depot - monorepo for the virus lounge

Age	Commit message (Collapse)	Author	Files	Lines
2019-06-16	Run builds in a pseudo-terminal	Eelco Dolstra	1	-8/+46
	This allows many programs (e.g. gcc, clang, cmake) to print colorized log output (assuming $TERM is set to a value like "xterm"). There are other ways to get colors, in particular setting CLICOLOR_FORCE, but they're less widely supported and can break programs that parse tool output.
2019-05-13	Merge pull request #2802 from LnL7/fix-needs-hashrewrite	Eelco Dolstra	1	-12/+16
	build: move needsHashRewrite initialization to startBuilder
2019-05-12	build: make needsHashRewrite a method	Daiderd Jordan	1	-12/+16

2019-05-12	handleDiffHook: stop passing allowVfork	Graham Christensen	1	-3/+1

2019-05-12	runProgram: support gid, uid, chdir	Graham Christensen	1	-20/+16

2019-05-12	chdir, setgroups	Graham Christensen	1	-0/+4

2019-05-12	diff hook: execute as the build user, and pass the temp dir	Graham Christensen	1	-12/+29

2019-05-12	build: run diff-hook under --check and document diff-hook	Graham Christensen	1	-12/+18

2019-05-12	build: move needsHashRewrite initialization to startBuilder	Daiderd Jordan	1	-7/+7
	The value of useChroot is not set yet in the constructor, resulting in hash rewriting being enabled in certain cases where it should not be. Fixes #2801
2019-05-03	Fix "Bad system call" running i686-linux binaries on x86_64-linux	Eelco Dolstra	1	-4/+4
	To determine which seccomp filters to install, we were incorrectly using settings.thisSystem, which doesn't denote the actual system when --system is used. Fixes #2791.
2019-04-17	build: only skip hash rewriting for sandboxing on linux	Daiderd Jordan	1	-2/+18
	The sandbox on darwin, and possibly other future platforms, doesn't have enough isolation to redirect outputs without hash rewriting.
2019-04-01	primeCache(): Barf if builds are needed but not allowed	Eelco Dolstra	1	-0/+6
	Fixes #2753.
2019-03-14	experimental/optional -> optional	Eelco Dolstra	1	-5/+5

2019-02-05	Revert "Restore parent mount namespace before executing a child process"	Eelco Dolstra	1	-2/+0
	This reverts commit a0ef21262f4d5652bfb65cfacaec01d89c475a93. This doesn't work in 'nix run' and nix-shell because setns() fails in multithreaded programs, and Boehm GC mark threads are uncancellable. Fixes #2646.
2018-12-12	libstore: improve hash mismatch error messages	zimbatm	1	-2/+2
	Use the same output ordering and format everywhere. This is such a common issue that we trade the single-line error message for more readability. Old message: ``` fixed-output derivation produced path '/nix/store/d4nw9x2sy9q3r32f3g5l5h1k833c01vq-example.com' with sha256 hash '08y4734bm2zahw75b16bcmcg587vvyvh0n11gwiyir70divwp1rm' instead of the expected hash '1xzwnipjd54wl8g93vpw6hxnpmdabq0wqywriiwmh7x8k0lvpq5m' ``` New message: ``` hash mismatch in fixed-output derivation '/nix/store/d4nw9x2sy9q3r32f3g5l5h1k833c01vq-example.com': wanted: sha256:1xzwnipjd54wl8g93vpw6hxnpmdabq0wqywriiwmh7x8k0lvpq5m got: sha256:08y4734bm2zahw75b16bcmcg587vvyvh0n11gwiyir70divwp1rm ```
2018-11-15	Fix 'Read-only file system' when building a derivation	Eelco Dolstra	1	-0/+2

2018-10-27	Restore old (dis)allowedRequisites behaviour for self-references	Eelco Dolstra	1	-29/+34
	stdenv relies on this. So ignore self-references (but only in legacy non-structured attributes mode).
2018-10-23	Per-output reference and closure size checks	Eelco Dolstra	1	-51/+168
	In structured-attributes derivations, you can now specify per-output checks such as: outputChecks."out" = { # The closure of 'out' must not be larger than 256 MiB. maxClosureSize = 256 * 1024 * 1024; # It must not refer to C compiler or to the 'dev' output. disallowedRequisites = [ stdenv.cc "dev" ]; }; outputChecks."dev" = { # The 'dev' output must not be larger than 128 KiB. maxSize = 128 * 1024; }; Also fixed a bug in allowedRequisites that caused it to ignore self-references.
2018-09-28	Check requiredSystemFeatures for local builds	Eelco Dolstra	1	-12/+9
	For example, this prevents a "kvm" build on machines that don't have KVM. Fixes #2012.
2018-09-28	Move structured attrs handling into a separate class	Eelco Dolstra	1	-98/+15
	This is primarily because Derivation::{can,will}BuildLocally() depends on attributes like preferLocalBuild and requiredSystemFeatures, but it can't handle them properly because it doesn't have access to the structured attributes.
2018-09-28	Remove obsolete check on system features	Eelco Dolstra	1	-1/+0

2018-09-28	Support special attributes in structured attributes derivations	Eelco Dolstra	1	-94/+175
	E.g. __noChroot and allowedReferences now work correctly. We also now check that the attribute type is correct. For instance, instead of allowedReferences = "out"; you have to write allowedReferences = [ "out" ]; Fixes #2453.
2018-09-07	If fallback is enabled, temporarily disable substituters after a failure	Eelco Dolstra	1	-0/+6
	Otherwise, we just keep asking the substituter for other .narinfo files, which can take a very long time due to retries/timeouts.
2018-09-07	Handle queryPathInfo() failure from substituters when fallback is enabled	Eelco Dolstra	1	-0/+7
	Fixes #1990.
2018-08-31	Add localhost alias for ::1 to the sandbox	Eelco Dolstra	1	-1/+1

