Bootstrappable Builds #8929

tobtoht · 2023-07-02T19:18:13Z

This PR proposes to replace Gitian with Guix to achieve bootstrappable builds for release binaries.

This is a monolithic PR for demo / testing purposes. To ease review, any required changes to depends will be submitted in separate PRs (unless they are not compatible with Gitian).

What?

https://github.com/Sjors/nado-book/blob/master/attacks/guix.md
https://youtube.com/watch?v=I2iShmUTEl8

If you have 15 minutes, please consider watching the presentation by Carl Dong linked above (YouTube video)
as it covers the exact migration (Gitian -> Guix) this PR proposes to make.

Why?

Bootstrappability allows us to audit and reproduce our toolchain instead of blindly trusting binary downloads, thus providing better binary security guarantees.
Gitian is in maintenance mode.
Easier to set up and run than Gitian, because you only need to install Guix. This hopefully leads to more participants in the pre-release verified reproduction process.
Unlike Gitian, we are not limited to the package set of a particular Ubuntu version. Guix allows us to pick and choose our toolchains. This would e.g. make it easier to add a modern Rust compiler to our build environment. Packages that are not available in Guix can easily be defined in the manifest or upstreamed.
Making changes to the build system and debugging build issues takes less time because we have shell access to the build environment. The monero source code is bind mounted into the container, so edits to package definitions can be tested incrementally.

How to test?

See README.md

Notes

Guix timemachine: d5ca4d4fd713a9f7e17e074a1e37dda99bbb09fc (Dec 7, 2023)
Glibc: 2.27
GCC: 10.5.0
Clang: 11.1.0 (darwin and freebsd targets)
Linux headers: 6.1.67

I removed guix and depends package caching from the guix.yml workflow because it uses too much space and causes evictions for other caches (10 GB limit). We only need to run it when there is a change to contrib/{depends,guix}, which happens infrequently and doesn't need to complete quickly.

The guix timemachine URL is set to https://github.com/tobtoht/guix.git because the official repo on git.savannah.gnu.org often fails to fetch during CI runs for whatever reason. There used to be a mirror at guix-mirror/guix, but it is now out of service. Reviewers ought to confirm the pinned commit is a legit hash.

This PR removes native_clang because Guix provides us with a bootstrapped package and non-guix builds can use the system clang. This PR introduces backwards incompatible compiler flags, bumping the minimum Clang version to 10 (up from 9) for depends builds. Clang >=10 is available in the package managers of all supported distros (including Ubuntu 18.04).

Sub-PRs

Follow-up PRs:

To-do

Notable changes

The minimum glibc version for all Linux targets is now 2.27 (Ubuntu 18.04, Debian 10)
The source archive now includes all submodules.

Where to start review?

contrib/guix/README.md
->
contrib/guix/guix-build
->
contrib/guix/manifest.scm
->
contrib/guix/libexec/build.sh

Status: Ready for testing

Target	Builds	Tested
x86_64-linux-gnu	🮱
arm-linux-gnueabihf	🮱
aarch64-linux-gnu	🮱
riscv64-linux-gnu	🮱
i686-linux-gnu	🮱
i686-w64-mingw32	🮱
x86_64-w64-mingw32	🮱
x86_64-unknown-freebsd	🮱
x86_64-apple-darwin	🮱
aarch64-apple-darwin	🮱
arm-linux-androideabi	🮱
aarch64-linux-android	🮱

0xFFFC0000 · 2023-09-19T07:06:26Z

I cannot wait until we finalize and merge this. Thanks for your great work @tobtoht

tobtoht · 2024-02-25T11:48:53Z

I don't expect to make major changes to this PR, it's ready for testing. Reviews on any of the sub-PRs would help move this forward.

contrib/depends/Makefile

tobtoht · 2024-02-25T12:59:56Z

contrib/depends/patches/android_ndk/fix_env.patch

+             #!/bin/bash
+             if [ "$1" != "-cc1" ]; then
+-                `dirname $0`/clang{version} {flags} "$@"
+                env -u C_INCLUDE_PATH -u CPLUS_INCLUDE_PATH -u OBJC_INCLUDE_PATH -u OBJCPLUS_INCLUDE_PATH -u CPATH -u LIBRARY_PATH `dirname $0`/clang{version} {flags} "$@"


