depot - monorepo for the virus lounge

Age	Commit message (Collapse)	Author	Files	Lines
2017-10-30	Allow optional localhost network access to sandboxed derivations	Dan Peebles	2	-5/+33
	This will allow bind and connect to 127.0.0.1, which can reduce purity/ security (if you're running a vulnerable service on localhost) but is also needed for a ton of test suites, so I'm leaving it turned off by default but allowing certain derivations to turn it on as needed. It also allows DNS resolution of arbitrary hostnames but I haven't found a way to avoid that. In principle I'd just want to allow resolving localhost but that doesn't seem to be possible. I don't think this belongs under `build-use-sandbox = relaxed` because we want it on Hydra and I don't think it's the end of the world.
2017-10-17	Shift Darwin sandbox to separate installed files	Dan Peebles	2	-13/+11
	This makes it slightly more manageable to see at a glance what in a build's sandbox profile is unique to the build and what is standard. Also a first step to factoring more of our Darwin logic into scheme functions that will allow us a bit more flexibility. And of course less of that nasty codegen in C++! 😀
2017-10-12	Add option to disable the seccomp filter	Eelco Dolstra	2	-0/+8
	I needed this to test ACL/xattr removal in canonicalisePathMetaData(). Might also be useful if you need to build old Nixpkgs that doesn't have the required patches to remove setuid/setgid creation.
2017-10-02	Reverse retry logic to retry in all but a few cases	Dan Peebles	1	-20/+37
	It was getting too much like whac-a-mole listing all the retriable error conditions, so we now retry by default and list the cases where retrying is almost certainly hopeless.
2017-09-18	Don't remove Content-Encoding in fetchurl / nix-prefetch-url	Eelco Dolstra	3	-1/+4
	Fixes #1568.
2017-09-14	RemoteStore: Add option to drop old connections from the pool	Eelco Dolstra	2	-1/+21
	This is a hack to make hydra-queue-runner free its temproots periodically, thereby ensuring that garbage collection of the corresponding paths is not blocked until the queue runner is restarted. It would be better if temproots could be released earlier than at process exit. I started working on a RAII object returned by functions like addToStore() that releases temproots. However, this would be a pretty massive change so I gave up on it for now.
2017-09-14	Show the pid of temporary roots	Eelco Dolstra	2	-11/+16

2017-09-14	nix-store -q --roots / --gc --print-roots: Print temporary / in-memory roots	Eelco Dolstra	2	-22/+41
	For example, $ nix-store -q --roots /nix/store/7phd2sav7068nivgvmj2vpm3v47fd27l-patchelf-0.8pre845_0315148 {temp:1} denotes that the path is only being kept alive by a temporary root (i.e. /nix/var/nix/temproots/). Similarly, $ nix-store --gc --print-roots ... {memory:9} -> /nix/store/094gpjn9f15ip17wzxhma4r51nvsj17p-curl-7.53.1 shows that curl is being used by some process.
2017-09-08	LegacySSHStore: Include signatures etc.	Eelco Dolstra	2	-1/+8

2017-09-08	copyStorePath(): Fill in missing narHash regardless of checkSigs	Eelco Dolstra	1	-5/+1
	I don't remember what the reasoning was here, but security is provided by the signatures, not by whether the hash is provided by the other store.
2017-09-08	Communicate the structured log FD to builders	Eelco Dolstra	1	-1/+6
	Since we may use a dedicated file descriptor in the future, this allows us to change it. So builders can do if [[ -n $NIX_LOG_FD ]]; then echo "@nix { message... }" >&$NIX_LOG_FD fi
2017-09-06	Fix abort when the GC thread gets an exception	Eelco Dolstra	1	-13/+21

