Yeah. It’s not a perfect game, it has many issues, but it is fun and exciting and it does something very very different, very successfully. I’m reminded of the Zero Punctuation review of Psychonauts basically saying that its number one good point was that it was something genuinely mad and original, in contrast to the sea of imitation that is modern gaming, and for that alone hooray.
And storing the source and such for every dependency would be bigger than, and result in the same thing as an image.
Let’s flip that around.
The insanity that would be downloading and storing everything you need, wrapping it all up into a massive tarball and then shipping it to anyone who wants to use the end product, and also by the way assuming that everything you need in order to rebuild it will always be available from every upstream source if you want to make any changes, is precisely what Docker does. And yes, it’s silly to trust that everything it’s referencing will always be available from whoever’s providing it.
(Also, security)
Docker is like installing onto an empty computer then shipping the entire machine to the end user.
Correct. Because it’s not capable enough to make actually-reproducible builds.
My point is, you can do that imaging (in a couple of different ways) with Nix, if you really wanted to. No one does, because it would be insane when you have other more effective tools that can accomplish the exact same goal without needing to ship the entire machine to the end user. There are good use cases for Docker, making it easy to scale services up as was the original intent is a really good one. The way people commonly use it today, as a way to make reproducible environments for ease of one-off deployment, is not one. In my opinion.
I’ve been tempted into a “my favorite technology is better” pissing match, I guess. Anyway, Nix is better.
The issue is, nix builds are only guaranteed to be reproducible if the dependencies don’t change.
Dude, this is exactly why Nix is better. Docker builds are only guaranteed to be reproducible if the dependencies don’t change. Which they will. The vast majority of real-world Dockerfiles do pip install
, wget
, all kinds of basically unlimited nonsense to pull down their dependencies from anywhere on the internet.
Nix builds, on the other hand, are forbidden from the internet, specifically to force them to declare dependencies explicitly and have it within a managed system. You can trust that the Nix repositories aren’t going to change (or store them yourself, along with all the source that generated them and will actually produce the same binaries, if you’re paranoid). You can send the flake.nix and flake.lock files and it will actually work to reproduce a basically byte-identical container on the receiver’s end, which means you don’t have to send multi-gigabyte “images” in order to be able to depend on the recipient actually being able to make use of it. This is what I was saying that the whole thing of needing “images” is a non-issue if your workflow isn’t allowing arbitrary fuckery on an industrial scale whenever you are trying to spin up a new container.
I suspect that making a new container and populating it with something useful is so trivial on Nix, that you’re missing the point of what is actually happening, whereas with Docker you can tell something big is happening because it’s such a fandango when it happens. And so you assume Docker is “real” and Nix is “fake” or something.
I like one a package to be independent
Yes, me too, which is why an affinity for Docker is weird to me.
Yes because that is a wrong and clunky way to do it lol.
If you really wanted to, you could use dockerTools.BuildImage to create an “imaged” version of the container you made, or you could send around the flake.nix and flake.lock files exactly as someone would send around Dockerfiles. That stuff is usually just not necessary though, because it’s replaced with just a better approach (for the average-end-user case where you don’t need large numbers of Docker containers that you can deploy quickly at scale) that accomplishes the same thing.
I feel like I’m not going to convince you of this though. Have fun with Docker, I guess.
Hold up, nix added containerization? How did I miss that? I will have another look now!
Nix is containerization. Here is firing up a temporary little container with a new python version and then throwing it away once I’m done with it (although you can also do this with more complicated setups, this is just showing doing it with one thing only):
[hap@glimmer:/proc/69235/fd]$ python --version
Python 3.12.8
[hap@glimmer:/proc/69235/fd]$ nix-shell -p python39
this path will be fetched (27.46 MiB download, 80.28 MiB unpacked):
/nix/store/jrq27pp6plnpx0iyvr04f4apghwc57sz-python3-3.9.21
copying path '/nix/store/jrq27pp6plnpx0iyvr04f4apghwc57sz-python3-3.9.21' from 'https://cache.nixos.org/'...
[nix-shell:~]$ python --version
Python 3.9.21
[nix-shell:~]$ exit
exit
[hap@glimmer:/proc/69235/fd]$ python --version
Python 3.12.8
The whole “system” you get when moving from Nix to NixOS is basically just a composition of a whole bunch of individual packages like python39 was, in one big container that is “the system.” But you can also fire up temporary containers trivially for particular things. I have a couple of tools with source in ~/src
which, whenever I change the source, nix-os rebuild
will automatically fire up a little container to rebuild them in (with their build dependencies which don’t have to be around cluttering up my main system). If it works, it’ll deploy the completed product into my main system image for me, but if it doesn’t then nothing will have changed (and either way it throws away the container it used to attempt the build in).
Each config change spawns a new container for the main system OS image (“generation”), but you can roll back to one of the earlier generations (which are, from a functional perspective, still around) if you want or if you broke something.
And so on. It’s very nice.
I mean if it makes you happy, I won’t tell you to do anything different. I think a certain amount of it is just prejudice against Docker on my part. Just in my experience NixOS is the best of both worlds: You can have a single coherent system if everything in that system can play nice with each other, and if not, then things can be containerized completely that way still works too. And then on top it has a couple of other nice features like rolling back configs easily, or source builds that get slotted in in-place as if they were standard packages (which is generally where I abandon Docker installs of things, because making changes to the source seems like it’s going to be a big hassle).
I’m not trying to evangelize though, you should in all seriousness just do what you find to be effective.