We need to unset these environment variables here because they refer to Guix profile packages. We want clang to only include headers from the NDK. We can't unset them in build.sh because native_ package builds would fail to find the necessary include headers. Unsetting these variables does not affect non-Guix builds.

tobtoht · 2024-02-25T13:01:05Z

contrib/depends/patches/boost/fix_coalesce.patch

+    #if $(real-version) < "4.0.0"
+    #{
+    #    flags darwin.compile.c++ OPTIONS $(condition) : -fcoalesce-templates ;
+    #}


Boost 1.64.0 doesn't recognize that we're building with Clang and passes a flags that results in an error. We don't support GCC < 4.0 at all, so commenting out the lines here is fine. Patch can be dropped when we update Boost.

tobtoht · 2024-02-25T13:04:28Z

contrib/guix/patches/glibc-2.27-riscv64-Use-__has_include-to-include-asm-syscalls.h.patch

@@ -0,0 +1,76 @@
+Note that this has been modified from the original commit, to use __has_include


riscv64-linux-gnu builds fail without this patch

tobtoht · 2024-02-25T13:05:23Z

contrib/guix/patches/glibc-2.27-guix-prefix.patch

@@ -0,0 +1,22 @@
+Without ffile-prefix-map, the debug symbols will contain paths for the


Building on aarch64 should produce bit-for-bit identical release binaries.

tobtoht · 2024-02-25T13:45:34Z

contrib/guix/manifest.scm

+        gcc-toolchain-10
+        (list gcc-toolchain-10 "static")
+        ;; Scripting
+        perl


perl is needed to build OpenSSL.

tobtoht · 2024-02-25T13:50:59Z

contrib/guix/libexec/build.sh

+[ -e /usr/bin/env ]  || ln -s --no-dereference "$(command -v env)"  /usr/bin/env
+[ -e /bin/bash ]  || ln -s --no-dereference "$(command -v bash)"  /bin/bash
+[ -e /bin/sh ]  || ln -s --no-dereference "$(command -v sh)"  /bin/sh
+[ -e /lib64/ld-linux-x86-64.so.2 ]  || ln -s --no-dereference "${NATIVE_GCC}/lib/ld-linux-x86-64.so.2"  /lib64/ld-linux-x86-64.so.2


The Android NDK toolchain cannot (yet) be bootstrapped. The compiler binaries included in the NDK have their dynamic interpreter set to the standard x86_64 interpreter path, which does not exist in this location in the Guix environment.

The alternative was patchelf-ing all binaries included in the NDK, but this is hacky and adds a dependency on patchelf for non-Guix builders.

tobtoht · 2024-02-25T13:53:06Z

contrib/guix/libexec/build.sh

+if [[ -n "$DEPENDS_ONLY" ]]; then
+    exit 0
+fi


This is useful when debugging reproducibility issues in depends packages. Skips ahead to the next target, so we don't spend time building Monero binaries.

tobtoht · 2024-02-25T14:00:36Z

.gitignore

-contrib/gitian/docker/
-contrib/gitian/sigs/
+# guix
+/guix


Finished builds are available in ./guix/guix-build-<COMMIT>/

├── guix-build-222ea1a30058 │ ├── build │ │ └── distsrc-222ea1a30058-x86_64-linux-gnu # build directory │ ├── logs │ │ └── x86_64-linux-gnu # various logs for reproducibility debugging │ │ ├── depends-gen_id-build.txt │ │ ├── depends-gen_id-host.txt │ │ ├── depends-hashes.txt │ │ ├── depends-packages.txt │ │ ├── guix-env.txt │ │ ├── guix-hashes.txt │ │ └── SHA256SUMS.part │ ├── output │ │ └── x86_64-linux-gnu │ │ └── monero-x86_64-linux-gnu-222ea1a30058.tar.bz2 # binary tarball │ └── var │ ├── precious_dirs # directories to keep when running `./contrib/guix/guix-clean` │ └── profiles

tobtoht · 2024-02-25T14:01:21Z

contrib/depends/funcs.mk

@@ -267,4 +275,4 @@ $(foreach package,$(all_packages),$(eval $(call int_config_attach_build_config,$
 $(foreach package,$(all_packages),$(eval $(call int_add_cmds,$(package))))

