From mboxrd@z Thu Jan 1 00:00:00 1970 From: Jack Hill Subject: Re: List of installed package, version pairs Date: Wed, 16 Jan 2019 14:27:40 -0500 (EST) Message-ID: References: <20190110073328.GE18849@macbook41> Mime-Version: 1.0 Content-Type: multipart/mixed; BOUNDARY="925712948-1762096102-1547666861=:30166" Return-path: Received: from eggs.gnu.org ([209.51.188.92]:56390) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1gjqqm-0004Zy-B9 for help-guix@gnu.org; Wed, 16 Jan 2019 14:27:45 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1gjqql-0005Fl-GM for help-guix@gnu.org; Wed, 16 Jan 2019 14:27:44 -0500 Received: from minsky.hcoop.net ([104.248.1.95]:50868) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1gjqql-0005DO-Be for help-guix@gnu.org; Wed, 16 Jan 2019 14:27:43 -0500 In-Reply-To: List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-guix-bounces+gcggh-help-guix=m.gmane.org@gnu.org Sender: "Help-Guix" To: =?ISO-8859-15?Q?G=E1bor_Boskovits?= Cc: help-guix This message is in MIME format. The first part should be readable text, while the remaining parts are likely unreadable without MIME-aware tools. --925712948-1762096102-1547666861=:30166 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8BIT On Wed, 16 Jan 2019, Gábor Boskovits wrote: > > Hello Jack, > you could also try to make sense of the individual profile generation > manifests. > > The union of those should give a farily comprehensive list, and it comes with versions. Yes, this looks pretty good, thanks. I think that this gets me all the surface packages exposed in all the profiles. However, I believe that it is still missing the packages installed as dependencies. One thought is to drop back to manipulating store objects. I can get a list of references using query-path-info from the guix store module, and recurse down those references to build the graph. In the end I have to then guess the package names and versions from the store paths. >From my experimentation, it seems that store paths/objects are really what Guix works with and is aware of, and not package names and version that are reported as what's installed on traditional distributions. Perhaps I can convince our security office to be happy with store paths. Thoughts? Jack --925712948-1762096102-1547666861=:30166--