Yeah, I can agree with that, I’m just saying at the moment of shutdown isn’t the time to do that and often the programs that are holding up my shutdown are doing it for reasons of their own, not because they’re trying to help me by saving my work. Just do autosave and let me shut my stuff down.
Huh.
IDK man, my experience is that Nix solves the problem you originally talked about and a bunch of others, pretty effectively. Among other things if things “just… don’t work” you can trivially roll back to an earlier working config, and see what changed between working and not-working, and so what would be a pretty grueling debugging process in some other environment becomes pretty easy to sort out.
But whatever. If for some reason Docker makes you more happy and not less, you’re welcome to it and best of luck.
What didn’t you like about it? I am just curious; I finally stepped out of using Debian for everything which I have been doing for approximately 200 years, and tried NixOS, and to me it is incredibly nice the way it solves a lot of these issues.
venv or nix
These are 2014 problems
My laptop will send a signal to all programs telling them to shut down, which includes cleaning up their stuff, and then it unmounts the drives, and then it shuts down. It just doesn’t wait forever and make me fix the problem if some program is having trouble shutting down. That is the correct behavior.
I do get that it’s nice to be protected against having your work blown away. As a first step, the idea of checking with every program to make sure it’s okay to turn off was a good progress, back in the past when it was first invented. The solution in the present day to that is autosave. The solution is definitely not to leave all the user’s work unsaved for a potentially unlimited amount of time, and then refuse to shut down if there is any terminal that still has an ssh session open, any settings window still open, or any GIMP session with files exported but not saved as .xcf.
Literally 2/3 of those obstacles happen pretty much every time I shut down my Mac, and I have to wander through the programs resolving programs’ problems that have nothing to do with saving my work. It’s annoying. I do understand that, with the other way, you have to go around checking that you have no work unsaved before shutting down. But, if you are mature enough to do that, then the “init 0” way is objectively better.
2025 no autosave skill issue
I just flip through all the workspaces, make sure there’s nothing going on I care about, and then hit the button.
Computers that teach you not to do that, but instead to just blindly pick “shut down” and then assume that the computer will protect you against having anything unsaved, but also refuse to shut down if there’s some app this is not cooperating, have 0 upside compared to the other way.
One or the other
There’s usually one of the buttons you can hold down to mute the ads, near the bottom right in the little phalanx of buttons all around the screen.
If you find it, label it “MUTE” in marker or something, spread the word.
No idea about tools although I hope you find something.
Two related suggestions that will change your life:
Hey everybody, this guy’s having fun
Get him out of here
No one will know for certain, people will argue, those bots will argue, other bot accounts with the same agenda will argue, people will be manipulated, they will argue, and status quo returns…
Fair enough. I do think this happens. At the same time I don’t see that there’s a lot to be gained by being super sensitive about it, or deciding to freak out and abandon the topic because of some people arguing.
I would say that every so often, I wander into one of the lemmy.world political communities and I have exactly the reaction you are expressing here. It’s just random aggressive people, some of whom I think are deliberately trying to inflame conflict and prejudice, and they drown out anything useful. It’s a waste of time, so I don’t fuck with it. I guess the point that I’m trying to make is that not everything is that way. I would say the vast majority of things I observe on Lemmy are not that way.
Or, they’re not what I would describe that way. You seem like you’re maybe talking about something different, and accusing the conversations I like of being something deliberately designed to waste my time that I should be able to “rise above” or etc. But you also don’t want to give examples, so IDK, not much I can do with that.
So check out this example. I’ll give my take on it:
https://ponder.cat/post/2904223
I think there are some people there who are just there to stir shit. But, I would say the great majority at least of what I was paying attention to is productive. I learned about some propaganda, learned the shape of the media landscape, from some previous interactions, and then in that thread we got to talk about some other issues related to that, and work some things out.
Yeah, if you focus on the idiots exclusively, then your interaction will be unproductive. I do definitely think that yes.
By talking about ‘anything of substance’ is being framed by the bot posts, repeatedly, to manipulate. But, take a step back and you’ll realise it really isn’t ‘anything of substance’ but something to distract.
If you feel strongly enough about this topic to be concerned that people are going to be taken in by it, give some examples. By being vague and evasive about what it is you’re talking about, you make it impossible for anyone to learn about what you’re saying if you have something of value to try to make a point about, and also impossible for them to make counterpoints if they disagree with you. It just all stays in waste-of-time-land. Which is, ironically, exactly the issue you are trying to raise.
If you’re concerned that people will disagree with your categorizations, and that’ll just be so upsetting that you can’t bear the thought of doing it as a result, I feel like this whole issue may be more of a you problem than a Lemmy problem.
As for the early internet, I think you’re thinking about early pre-banhammer-FBI-raid 4-chan.
Not even close. I was talking about Usenet, early BBS culture and anonymous FTP days, then the more modern era of Napster / Slashdot / Rotten.com / the little proliferation of forums and personal sites came after those “old days,” and 4chan was created a little bit after that.
Everyone is going to have different definitions of when “early” is, but “the internet” goes back quite a long way before 4chan. 4chan and Myspace were kind of the first iteration of the massive everyone-goes-to-the-same-place omni-site model that presaged the horrors to come.
Yeah, almost to an excessive degree. To me it’s fine, it just means the designer has room to grow in terms of their skill at getting the right balance, but also it’s going to be a little bit of personal taste. This video includes some pretty interesting discussion of the balance between spelling things out, making sure that everyone can notice and enjoy them, versus making things opaque knowing that you’ll leave some people behind but making it that much more special for the people who found them “all by themselves” without any kind of prompting.