 #special exception: if a toolchain package exists, all non-native packages depend on it
-$(foreach package,$(packages),$(eval $($(package)_unpacked): |$($($(host_arch)_$(host_os)_native_toolchain)_cached) ))
+$(foreach package,$(packages),$(eval $($(package)_extracted): |$($($(host_arch)_$(host_os)_native_toolchain)_cached) ))


_unpacked target doesn't exist.

tobtoht · 2024-02-25T14:13:00Z

contrib/guix/manifest.scm

+        gawk
+        sed
+        moreutils
+        patchelf


patchelf is unused. It is occasionally useful for debugging.

tobtoht · 2024-02-25T14:15:21Z

contrib/guix/libexec/build.sh

+esac
+
+export GIT_DISCOVERY_ACROSS_FILESYSTEM=1
+export USE_DEVICE_TREZOR_MANDATORY=1


Force Trezor support for release binaries.

tobtoht · 2024-02-25T14:21:26Z

contrib/depends/funcs.mk

+$(1)_cc=$$($$($(1)_type)_CC)
+$(1)_cxx=$$($$($(1)_type)_CXX)
+$(1)_objc=$$($$($(1)_type)_OBJC)
+$(1)_objcxx=$$($$($(1)_type)_OBJCXX)
+$(1)_ar=$$($$($(1)_type)_AR)
+$(1)_ranlib=$$($$($(1)_type)_RANLIB)
+$(1)_libtool=$$($$($(1)_type)_LIBTOOL)
+$(1)_nm=$$($$($(1)_type)_NM)
+$(1)_cflags=$$($$($(1)_type)_CFLAGS) \
+            $$($$($(1)_type)_$$(release_type)_CFLAGS)
+$(1)_cxxflags=$$($$($(1)_type)_CXXFLAGS) \
+              $$($$($(1)_type)_$$(release_type)_CXXFLAGS)
+$(1)_arflags=$$($$($(1)_type)_ARFLAGS) \
+             $$($$($(1)_type)_$(release_type)_ARFLAGS)
+$(1)_ldflags=$$($$($(1)_type)_LDFLAGS) \
+             $$($$($(1)_type)_$$(release_type)_LDFLAGS) \
+             -L$$($($(1)_type)_prefix)/lib
+$(1)_cppflags=$$($$($(1)_type)_CPPFLAGS) \
+              $$($$($(1)_type)_$$(release_type)_CPPFLAGS) \
+              -I$$($$($(1)_type)_prefix)/include


Delay expansion of package variables.

tobtoht · 2024-02-25T14:23:45Z

.github/workflows/guix.yml

@@ -0,0 +1,63 @@
+name: ci/gh-actions/guix
+
+on: [push, pull_request]


I removed guix and depends package caching from the CI workflow because it uses too much space and causes evictions for other caches (10 GB limit). We only need to run it when there is a change to contrib/{depends,guix}, which happens infrequently and doesn't need to complete quickly.

on: [push, pull_request] is temporary for testing.

tobtoht · 2024-02-25T14:24:39Z

.github/workflows/guix.yml

+          path: contrib/depends/sources
+          key: sources-${{ hashFiles('contrib/depends/packages/*') }}
+      - name: install dependencies
+        run: sudo apt update; sudo apt -y install guix git ca-certificates


It may be worth investigating if using the installer script is faster.

https://guix.gnu.org/manual/en/html_node/Installation.html

tobtoht · 2024-02-25T14:27:59Z

contrib/guix/manifest.scm

+                 (("-rpath=") "-rpath-link="))
+               #t))))))))
+
+(define-public glibc-2.27


The minimum glibc version for all Linux targets is now 2.27 (Ubuntu 18.04, Debian 10).

