na4zagin3 / satyrographos

Package manager for SATySFi
GNU Lesser General Public License v3.0
44 stars 13 forks source link

Lockfile for reproducible builds #98

Open na4zagin3 opened 4 years ago

na4zagin3 commented 4 years ago

There is a demand for reproducible builds like this: https://twitter.com/hikalium/status/1227120590064013316

This is challenging considering Satyrographos would have its own dependency resolution.

One idea is to output a shell script which set up satyrographos and have it recognize the lockdown description. For example,

#!/bin/sh
opam switch install 4.06.1
opam install satyrographos
eval $(opan env)
satyrographos lockdown opam resume << 'END_OF_LOCKDOWN'

Here comes result of `opam repo` and `opam switch export <file>`.

END_OF_LOCKDOWN
na4zagin3 commented 4 years ago

Cf: opam-lock

na4zagin3 commented 3 years ago

We can store not only package versions but also the current time and so on.