depot - monorepo for the virus lounge

Age	Commit message (Collapse)	Author	Files	Lines
2013-03-08	Revert "Prevent config.h from being clobbered"	Eelco Dolstra	1	-1/+1
	This reverts commit 28bba8c44f484eae38e8a15dcec73cfa999156f6.
2013-03-07	Prevent config.h from being clobbered	Eelco Dolstra	1	-1/+1

2013-02-27	Refactoring: Split off the non-recursive canonicalisePathMetaData()	Eelco Dolstra	1	-1/+1
	Also, change the file mode before changing the owner. This prevents a slight time window in which a setuid binary would be setuid root.
2013-02-26	Security: Don't allow builders to change permissions on files they don't own	Eelco Dolstra	1	-1/+1
	It turns out that in multi-user Nix, a builder may be able to do ln /etc/shadow $out/foo Afterwards, canonicalisePathMetaData() will be applied to $out/foo, causing /etc/shadow's mode to be set to 444 (readable by everybody but writable by nobody). That's obviously Very Bad. Fortunately, this fails in NixOS's default configuration because /nix/store is a bind mount, so "ln" will fail with "Invalid cross-device link". It also fails if hard-link restrictions are enabled, so a workaround is: echo 1 > /proc/sys/fs/protected_hardlinks The solution is to check that all files in $out are owned by the build user. This means that innocuous operations like "ln ${pkgs.foo}/some-file $out/" are now rejected, but that already failed in chroot builds anyway.
2013-01-03	Clear any immutable bits in the Nix store	Eelco Dolstra	1	-9/+0
	Doing this once makes subsequent operations like garbage collecting more efficient since we don't have to call makeMutable() first.
2012-09-19	Remove setting of the immutable bit	Eelco Dolstra	1	-57/+31
	Using the immutable bit is problematic, especially in conjunction with store optimisation. For instance, if the garbage collector deletes a file, it has to clear its immutable bit, but if the file has additional hard links, we can't set the bit afterwards because we don't know the remaining paths. So now that we support having the entire Nix store as a read-only mount, we may as well drop the immutable bit. Unfortunately, we have to keep the code to clear the immutable bit for backwards compatibility.
2012-08-27	Merge branch 'master' into no-manifests	Eelco Dolstra	1	-31/+43

2012-08-07	Don't warn about maximum link count exceeded on 0-byte files	Eelco Dolstra	1	-2/+4

2012-08-05	Fix race condition when two processes create a hard link to a file in .links	Eelco Dolstra	1	-27/+37
	This is a problem because one process may set the immutable bit before the second process has created its link. Addressed random Hydra failures such as: error: cannot rename `/nix/store/.tmp-link-17397-1804289383' to `/nix/store/rsvzm574rlfip3830ac7kmaa028bzl6h-nixos-0.1pre-git/upstart-interface-version': Operation not permitted
2012-08-05	Fix race condition when two processes create the same link in /nix/store/.links	Eelco Dolstra	1	-4/+4

2012-08-01	Merge branch 'master' into no-manifests	Eelco Dolstra	1	-1/+4

2012-08-01	Doh	Eelco Dolstra	1	-1/+2

2012-08-01	Make ‘nix-store --optimise’ interruptible	Eelco Dolstra	1	-0/+2

2012-07-30	Refactor settings processing	Eelco Dolstra	1	-15/+13
	Put all Nix configuration flags in a Settings object.
2012-07-26	Merge branch 'master' into no-manifests	Eelco Dolstra	1	-104/+114

2012-07-23	Handle platforms that don't support linking to a symlink	Eelco Dolstra	1	-2/+7
	E.g. Darwin doesn't allow this.
2012-07-23	Unlink the right file	Eelco Dolstra	1	-2/+2

2012-07-23	Automatically optimise the Nix store when a new path is added	Eelco Dolstra	1	-9/+13
	Auto-optimisation is enabled by default. It can be turned off by setting auto-optimise-store to false in nix.conf.
2012-07-23	optimiseStore(): Use a content-addressed file store in /nix/store/.links	Eelco Dolstra	1	-106/+107
	optimiseStore() now creates persistent, content-addressed hard links in /nix/store/.links. For instance, if it encounters a file P with hash H, it will create a hard link P' = /nix/store/.link/<H> to P if P' doesn't already exist; if P' exist, then P is replaced by a hard link to P'. This is better than the previous in-memory map, because it had the tendency to unnecessarily replace hard links with a hard link to whatever happened to be the first file with a given hash it encountered. It also allows on-the-fly, incremental optimisation.
2012-07-11	Rename queryValidPaths() to queryAllValidPaths()	Eelco Dolstra	1	-1/+1

2012-02-15	On Linux, make the Nix store really read-only by using the immutable bit	Eelco Dolstra	1	-2/+24
	I was bitten one time too many by Python modifying the Nix store by creating *.pyc files when run as root. On Linux, we can prevent this by setting the immutable bit on files and directories (as in ‘chattr +i’). This isn't supported by all filesystems, so it's not an error if setting the bit fails. The immutable bit is cleared by the garbage collector before deleting a path. The only tricky aspect is in optimiseStore(), since it's forbidden to create hard links to an immutable file. Thus optimiseStore() temporarily clears the immutable bit before creating the link.
2010-11-16	* Store the size of a store path in the database (to be precise, the	Eelco Dolstra	1	-1/+1
	size of the NAR serialisation of the path, i.e., `nix-store --dump PATH'). This is useful for Hydra.
2010-06-04	* Applied a patch from David Brown to prevent `nix-store --optimise'	Eelco Dolstra	1	-1/+15
	from failing on rename() on BtrFS.
2009-09-24	* And some more.	Eelco Dolstra	1	-0/+1

2009-04-21	* Use foreach in a lot of places.	Eelco Dolstra	1	-2/+2

2008-06-18	* `nix-store --optimise': handle files with >= 32000 hard links.	Eelco Dolstra	1	-6/+31
	(There can easily be more than 32000 occurrences of the empty file.)
2008-06-18	* Some refactoring: put the GC options / results in separate structs.	Eelco Dolstra	1	-0/+1
	* The garbage collector now also prints the number of blocks freed.
2008-06-09	* Merged the no-bdb branch (-r10900:HEAD	Eelco Dolstra	1	-0/+129
	https://svn.nixos.org/repos/nix/nix/branches/no-bdb).