For more context, see: #9171 (comment)

tobtoht · 2024-02-25T14:31:59Z

contrib/guix/libexec/build.sh

+      -DCMAKE_EXE_LINKER_FLAGS="${HOST_LDFLAGS}" \
+      -DCMAKE_SHARED_LINKER_FLAGS="${HOST_LDFLAGS}" \
+      -DCMAKE_SKIP_RPATH=ON \
+      -DMANUAL_SUBMODULES=1


We can't actually check if submodules are checked out here because we're building in an extracted source archive.

The guix-build script runs git submodule update --init --recursive --progress before starting a build to make sure submodules are checked out.

tobtoht · 2024-02-25T17:19:43Z

contrib/depends/packages/darwin_sdk.mk

@@ -6,5 +6,6 @@ $(package)_sha256_hash=df75d30ecafc429e905134333aeae56ac65fac67cb4182622398fd717

 define $(package)_stage_cmds
  mkdir -p $($(package)_staging_dir)/$(host_prefix)/native/SDK &&\
+  rm -rf usr/include/readline && \


Prevent clang from including readline headers from the SDK. We statically link our own version of readline.

tobtoht · 2024-02-25T17:21:32Z

contrib/depends/toolchain.cmake.in

-  SET(CMAKE_C_COMPILER @prefix@/native/bin/clang)
+  SET(CMAKE_C_COMPILER @CC@)
  SET(CMAKE_C_COMPILER_TARGET ${CLANG_TARGET})
  SET(CMAKE_C_FLAGS_INIT -B${_CMAKE_TOOLCHAIN_PREFIX})
-  SET(CMAKE_CXX_COMPILER @prefix@/native/bin/clang++ -stdlib=libc++)
+  SET(CMAKE_CXX_COMPILER @CXX@ -stdlib=libc++)


We're now using the system / guix-provided clang for darwin builds.

tobtoht · 2024-02-25T17:26:09Z

contrib/depends/toolchain.cmake.in

+  SET(CMAKE_ASM_COMPILER clang)
+  SET(CMAKE_ASM-ATT_COMPILER as)


CMake automatically reduces CMAKE_CXX_COMPILER to the first command to derive CMAKE_ASM_COMPILER. This happens to be env instead of clang, so we need to set it explicitly.

tobtoht · 2024-02-25T17:29:06Z

contrib/guix/libexec/build.sh

+unset LIBRARY_PATH
+unset CPATH
+unset C_INCLUDE_PATH
+unset CPLUS_INCLUDE_PATH
+unset OBJC_INCLUDE_PATH
+unset OBJCPLUS_INCLUDE_PATH


These are automatically set by Guix, but don't necessarily point to the correct paths. This is fixed below.

tobtoht · 2024-02-26T11:17:06Z

contrib/depends/funcs.mk

-final_build_id_long+=$($(package)_build_id_long)
+final_build_id_long+=:[recipe]:$(1)-$($(1)_version)-$($(1)_recipe_hash)-$(release_type):[deps]$(foreach dep,$($(1)_build_id_deps),$(shell echo ":$(dep)")):[$($(1)_type)_id]:$($($(1)_type)_id_string):


Increase verbosity of final_build_id_long to ease debugging reproducibility issues.

tobtoht · 2024-02-26T11:19:17Z

contrib/depends/Makefile

+build_id_string:=$(realpath $(GUIX_ENVIRONMENT))
+$(host_arch)_$(host_os)_id_string:=$(realpath $(GUIX_ENVIRONMENT))


Any change to manifest.scm invalidates the cache.

