From mboxrd@z Thu Jan 1 00:00:00 1970 From: Ricardo Wurmus Subject: Re: How to reference external program used in shell-scripts? Date: Sun, 08 Sep 2019 21:08:00 +0200 Message-ID: <87lfuy4ne7.fsf@elephly.net> References: <72f51f57-3d1a-15f3-458b-cf036841c15a@crazy-compilers.com> <87pnlfww2k.fsf@elephly.net> <87d0hewwfu.fsf@elephly.net> <670e61cd-d3e3-6a91-0773-715d19f5052a@crazy-compilers.com> <87h85tsfdm.fsf@gnu.org> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Return-path: Received: from eggs.gnu.org ([2001:470:142:3::10]:52516) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1i72Xu-0002KQ-9X for guix-devel@gnu.org; Sun, 08 Sep 2019 15:08:23 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1i72Xr-00030h-HM for guix-devel@gnu.org; Sun, 08 Sep 2019 15:08:21 -0400 In-reply-to: List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Hartmut Goebel Cc: guix-devel@gnu.org Hartmut Goebel writes: > Am 03.09.19 um 15:01 schrieb Ludovic Court=C3=A8s: >> The whole idea of functional software deployment is that it=E2=80=99s st= ateless: >> you can tell that /gnu/store/=E2=80=A6-ansible-1.2.3 will always behave = the >> same, no matter what other programs are available on your machine. >> >> Introducing =E2=80=9Cdynamic binding=E2=80=9D (e.g., looking up programs= in $PATH) would >> allow for faster security updates in the example you gave, but that >> would be at the expense of that core property I described above. It >> would be a regression. >> >> I think what we need in this case is (1) fast security updates, which is >> what grafts help us achieve, and (2) documentation that clarifies what >> the deployment model is, such that Mary would know that =E2=80=98ansible= =E2=80=99 also >> needs to be upgraded in the example above. > > I understand this. > > Anyway: IMHO missing "dynamic binding" is one of the major drawbacks of > functional deployment, as it requires updating (and esp. downloading) > much more packages compared to a rpm/deb based system. At the same time static binding is also one of the major advantages as deployments are stateless and thus much more predictable, reliable, and inspectable. -- Ricardo