Conversation

Notices

1. Embed this notice
   Christine Lemmer-Webber (cwebber@octodon.social)'s status on Sunday, 19-Feb-2023 00:15:22 JST Christine Lemmer-Webber

   Testing out Guix's relocatable builds feature. Seems to work pretty nicely. If you'd like to try:

   $ mkdir supertux
   $ cd supertux
   $ wget https://dustycloud.org/tmp/supertux-tarball-pack.tar.gz
   $ tar xvfz supertux-tarball-pack.tar.gz
   $ ./supertux-bin/supertux2

   (Warning: it's packing in everything, everything you use to run the game operating-system wise, so it's nearly 400mb.)

   I generated like so:

   $ guix pack -RR -S /supertux-bin=bin supertux

   Not a new feature but first time I've tried it. Thrilling!

   • clacke likes this.
   • Embed this notice
     Christine Lemmer-Webber (cwebber@octodon.social)'s status on Sunday, 19-Feb-2023 00:14:55 JST Christine Lemmer-Webber

     in reply to

     • Ludovic Courtès
     • dave

     @dthompson @civodul Relatedly on the call we had about guile-prescheme recently, I think "compiling to webassembly" is something everyone's interested in, probably even feasible.

     If more of guile itself could be rewritten into guile-prescheme or something like it, maybe that too would be a path to getting guile in the browser, I dunno. Requires that WASI be an actually useful thing, I suppose.

     clacke likes this.
   • Embed this notice
     Christine Lemmer-Webber (cwebber@octodon.social)'s status on Sunday, 19-Feb-2023 00:14:56 JST Christine Lemmer-Webber

     in reply to

     • Ludovic Courtès
     • dave

     @dthompson @civodul compile to wasm, run everywhere

     clacke likes this.
     clacke repeated this.
   • Embed this notice
     dave (dthompson@toot.cat)'s status on Sunday, 19-Feb-2023 00:15:00 JST dave

     in reply to

     • Ludovic Courtès

     @cwebber @civodul ooh yeah that would be cool. appimages are kind of like this in the sense that they are one executable, though they contain a disk image inside. love2d stuffs everything into a zip and uses another icculus project https://icculus.org/physfs/ to pretend it's a file system. because lua is so minimal and doesn't provide a file system access api, love2d games are quite secure in that they can't really access much. they can also write to a save file that love2d controls. gives off some least privilege vibes. would be cool if my games could use guile sandboxing to enforce the same limitations.

   • Embed this notice
     Christine Lemmer-Webber (cwebber@octodon.social)'s status on Sunday, 19-Feb-2023 00:15:01 JST Christine Lemmer-Webber

     in reply to

     • Ludovic Courtès
     • dave

     @dthompson @civodul could be interesting to combine with fatelf https://icculus.org/fatelf/

   • Embed this notice
     dave (dthompson@toot.cat)'s status on Sunday, 19-Feb-2023 00:15:09 JST dave

     in reply to

     • Ludovic Courtès

     @cwebber @civodul heh maybe, though flatpak takes a lot of system stuff for granted so the packs are much smaller. I know that it would be possible to generate bundles that make similar assumptions using guix, but it requires using a modified compiler toolchain, using the oldest glibc feasible to ensure the binaries will run on the most systems, and making package variants that produce binaries that don't refer to /gnu/store.

   • Embed this notice
     Christine Lemmer-Webber (cwebber@octodon.social)'s status on Sunday, 19-Feb-2023 00:15:10 JST Christine Lemmer-Webber

     in reply to

     • Ludovic Courtès
     • dave

     @dthompson @civodul hey now that everyone else is moving to flathub maybe half a gigabyte sized game installs is considered acceptable!

     clacke likes this.
   • Embed this notice
     dave (dthompson@toot.cat)'s status on Sunday, 19-Feb-2023 00:15:15 JST dave

     in reply to

     • Ludovic Courtès

     @cwebber @civodul yeah that "clone failed" error is an indicator that namespace stuff failed.

   • Embed this notice
     Christine Lemmer-Webber (cwebber@octodon.social)'s status on Sunday, 19-Feb-2023 00:15:17 JST Christine Lemmer-Webber

     in reply to

     • Ludovic Courtès
     • dave

     @civodul @dthompson Neat!

     The other thing I wanted to test was whether it worked on Windows Subsystem for Linux, which I don't have direct access to. I figured that was as substantial test program.

     The answer is no, presumably because of some namespaces thing, but look at just how alarming the error message they shared was, haha:

     ~/supertux$ ./supertux-bin/supertux2
     ./supertux-bin/supertux2: error: 'clone' failed: Invalid argument
     supertux2: run.c:123: rm_rf: Unexpected error: Device or resource busy.
     Aborted (core dumped)

   • Embed this notice
     Ludovic Courtès (civodul@toot.aquilenet.fr)'s status on Sunday, 19-Feb-2023 00:15:18 JST Ludovic Courtès

     in reply to

     • dave

     @dthompson @cwebber Unprivileged namespaces are one of the three “engines”; the others are PRoot and Fakechroot:
     https://guix.gnu.org/manual/devel/en/html_node/Invoking-guix-pack.html

     The default with ‘-RR’ is to try namespaces and then PRoot (much slower).

     You can set ‘GUIX_EXECUTION_ENGINE=performance’ to fall back to Fakechroot.

   • Embed this notice
     dave (dthompson@toot.cat)'s status on Sunday, 19-Feb-2023 00:15:21 JST dave

     in reply to

     @cwebber it's very nice if the system allows unprivileged namespaces. the bundles are huge but it "just works" (sans that one big caveat)

   • Embed this notice
     Ludovic Courtès (civodul@toot.aquilenet.fr)'s status on Sunday, 19-Feb-2023 00:15:34 JST Ludovic Courtès

     in reply to

     • dave

     @cwebber @dthompson Maybe it works on WSL with ‘GUIX_EXECUTION_ENGINE=fakechroot’ or even ‘=proot’? I’m curious!

     clacke likes this.