Re: [Nix-dev] Deterministic(bit-perfect) Builds

2013-06-25 Thread Marc Weber
Let me rephrase: Try to keep the wiki page up to date and sync with your effort :) Marc Weber ___ nix-dev mailing list nix-dev@lists.science.uu.nl http://lists.science.uu.nl/mailman/listinfo/nix-dev

Re: [Nix-dev] ANNOUNCE: NixOps 1.0

2013-06-25 Thread phreedom
В письме от Вторник 25 июня 2013 15:36:53 пользователь Eelco Dolstra написал: > On 25/06/13 15:12, phree...@yandex.ru wrote: > > Sounds good. Is there a way to deploy different nixos+nixpkgs branches on > > different machines? > > No, that's not currently possible. Would be quite useful though es

Re: [Nix-dev] Deterministic(bit-perfect) Builds

2013-06-25 Thread phreedom
В письме от Вторник 25 июня 2013 15:40:11 пользователь Marc Weber написал: > Hi Evgeny Egorochkin, > > I've created this page long time ago: > https://nixos.org/wiki/Nix_impurities > > So how do you exactly "fix" those impurities? Not all these impurities need to be fixed. In fact it's enough to

Re: [Nix-dev] Deterministic(bit-perfect) Builds

2013-06-25 Thread Marc Weber
Hi Evgeny Egorochkin, I've created this page long time ago: https://nixos.org/wiki/Nix_impurities So how do you exactly "fix" those impurities? Maybe consider updating that wiki adding a line "fixed by doing X" Marc Weber ___ nix-dev mailing list nix-

Re: [Nix-dev] ANNOUNCE: NixOps 1.0

2013-06-25 Thread Eelco Dolstra
Hi, On 25/06/13 15:12, phree...@yandex.ru wrote: > Sounds good. Is there a way to deploy different nixos+nixpkgs branches on > different machines? No, that's not currently possible. -- Eelco Dolstra | LogicBlox, Inc. | http://nixos.org/~eelco/ ___ n

Re: [Nix-dev] ANNOUNCE: NixOps 1.0

2013-06-25 Thread phreedom
В письме от Вторник 25 июня 2013 14:44:59 пользователь Eelco Dolstra написал: > On 25/06/13 14:29, phree...@yandex.ru wrote: > > Automatic tunnels sound cool :) > > One question though. Can it completely manage physical machines, including > > kernels and whatnot? > > Yes, NixOps deploys complete

Re: [Nix-dev] Deterministic(bit-perfect) Builds

2013-06-25 Thread Ludovic Courtès
Many syscalls (uname, gettimeofday, etc.) and OS interfaces (/proc, /dev, /sys, etc.) leak info. Name spaces, personality(2), and similar help, but it looks like an endless quest. Ludo’. ___ nix-dev mailing list nix-dev@lists.science.uu.nl http://lists

Re: [Nix-dev] ANNOUNCE: NixOps 1.0

2013-06-25 Thread Domen Kožar
Congratz :) If time permits, I'll try to make a lightning talk for EuroPython next week. Domen On Tue, Jun 25, 2013 at 1:54 PM, Eelco Dolstra wrote: > Hi all, > > I'm proud to announce the first public release of NixOps, the NixOS cloud > deployment tool. Release 1.0 can be found here: > >

Re: [Nix-dev] ANNOUNCE: NixOps 1.0

2013-06-25 Thread Eelco Dolstra
Hi, On 25/06/13 14:29, phree...@yandex.ru wrote: > Automatic tunnels sound cool :) > One question though. Can it completely manage physical machines, including > kernels and whatnot? Yes, NixOps deploys complete NixOS configurations (it basically does a remote "nixos-rebuild switch", except tha

Re: [Nix-dev] Deterministic(bit-perfect) Builds

2013-06-25 Thread phreedom
В письме от Вторник 25 июня 2013 14:28:14 пользователь Vladimír Čunát написал: > On 06/25/2013 02:24 PM, phree...@yandex.ru wrote: > > Nothing of what is currently enabled causes > > nondeterminism, or at > > Great. There's no need to sanitize nondet. sources that aren't used > (e.g. there's getho

