depot - monorepo for the virus lounge

Age	Commit message (Collapse)	Author	Files	Lines
2016-02-16	Rename ValidPathInfo::hash -> narHash for consistency	Eelco Dolstra	1	-3/+3

2016-02-04	Eliminate the "store" global variable	Eelco Dolstra	1	-63/+22
	Also, move a few free-standing functions into StoreAPI and Derivation. Also, introduce a non-nullable smart pointer, ref<T>, which is just a wrapper around std::shared_ptr ensuring that the pointer is never null. (For reference-counted values, this is better than passing a "T&", because the latter doesn't maintain the refcount. Usually, the caller will have a shared_ptr keeping the value alive, but that's not always the case, e.g., when passing a reference to a std::thread via std::bind.)
2016-01-31	Add build mode to compute fixed-output derivation hashes	Eelco Dolstra	1	-6/+32
	For example, $ nix-build --hash -A nix-repl.src will build the fixed-output derivation nix-repl.src (a fetchFromGitHub call), but instead of verifying the hash given in the Nix expression, it prints out the resulting hash, and then moves the result to its content-addressed location in the Nix store. E.g build produced path ‘/nix/store/504a4k6zi69dq0yjc0bm12pa65bccxam-nix-repl-8a2f5f0607540ffe56b56d52db544373e1efb980-src’ with sha256 hash ‘0cjablz01i0g9smnavhf86imwx1f9mnh5flax75i615ml71gsr88’ The goal of this is to make all nix-prefetch-* scripts unnecessary: we can just let Nix run the real thing (i.e., the corresponding fetch* derivation). Another example: $ nix-build --hash -E 'with import <nixpkgs> {}; fetchgit { url = "https://github.com/NixOS/nix.git"; sha256 = "ffffffffffffffffffffffffffffffffffffffffffffffffffff"; }' ... git revision is 9e7c1a4bbdbe6129dd9dc385776612c307d3d1bb ... build produced path ‘/nix/store/gmsnh9i7x4mb7pyd2ns7n3c9l90jfsi1-nix’ with sha256 hash ‘1188xb621diw89n25rifqg9lxnzpz7nj5bfh4i1y3dnis0dmc0zp’ (Having to specify a fake sha256 hash is a bit annoying...)
2016-01-12	--option build-repeat: Keep the differing output if -K is given	Eelco Dolstra	1	-7/+38
	Similar to 00903fa79961d7eb0fadeb9ed2d7cda7821dc293. Regardless of -K, we now also print which output differs.
2016-01-12	--check: Keep the differing output if -K is given	Eelco Dolstra	1	-2/+12
	This makes it easier to investigate the non-determinism, e.g. $ nix-build pkgs/stdenv/linux -A stage1.pkgs.zlib --check -K error: derivation ‘/nix/store/l54i8wlw22656i4pk05c52ngv9rpl39q-zlib-1.2.8.drv’ may not be deterministic: output ‘/nix/store/11a27shh6n2ivi4a7s964i65ql80cf27-zlib-1.2.8’ differs from ‘/nix/store/11a27shh6n2ivi4a7s964i65ql80cf27-zlib-1.2.8-check’ $ diffoscope /nix/store/11a27shh6n2ivi4a7s964i65ql80cf27-zlib-1.2.8 /nix/store/11a27shh6n2ivi4a7s964i65ql80cf27-zlib-1.2.8-check ... ├── lib/libz.a │ ├── metadata │ │ @@ -1,15 +1,15 @@ │ │ -rw-r--r-- 30001/30000 3096 Jan 12 15:20 2016 adler32.o ... │ │ +rw-r--r-- 30001/30000 3096 Jan 12 15:28 2016 adler32.o ...
2016-01-12	--check: Fix "failed to produce output path"	Eelco Dolstra	1	-1/+1
	This occured when sandbox building is disabled, at least one output exists, and at least one other output does not.
2016-01-12	--check: Fix assertion failure when some outputs are missing	Eelco Dolstra	1	-1/+1
	E.g. $ nix-build pkgs/stdenv/linux/ -A stage1.pkgs.perl --check nix-store: src/libstore/build.cc:1323: void nix::DerivationGoal::tryToBuild(): Assertion `buildMode != bmCheck \|\| validPaths.size() == drv->outputs.size()' failed. when perl.out exists but perl.man doesn't. The fix is to only check the outputs that exist. Note that "nix-build -A stage1.pkgs.all --check" will still give a (proper) error in this case.
2016-01-07	Fix "Bad address" executing build hook	Eelco Dolstra	1	-5/+9
	This was observed in the deb_debian7x86_64 build: http://hydra.nixos.org/build/29973215 Calling c_str() on a temporary should be fine because the temporary shouldn't be destroyed until after the execl() call, but who knows...
2016-01-07	Fix some signedness warnings	Eelco Dolstra	1	-1/+1

