In terms of an asset being software that you're deploying, I don't get this attitute. If the process for producing the software is unreproducible, then you're running the risk that the behaviour of the software will be…
A while back, I worked on the code https://github.com/alphagov/info-frontend
Some analytics information is public, if you know where to look. You can add /info to the start of the URL path, and that might reveal some information about the page. For example:…
This having Google track your users has impacts internally when your own tooling becomes even less accurate because you have to start asking for consent: https://github.com/alphagov/content-data-admin/pull/707 In the…
Normally you'd just be using one glibc version. Packages that you installed a while ago may be using a different one, but it's not like every package has massively divergent dependencies. Because of the immutable store,…
No, you just update the package definition for A and release the updated package definitions, people will then be using the updated A, whether directly or through other packages (X, Y, B, M, N, ...). There is an issue…
Guix has packages, and packages have inputs (like dependencies), and you're right in that normally package definitions specify the exact dependencies it the code (they're hardcoded). Guix package definitions are truely…
I used to think package managers and dependency resolvers were inseperable, I even did a little bit of work on the APT resolver. Since using GNU Guix though, I'm so glad it doesn't have a dependency resolver as part of…
> I’ve seen Guix pop up a few times and I’m intrigued ... ostensibly a package manager but this article says it can work as an operating system in its own right. Can somebody explain this to me? Guix as a package…
Maybe it would be nice to have a wiki style page for this... anyway, I can only offer a perspective from the Guix side of things, but these are the reasons I'd personally be cautious about using Nix/Nixpkgs. I believe a…
I've heard about this from the Guix context: https://guix.gnu.org/blog/2018/bootstrapping-rust/
In terms of an asset being software that you're deploying, I don't get this attitute. If the process for producing the software is unreproducible, then you're running the risk that the behaviour of the software will be…
A while back, I worked on the code https://github.com/alphagov/info-frontend
Some analytics information is public, if you know where to look. You can add /info to the start of the URL path, and that might reveal some information about the page. For example:…
This having Google track your users has impacts internally when your own tooling becomes even less accurate because you have to start asking for consent: https://github.com/alphagov/content-data-admin/pull/707 In the…
Normally you'd just be using one glibc version. Packages that you installed a while ago may be using a different one, but it's not like every package has massively divergent dependencies. Because of the immutable store,…
No, you just update the package definition for A and release the updated package definitions, people will then be using the updated A, whether directly or through other packages (X, Y, B, M, N, ...). There is an issue…
Guix has packages, and packages have inputs (like dependencies), and you're right in that normally package definitions specify the exact dependencies it the code (they're hardcoded). Guix package definitions are truely…
I used to think package managers and dependency resolvers were inseperable, I even did a little bit of work on the APT resolver. Since using GNU Guix though, I'm so glad it doesn't have a dependency resolver as part of…
> I’ve seen Guix pop up a few times and I’m intrigued ... ostensibly a package manager but this article says it can work as an operating system in its own right. Can somebody explain this to me? Guix as a package…
Maybe it would be nice to have a wiki style page for this... anyway, I can only offer a perspective from the Guix side of things, but these are the reasons I'd personally be cautious about using Nix/Nixpkgs. I believe a…
I've heard about this from the Guix context: https://guix.gnu.org/blog/2018/bootstrapping-rust/