about summary refs log tree commit diff
AgeCommit message (Collapse)AuthorFilesLines
2015-11-25 autoCallFunction: Auto-call functorsShea Levy1-0/+11
2015-11-21 Merge branch 'host-deps' of git://github.com/pikajude/nixShea Levy3-4/+3
Reintroduces the functionality that allows the baked-in pre-build-hook to find framework dependencies
2015-11-21 reintroduce host deps in tandem with sandbox profilesJude Taylor3-4/+3
2015-11-21 Revert "remove sandbox-defaults.sb"Shea Levy2-0/+64
As discussed in NixOS/nixpkgs#11001, we still need some of the old sandbox mechanism. This reverts commit d760c2638c9e1f4b8cd9b4ec90d68bf0c76a800b.
2015-11-19 re-fix permissions for GHCJude Taylor1-2/+5
2015-11-19 Merge branch 'sandbox-profiles' of git://github.com/pikajude/nixShea Levy7-88/+56
Temporarily allow derivations to describe their full sandbox profile. This will be eventually scaled back to a more secure setup, see the discussion at #695
2015-11-19 Merge pull request #707 from peti/masterEelco Dolstra1-1/+1
src/libstore/build.cc: clarify error message for hash mismatches
2015-11-19 src/libstore/build.cc: clarify error message for hash mismatchesPeter Simons1-1/+1
Nix reports a hash mismatch saying: output path ‘foo’ should have sha256 hash ‘abc’, instead has ‘xyz’ That message is slightly ambiguous and some people read that statement to mean the exact opposite of what it is supposed to mean. After this patch, the message will be: Nix expects output path ‘foo’ to have sha256 hash ‘abc’, instead it has ‘xyz’
2015-11-17 Merge pull request #1 from shlevy/sandbox-profilesJude Taylor3-5/+24
Use AutoDelete for sandbox profile file
2015-11-16 Default arguments belong at declaration, not definitionShea Levy1-1/+1
2015-11-16 Fix copy-paste errorShea Levy1-1/+1
2015-11-16 AutoDelete: Add default constructor with deletion disabledShea Levy3-1/+11
2015-11-15 Use AutoDelete for sandbox profile fileShea Levy1-5/+14
2015-11-14 simplify build.cc using modern C++ featuresJude Taylor1-33/+31
2015-11-14 simplify build permissionsJude Taylor2-17/+6
2015-11-14 remove sandbox-defaults.sbJude Taylor2-64/+0
2015-11-14 update sandbox profiles within nixJude Taylor2-4/+19
2015-11-14 use per-derivation sandbox profilesJude Taylor1-28/+39
2015-11-10 Fix bad characters in "copying 7 missing paths from ..."Eelco Dolstra1-0/+1
2015-11-09 Add option to verify build determinismEelco Dolstra3-12/+76
Passing "--option build-repeat <N>" will cause every build to be repeated N times. If the build output differs between any round, the build is rejected, and the output paths are not registered as valid. This is primarily useful to verify build determinism. (We already had a --check option to repeat a previously succeeded build. However, with --check, non-deterministic builds are registered in the DB. Preventing that is useful for Hydra to ensure that non-deterministic builds don't end up getting published at all.)
2015-11-09 Revert "Allow using /bin and /usr/bin as impure prefixes on non-darwin by ↵Eelco Dolstra1-1/+1
default" This reverts commit 79ca5033329053caa364bb2f7e50953f859cc97f. Ouch, never noticed this. We definitely don't want to allow builds to have arbitrary access to /bin and /usr/bin, because then they can (for instance) bring in a bunch of setuid programs. Also, we shouldn't be encouraging the use of impurities in the default configuration.
2015-11-09 optimizePath(): Detect some .links corruptionEelco Dolstra1-2/+9
If automatic store optimisation is enabled, and a hard-linked file in the store gets corrupted, then the corresponding .links entry will also be corrupted. In that case, trying to repair with --repair or --repair-path won't work, because the new "good" file will be replaced by a hard link to the corrupted file. We can catch most of these cases by doing a sanity-check on the file sizes.
2015-11-09 Fix namespace issueEelco Dolstra1-2/+2
2015-11-08 Merge branch 'libsystem-darwin-only'Shea Levy1-2/+2
Only require libsystem on darwin
2015-11-08 Only require libsystem on darwinShea Levy1-2/+2
Fixes #688
2015-11-04 Merge branch 'master' of https://github.com/pikajude/nixShea Levy1-2/+6
> I made this change for two reasons: > 1. Darwin's locale data doesn't appear to be open source > 2. Privileged processes will always use /usr/share/locale regardless of environment variables
2015-11-04 Support SHA-512 hashesEelco Dolstra6-17/+30
Fixes #679. Note: on x86_64, SHA-512 is considerably faster than SHA-256 (198 MB/s versus 131 MB/s).
2015-11-04 Require OpenSSLEelco Dolstra11-1759/+3
2015-11-03 fix syntax errorJude Taylor1-1/+1
2015-11-03 darwin: allow reading system locale and zoneinfoJude Taylor1-2/+6
2015-11-01 Merge https://github.com/pikajude/nixShea Levy1-1/+2
> As far as I can tell, the CoreFoundation function CFNumberFormatterCopyProperty segfaults if the > directory added in this pull request is not readable. This change allows openjdk-darwin to build in > the sandbox.
2015-10-31 allow reading ICU dataJude Taylor1-1/+2
2015-10-31 Merge branch 'master' of git://github.com/pikajude/nixShea Levy1-1/+4
@pikajude: "This is required for perlPackages.IOTty and, by extension, mosh"
2015-10-30 add special devices to sandbox-defaultsJude Taylor1-1/+4
2015-10-31 Fix tarball buildEelco Dolstra1-1/+1
Fixes #671.
2015-10-30 <nix/fetchurl.nix>: Support xz-compressed NARsEelco Dolstra7-2/+80
2015-10-30 <nix/fetchurl.nix>: Support downloading and unpacking NARsEelco Dolstra4-16/+46
This removes the need to have multiple downloads in the stdenv bootstrap process (like a separate busybox binary for Linux, or curl/mkdir/sh/bzip2 for Darwin). Now all those files can be combined into a single NAR.
2015-10-29 int2String() -> std::to_string()Eelco Dolstra9-24/+17
2015-10-26 Merge branch 'emacs-mode-keywords' of https://github.com/pSub/nixEelco Dolstra1-10/+10
2015-10-26 Merge pull request #667 from Ericson2314/mk-distEelco Dolstra2-2/+5
Don't depend on .git/ when generating source tarball V2
2015-10-26 Merge pull request #668 from svanderburg/masterEelco Dolstra1-0/+1
Fix compilation error due to missing ENOENT on cygwin
2015-10-21 resolve-system-dependencies.pl: Simplify union implShea Levy1-8/+2
Patch by @pikajude
2015-10-21 use nixDataDir instead of appending /share to PREFIXJude Taylor1-1/+1
2015-10-21 revert libutil changeJude Taylor1-5/+4
2015-10-21 clarifying commentJude Taylor1-1/+5
2015-10-21 move preBuildHook defaulting to globals.ccJude Taylor2-7/+5
2015-10-21 restore old DEFAULT_ALLOWED_IMPURE_PREFIXESJude Taylor1-1/+1
2015-10-21 appropriately handle lock acquisition failures in resolve-system-dependencies.plJude Taylor1-2/+7
2015-10-21 now that resolve-system-dependencies exists, remove redundant impureHostDeps ↵Jude Taylor1-7/+0
from buildenv
2015-10-21 Add resolve-system-dependencies.plJude Taylor5-1/+150