depot - monorepo for the virus lounge

Age	Commit message (Collapse)	Author	Files	Lines
2016-01-12	Revert "Do not override environment CFLAGS and CXXFLAGS"	Eelco Dolstra	1	-0/+2
	This reverts commit 80ebd60e7ca3c48a19b94ddaeebb23182b703178. The reason why we cleared CFLAGS/CXXFLAGS was because otherwise we get a default value of -O2, which interferes with the defaults set in the Makefile. (E.g. "make OPTIMIZE=0" should not pass -O2.)
2016-01-05	Do not override environment CFLAGS and CXXFLAGS	Ilya Novoselov	1	-2/+0
	Looks like 5a05cf4063fc6ea666f3e24c60bd2e9e5526ef4e removed usage of environment CFLAGS and CXXFLAGS by mistake. That change broke building of nix on fedora core 23.
2016-01-05	Merge pull request #685 from vizanto/master	Eelco Dolstra	1	-0/+1
	POSIX compliant directory access (fixes build on Solaris)
2015-12-10	Build sandbox support etc. unconditionally on Linux	Eelco Dolstra	1	-19/+0
	Also, use "#if __APPLE__" instead of "#if SANDBOX_ENABLED" to prevent ambiguity.
2015-11-07	Fix build on Solaris	Danny Wilson	1	-0/+1
	d_type is not part of the POSIX spec unfortunately.
2015-11-04	Require OpenSSL	Eelco Dolstra	1	-6/+2

2015-10-30	<nix/fetchurl.nix>: Support xz-compressed NARs	Eelco Dolstra	1	-0/+4

2015-10-21	Add resolve-system-dependencies.pl	Jude Taylor	1	-0/+17

2015-03-27	Add dependency on libcurl-dev	Eelco Dolstra	1	-0/+4
	http://hydra.nixos.org/eval/1179370
2015-02-16	Use pivot_root in addition to chroot when possible	Harald van Dijk	1	-0/+1
	chroot only changes the process root directory, not the mount namespace root directory, and it is well-known that any process with chroot capability can break out of a chroot "jail". By using pivot_root as well, and unmounting the original mount namespace root directory, breaking out becomes impossible. Non-root processes typically have no ability to use chroot() anyway, but they can gain that capability through the use of clone() or unshare(). For security reasons, these syscalls are limited in functionality when used inside a normal chroot environment. Using pivot_root() this way does allow those syscalls to be put to their full use.
2015-02-10	Make libsodium an optional dependency	Eelco Dolstra	1	-2/+6

2015-02-04	Use libsodium instead of OpenSSL for binary cache signing	Eelco Dolstra	1	-0/+4
	Sodium's Ed25519 signatures are much shorter than OpenSSL's RSA signatures. Public keys are also much shorter, so they're now specified directly in the nix.conf option ‘binary-cache-public-keys’. The new command ‘nix-store --generate-binary-cache-key’ generates and prints a public and secret key.
2014-11-25	Rely on XML catalogs to find the DocBook schemas and stylesheets	Eelco Dolstra	1	-11/+0

2014-09-22	configure: Force regeneration of Makefile.config	Eelco Dolstra	1	-0/+2

2014-09-17	Remove unused w3m dependency	Eelco Dolstra	1	-1/+0

2014-09-17	On Linux, disable address space randomization	Eelco Dolstra	1	-5/+0

2014-09-17	Add Make flag to disable optimization	Eelco Dolstra	1	-2/+2

2014-07-10	Remove maybeVfork	Eelco Dolstra	1	-4/+0

2014-05-26	Use std::unordered_set	Eelco Dolstra	1	-6/+0

2014-02-01	Build/install manual	Eelco Dolstra	1	-6/+0

2014-01-21	Fix build	Eelco Dolstra	1	-3/+3

2014-01-09	Handle systems where "echo -n" doesn't work	Eelco Dolstra	1	-1/+1

2013-11-25	Expand configure variables before writing config.status	Eelco Dolstra	1	-1/+10
	This way, we can use config.status for generating scripts/* (without ending up with lines like "#! /usr/bin/perl -I${libexecdir}/...").
2013-11-25	Remove obsolete setting of $CC_FOR_BUILD	Eelco Dolstra	1	-10/+0

2013-11-25	Don't install Libtool	Eelco Dolstra	1	-16/+0

2013-11-25	Don't instantiate Automake makefiles	Eelco Dolstra	1	-25/+1

2013-11-22	Drop the dependency on Automake	Eelco Dolstra	1	-8/+4

2013-11-22	New non-recursive, plain Make-based build system	Eelco Dolstra	1	-0/+1

2013-11-14	Remove nix-setuid-helper	Eelco Dolstra	1	-1/+0
	AFAIK, nobody uses it, it's not maintained, and it has no tests.
2013-08-19	Turn on -Wall	Eelco Dolstra	1	-2/+2