tobtoht · 2024-02-29T17:16:28Z

423dcee4a23f697669b74188588eb1fa023b0921de1ba8c31860c6c670d6cdc2  monero-aarch64-apple-darwin-9ea73c0ff089.tar.bz2
9c40bc1ff4267f25bc2a36649bd5fd06fed2ed0fe1aadfdfca2265248ca78106  monero-aarch64-linux-android-9ea73c0ff089.tar.bz2
d7c1099361828707d2a57e5fb5407f32323bc23c5009942b0c551f17b5fd7f5c  monero-aarch64-linux-gnu-9ea73c0ff089.tar.bz2
486e6282b26dc18c4dbe1f71821bf14bd87352b6eccf29b9753f17d92bad103a  monero-arm-linux-androideabi-9ea73c0ff089.tar.bz2
85c57bde9b139303655c6f57b1305be37e613f51e0f264361b4f6e4136c42dc5  monero-arm-linux-gnueabihf-9ea73c0ff089.tar.bz2
d24844c3396c2f4b3cd0ee0d74a02d26070480361e4fdcf7b3792ac77cbb63dd  monero-i686-linux-gnu-9ea73c0ff089.tar.bz2
14265f23ae8937d233861c3371be32a1a1a6e112c5b5e193ec24f819802f5dc4  monero-i686-w64-mingw32-9ea73c0ff089.zip
49133fe551ca06965b0ace3283fd87a1d1bd4863a5c97e29bf02f892e96feeaa  monero-riscv64-linux-gnu-9ea73c0ff089.tar.bz2
75e452f349dc0996792f3551ff452301c7107080628111f5fd2364fee69e04c6  monero-source-9ea73c0ff089.tar.gz
93c0bd491b284e920cdc042e750fad2b215896f0bcff8736b921769fe75d622f  monero-x86_64-apple-darwin-9ea73c0ff089.tar.bz2
fb9a3725c547d4313577b7937ea1c34a3c4db02eae30159dd1b57e4c447f0a8c  monero-x86_64-linux-gnu-9ea73c0ff089.tar.bz2
e5aca1771d83612844e7e85aeef1d9b7897f0575757cb207e6151ab092073f25  monero-x86_64-unknown-freebsd-9ea73c0ff089.tar.bz2
58d7586c7698e64f20c584d61a98bb4140239c4b6e2184a946a93508355f3650  monero-x86_64-w64-mingw32-9ea73c0ff089.zip

plowsof · 2024-02-29T17:32:45Z

hashes

423dcee4a23f697669b74188588eb1fa023b0921de1ba8c31860c6c670d6cdc2  monero-aarch64-apple-darwin-9ea73c0ff089.tar.bz2
9c40bc1ff4267f25bc2a36649bd5fd06fed2ed0fe1aadfdfca2265248ca78106  monero-aarch64-linux-android-9ea73c0ff089.tar.bz2
d7c1099361828707d2a57e5fb5407f32323bc23c5009942b0c551f17b5fd7f5c  monero-aarch64-linux-gnu-9ea73c0ff089.tar.bz2
486e6282b26dc18c4dbe1f71821bf14bd87352b6eccf29b9753f17d92bad103a  monero-arm-linux-androideabi-9ea73c0ff089.tar.bz2
85c57bde9b139303655c6f57b1305be37e613f51e0f264361b4f6e4136c42dc5  monero-arm-linux-gnueabihf-9ea73c0ff089.tar.bz2
d24844c3396c2f4b3cd0ee0d74a02d26070480361e4fdcf7b3792ac77cbb63dd  monero-i686-linux-gnu-9ea73c0ff089.tar.bz2
14265f23ae8937d233861c3371be32a1a1a6e112c5b5e193ec24f819802f5dc4  monero-i686-w64-mingw32-9ea73c0ff089.zip
49133fe551ca06965b0ace3283fd87a1d1bd4863a5c97e29bf02f892e96feeaa  monero-riscv64-linux-gnu-9ea73c0ff089.tar.bz2
75e452f349dc0996792f3551ff452301c7107080628111f5fd2364fee69e04c6  monero-source-9ea73c0ff089.tar.gz
93c0bd491b284e920cdc042e750fad2b215896f0bcff8736b921769fe75d622f  monero-x86_64-apple-darwin-9ea73c0ff089.tar.bz2
fb9a3725c547d4313577b7937ea1c34a3c4db02eae30159dd1b57e4c447f0a8c  monero-x86_64-linux-gnu-9ea73c0ff089.tar.bz2
e5aca1771d83612844e7e85aeef1d9b7897f0575757cb207e6151ab092073f25  monero-x86_64-unknown-freebsd-9ea73c0ff089.tar.bz2
58d7586c7698e64f20c584d61a98bb4140239c4b6e2184a946a93508355f3650  monero-x86_64-w64-mingw32-9ea73c0ff089.zip

kevcrumb · 2024-03-18T09:51:46Z

I recently designed a process for gitian-building entirely in RAM with only 12GB total space required, significantly less than:

16GB of free disk space on the partition that /gnu/store will reside in

8GB of free disk space per platform triple

Could Guix build results be made to match those generated by gitian?

tobtoht · 2024-03-18T19:50:06Z

@kevcrumb The figures in the readme are a bit off, I'll update them.

