about summary refs log tree commit diff
AgeCommit message (Collapse)AuthorFilesLines
2012-07-17 Allow disabling log compressionEelco Dolstra2-12/+35
2012-07-12 builtins.storePath: resolve symlinksEelco Dolstra1-1/+5
Needed for Charon/Hydra interaction.
2012-07-09 Pass --insecure to curl so that https worksEelco Dolstra1-1/+1
2012-07-09 Inline fetchurl.shEelco Dolstra3-9/+13
2012-07-09 Add a test for the fetchurl functionEelco Dolstra3-1/+17
2012-07-09 Remove obsolete commentShea Levy1-3/+0
2012-07-09 corepkgs/fetchurl: Build locally and outside of the chrootShea Levy1-0/+6
2012-07-09 corepkgs/fetchurl: the 'system' argument can be optionalShea Levy1-1/+1
2012-07-09 corepkgs: distribute fetchurl filesShea Levy1-1/+1
2012-07-09 corepkgs/fetchurl: Call the shell directly instead of using the shebangShea Levy2-3/+2
2012-07-09 corepkgs/fetchurl.sh: Use config.nix's curlShea Levy2-2/+4
2012-07-09 The fetchurl builder is now fetchurl.shShea Levy1-1/+1
2012-07-09 Remove old fetchurl makefileShea Levy1-11/+0
2012-07-09 Move fetchurl files out of their subdirectoryShea Levy2-0/+0
2012-07-09 corepkgs/config.nix.in: We'll need curlShea Levy1-0/+1
2012-07-09 Resurrect old corepkgs fetchurlShea Levy3-0/+39
2012-07-09 Really fix RPM buildsEelco Dolstra1-3/+3
2012-07-09 Fix RPM buildsEelco Dolstra1-0/+1
http://hydra.nixos.org/build/2784908
2012-07-09 Get rid of nix.conf.exampleEelco Dolstra3-190/+2
No need to duplicate the nix.conf manpage.
2012-07-09 Install a nix.conf manpageEelco Dolstra3-12/+28
2012-06-27 nix-store -r: do substitutions in parallelEelco Dolstra11-25/+30
I.e. when multiple non-derivation arguments are passed to ‘nix-store -r’ to be substituted, do them in parallel.
2012-06-27 Mount an empty /dev/shm tmpfs in the chrootEelco Dolstra1-0/+6
This ensures that whatever the builder writes in /dev/shm is automatically cleaned up.
2012-06-27 Check the return code of the clone() callEelco Dolstra1-1/+2
2012-06-25 When using chroots, use a private PID namespaceEelco Dolstra2-156/+186
In a private PID namespace, processes have PIDs that are separate from the rest of the system. The initial child gets PID 1. Processes in the chroot cannot see processes outside of the chroot. This improves isolation between builds. However, processes on the outside can see processes in the chroot and send signals to them (if they have appropriate rights). Since the builder gets PID 1, it serves as the reaper for zombies in the chroot. This might turn out to be a problem. In that case we'll need to have a small PID 1 process that sits in a loop calling wait().
2012-06-25 Use a private UTS namespace to provide a deterministic host/domain name to ↵Eelco Dolstra1-1/+7
builders In chroot builds, set the host name to "localhost" and the domain name to "(none)" (the latter being the kernel's default). This improves determinism a bit further. P.S. I have to idea what UTS stands for.
2012-06-23 Update release notesEelco Dolstra1-1/+15
2012-06-23 Improve error messageEelco Dolstra1-1/+1
2012-06-23 In chroot builds, use a private SysV IPC namespaceEelco Dolstra1-12/+19
This improves isolation a bit further, and it's just one extra flag in the unshare() call. P.S. It would be very cool to use CLONE_NEWPID (to put the builder in a private PID namespace) as well, but that's slightly more risky since having a builder start as PID 1 may cause problems.
2012-06-23 In chroot builds, use a private network namespaceEelco Dolstra1-6/+31
On Linux it's possible to run a process in its own network namespace, meaning that it gets its own set of network interfaces, disjunct from the rest of the system. We use this to completely remove network access to chroot builds, except that they get a private loopback interface. This means that: - Builders cannot connect to the outside network or to other processes on the same machine, except processes within the same build. - Vice versa, other processes cannot connect to processes in a chroot build, and open ports/connections do not show up in "netstat". - If two concurrent builders try to listen on the same port (e.g. as part of a test), they no longer conflict with each other. This was inspired by the "PrivateNetwork" flag in systemd.