Re: [Nix-dev] ANNOUNCE: NixOps 1.0

2013-06-25 Thread phreedom
В письме от Вторник 25 июня 2013 13:54:37 пользователь Eelco Dolstra написал: > NixOps is not tied to EC2: it currently has backends for pre-existing > physical or virtual machines, for VirtualBox, and for EC2. The VirtualBox > backend makes it easy to do test deployments before deploying to (say)

Re: [Nix-dev] Deterministic(bit-perfect) Builds

2013-06-25 Thread Vladimír Čunát
On 06/25/2013 02:24 PM, phree...@yandex.ru wrote: Nothing of what is currently enabled causes nondeterminism, or at Great. There's no need to sanitize nondet. sources that aren't used (e.g. there's gethostid). But the time is everywhere... many apps just "must" know how/where/when they were

Re: [Nix-dev] Deterministic(bit-perfect) Builds

2013-06-25 Thread phreedom
В письме от Вторник 25 июня 2013 14:17:35 пользователь Vladimír Čunát написал: > Also, by default we have address space layout randomization, which can > be another source of build non-determinism. It has some security > advantages, but if we find that it really makes difference, then we can > disa

Re: [Nix-dev] Deterministic(bit-perfect) Builds

2013-06-25 Thread Vladimír Čunát
Also, by default we have address space layout randomization, which can be another source of build non-determinism. It has some security advantages, but if we find that it really makes difference, then we can disable it for builds (not for regular running). http://www.win.tue.nl/~aeb/linux/hh/p

[Nix-dev] ANNOUNCE: NixOps 1.0

2013-06-25 Thread Eelco Dolstra
Hi all, I'm proud to announce the first public release of NixOps, the NixOS cloud deployment tool. Release 1.0 can be found here: http://hydra.nixos.org/release/nixops/nixops-1.0 NixOps is now in Nixpkgs, so once the Nixpkgs channel is up to date, you can install it by running "nix-env -i nix

Re: [Nix-dev] Deterministic(bit-perfect) Builds

2013-06-25 Thread Vladimír Čunát
On 06/25/2013 01:20 PM, Vladimír Čunát wrote: On 06/25/2013 11:43 AM, phree...@yandex.ru wrote: Wouldn't it be more certain/universal to LD_PRELOAD or something to achieve that the system time always looks the same to any build-time tool? (e.g. UNIX time =0) This is a bit platform-specific and

Re: [Nix-dev] Deterministic(bit-perfect) Builds

2013-06-25 Thread Vladimír Čunát
On 06/25/2013 11:43 AM, phree...@yandex.ru wrote: Wouldn't it be more certain/universal to LD_PRELOAD or something to achieve that the system time always looks the same to any build-time tool? (e.g. UNIX time =0) This is a bit platform-specific and there may be other gotchas like getting the mt

Re: [Nix-dev] Deterministic(bit-perfect) Builds

2013-06-25 Thread Thomas Bereknyei
Hi, I'm not a big contributor yet, but I just wanted to say to the nix-dev community: thanks for the work. Especially the Haskell package managers. A purely functional language and a purely functional package manager. On Tue, Jun 25, 2013 at 5:57 PM, Vladimír Čunát wrote: > On 06/25/2013 10:45

Re: [Nix-dev] Deterministic(bit-perfect) Builds

2013-06-25 Thread phreedom
В письме от Вторник 25 июня 2013 10:57:06 пользователь Vladimír Čunát написал: > On 06/25/2013 10:45 AM, phree...@yandex.ru wrote: > > This is what I have achieved so far: > Sounds nice. > > Wouldn't it be more certain/universal to LD_PRELOAD or something to > achieve that the system time always l

Re: [Nix-dev] Deterministic(bit-perfect) Builds

2013-06-25 Thread Vladimír Čunát
On 06/25/2013 10:45 AM, phree...@yandex.ru wrote: This is what I have achieved so far: Sounds nice. Wouldn't it be more certain/universal to LD_PRELOAD or something to achieve that the system time always looks the same to any build-time tool? (e.g. UNIX time =0) Unstripped binaries: may b

[Nix-dev] Deterministic(bit-perfect) Builds

2013-06-25 Thread phreedom
Hi Nixers, This is what I have achieved so far: Regular c(++) libs/apps mostly had impurities due to timestamps in static libraries and man pages. Both have been largerly eliminated if you override stdenv = deterministicStdenv for the specific package. Tested with ncurses and geoip. Python pa