diff options
| -rw-r--r-- | 2018-03-25-guix-libreplanet/distracted-boyfriend.png | bin | 0 -> 380604 bytes | |||
| -rw-r--r-- | 2018-03-25-guix-libreplanet/guile-logo.png | bin | 0 -> 11808 bytes | |||
| -rw-r--r-- | 2018-03-25-guix-libreplanet/guix-libreplanet.org | 212 | ||||
| -rw-r--r-- | 2018-03-25-guix-libreplanet/guix-libreplanet.pdf | bin | 315346 -> 1572504 bytes | |||
| -rw-r--r-- | 2018-03-25-guix-libreplanet/oh-no.jpg | bin | 0 -> 153639 bytes | |||
| -rw-r--r-- | 2018-03-25-guix-libreplanet/package-install.png | bin | 0 -> 313995 bytes |
6 files changed, 185 insertions, 27 deletions
diff --git a/2018-03-25-guix-libreplanet/distracted-boyfriend.png b/2018-03-25-guix-libreplanet/distracted-boyfriend.png Binary files differnew file mode 100644 index 0000000..c27b619 --- /dev/null +++ b/2018-03-25-guix-libreplanet/distracted-boyfriend.png diff --git a/2018-03-25-guix-libreplanet/guile-logo.png b/2018-03-25-guix-libreplanet/guile-logo.png Binary files differnew file mode 100644 index 0000000..4edcc16 --- /dev/null +++ b/2018-03-25-guix-libreplanet/guile-logo.png diff --git a/2018-03-25-guix-libreplanet/guix-libreplanet.org b/2018-03-25-guix-libreplanet/guix-libreplanet.org index 10a4594..fd5f2db 100644 --- a/2018-03-25-guix-libreplanet/guix-libreplanet.org +++ b/2018-03-25-guix-libreplanet/guix-libreplanet.org @@ -47,27 +47,32 @@ a wonderful set of rights, but often *difficult to exercise in practice* + \begin{center} + \includegraphics[width=10cm]{distracted-boyfriend.png} + \end{center} + * common issues - figuring out how to view the exact source for a running program is - tricky + figuring out how to view the exact source for a running program can + be tricky - - <explain> + - source packages are good but are a bit arcane * common issues building from source is difficult or sometimes impossible + - dependency hell - non-standard build system - build scripts make assumptions that aren't true for your system + - need multiple package managers * common issues - sharing source or binaries has many pitfalls + sharing binaries can be tricky, too - - dependency hell - - incompatible libraries between systems - - high barrier to entry for common package managers + - high barrier to entry for common package formats + - binary bundles are convenient, but problematic * common issues @@ -102,15 +107,15 @@ - per-user profiles - atomic updates and rollbacks - reproducible builds - - tools for many use-cases + - source-based with transparent binary downloads * unprivileged package management users can build and install software *without root privileges* - tired: =sudo apt install emacs= - - wired: =guix package -i emacs= + \begin{center} + \includegraphics[width=8cm]{package-install.png} + \end{center} * per-user profiles @@ -130,6 +135,10 @@ oh no, the new version of Emacs is broken! + \begin{center} + \includegraphics[width=4cm]{oh-no.jpg} + \end{center} + =guix package --roll-back= * transactional upgrades and rollbacks @@ -143,6 +152,15 @@ no worries, just reboot and select the previous, working version from the bootloader menu +* a note about binaries + + there is *no central point of trust* for receiving + pre-built binaries (we call them *substitutes*) + + Guix is a *source-based* package manager, but will *transparently* + download pre-built binaries from a trusted third party, if + available. + * inspecting source code quickly grab the source code for a package: @@ -163,10 +181,21 @@ * sharing packages - =guix build -L ~/daves-packages foo= + =guix build -L ~/my-packages foo= <minimal package example> +* development environments + + =guix environment= is like Python’s virtualenv, Ruby’s