| Age | Commit message (Collapse) | Author | Files | Lines | |
|---|---|---|---|---|---|
| 2015-04-09 | Use cached result if there is a network error | Eelco Dolstra | 3 | -8/+15 | |
| 2015-04-09 | Move curl stuff into a separate file | Eelco Dolstra | 3 | -112/+150 | |
| 2015-04-09 | Implement a TTL on cached fetchurl/fetchTarball results | Eelco Dolstra | 3 | -13/+34 | |
| This is because we don't want to do HTTP requests on every evaluation, even though we can prevent a full redownload via the cached ETag. The default is one hour. | |||||
| 2015-04-09 | Implement caching of fetchurl/fetchTarball results | Eelco Dolstra | 4 | -24/+147 | |
| ETags are used to prevent redownloading unchanged files. | |||||
| 2015-04-07 | Revert /nix/store permission back to 01775 | Eelco Dolstra | 2 | -2/+2 | |
| This broke NixOS VM tests. Mostly reverts 27b7b94923d2f207781b438bb7a57669bddf7d2b, 5ce50cd99e740d0d0f18c30327ae687be9356553, afa433e58c3fe6029660a43fdc2073c9d15b4210. | |||||
| 2015-04-02 | Chroot builds: Provide world-readable /nix/store | Eelco Dolstra | 1 | -1/+1 | |
| This was causing NixOS VM tests to fail mysteriously since 5ce50cd99e740d0d0f18c30327ae687be9356553. Nscd could (sometimes) no longer read /etc/hosts: open("/etc/hosts", O_RDONLY|O_CLOEXEC) = -1 EACCES (Permission denied) Probably there was some wacky interaction between the guest kernel and the 9pfs implementation in QEMU. | |||||
| 2015-03-27 | Add dependency on libcurl-dev | Eelco Dolstra | 2 | -2/+6 | |
| http://hydra.nixos.org/eval/1179370 | |||||
| 2015-03-25 | Add fetchTarball builtin | Eelco Dolstra | 2 | -1/+120 | |
| This function downloads and unpacks the given URL at evaluation time. This is primarily intended to make it easier to deal with Nix expressions that have external dependencies. For instance, to fetch Nixpkgs 14.12: with import (fetchTarball https://github.com/NixOS/nixpkgs-channels/archive/nixos-14.12.tar.gz) {}; Or to fetch a specific revision: with import (fetchTarball https://github.com/NixOS/nixpkgs/archive/2766a4b44ee6eafae03a042801270c7f6b8ed32a.tar.gz) {}; This patch also adds a ‘fetchurl’ builtin that downloads but doesn't unpack its argument. Not sure if it's useful though. | |||||
| 2015-03-25 | addToStore(): Take explicit name argument | Eelco Dolstra | 9 | -36/+36 | |
| 2015-03-24 | Improve setting the default chroot dirs | Eelco Dolstra | 3 | -9/+7 | |
| 2015-03-24 | Add the closure of store paths to the chroot | Eelco Dolstra | 2 | -4/+11 | |
| Thus, for example, to get /bin/sh in a chroot, you only need to specify /bin/sh=${pkgs.bash}/bin/sh in build-chroot-dirs. The dependencies of sh will be added automatically. | |||||
| 2015-03-24 | Tighten permissions on chroot directories | Eelco Dolstra | 1 | -2/+12 | |
| 2015-03-24 | Don't rely on __noChroot for corepkgs | Eelco Dolstra | 6 | -15/+24 | |
| This doesn't work anymore if the "strict" chroot mode is enabled. Instead, add Nix's store path as a dependency. This ensures that its closure is present in the chroot. | |||||
| 2015-03-19 | Disable scanning for interior pointers | Eelco Dolstra | 1 | -0/+2 | |
| This may remove the "Repeated allocation of very large block" warnings. | |||||
| 2015-03-19 | Fix Boehm API violation | Eelco Dolstra | 4 | -38/+48 | |
| We were calling GC_INIT() after doing an allocation (in the baseEnv construction), which is not allowed. | |||||
| 2015-03-19 | Check return values from malloc/strdup | Eelco Dolstra | 1 | -11/+34 | |
| 2015-03-18 | Print some Boehm GC stats | Eelco Dolstra | 1 | -0/+7 | |
| 2015-03-18 | valueSize(): Take into account list/bindings/env size | Eelco Dolstra | 1 | -6/+15 | |
| 2015-03-06 | Fix typos: s/the the/the/ | Daniel Hahler | 4 | -4/+4 | |
| 2015-03-06 | forceValueDeep: Add to error prefix | Eelco Dolstra | 1 | -2/+7 | |
| 2015-03-06 | Improve error message | Eelco Dolstra | 2 | -19/+25 | |
| 2015-03-04 | Reduce verbosity in build-remote.pl | Eelco Dolstra | 3 | -0/+8 | |
| 2015-03-04 | Add option to hide display of missing paths | Eelco Dolstra | 1 | -1/+2 | |
| 2015-03-04 | Don't use vfork() before clone() | Eelco Dolstra | 1 | -1/+3 | |