Description	location	All targets	Max. per target
guix cache	`/gnu/store`	8.0 GB	-
git repository		0.8 GB	-
`depends` sources cache	`SOURCES_PATH` or `contrib/depends/sources`	0.9 GB	-
`depends` package cache	`BASE_CACHE` or `contrib/depends/built`	1.2 GB	290 MB
extracted `depends` packages	`contrib/depends/<target>`	6.7 GB	1100 MB
build directories	`guix/guix-build-<commit>/build`	9.6 GB	980 MB
outputs	`guix/guix-build-<commit>/output`	1.0 GB	-
total		28.2 GB	13.1 GB

If target specific build/cache directories are removed after each successfully built target, about 13.1 GB of storage is required at any time, not counting a base VM image with guix, git, make and curl installed. I could add an option that does that for storage constrained environments.

kevcrumb · 2024-05-12T07:19:59Z

about 13.1 GB of storage is required at any time

On a 16 GB system that would leave a mere 2.9 of RAM for the host's OS and the entire build process combined.

Anyway, my question was rather if we could get matching checksums between gitian and Guix, so that both methods could be employed interchangeably.

(dropping the term "reproducible builds" here and a mention of #1854, as I always struggle to find this issue)

tobtoht · 2024-05-13T08:41:30Z

Anyway, my question was rather if we could get matching checksums between gitian and Guix

No, this is not possible. We can't recreate the Gitian build environment in Guix. Even if we could, it would be unmaintainable and too limiting.

plowsof mentioned this pull request Jul 4, 2023

Monero Community Workgroup Meeting: Saturday 8th July 2023 @ 15:00 UTC monero-project/meta#857

Closed

tobtoht force-pushed the guix branch 2 times, most recently from 09e44ca to ee3964a Compare July 6, 2023 15:02

tobtoht mentioned this pull request Jul 6, 2023

depends: use macOS 11 SDK with libc++ headers #8933

Merged

tobtoht force-pushed the guix branch from 3cbd1da to 4903fe2 Compare February 13, 2024 14:49

tobtoht mentioned this pull request Feb 13, 2024

build: remove glibc backcompat #9171

Open

tobtoht force-pushed the guix branch from 769e2c2 to 058bd64 Compare February 14, 2024 11:08

tobtoht force-pushed the guix branch 5 times, most recently from 7ff7aca to 008cf5e Compare February 24, 2024 19:01

tobtoht mentioned this pull request Feb 24, 2024

depends: add command to print variables #9202

Open

tobtoht added 6 commits February 24, 2024 20:27

depends: remove ccache

2d602bc

depends: add riscv64 to gitignore

b96471c

depends: add download commands for freebsd & android sources

ff4cc05

depends: {native_,}protobuf: speedup build

6f5d53a

depends: native_cctools: don't embed build date

398e367

depends: add command to print variables

272f420

tobtoht force-pushed the guix branch 2 times, most recently from e733f5f to a10037f Compare February 24, 2024 23:23

depends: native_libtapi: don't embed git hash

03590ab

tobtoht force-pushed the guix branch from a8ea3d2 to bf1b97d Compare February 25, 2024 11:47

tobtoht commented Feb 25, 2024

View reviewed changes

tobtoht force-pushed the guix branch 3 times, most recently from 886f037 to 4398fc7 Compare February 25, 2024 18:43

tobtoht force-pushed the guix branch from 4398fc7 to b5802d2 Compare February 26, 2024 00:23

depends: fix ar zero timestamp for openssl & unbound on android targets

f194dcb

tobtoht force-pushed the guix branch from b5802d2 to 817fcae Compare February 26, 2024 10:49

