From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp0.migadu.com ([2001:41d0:403:58f0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms13.migadu.com with LMTPS id sL1EJdIb+2br1wAAqHPOHw:P1 (envelope-from ) for ; Mon, 30 Sep 2024 21:44:50 +0000 Received: from aspmx1.migadu.com ([2001:41d0:403:58f0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp0.migadu.com with LMTPS id sL1EJdIb+2br1wAAqHPOHw (envelope-from ) for ; Mon, 30 Sep 2024 23:44:50 +0200 X-Envelope-To: larch@yhetil.org Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=cyberdimension.org header.s=dkim header.b=Ukdbpct7; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1727732690; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=6BIEfO7+5NA1PxeqJz9eI2XClr3FFm+mb2FiLrl6rR8=; b=HEVigBYjIhgJJ2K5R1Nx/2SQcQh89aHKm1ieIdZqEYbdDbGZ8ERopnvQC1566hmfhx7e4j 3lFpyFL1S4t/NHVirZ6n623KwykLHVD8KXuFV1sEO/+zc/Ss9pJLRbw2/KWTecFby/pekJ 0UCmjLQT0juPReV4AUIo1DQWB8IPRC0/ZUlRL0HqvvfgJ9SxF1KDYzNM6PLmV8UdPLZaGb js8/6mBb4bBO9ywS/WT6aIfCCoYZd6w5uqFLae1vYV+/FbE8e4HS2k9G1z3KP0eozS+9Un C/0lC9ZsySfKrZSU7Yg5W90HXNc4U5nUZt7gF1iSVkBlm8CWsq/tqlv4sRYEZA== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1727732690; a=rsa-sha256; cv=none; b=bXRg98ZwxylnsEiiNYHebpm/7+mq+qjivxOIWf5heAjEE90wevgp54vuhK9XM/1T57HPax IIcI+/el4mgyY+f6Dxk91aI/Q7b51HStjuhyPKT3bXTPuHwX5Brr7kDJe7FiK0KxXW1558 FSBH5EPombWUKSMxmPF/XdYTRgwB6+kqQySTvELb/6qq1uDvD5GAnXHIHtb08pQOm3ZqG4 IE2DqoK8N47MXFU5g4242Fi8VQF96WsIqhuslqbNDkLVLFVhmgxqaa/6qRm/5ZRVWykZaw 3Gobek7h0x243J9hsuDdNE7t4stTWvnl792YfMCyYKyWuPeNzQasXkzONvQfjA== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=cyberdimension.org header.s=dkim header.b=Ukdbpct7; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id BEC418882E for ; Mon, 30 Sep 2024 23:44:48 +0200 (CEST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1svOBu-00029P-Iy; Mon, 30 Sep 2024 17:44:26 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1svOBp-00029D-Tf for guix-devel@gnu.org; Mon, 30 Sep 2024 17:44:22 -0400 Received: from cyberdimension.org ([79.143.250.36] helo=rockpro64.cyberdimension.org) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_CHACHA20_POLY1305:256) (Exim 4.90_1) (envelope-from ) id 1svOBn-0007bE-PC for guix-devel@gnu.org; Mon, 30 Sep 2024 17:44:21 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; s=dkim; bh=6BIEfO7+5NA1Pxe qJz9eI2XClr3FFm+mb2FiLrl6rR8=; h=references:in-reply-to:subject:cc:to: from:date; d=cyberdimension.org; b=Ukdbpct7l4LlzjT56ecmB2NGCqBwbvxMkjf PnRdlAu4sXs/VNRv8lRIvgGz4knAg+VfpEhlpUVD6aRD5jMICFdsB+/dYpxYK5rU8m9IB7 ueBSKew0z5FG3zBxmJfMyaMP+ZJVNO/CyS2xkdzJFF9Ef2QK31f8mG7UrHgcb4UagD2ZMt sH75YTQVFB+OO+cqjHFK9ii9+SrTZuCzup3z6xLbQI+nJydP1czqXkEKGFhzxXeJduVQn1 c3HTSgm0bSqbCxs+gqvn8DupYIfZonRnhY+hyVsESeeAj6dwBvTkdFKUJA2wnxoEMWXhsU CRPKU3542TUH6eYg8zObWY2T1JQ== Received: from primary_laptop (localhost [127.0.0.1]) by rockpro64.cyberdimension.org (OpenSMTPD) with ESMTP id b026185b; Mon, 30 Sep 2024 21:44:16 +0000 (UTC) Date: Mon, 30 Sep 2024 23:43:06 +0200 From: Denis 'GNUtoo' Carikli To: Vivien Kraus Cc: Guix Devel Subject: Re: Bootstrap a GNU source distribution from git Message-ID: <20240930234306.1609bf7a@primary_laptop> In-Reply-To: References: X-Mailer: Claws Mail 4.3.0 (GTK 3.24.41; x86_64-pc-linux-gnu) MIME-Version: 1.0 Content-Type: multipart/signed; boundary="Sig_/jelc=nDwNmlDUR/mdo.fIZu"; protocol="application/pgp-signature"; micalg=pgp-sha256 Received-SPF: pass client-ip=79.143.250.36; envelope-from=GNUtoo@cyberdimension.org; helo=rockpro64.cyberdimension.org X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: guix-devel-bounces+larch=yhetil.org@gnu.org X-Migadu-Flow: FLOW_IN