| I'm seeing hangs in Glibc's setxid_mark_thread() again. This is probably because the use of an intermediate process to make clone() safe from a multi-threaded program (see 524f89f1399724e596f61faba2c6861b1bb7b9c5) is defeated by the use of vfork(), since the intermediate process will have a copy of Glibc's threading data structures due to the vfork(). So use a regular fork() again. | |||||
| 2015-03-03 | Merge branch 'allow-system-library' of git://github.com/copumpkin/nix | Shea Levy | 1 | -1/+1 | |
| Make the default impure prefix include all of /System/Library | |||||
| 2015-03-02 | Make the default impure prefix (not actual allowed impurities!) include all ↵ | Dan Peebles | 1 | -1/+1 | |
| of /System/Library, since we also want PrivateFrameworks from there and (briefly) TextEncodings, and who knows what else. Yay infectious impurities? | |||||
| 2015-03-02 | Allow local networking in the darwin sandbox to appease tests | Dan Peebles | 1 | -0/+3 | |
| 2015-02-23 | Typo | Eelco Dolstra | 1 | -1/+1 | |
| 2015-02-23 | More graceful fallback for chroots on Linux < 2.13 | Eelco Dolstra | 1 | -6/+5 | |
| 2015-02-23 | Use chroots for all derivations | Eelco Dolstra | 4 | -31/+57 | |
| If ‘build-use-chroot’ is set to ‘true’, fixed-output derivations are now also chrooted. However, unlike normal derivations, they don't get a private network namespace, so they can still access the network. Also, the use of the ‘__noChroot’ derivation attribute is no longer allowed. Setting ‘build-use-chroot’ to ‘relaxed’ gives the old behaviour. | |||||
| 2015-02-23 | Add restricted evaluation mode | Eelco Dolstra | 6 | -11/+65 | |
| If ‘--option restrict-eval true’ is given, the evaluator will throw an exception if an attempt is made to access any file outside of the Nix search path. This is primarily intended for Hydra, where we don't want people doing ‘builtins.readFile ~/.ssh/id_dsa’ or stuff like that. | |||||
| 2015-02-22 | Merge branch 'gh-476-fix-install-script' of git://github.com/jramnani/nix | Shea Levy | 1 | -1/+1 | |
| sometimes cd prints to stdout | |||||
| 2015-02-22 | Merge branch 'docs/channels-path' of git://github.com/iElectric/nix | Shea Levy | 1 | -2/+2 | |
| 2015-02-22 | fixes https://github.com/NixOS/nixpkgs/issues/6485 | Domen Kožar | 1 | -2/+2 | |
| 2015-02-19 | Merge branch 'tilde-paths' of https://github.com/shlevy/nix | Eelco Dolstra | 4 | -3/+14 | |
| 2015-02-19 | tilde paths: The rest of the string has to start with a slash anyway | Shea Levy | 1 | -1/+1 | |
| 2015-02-19 | tilde paths: construct the entire path at parse time | Shea Levy | 1 | -6/+1 | |
| 2015-02-19 | tilde paths: get HOME at parse time | Shea Levy | 1 | -3/+1 | |
| 2015-02-19 | Remove obsolete reference to ~ operator | Eelco Dolstra | 1 | -1/+0 | |
| 2015-02-19 | ExprConcatStrings: canonicalize concatenated paths | Shea Levy | 1 | -1/+2 | |
| 2015-02-19 | FIXMEs | Eelco Dolstra | 1 | -0/+4 | |
| 2015-02-19 | Allow the leading component of a path to be a ~ | Shea Levy | 3 | -2/+19 | |
| 2015-02-18 | Escape arguments to nix-shell #! scripts | Eelco Dolstra | 1 | -2/+6 | |
| 2015-02-18 | Support passing command line arguments to nix-shell #! scripts | Eelco Dolstra | 1 | -2/+5 | |
| 2015-02-18 | Fix nix-shell shebang scripts if -p is used | Eelco Dolstra | 1 | -1/+1 | |
| 2015-02-18 | nix-store --generate-binary-cache-key: Write key to disk | Eelco Dolstra | 2 | -13/+15 | |
| This ensures proper permissions for the secret key. | |||||
| 2015-02-17 | Use $<attr>Path instead of $<attr> for passAsFile | Eelco Dolstra | 3 | -7/+13 | |
| 2015-02-17 | Allow passing attributes via files instead of environment variables | Eelco Dolstra | 4 | -5/+55 | |
| Closes #473. | |||||
| 2015-02-17 | Keep sorted | Eelco Dolstra | 1 | -27/+27 | |
| 2015-02-17 | Include NAR size in fingerprint computation | Eelco Dolstra | 3 | -6/+5 | |
| This is not strictly needed for integrity (since we already include the NAR hash in the fingerprint) but it helps against endless data attacks [1]. (However, this will also require download-from-binary-cache.pl to bail out if it receives more than the specified number of bytes.) [1] https://isis.poly.edu/~jcappos/papers/cappos_mirror_ccs_08.pdf | |||||
 |
depot | |
| monorepo for the virus lounge | The Virus Lounge |
| about summary refs log tree commit diff |