Bootstrappable Builds

9ea73c0

tobtoht force-pushed the guix branch from 817fcae to 9ea73c0 Compare February 26, 2024 11:14

tobtoht commented Feb 26, 2024

View reviewed changes

tobtoht marked this pull request as ready for review February 26, 2024 13:46

tobtoht mentioned this pull request Feb 27, 2024

guix: static-pie {x86_64,aarch64}-linux-gnu builds #9207

Draft

plowsof mentioned this pull request Feb 29, 2024

Monero Community Workgroup Meeting: Saturday 2nd March 15:00UTC monero-project/meta#974

Closed

tobtoht mentioned this pull request Feb 29, 2024

Bootstrappable FCMPs tobtoht/monero#2

Draft

This was referenced Mar 31, 2024

depends: gtest: update to 1.14.0, clean up package definition #9271

Open

build: miniupnpc: remove submodule, add to depends, update to 2.2.7 #9273

Draft

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bootstrappable Builds #8929

Bootstrappable Builds #8929

tobtoht commented Jul 2, 2023 •

edited

0xFFFC0000 commented Sep 19, 2023

tobtoht commented Feb 25, 2024 •

edited

tobtoht Feb 25, 2024

tobtoht Feb 25, 2024

tobtoht Feb 25, 2024

tobtoht Feb 25, 2024

tobtoht Feb 25, 2024

tobtoht Feb 25, 2024

tobtoht Feb 25, 2024

tobtoht Feb 25, 2024

tobtoht Feb 25, 2024

tobtoht Feb 25, 2024

tobtoht Feb 25, 2024

tobtoht Feb 25, 2024

tobtoht Feb 25, 2024

tobtoht Feb 25, 2024

tobtoht Feb 25, 2024

tobtoht Feb 25, 2024

tobtoht Feb 25, 2024

tobtoht Feb 25, 2024

tobtoht Feb 25, 2024

tobtoht Feb 25, 2024

tobtoht Feb 26, 2024

tobtoht Feb 26, 2024

tobtoht commented Feb 29, 2024

plowsof commented Feb 29, 2024

kevcrumb commented Mar 18, 2024

tobtoht commented Mar 18, 2024 •

edited

kevcrumb commented May 12, 2024

tobtoht commented May 13, 2024

		@@ -0,0 +1,76 @@
		Note that this has been modified from the original commit, to use __has_include

		@@ -0,0 +1,22 @@
		Without ffile-prefix-map, the debug symbols will contain paths for the

		@@ -0,0 +1,63 @@
		name: ci/gh-actions/guix

		on: [push, pull_request]

		final_build_id_long+=$($(package)_build_id_long)
		final_build_id_long+=:[recipe]:$(1)-$($(1)_version)-$($(1)_recipe_hash)-$(release_type):[deps]$(foreach dep,$($(1)_build_id_deps),$(shell echo ":$(dep)")):[$($(1)_type)_id]:$($($(1)_type)_id_string):

		build_id_string:=$(realpath $(GUIX_ENVIRONMENT))
		$(host_arch)_$(host_os)_id_string:=$(realpath $(GUIX_ENVIRONMENT))

Bootstrappable Builds #8929

Are you sure you want to change the base?

Bootstrappable Builds #8929

Conversation

tobtoht commented Jul 2, 2023 • edited

What?

Why?

How to test?

Notes

Sub-PRs

Follow-up PRs:

To-do

Notable changes

Where to start review?

Status: Ready for testing

0xFFFC0000 commented Sep 19, 2023

tobtoht commented Feb 25, 2024 • edited

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

tobtoht commented Feb 29, 2024

plowsof commented Feb 29, 2024

kevcrumb commented Mar 18, 2024

tobtoht commented Mar 18, 2024 • edited

kevcrumb commented May 12, 2024

tobtoht commented May 13, 2024

tobtoht commented Jul 2, 2023 •

edited

tobtoht commented Feb 25, 2024 •

edited

tobtoht commented Mar 18, 2024 •

edited