiQJN3SS1XQ= X-Google-Smtp-Source: ABdhPJzDwWt3MOBQREoErThmR4H3YOE0ISDXvXdRMFJRc5nX+c5zFb3jhTIG7ftEsVAuF17Ay/0bO/ssTTAFZkdOn8I= X-Received: by 2002:a1c:4107:: with SMTP id o7mr4577705wma.69.1606502332678; Fri, 27 Nov 2020 10:38:52 -0800 (PST) MIME-Version: 1.0 References: <20201125233905.11206dee@riseup.net> In-Reply-To: <20201125233905.11206dee@riseup.net> From: Stephen Scheck Date: Fri, 27 Nov 2020 13:38:41 -0500 Message-ID: Subject: Re: Build determinism, dependency granularity, and dependency scope To: raingloom Received-SPF: pass client-ip=2a00:1450:4864:20::32f; envelope-from=singularsyntax@gmail.com; helo=mail-wm1-x32f.google.com X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.23 X-BeenThere: help-guix@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: help-guix Errors-To: help-guix-bounces+larch=yhetil.org@gnu.org Sender: "Help-Guix" X-Migadu-Flow: FLOW_IN X-Migadu-Spam-Score: -1.17 X-Scanner: ns3122888.ip-94-23-21.eu Authentication-Results: aspmx1.migadu.com; dkim=fail (body hash did not verify) header.d=gmail.com header.s=20161025 header.b=dSLOR/gn; dmarc=fail reason="SPF not aligned (relaxed)" header.from=gmail.com (policy=none); spf=pass (aspmx1.migadu.com: domain of help-guix-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=help-guix-bounces@gnu.org X-TUID: a36Cgd1atlO6 On Wed, Nov 25, 2020 at 10:52 PM raingloom wrote: > > Multiple versions leads to more maintenance burden and a bigger store. > That is true, but IMO with Guix's focus on build determinism and repeatability, it's a price that must be paid. > But I admit I didn't really investigate which exact module versions > Yggdrasil is compatible with. > As an end-user, if I'm installing the Yggdrasil package with a specific version, say 0.3.15, that corresponds to a specific Git commit tag, I want that package to maintain fidelity with the dependency versions locked down by the upstream project maintainers. As it stands, the Guix dependency declaration mechanism is lossy, flattening out dependencies to a single global scope which all packages in a profile must assume. Unfortunately, for me, that really limits its usefulness.