GNU Guix

GNU Guix

Stable release	1.4.0[1]  / 19 December 2022; 22 months ago (19 December 2022)
Repository	git.savannah.gnu.org/cgit/guix.git
Written in	Guile Scheme, C++ (Nix core)
License	GPLv3+
Website	guix.gnu.org/en/

GNU Guix (/ɡiːks/^[2]) is a functional cross-platform package manager and a tool to instantiate and manage Unix-like operating systems, based on the Nix package manager. Configuration and package recipes are written in Guile Scheme. GNU Guix is the default package manager of the GNU Guix System distribution.^[3]

Differing from traditional package managers, Guix (like Nix) utilizes a purely functional deployment model where software is installed into unique directories generated through cryptographic hashes. All dependencies for each software are included within each hash.^[4][5] This solves the problem of dependency hell,^[6] allowing multiple versions of the same software to coexist which makes packages portable and reproducible. Performing scientific computations in a Guix setup has been proposed as a promising response to the replication crisis.^[7][8]

The development of GNU Guix is intertwined with the GNU Guix System,^[9] an installable operating system distribution using the Linux-libre kernel and GNU Shepherd init system.^[10][11][12]

Guix packages are defined through functional Guile Scheme APIs specifically designed for package management. Dependencies are tracked directly in this language through special values called "derivations" which are evaluated by the Guix daemon lazily. Guix keeps track of these references automatically so that installed packages can be garbage collected when no other package depends on them - at the cost of greater storage requirements, all upgrades in Guix are guaranteed to be both atomic and can be rolled back.

The roll-back feature of Guix is inherited from the design of Nix and is rarely found in other operating systems, since it requires an unorthodox approach to how the system should function (see MicroOS). The Guix package manager, like Nix, can however be used on many distributions like Debian and Parabola.^[13][14] This also enables multiple users to safely install software on the same system without administrator privileges.

Compared to traditional package managers, Guix package stores can grow considerably bigger and therefore require more bandwidth; although compared to container solutions (like Docker) that are also commonly employed to solve dependency hell, Guix is leaner and conforms to practices like don't repeat yourself and single source of truth. If the user chooses to build everything from source, even larger storage space and bandwidth is required.

Inherited from the design of Nix, most of the content of the package manager is kept in a directory /gnu/store where only the Guix daemon has write-access. This is achieved via specialised bind mounts, where the Store as a file system is mounted read only, prohibiting interference even from the root user, while the Guix daemon remounts the Store as read/writable in its own private namespace. Guix talks with this daemon to build things or fetch substitutes which are all kept in the store. Users are discouraged from ever manually touching the store by re-mounting it as writable since this defeats the whole purpose of the store.

Guix - like Nix - has built-in garbage collection facilities to help prune dead store items and keep the live ones.^[15]

This is an example of a package definition for the hello-package:

(define-public hello   (package    (name "hello")    (version "2.10")    (source (origin             (method url-fetch)             (uri (string-append "mirror://gnu/hello/hello-" version                                 ".tar.gz"))             (sha256              (base32               "0ssi1wpaf7plaswqqjwigppsg5fyh99vdlb9kzl7c9lng89ndq1i"))))    (build-system gnu-build-system)    (synopsis "Hello, GNU world: An example GNU package")    (description     "GNU Hello prints the message \"Hello, world!\" and then exits.  It  serves as an example of standard GNU coding practices.  As such, it supports  command-line arguments, multiple languages, and so on.")    (home-page "https://www.gnu.org/software/hello/")    (license gpl3+))) 

It is written using Guile. The package recipes can easily be inspected (running e.g. guix edit hello) and changed in Guix, making the system transparent and very easy to modify.

Inherited from the design of Nix, all manipulation of store items is independent of each other, and the directories of the store begin with a base32-encoded hash of the source code of the derivation along with its inputs.

Guix package uses profiles generations, which are a collection of symlinks to specific store items together comprising what the user has installed into the profile. Every time a package is installed or removed, a new generation will be built.

E.g. the profile of a user who only installed GNU Hello contains links to the store item which holds the version of hello installed with the currently used guix.

