docs(lab11): reproducible builds of QuickNotes with Nix - #1497
Open
HNS2112 wants to merge 9 commits into
Open
Conversation
Signed-off-by: Elvira <239804565+HNS2112@users.noreply.github.com>
Signed-off-by: HNS <239804565+HNS2112@users.noreply.github.com>
Signed-off-by: Elvira <239804565+HNS2112@users.noreply.github.com>
Signed-off-by: Elvira <239804565+HNS2112@users.noreply.github.com>
Signed-off-by: Elvira <239804565+HNS2112@users.noreply.github.com>
Signed-off-by: Elvira <239804565+HNS2112@users.noreply.github.com>
Signed-off-by: Elvira <239804565+HNS2112@users.noreply.github.com>
…gate fires" This reverts commit 2b87633.
Signed-off-by: Elvira <239804565+HNS2112@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Goal
Lab 11 submission: a Nix flake building QuickNotes reproducibly, extended to a deterministic OCI image, with two independent environments producing identical hashes and a CI gate asserting it on every push.
Changes
flake.nix+flake.lock— pinned nixpkgs, buildGoModule package, dockerTools image, devShell.github/workflows/nix-repro.yml— two parallel runners, digest comparison jobevidence/lab11/— hashes from both environments, Lab 6 comparison, CI logssubmissions/lab11.md— report covering Tasks 1–2 and the bonusTesting
Task 1: identical store hash
sha256:05k94m87…igkl0ain two independent containers; identical derivation path too.Task 2: identical image digest
ada0ff2f…78b6f; the Lab 6 Dockerfile built twice with--no-cachegives two different digests.Bonus: green run 31408151132, deliberately broken red run 31408954858, green again after revert.
Checklist
git log --show-signature)submissions/labN.mdupdated