2012-06-18 Support socket-based, on-demand activation of the Nix daemon with systemdEelco Dolstra1-30/+46
Systemd can start the Nix daemon on demand when the Nix daemon socket is first accessed. This is signalled through the LISTEN_FDS environment variable, so all we need to do is check for that and then use file descriptor 3 as the listen socket instead of creating one ourselves.
2012-05-31 Add Emacs to the disk imageEelco Dolstra1-1/+1
2012-05-31 fixes to nix-worker systemd service descriptor: - remove commented-out lines ↵Michel Alexandre Salim2-3/+1
- register the file for distribution in Makefile.am
2012-05-31 On systems with SystemD, install the service descriptor for nix-worker, and ↵Michel Alexandre Salim2-0/+28
enable and start it
2012-05-31 Major spec update: - Fix license field - Split into subpackages - Update ↵Michel Alexandre Salim1-46/+149
build dependencies - Configure users and groups for multi-user mode - Fix installation location of Perl modules
2012-05-31 Update nix profile: - incorporate NixOS's configuration so that nix is ↵Michel Alexandre Salim2-8/+47
usable by normal users - install as a data file, not a program file
2012-05-31 - only enable deprecated spec sections when building on systems with older ↵Michel Alexandre Salim1-6/+12
RPM versions - move tests to dedicated %check section - use standard build macros
2012-05-31 - replace %define with %globalMichel Alexandre Salim1-5/+5
2012-05-30 Compress build logs on the fly using bzip2Eelco Dolstra2-11/+45
2012-05-30 "nix-store -l": support compressed logsEelco Dolstra2-9/+34
2012-05-29 Reserve some disk space for the garbage collectorEelco Dolstra9-11/+35
We can't open a SQLite database if the disk is full. Since this prevents the garbage collector from running when it's most needed, we reserve some dummy space that we can free just before doing a garbage collection. This actually revives some old code from the Berkeley DB days. Fixes #27.
2012-05-29 Add option ‘build-keep-log’ to enable/disable writing of build logsEelco Dolstra3-1/+36
Fixes #26.
2012-05-24 Clean up the installation section; document the generic binary tarballsEelco Dolstra1-96/+148
2012-05-22 Fix owner/group in tar invocationEelco Dolstra1-1/+1
2012-05-22 Generate binary tarballs for installing NixEelco Dolstra2-1/+68
For several platforms we don't currently have "native" Nix packages (e.g. Mac OS X and FreeBSD). This provides the next best thing: a tarball containing the closure of Nix, plus a simple script "nix-finish-install" that initialises the Nix database, registers the paths in the closure as valid, and runs "nix-env -i /path/to/nix" to initialise the user profile. The tarball must be unpacked in the root directory. It creates /nix/store/... and /usr/bin/nix-finish-install. Typical installation is as follows: $ cd / $ tar xvf /path/to/nix-1.1pre1234_abcdef-x86_64-linux.tar.bz2 $ nix-finish-install (if necessary add ~/.nix-profile/etc/profile.d/nix.sh to the shell login scripts) After this, /usr/bin/nix-finish-install can be deleted, if desired. The downside to the binary tarball is that it's pretty big (~55 MiB for x86_64-linux).
2012-05-22 Remove $FONTCONFIG_FILE hack from nix-profile.shEelco Dolstra1-7/+0
It's no longer needed because Nixpkgs' fontconfig uses /etc/fonts/fonts.conf as a default, just like other distributions.
2012-05-21 Add an experimental nix-make fileEelco Dolstra1-0/+169
To use it, just do (e.g.) "nix-build build.nix -A nix_env".
2012-05-12 Bump version numberEelco Dolstra1-1/+1
2012-05-11 Fix the install checkEelco Dolstra1-14/+3
2012-05-11 Set release dateEelco Dolstra1-1/+1
2012-05-11 Manual updatesEelco Dolstra6-75/+132