2016-01-06	nix-store --repair-path: Rebuild if there is no substituter	Eelco Dolstra	1	-2/+12

2016-01-06	Fix --repair failure on multiple-output derivations	Eelco Dolstra	1	-1/+3
	If repair found a corrupted/missing path that depended on a multiple-output derivation, and some of the outputs of the latter were not present, it failed with a message like error: path ‘/nix/store/cnfn9d5fjys1y93cz9shld2xwaibd7nn-bash-4.3-p42-doc’ is not valid
2016-01-05	Fix non-Darwin build	Eelco Dolstra	1	-0/+2

2016-01-05	libstore: mmap() returns MAP_FAILED, not NULL on failure	Tuomas Tynkkynen	1	-1/+1

2016-01-04	Don't allow sandbox profile except in relaxed mode	Eelco Dolstra	1	-5/+10
	This makes Darwin consistent with Linux: Nix expressions can't break out of the sandbox unless relaxed sandbox mode is enabled. For the normal sandbox mode this will require fixing #759 however.
2015-12-29	Fix regression in passAsFile	Eelco Dolstra	1	-2/+3
	Caused by 8063fc497ab78fa72962b93874fe25dcca2b55ed. If tmpDir != tmpDirInSandbox (typically when there are multiple concurrent builds with the same name), the *Path attribute would not point to an existing file. This caused Nixpkgs' writeTextFile to write an empty file. In particular this showed up as hanging VM builds (because it would run an empty run-nixos-vm script and then wait for it to finish booting).
2015-12-22	Handle /tmp being a symlink	Eelco Dolstra	1	-1/+1
	Hopefully fixes Darwin sandbox regression introduced in 8063fc497ab78fa72962b93874fe25dcca2b55ed.
2015-12-22	Fix bad error message in Darwin chroots	Eelco Dolstra	1	-1/+3

2015-12-10	Build sandbox support etc. unconditionally on Linux	Eelco Dolstra	1	-39/+17
	Also, use "#if __APPLE__" instead of "#if SANDBOX_ENABLED" to prevent ambiguity.
2015-12-08	Clarify error message for hash mismatches (again)	Bjørn Forsman	1	-2/+2
	This is arguably nitpicky, but I think this new formulation is even clearer. My thinking is that it's easier to comprehend when the calculated hash value is displayed close to the output path. (I think it is somewhat similar to eliminating double negatives in logic statements.) The formulation is inspired / copied from the OpenEmbedded build tool, bitbake.
2015-12-02	Use deterministic $TMPDIR in sandbox	Eelco Dolstra	1	-28/+36
	Rather than using $<host-TMPDIR>/nix-build-<drvname>-<number>, the temporary directory is now always /tmp/nix-build-<drvname>-0. This improves bitwise-exact reproducibility for builds that store $TMPDIR in their build output. (Of course, those should still be fixed...)
2015-11-25	Merge branch 'p/sandbox-rename-minimal' of https://github.com/vcunat/nix	Eelco Dolstra	1	-8/+15

2015-11-25	Fix build failure introduced by #704	Eelco Dolstra	1	-2/+3
	Also, make the FreeBSD checks conditional on FreeBSD.
2015-11-24	Merge pull request #704 from ysangkok/freebsd-support	Eelco Dolstra	1	-0/+2
	FreeBSD support with knowledge about Linux emulation
2015-11-21	reintroduce host deps in tandem with sandbox profiles	Jude Taylor	1	-2/+1

