From mboxrd@z Thu Jan 1 00:00:00 1970 From: Mark H Weaver Subject: Re: Reproducible installation images Date: Tue, 12 Dec 2017 17:25:04 -0500 Message-ID: <87d13jd1of.fsf@netris.org> References: <87r2s6btbc.fsf@gnu.org> <87a7yssv0a.fsf@netris.org> <87shch4nn1.fsf_-_@gnu.org> <87374gkdmq.fsf@netris.org> <87indcs3cd.fsf@gnu.org> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:45776) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1eOszT-0000TP-Iq for guix-devel@gnu.org; Tue, 12 Dec 2017 17:25:32 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1eOszO-0003El-KM for guix-devel@gnu.org; Tue, 12 Dec 2017 17:25:31 -0500 In-Reply-To: <87indcs3cd.fsf@gnu.org> ("Ludovic \=\?utf-8\?Q\?Court\=C3\=A8s\=22'\?\= \=\?utf-8\?Q\?s\?\= message of "Tue, 12 Dec 2017 10:27:46 +0100") List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Ludovic =?utf-8?Q?Court=C3=A8s?= Cc: guix-devel@gnu.org ludo@gnu.org (Ludovic Court=C3=A8s) writes: > Mark H Weaver skribis: > >> ludo@gnu.org (Ludovic Court=C3=A8s) writes: >> >>> Mark H Weaver skribis: >>> >>>> To enable independent verification of these installer images, it would >>>> be helpful to include the precise commands needed to reproduce these >>>> images, and the git commit to run them on. >>>> >>>> What do you think? >>> >>> The manual already gives those commands: >>> >>> https://www.gnu.org/software/guix/manual/html_node/Binary-Installatio= n.html (bottom) >>> https://www.gnu.org/software/guix/manual/html_node/Building-the-Insta= llation-Image.html >> >> They give the commands, but they do not provide the git commit that you >> ran these commands on. > > True. So the announcements could say something like: > > See the =E2=80=9CBinary Installation=E2=80=9D and =E2=80=9CBuilding the= Installation Image=E2=80=9D > sections of the manual on how to recreate these binary images. The > =E2=80=98guix-binary=E2=80=99 tarballs were created from the =E2=80=98v= 0.14.0=E2=80=99 Git tag; the > =E2=80=98guixsd-=E2=80=99 images were created from the tip of the =E2= =80=98version-0.14.0=E2=80=99 > branch. This looks good, except for the "tip of the =E2=80=98version-0.14.0=E2=80= =99 branch" reference, which may change over time. Ideally, the commit references should be reliably immutable. What do you think? Mark