WIP: make: Support Nix and Guix with reproducible builds

[xelxebar]

Building on Nix and Guix require a reproduible build process. The auto-download feature of our build process violates this constraint. Furthermore, Nix and Guix builds typically occur in a network-isolated environment.

[xelxebar]

Initial discussion started here: #22.

[xelxebar]

You can see how I took a different approach than IS_NIX. By defining LEIN and GRAALVM_PATH appropriately, as well as clearing GRAALVM_DOWNLOAD, the builder can circumvent auto-downloads. Probably should document these kinds of details, once this PR settles out.

Also, note that we introduce a host dependency of pkg-config to detect libz, replacing the ldconfig hack because Nix/Guix can't maintain a global /etc/ld.so.cache.

[xelxebar]

@ingydotnet What's your dev process around updating/changing dependencies?
Almost certainly we will have to introduce some kind of dependency lockfile a la package-lock.json _etc. Whatever this turns out to be, I'd like to make lockfile generation as transparent to your current dev process as possible.

BTW, Nix/Guix don't really have off-the-shelf support for packaging Clojure projects at the moment, so this PR will require more time and work than anticipated.

[stigtsp]

There is a PR for yamlscript for nixpkgs here:

• yamlscript: init at 0.1.38 NixOS/nixpkgs#291472

As a first step, it packages the standalone jar from the release page as a native binary using GraalVM. We could update this derivation to be a source build later of course.

[ingydotnet]

@xelxebar what should we do with this one?
@stigtsp introduced nix support compiling from published jar files with nix version of native-image.
I'm not sure guix support will ever work, unless we can build java clojure and native-image from source.
But I haven't actually looked into it...

[stigtsp]

I don't believe GraalVM supports reproducible binaries :-/

[ingydotnet]

I don't believe GraalVM supports reproducible binaries :-/

Right, that's what I imagined would be the blocking issue. (thanks for weighing in @stigtsp )

I assume that's a deal breaker for Guix.

Babashka is a software that is built very similar to YS.
Google found this https://github.com/giuliano108/guix-packages/blob/master/notes/babashka.md

@xelxebar would that be a possible way to do ys for guix?