E.g. on version c087a90e06d7b9451f802323e24deb1862a21e0f of guix, this corresponds to the following item: /gnu/store/md2plii4g5sk66wg9cgwc964l3xwhrm9-hello-2.10 (built from the recipe above).

In addition to symlinks, each profile guix builds also contains a union of all the info-manuals, man-pages, icons, fonts, etc. so that the user can browse documentation and have access to all the icons and fonts installed.

The default symlinks to profile generations are stored under /var/guix in the filesystem.

The user can create any number of profiles by invoking guix package -p PROFILE-NAME COMMAND. A new directory with the profile-name as well as profile-generation-symlinks will then be created in the current directory.

Guix package enables instantaneous roll-back to a previous profile generation via changing the symlink to an earlier profile generation.^[16] Profiles are also stored in the store e.g. this item is a profile containing hello above: /gnu/store/b4wipjlsapvnijmbawl7sh76087vpl4n-profile (built and activated when running guix install hello).

Guix shell enables the user to easily enter an environment where all the necessary packages for development of software are present without clogging up the user's default profile with dependencies for multiple projects.^[17]

E.g. running guix shell --development hello enters a throw-away environment where everything needed to compile hello on guix is present (gcc, guile, etc.).

Without the --development flag, only the package hello would be installed and not its build-dependencies. This supplants the guix environment command, which installs the dependencies of a package by default, as it was considered more intuitive for the command to install the specified packages by default and only install development dependencies with a flag.^[18]

If you want a persistent gc-rooted environment that is not garbage collected on the next run of guix gc you can create a root:

E.g. running guix shell --root=hello-root --development hello enters an environment where everything needed to compile guix is present (gcc, guile, etc.) and registered as a root in the current directory (by symlinking to the items in the store).

Guix pack enables the user to bundle together store items and output them as either a docker binary image, a relocatable tarball, a debian package file or a squashfs binary.^[19]

Guix graph enables the user to view different graphs of the packages and their dependencies.^[20]

Guix System

Guix System running Xfce, GNU IceCat and GNU Emacs
Developer	GNU Project[21][22]
OS family	Linux (Unix-like)
Working state	Current[23]
Source model	Free software, FSDG
Latest release	1.4.0[24]  / 19 December 2022; 22 months ago (19 December 2022)
Repository	git.savannah.gnu.org/cgit/guix.git
Marketing target	Desktop
Package manager	GNU Guix
Platforms	x86_64, i686, aarch64, armv7, powerpc64le
Kernel type	Monolithic: Linux-libre (operational) Microkernel: GNU Hurd (under development)
Userland	GNU
License	GPL
Official website	guix.gnu.org

GNU Guix System or Guix System^[25][26] (previously known as GuixSD^[27]) is a rolling release, free and open source Linux distribution built around Guix, similar to how NixOS is built around Nix.^[28][29] It enables a declarative operating system configuration^[30] and allows system upgrades that the user can rollback.^[31] It uses the GNU Shepherd init system^[32][33] and the Linux-libre kernel, with the support of the GNU Hurd kernel under development.^[34] On February 3, 2015, the Free Software Foundation added the distribution to its list of endorsed free Linux distributions.^[35]

The following CPU architectures are supported at the moment:^[36]

• IA-32
• x86-64
• ARMv7^[37]
• AArch64
• POWER9^[38]
• RISC-V 64^[39]
• MIPS64^[39]

System services, which are defined in the Guile Scheme,^[40] enable the user to declaratively compose the configuration of daemons and background services and specify configurations. This enables the user, within a single configuration file or modularized configuration, to configure the whole operating system (e.g., to have a Tor proxy, an ssh server, and a webserver serving guix-web via nginx on a specific port at bootup). They can:^[41]

• generate files in the filesystem (needed by some applications e.g. files in /etc)
• run any code for setting up daemons
• create specific user and group accounts (e.g. a database user for PostgreSQL)