rvm, Node’s + nvm, etc. but for *everything* + + quick example: play with a Ruby REPL without installing Ruby + + #+BEGIN_SRC sh + guix environment --ad-hoc ruby -- irb + #+END_SRC + * sharing development environments #+BEGIN_SRC scheme @@ -185,11 +214,58 @@ =guix environment --manifest=guix.scm= -* experimenting in isolated environments +* containerized environments + + experiment in an environment that is isolated from the rest of the + system + + example: a relatively constrained web browser - how about a container? + #+BEGIN_SRC sh + guix environment --ad-hoc icecat \ + --container \ + --network \ + --share=$HOME/.mozilla \ + --share=$HOME/Downloads \ + --expose=/tmp/.X11-unix + + $ DISPLAY=:0.0 icecat + #+END_SRC - =guix environment –-container --ad-hoc ruby -- irb= +* containerized environments (advanced) + + #+latex: \tiny{ + #+BEGIN_SRC sh + # Create a Guix container that shares the host's network devices, + # GnuPG config, SSH config, and MySQL socket directory. The container + # includes all of the software that is needed to build the gem set + # with Bundler. + guix environment --container --network \ + --share=$HOME/.gnupg --share=$HOME/.ssh --share=/run/mysqld --share=$HOME/Code \ + --ad-hoc ruby@2.2 mariadb imagemagick libxml2 libxslt gcc-toolchain@4.9 \ + gcc@4.9:lib make git coreutils openssh libffi pkg-config which sed gawk \ + openssl grep findutils procps nss-certs sqlite inetutils rsync gnupg \ + pinentry-tty + # Tweak the environment such that Ruby gems end up in the right place + # and their binaries can be found. + export GEM_HOME=$PWD/.gems + export PATH=$GEM_HOME/bin:$PATH + export LD_LIBRARY_PATH=$LIBRARY_PATH + export SSH_AUTH_SOCK=$HOME/.gnupg/S.gpg-agent.ssh + gpg-agent --daemon --enable-ssh-support --default-cache-ttl=10800 \ + --pinentry-program=$(which pinentry-tty) + # Create gem directory. + mkdir -p .gems + # Create /usr/bin/env so Ruby scripts work. + mkdir -p /usr/bin && ln -s $(which env) /usr/bin/env + # Bundle! + gem install bundler + bundle config build.nokogiri --use-system-libraries --with-xml2-include=$C_INCLUDE_PATH/libxml2 + bundle + # Start the server! + rails server + #+END_SRC + #+latex: } * sharing system configurations @@ -239,6 +315,10 @@ hello #+END_SRC + host your own Guix LAN party! + + \tiny{(okay that sounds kinda boring)} + * reproducible builds reproducible builds produce *bit-identical binaries* when performed @@ -249,11 +329,13 @@ * reproducible builds - this is a *cross-distro effort*, but Guix facilitates - reproducibility more than others + this is a *cross-distro effort*, but Guix was built to facilitate + reproducibility from the beginning see Chris Lamb's talk /“You think you're not a target? A tale of - three developers...”/ from yesterday for more perspective + three developers...”/ from yesterday for a deeper dive + + \center\huge{https://reproducible-builds.org} * reproducible builds @@ -267,7 +349,24 @@ is this build compromised? - =guix challenge= + #+BEGIN_SRC sh + guix challenge emacs \ + --substitute-urls=\ + "https://mirror.hydra.gnu.org \ + https://bobs-questionable-binaries.biz" + #+END_SRC + +* reasons for mismatched binaries + + innocent build nondeterminism: + - timestamps + - hardware differences + - build directories + - bad parallelism + + *or maybe…* + + - malicious tampering * customize packages @@ -311,23 +410,30 @@ * interoperate with other systems - or maybe you want something like snap or flatpak? + or maybe you want something similar to snap or flatpak? make a tarball bundle that anyone can extract on their GNU/Linux system: =guix pack guile emacs geiser= -* interoperate with other systems +* import foreign packages or maybe you want assistance translating foreign packages into Guix packages: - =guix import pypi flask= + #+BEGIN_SRC sh + guix import pypi flask + guix import gem pry + guix import elpa magit + #+END_SRC + + and many more (CRAN, CPAN, Crate, etc.) * literally: embedded - GuixSD now runs on the Beaglebone Black single-board computer! + fun fact: GuixSD now runs on the Beaglebone Black single-board + computer! #+latex: \scriptsize{ #+BEGIN_SRC scheme @@ -348,22 +454,72 @@ #+END_SRC #+latex: } + hopefully more ARM systems coming soon! + * extending guix + \begin{center} + \includegraphics[width=4cm]{guile-logo.png} + \end{center} + GuixSD is essentially a big Scheme library - with a little Scheme know-how its easy to write new tools that use - the exact same APIs that the core Guix tools use + with a little Scheme know-how its easy to write new packages, + services, and tools that use the exact same APIs that the core Guix + tools use + +* extending guix (silly example) + + #+latex: \tiny{ + #+BEGIN_SRC scheme + > (use-modules (guix packages) (gnu packages emacs)) + > (for-each (lambda (name) + (display (string-append "hey, " name "! You're an Emacs dependency!\n"))) + (sort (map car (package-inputs emacs)) string<)) + + hey, acl! You're an Emacs dependency! + hey, alsa-lib! You're an Emacs dependency! + hey, dbus! You're an Emacs dependency! + hey, giflib! You're an Emacs dependency! + hey, gnutls! You're an Emacs dependency! + hey, gtk+! You're an Emacs dependency! + hey, imagemagick! You're an Emacs dependency! + hey, libice! You're an Emacs dependency! + hey, libjpeg! You're an Emacs dependency! + hey, libotf! You're an Emacs dependency! + hey, libpng! You're an Emacs dependency! + hey, librsvg! You're an Emacs dependency! + hey, libsm! You're an Emacs dependency! + hey, libtiff! You're an Emacs dependency! + hey, libx11! You're an Emacs dependency! + hey, libxft! You're an Emacs dependency! + hey, libxml2! You're an Emacs dependency! + hey, libxpm! You're an Emacs dependency! + hey, m17n-lib! You're an Emacs dependency! + hey, ncurses! You're an Emacs dependency! + hey, zlib! You're an Emacs dependency! + #+END_SRC + #+latex: } + +* the stack + + Core components written in Scheme: + + - initial RAM disk + - init system (GNU Shepherd) + - package manager * the freedom to contribute - GNU Guix is a welcoming community: + The GNU Guix project has a welcoming community: - - we have a *code of conduct* and *enforce* it + - we have a *code of conduct* - we have started seeking new contributors via *Outreachy* - we participate in *Google Summer of Code* every year - oh, and no copyright assignment (in case you were wondering) + we need your help to bring GuixSD to a wider audience! + join us! * thanks! @@ -378,3 +534,5 @@ © 2018 David Thompson Licensed under Creative Commons Attribution Share-Alike 4.0 + + (sans the memes which I use under fair-use) diff --git a/2018-03-25-guix-libreplanet/guix-libreplanet.pdf b/2018-03-25-guix-libreplanet/guix-libreplanet.pdf Binary files differindex d7a49e0..bbed0ea 100644 --- a/2018-03-25-guix-libreplanet/guix-libreplanet.pdf +++ b/2018-03-25-guix-libreplanet/guix-libreplanet.pdf diff --git a/2018-03-25-guix-libreplanet/oh-no.jpg b/2018-03-25-guix-libreplanet/oh-no.jpg Binary files differnew file mode 100644 index 0000000..6ffeab8 --- /dev/null +++ b/2018-03-25-guix-libreplanet/oh-no.jpg diff --git a/2018-03-25-guix-libreplanet/package-install.png b/2018-03-25-guix-libreplanet/package-install.png Binary files differnew file mode 100644 index 0000000..4d6d1a8 --- /dev/null +++ b/2018-03-25-guix-libreplanet/package-install.png |
