depot - monorepo for the virus lounge

Age	Commit message (Collapse)	Author	Files	Lines
2008-08-02	* Make nix-env --dry-run print the paths to be substituted correctly	Eelco Dolstra	1	-7/+0
	again. (After the previous substituter mechanism refactoring I didn't update the code that obtains the references of substitutable paths.) This required some refactoring: the substituter programs are now kept running and receive/respond to info requests via stdin/stdout.
2008-06-18	(no commit message)	Eelco Dolstra	1	-1/+1

2008-06-18	* Garbage collector: option `--max-freed' to stop after at least N	Eelco Dolstra	1	-0/+11
	bytes have been freed, `--max-links' to stop when the Nix store directory has fewer than N hard links (the latter being important for very large Nix stores on filesystems with a 32000 subdirectories limit).
2008-06-09	* Merged the no-bdb branch (-r10900:HEAD	Eelco Dolstra	1	-2/+15
	https://svn.nixos.org/repos/nix/nix/branches/no-bdb).
2008-01-29	* nix-store --dump-db / --load-db to dump/load the Nix DB.	Eelco Dolstra	1	-1/+37
	* nix-store --register-validity: option to supply the content hash of each path. * Removed compatibility with Nix <= 0.7 stores.
2007-11-29	* nix-env -e: support uninstalling by path, so that one can say	Eelco Dolstra	1	-0/+20
	$ nix-env -e $(which firefox) or $ nix-env -e /nix/store/nywzlygrkfcgz7dfmhm5xixlx1l0m60v-pan-0.132 * nix-env -i: if an argument contains a slash anywhere, treat it as a path and follow it through symlinks into the Nix store. This allows things like $ nix-build -A firefox $ nix-env -i ./result * nix-env -q/-i/-e: don't complain when the `' selector doesn't match anything. In particular, `nix-env -q \' doesn't fail anymore on an empty profile.
2007-08-12	* Get rid of the substitutes database table (NIX-47). Instead, if we	Eelco Dolstra	1	-1/+20
	need any info on substitutable paths, we just call the substituters (such as download-using-manifests.pl) directly. This means that it's no longer necessary for nix-pull to register substitutes or for nix-channel to clear them, which makes those operations much faster (NIX-95). Also, we don't have to worry about keeping nix-pull manifests (in /nix/var/nix/manifests) and the database in sync with each other. The downside is that there is some overhead in calling an external program to get the substitutes info. For instance, "nix-env -qas" takes a bit longer. Abolishing the substitutes table also makes the logic in local-store.cc simpler, as we don't need to store info for invalid paths. On the downside, you cannot do things like "nix-store -qR" on a substitutable but invalid path (but nobody did that anyway). * Never catch interrupts (the Interrupted exception).
2007-01-29	* Doh!	Eelco Dolstra	1	-2/+0

2007-01-29	* computeStorePathForText: take the references into account when	Eelco Dolstra	1	-2/+13
	computing the store path (NIX-77). This is an important security property in multi-user Nix stores. Note that this changes the store paths of derivations (since the derivation aterms are added using addTextToStore), but not most outputs (unless they use builtins.toFile).
2006-12-12	* New primop builtins.filterSource, which can be used to filter files	Eelco Dolstra	1	-3/+3
	from a source directory. All files for which a predicate function returns true are copied to the store. Typical example is to leave out the .svn directory: stdenv.mkDerivation { ... src = builtins.filterSource (path: baseNameOf (toString path) != ".svn") ./source-dir; # as opposed to # src = ./source-dir; } This is important because the .svn directory influences the hash in a rather unpredictable and variable way.
2006-12-04	* Refactoring.	Eelco Dolstra	1	-4/+2

2006-12-02	* Remove SwitchToOriginalUser, we're not going to need it anymore.	Eelco Dolstra	1	-12/+2

2006-12-01	* Merge addToStore and addToStoreFixed.	Eelco Dolstra	1	-2/+2
	* addToStore now adds unconditionally, it doesn't use readOnlyMode. Read-only operation is up to the caller (who can call computeStorePathForPath).
2006-12-01	* More operations.	Eelco Dolstra	1	-1/+39
	* addToStore() and friends: don't do a round-trip to the worker if we're only interested in the path (i.e., in read-only mode).
2006-11-30	* More remote operations.	Eelco Dolstra	1	-0/+6
	* Added new operation hasSubstitutes(), which is more efficient than querySubstitutes().size() > 0.
2006-11-30	* When NIX_REMOTE is set to "slave", fork off nix-worker in slave	Eelco Dolstra	1	-0/+1
	mode. Presumably nix-worker would be setuid to the Nix store user. The worker performs all operations on the Nix store and database, so the caller can be completely unprivileged. This is already much more secure than the old setuid scheme, since the worker doesn't need to do Nix expression evaluation and so on. Most importantly, this means that it doesn't need to access any user files, with all resulting security risks; it only performs pure store operations. Once this works, it is easy to move to a daemon model that forks off a worker for connections established through a Unix domain socket. That would be even more secure.
2006-11-30	* Skeleton of remote store implementation.	Eelco Dolstra	1	-1/+8

2006-11-30	* Refactoring. There is now an abstract interface class StoreAPI	Eelco Dolstra	1	-0/+107
	containing functions that operate on the Nix store. One implementation is LocalStore, which operates on the Nix store directly. The next step, to enable secure multi-user Nix, is to create a different implementation RemoteStore that talks to a privileged daemon process that uses LocalStore to perform the actual operations.