X-Migadu-Country: US X-Migadu-Queue-Id: BEC418882E X-Migadu-Scanner: mx11.migadu.com X-Spam-Score: -1.40 X-Migadu-Spam-Score: -1.40 X-TUID: jWqEB/BCBlR4 --Sig_/jelc=nDwNmlDUR/mdo.fIZu Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable Hi, On Sun, 29 Sep 2024 19:52:13 +0200 Vivien Kraus wrote: > GNU sources are usually shipped as tarballs with some pre-compiled > sources included. This can be a bit scary at times, so the question > now is, can we skip the tarballs and build everything from > human-authored sources? In some cases it is also possible to build from the tarballs and also build everything from human-authored sources. The solution to that is to treat the generated files as things that are not wanted during the build and just delete them before starting to build. It's similar to tarballs which also contain the binaries of some of their dependencies (example: .so files, often with their corresponding source code as well for licensing compliance). In such case the answer of the distributions is simply to delete such binaries before the build. The advantage of these bundled binaries is that the same tarball makes it possible for more people to more easily build the software but it also increase the maintenance from the distributions as they need to find and delete such files, so to me it doesn't look ideal. Having an easy way to automatically delete such generated files safely could be a good idea for source tarballs releases as both uses cases could be covered with a single tarball release. But this also brings an interesting questions that I also had myself but I never really had the opportunity to ask them: what is Guix policy with regard to source code when there are multiple providers (typically git vs tarball)? As I understand source from version control gives us the ability to make some package transformation option work out of the box. For instance we have: > $ guix build \ > --with-commit=3Dhello=3D2633763362586903cf6506f4c4d708727a981025 hello > guix build: error: the source of hello@2.12.1 is not a Git reference So is there some (implicit or explicit) rule to always prefer the source from version control unless it's not possible or practical (no version control being used, too complicated to build like with GNU hello, or the package is required for the version control to work) ?. Since Guix also checks the hash of the source code an idea to improve things could also be to modify Guix to allow the use of external tools to bootstrap the download of source code through version control and for instance download git from git. Though that could require some substantial work and discussions. Denis. --Sig_/jelc=nDwNmlDUR/mdo.fIZu Content-Type: application/pgp-signature Content-Description: OpenPGP digital signature -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEeC+d2+Nrp/PU3kkGX138wUF34mMFAmb7G2oACgkQX138wUF3 4mMoNBAAp/HvOvfw8TuLFhzBFHMZauWgooFjWl/MJHQXFuMg7cVrMeOg1OWLcLLf kJ68XCgX7BnMR/LpMEQBu7Mag04hKLLt0hGfAJw+Uo3JBdBg8Oup8KXq9+vD3RLD gp2QY4EpAvstqveHAd/k4t5Z/Hts44Wdg4Vpr5OLzM9QMf1Kd4qhFozm1JH3l/Oo 4+c/EwBHwK4gxToxv3H25JyeKS4ePM6O4WtZE5/gEAyDEqdfRF1nAQI+9CY+MWkD a8yv+tDeWgBdggCcLzZj9Knwpc5tkacmxsd4JoiAm3DXt7u57yEBCETwAU8Z8Y+M Mr5UKC/fy/RwhKCTVlHIw/zBEZ3WCA9zf9a8RtcTfAS2Dk1bsfUrHbeM5l5QGe/J C3qF9arufG+XLQX/jxXEVhdp8wh/SkH4/2kDi5iJ64cfI3iUh8DxNlprI4hb0KHG MsGVuEeDN8LIvVJeFGVAHs4BiRJjlBDvrf2ndxRhlhUw9QaC2YAZ2JRnaYnYPA+y nJtu3WfyfcjWUl8O8eDEMU+yrqutcEB/XIcLwGOPQV+jYfpGEDSKvxtYZIzVyhcc 8AG6KgNMLLEdkpSdTtdfDgMizNzy7c9T7MdhWd1fUwh2X65oDbNG6xksBpuk6B+4 QmX8U+smRpQnbLHj9oYISOo9ZEZIhL7N6fnYuJVWT16mrv3Ndkg= =0es9 -----END PGP SIGNATURE----- --Sig_/jelc=nDwNmlDUR/mdo.fIZu--