HNHacker News
TopNewBestAskShowJobs

notmymain

14 karma · joined February 6, 2018

submissionscomments
notmymain··on Haskell developer experience in NixOS
> Docker is a nice runtime, but you cannot reproduce the build of a docker container

This is a common misconception but there's plenty of info out there if you want to find out how to do it. https://duckduckgo.com/?q=reproducible+builds+in+docker&atb=...

In essence, you can make reproducible builds in docker by controlling the build environment and then specifying particlar versions when installing dependencies. It's a bit more work but it's eminently doable.

You control the build environment by building your reproducible docker containers within an environment (eg a reproducible docker container) that is itself reproducible (ie with specified versions of everything). This seems like a bootstrapping problem, but actually it works.

So: 1. Make a "Build container" with a specified base image version and specified versions of the transitive deps of everything it needs to build your thing 2. Use this container to build your actual container, specifiying a version of the base image and all dependencies.

Pretty sure you don't need more than these two layers of the onion to make bitwise-identical builds as long as your package build recipe is itself reproducible (eg the toolchain supports it and you don't do anything like embedding timestamps etc in the binaries).

Package managers provide mechanisms to get the version list in force so generally the way to do this is to start with your preferred base image, install all the packages you want/need, use the package manager to give you the version list, then change the Dockerfile to install specifically those versions.

notmymain··on Funny or Die's Matt Klinman: “Facebook has destroyed independent digital comedy”
Sure, but that's fundamentally untrue. Facebook has gone to considerable effort and cost and taken great risk to build their network so that they can then monetize content that gets distributed on their platform.

I'm not a fan of Facebook btw, but just that the argument the guy is making fails on basic economics.

notmymain··on Funny or Die's Matt Klinman: “Facebook has destroyed independent digital comedy”
This whole debate seems to be missing the point. There has never been a world where independent content creators have been able to monetize what they do on a massive scale and collect most of the revenue.

At a large scale, the owners of the distribution eat most of the pie. That's true because of basic comparative advantage and the advantages of scale even though they are entirely dependent on the individual content creators to get anything at all from their distribution. If the content creator wants to collect most/all of the revenue, the pie is small.