2013-08-07	Run the daemon worker on the same CPU as the client	Eelco Dolstra	1	-0/+4
	On a system with multiple CPUs, running Nix operations through the daemon is significantly slower than "direct" mode: $ NIX_REMOTE= nix-instantiate '<nixos>' -A system real 0m0.974s user 0m0.875s sys 0m0.088s $ NIX_REMOTE=daemon nix-instantiate '<nixos>' -A system real 0m2.118s user 0m1.463s sys 0m0.218s The main reason seems to be that the client and the worker get moved to a different CPU after every call to the worker. This patch adds a hack to lock them to the same CPU. With this, the overhead of going through the daemon is very small: $ NIX_REMOTE=daemon nix-instantiate '<nixos>' -A system real 0m1.074s user 0m0.809s sys 0m0.098s
2013-08-06	Set the default GCC optimisation level to -O3	Eelco Dolstra	1	-0/+2

2013-07-12	Add gzip support for channel unpacking	Gergely Risko	1	-1/+1

2013-03-25	makeStoreWritable: Use statvfs instead of /proc/self/mountinfo to find out ↵	Shea Levy	1	-0/+1
	if /nix/store is a read-only bind mount /nix/store could be a read-only bind mount even if it is / in its own filesystem, so checking the 4th field in mountinfo is insufficient. Signed-off-by: Shea Levy <shea@shealevy.com>
2013-01-02	Urgggh	Eelco Dolstra	1	-1/+0
	http://hydra.nixos.org/build/3661100
2012-11-15	Disable use of vfork()	Eelco Dolstra	1	-1/+1
	vfork() is just too weird. For instance, in this build: http://hydra.nixos.org/build/3330487 the value fromHook.writeSide becomes corrupted in the parent, even though the child only reads from it. At -O0 the problem goes away. Probably the child is overriding some spilled temporary variable. If I get bored I may implement using posix_spawn() instead.
2012-11-09	Use vfork() instead of fork() if available	Eelco Dolstra	1	-0/+4
	Hopefully this reduces the chance of hitting ‘unable to fork: Cannot allocate memory’ errors. vfork() is used for everything except starting builders.
2012-10-10	Out-of-tree building of perl modules.	Mats Erik Andersson	1	-1/+1

2012-10-03	Rename nix-worker to nix-daemon	Eelco Dolstra	1	-1/+1

2012-10-03	Remove bin2c	Eelco Dolstra	1	-1/+0

2012-09-14	Test whether GNU tar understands --warning=no-timestamp	Eelco Dolstra	1	-2/+2
	http://hydra.nixos.org/build/3031618
2012-08-27	Whitespace	Eelco Dolstra	1	-7/+7

2012-08-01	Use a GNU tar flag to shut up warnings about implausibly old timestamp	Eelco Dolstra	1	-0/+12

2012-07-26	Merge branch 'master' into no-manifests	Eelco Dolstra	1	-0/+17

2012-07-23	Handle platforms that don't support linking to a symlink	Eelco Dolstra	1	-0/+12
	E.g. Darwin doesn't allow this.
2012-07-23	Use lutimes() if available to canonicalise the timestamp of symlinks	Eelco Dolstra	1	-0/+5
	Also use utimes() instead of utime() if lutimes() is not available.
2012-07-09	Add WWW::Curl as a dependency	Eelco Dolstra	1	-0/+11

2012-06-29	Use XZ compression in binary caches	Eelco Dolstra	1	-0/+1
	XZ compresses significantly better than bzip2. Here are the compression ratios and execution times (using 4 cores in parallel) on my /var/run/current-system (3.1 GiB): bzip2: total compressed size 849.56 MiB, 30.8% [2m08] xz -6: total compressed size 641.84 MiB, 23.4% [6m53] xz -7: total compressed size 621.82 MiB, 22.6% [7m19] xz -8: total compressed size 599.33 MiB, 21.8% [7m18] xz -9: total compressed size 588.18 MiB, 21.4% [7m40] Note that compression takes much longer. More importantly, however, decompression is much faster: bzip2: 1m47.274s xz -6: 0m55.446s xz -7: 0m54.119s xz -8: 0m52.388s xz -9: 0m51.842s The only downside to using -9 is that decompression takes a fair amount (~65 MB) of memory.
2012-05-10	Support building with the Perl XS bindings disabled	Eelco Dolstra	1	-9/+16
	Since the Perl bindings require shared libraries, this is required on platforms such as Cygwin where we do a static build.
2012-05-04	Require SQLite >= 3.6.19	Eelco Dolstra	1	-1/+1
	Nix needs SQLite's foreign key constraint feature, which was introduced in 3.6.19. Without it, the database won't be cleaned up correctly when paths are deleted. See e.g. http://hydra.nixos.org/build/2494142.