The Guix System uses the GNU Daemon Shepherd, formerly known as "dmd" ("Daemon managing Daemons"), as its init system, which is developed in tandem with Guix and is written and configurable in Guile.^[42] It supplies user-space functionality asynchronously as services, which under Shepherd are generic functions and object data types which it uses to extend the base operating system in a defined way. In contrast to systemd, a userspace shepherd process runs as the user. Central to the Shepherd model of user space initialization is the concept of the extension, a form of composability whereby services are designed to be layered onto other services, augmenting them with more elaborate or specialized behaviours as desired.^[43] This expresses the instantiation-based dependency relationships found in many modern init systems,^[44] making the system modular, but also allows services to interact variadically with other services in arbitrary ways, e.g. a service that extends two other services, requiring only one to be present, but readily extending the second one if it is later instantiated without the need for any further reconfiguration or setup.

Shepherd also provides virtual services which allow dynamic dispatch over a class of related service objects, such as all those which instantiate a mail transfer agent (MTA) for the system.^[45] A system governed via the Shepherd daemon can represent its user space as a directed acyclic graph, with the "system-service," which is responsible for early phases of boot and init, as its root, and all subsequently initialized services as extensions to system-service functionality, either directly or transitively over other services.^[43][46]

It is intended to be highly programmable by the system administrator using Guile, but it can also be used to manage per-user profiles of unprivileged daemons and services.^[47] Its services and configuration are stored uniformly as object-oriented Scheme code, and while a core set of services are provided with the basic Guix System,^[48] arbitrary new services can be flexibly declared, and through Guile's object system, GOOPS, existing services can be redefined at the user's discretion by asking the Shepherd to dynamically rewrite services in specified ways on instantiation.^[49][50]

GNU Shepherd was originally designed to work with GNU Hurd, and was later adopted by Guix System.^[51]

Similar to the roll-back feature of Nix, if a system update leaves users with a broken system, users can easily roll back individual packages as well as the whole system state with a simple command:
guix package --roll-back^[52]
This means that the kind of stable channel that is very common in other Linux distributions is no longer needed for users who are willing to report a bug and wait a few minutes, when trying to update via guix pull. This is accomplished by a combination of Guix's functional package manager, which treats each package and system configuration as an immutable and reproducible entity,^[53] and the generation system which maintains a history of system configurations as "generations." These generations are stored as separate profiles, which allow you to roll back to any previous configuration,^[54] and you can see these generations with
guix package --list-generations.

Jesse Smith from DistroWatch Weekly reviewed GNU Guix System 0.15.0 (at the time named GuixSD), and said, "GuixSD has a package manager that I like", but criticized the limited hardware support and its limited documentation.^[55] The documentation has since then been expanded and improved with videos^[56] and a cookbook^[57] in six languages with tutorials, how-to guides and examples.

One particular area where Guix can offer to the user improvements over traditional package managers is in the field of reproducible scientific workflows, mainly in High Performance Computing^[58]. In this way, Guix would offer a way to share a reproducible computational environment, i.e. Guix using a recipe for the particular scientific software/environment would provide all the information needed to uniquely describe the dependency tree to build and run that software^[59]. This would not be easy to achieve, for example, in other mixed systems with several package managers for each programming language. However, this only provides a necessary but not sufficient condition for scientific workflows to be reproducible, as it is necessary to incorporate data collection and processing into the workflow, if this is added as part of the Guix recipe, it could satisfy the strict reproducibility requirements.

The project was started in June 2012 by Ludovic Courtès, one of the GNU Guile hackers.^[60]

The GNU Project announced in November 2012 the first release of GNU Guix, a functional package manager based on Nix that provides, among other things, Guile Scheme APIs.^[61]

On August 20, 2015, it was announced that Guix had been ported to GNU Hurd.^[62]

The project has no fixed release schedule and has until now released approximately every 6 months.

There are plans for an upcoming 1.5.0 release since there has been a 20 month gap since the 1.4.0 release.^[63]

• Debian GNU/Hurd
• NixOS – A similar operating system, which inspired GNU Guix^[64]
• Comparison of Linux distributions

• Official website
• Guix System at DistroWatch
• List of Guix packages