2018-06-12	Fix #2162: use getaddrinfo instead of curl to preload NSS	Yorick van Pelt	1	-4/+8

2018-06-05	Don't require --fallback to recover from disappeared binary cache NARs	Eelco Dolstra	1	-11/+21

2018-05-30	Modularize config settings	Eelco Dolstra	1	-2/+4
	Allow global config settings to be defined in multiple Config classes. For example, this means that libutil can have settings and evaluator settings can be moved out of libstore. The Config classes are registered in a new GlobalConfig class to which config files etc. are applied. Relevant to https://github.com/NixOS/nix/issues/2009 in that it removes the need for ad hoc handling of useCaseHack, which was the underlying cause of that issue.
2018-05-03	Don't set a CA assertion for paths with references	Eelco Dolstra	1	-0/+2
	Really fixes #2133.
2018-05-02	Fix some random -Wconversion warnings	Eelco Dolstra	1	-3/+3

2018-04-23	Merge branch 'aarch64-armv7' of git://github.com/lheckemann/nix	Shea Levy	1	-0/+4
	Support extra compatible architectures (#1916)
2018-04-20	build.cc: fix bind-mount of /dev/{pts,ptmx} fallback	Will Dietz	1	-2/+2
	Don't bind-mount these to themselves, mount them into the chroot directory. Fixes pty issues when using sandbox on CentOS 7.4. (build of perlPackages.IOTty fails before this change)
2018-04-17	exportReferences: Check whether the path is in the input closure	Eelco Dolstra	1	-11/+14
	Fixes #2082.
2018-04-13	Fix #1921	Eelco Dolstra	1	-1/+1

2018-03-22	Merge branch 'fix/avoid-large-stack-buffers' of https://github.com/dtzWill/nix	Eelco Dolstra	1	-3/+3

2018-03-20	Make <nix/buildenv.nix> a builtin builder	Eelco Dolstra	1	-0/+2
	This avoids sandbox annoyances.
2018-03-20	Hack to get SSH error messages from build-remote	Eelco Dolstra	1	-0/+5
	E.g. cannot build on 'ssh://mac1': cannot connect to 'mac1': bash: nix-store: command not found cannot build on 'ssh://mac2': cannot connect to 'mac2': Host key verification failed. cannot build on 'ssh://mac3': cannot connect to 'mac3': Received disconnect from 213... port 6001:2: Too many authentication failures Authentication failed.
2018-03-14	Use boost::format from the boost package	Eelco Dolstra	1	-3/+3
	Note that this only requires headers from boost so it doesn't add a runtime dependency. Also, use Nixpkgs 18.03.
2018-03-13	Typo	Eelco Dolstra	1	-1/+1

2018-03-06	rand() -> random(), since we use srandom().	Will Dietz	1	-1/+1
	rand() requires we call srand() instead, but might as well use random().
2018-03-02	hoist vector out of loop just in case	Will Dietz	1	-1/+1

2018-03-02	don't allocate large buffers on the stack	Will Dietz	1	-3/+3

2018-02-27	seccomp: add 32-bit ARM on aarch64-linux	Linus Heckemann	1	-0/+4
	This allows building armv[67]l-linux derivations on compatible aarch64 machines. Failure to add the architecture may result from missing hardware support, in which case we can't run 32-bit binaries and don't need to restrict them with seccomp anyway,
2018-02-19	Fix incorrect (and unnecessary) format string	Eelco Dolstra	1	-3/+3
	https://hydra.nixos.org/eval/1434547#tabs-now-fail
2018-02-19	Don't silently succeed seccomp setup when !HAVE_SECCOMP.	Shea Levy	1	-2/+7
	Running Nix with build users without seccomp on Linux is dangerous, and administrators should very explicitly opt-in to it.
2018-02-18	configure: Add a flag to disable seccomp.	Shea Levy	1	-1/+3
	This is needed for new arches where libseccomp support doesn't exist yet. Fixes #1878.
2018-02-12	Fix 'deadlock: trying to re-acquire self-held lock'	Eelco Dolstra	1	-13/+17
	This was caused by derivations with 'allowSubstitutes = false'. Such derivations will be built locally. However, if there is another SubstitionGoal that has the output of the first derivation in its closure, then the path will be simultaneously built and substituted. There was a check to catch this situation (via pathIsLockedByMe()), but it no longer worked reliably because substitutions are now done in another thread. (Thus the comment 'It can't happen between here and the lockPaths() call below because we're not allowing multi-threading' was no longer valid.) The fix is to handle the path already being locked in both SubstitutionGoal and DerivationGoal.
2018-02-09	nix: Ensure that the user sees errors from substituters	Eelco Dolstra	1	-3/+3

2018-02-07	Improve filtering of ANSI escape sequences in build logs	Eelco Dolstra	1	-1/+1
	All ANSI sequences except color setting are now filtered out. In particular, terminal resets (such as from NixOS VM tests) are filtered out. Also, fix the completely broken tab character handling.
2018-02-05	Allow substituters to be marked as trusted	Eelco Dolstra	1	-2/+5
	This is needed by nixos-install, which uses the Nix store on the installation CD as a substituter. We don't want to disable signature checking entirely because substitutes from cache.nixos.org should still be checked. So now we can pas "local?trusted=1" to mark only the Nix store in /nix as not requiring signatures. Fixes #1819.