2015-11-19	re-fix permissions for GHC	Jude Taylor	1	-2/+5

2015-11-19	Merge branch 'sandbox-profiles' of git://github.com/pikajude/nix	Shea Levy	1	-20/+28
	Temporarily allow derivations to describe their full sandbox profile. This will be eventually scaled back to a more secure setup, see the discussion at #695
2015-11-19	src/libstore/build.cc: clarify error message for hash mismatches	Peter Simons	1	-1/+1
	Nix reports a hash mismatch saying: output path ‘foo’ should have sha256 hash ‘abc’, instead has ‘xyz’ That message is slightly ambiguous and some people read that statement to mean the exact opposite of what it is supposed to mean. After this patch, the message will be: Nix expects output path ‘foo’ to have sha256 hash ‘abc’, instead it has ‘xyz’
2015-11-17	FreeBSD can build Linux 32-bit binaries	janus	1	-0/+2

2015-11-16	AutoDelete: Add default constructor with deletion disabled	Shea Levy	1	-1/+1

2015-11-15	Use AutoDelete for sandbox profile file	Shea Levy	1	-5/+14

2015-11-14	simplify build.cc using modern C++ features	Jude Taylor	1	-33/+31

2015-11-14	simplify build permissions	Jude Taylor	1	-13/+3

2015-11-14	use per-derivation sandbox profiles	Jude Taylor	1	-28/+39

2015-11-10	rename `chroot` to `sandbox` (fixes #656, close #682)	Vladimír Čunát	1	-8/+15
	- rename options but leav old names as lower-priority aliases, also "-dirs" -> "-paths" to get closer to the meaning - update docs to reflect the new names (old aliases are not documented), including a new file with release notes - tests need an update after corresponding changes to nixpkgs - __noChroot is left as it is (after discussion on the PR)
2015-11-09	Add option to verify build determinism	Eelco Dolstra	1	-9/+53
	Passing "--option build-repeat <N>" will cause every build to be repeated N times. If the build output differs between any round, the build is rejected, and the output paths are not registered as valid. This is primarily useful to verify build determinism. (We already had a --check option to repeat a previously succeeded build. However, with --check, non-deterministic builds are registered in the DB. Preventing that is useful for Hydra to ensure that non-deterministic builds don't end up getting published at all.)
2015-11-09	Revert "Allow using /bin and /usr/bin as impure prefixes on non-darwin by ↵	Eelco Dolstra	1	-1/+1
	default" This reverts commit 79ca5033329053caa364bb2f7e50953f859cc97f. Ouch, never noticed this. We definitely don't want to allow builds to have arbitrary access to /bin and /usr/bin, because then they can (for instance) bring in a bunch of setuid programs. Also, we shouldn't be encouraging the use of impurities in the default configuration.
2015-10-29	int2String() -> std::to_string()	Eelco Dolstra	1	-2/+2

2015-10-21	use nixDataDir instead of appending /share to PREFIX	Jude Taylor	1	-1/+1

2015-10-21	clarifying comment	Jude Taylor	1	-1/+5

2015-10-21	move preBuildHook defaulting to globals.cc	Jude Taylor	1	-7/+0

2015-10-21	restore old DEFAULT_ALLOWED_IMPURE_PREFIXES	Jude Taylor	1	-1/+1

2015-10-21	Add resolve-system-dependencies.pl	Jude Taylor	1	-0/+7

2015-10-21	fix line reading in preBuildHook	Jude Taylor	1	-1/+1

2015-10-21	remove sandbox defaults into a new file	Jude Taylor	1	-65/+5

2015-10-21	restore allowed impure prefixes	Jude Taylor	1	-1/+1

2015-10-21	remove an unneeded default impure-dep	Jude Taylor	1	-1/+0

2015-10-21	make sandbox builds more permissive	Jude Taylor	1	-2/+2

2015-10-21	add a few more permissions	Jude Taylor	1	-3/+45

2015-10-21	Allow builtin fetchurl regardless of the derivation's system attribute	Eelco Dolstra	1	-12/+13

2015-10-21	Fix segfault in builtin fetchurl	Eelco Dolstra	1	-3/+7
	The stack allocated for the builder was way too small (32 KB). This is sufficient for normal derivations, because they just do some setup and then exec() the actual builder. But for the fetchurl builtin derivation it's not enough. Also, allocating the stack on the caller's stack was fishy business.