2017-09-05	Add automatic garbage collection	Eelco Dolstra	5	-1/+123
	Nix can now automatically run the garbage collector during builds or while adding paths to the store. The option "min-free = <bytes>" specifies that Nix should run the garbage collector whenever free space in the Nix store drops below <bytes>. It will then delete garbage until "max-free" bytes are available. Garbage collection during builds is asynchronous; running builds are not paused and new builds are not blocked. However, there also is a synchronous GC run prior to the first build/substitution. Currently, no old GC roots are deleted (as in "nix-collect-garbage -d").
2017-09-05	GC: Don't delete own temproots file	Eelco Dolstra	3	-34/+34
	Since file locks are per-process rather than per-file-descriptor, the garbage collector would always acquire a lock on its own temproots file and conclude that it's stale.
2017-09-01	Abort curl downloads if there is no progress for 5 minutes	Eelco Dolstra	1	-1/+6
	Maybe this will fix the curl hangs on macOS. (We could also use CURLOPT_TIMEOUT but that seems more of a sledgehammer.)
2017-08-31	Call queryMissing() prior to building	Eelco Dolstra	2	-0/+14
	Without this, substitute info is fetched sequentially, which is superslow. In the old UI (e.g. nix-build), we call printMissing(), which calls queryMissing(), thereby preheating the binary cache cache. But the new UI doesn't do that.
2017-08-31	Add an activity for binary cache queries	Eelco Dolstra	2	-1/+8

2017-08-31	Rename a few configuration options	Eelco Dolstra	3	-44/+56
	In particular, drop the "build-" and "gc-" prefixes which are pointless. So now you can say nix build --no-sandbox instead of nix build --no-build-use-sandbox
2017-08-28	Give activities a verbosity level again	Eelco Dolstra	5	-9/+12
	And print them (separately from the progress bar) given sufficient -v flags.
2017-08-28	Don't send progress messages to older clients	Eelco Dolstra	1	-1/+1

2017-08-28	Tunnel progress messages from the daemon to the client	Eelco Dolstra	2	-11/+61
	This makes the progress bar work for non-root users.
2017-08-25	Simplify	Eelco Dolstra	1	-10/+36

2017-08-25	Allow derivations to update the build phase	Eelco Dolstra	1	-0/+5
	So the progress bar can show [1/0/1 built, 0.0 MiB DL] building hello-2.10 (configuring): checking whether pread is declared without a macro... yes
2017-08-25	Allow activities to be nested	Eelco Dolstra	4	-6/+13
	In particular, this allows more relevant activities ("substituting X") to supersede inferior ones ("downloading X").
2017-08-25	Restore activity metadata	Eelco Dolstra	1	-2/+5
	This allows the progress bar to display "building perl-5.22.3" instead of "building /nix/store/<hash>-perl-5.22.3.drv".
2017-08-21	Clean up JSON construction	Eelco Dolstra	1	-3/+18

2017-08-21	Allow builders to create activities	Eelco Dolstra	1	-6/+72
	Actually, currently they can only create download activities. Thus, downloads by builtins.fetchurl show up in the progress bar.
2017-08-16	nix optimise-store: Show how much space has been freed	Eelco Dolstra	3	-7/+11

2017-08-16	nix optimise-store: Add	Eelco Dolstra	1	-2/+12
	This replaces "nix-store --optimise". Main difference is that it has a progress indicator.
2017-08-16	Progress indicator: Cleanup	Eelco Dolstra	3	-12/+11

2017-08-16	Progress indicator: More improvements	Eelco Dolstra	1	-9/+47

2017-08-16	Progress indicator: Show number of active items	Eelco Dolstra	2	-13/+12

2017-08-16	Progress indicator: Unify "copying" and "substituting"	Eelco Dolstra	2	-14/+16
	They're the same thing after all. Example: $ nix build --store local?root=/tmp/nix nixpkgs.firefox-unwrapped [0/1 built, 49/98 copied, 16.3/92.8 MiB DL, 55.8/309.2 MiB copied] downloading 'https://cache.nixos.org/nar/0pl9li1jigcj2dany47hpmn0r3r48wc4nz48v5mqhh426lgz3bz6.nar.xz'
2017-08-16	Improve substitution progress indicator	Eelco Dolstra	2	-7/+59
	E.g. $ nix build --store local?root=/tmp/nix nixpkgs.firefox-unwrapped [0/1 built, 1/97/98 fetched, 65.8/92.8 MiB DL, 203.2/309.2 MiB copied] downloading 'https://cache.nixos.org/nar/1czm9fk0svacy4h6a3fzkpafi4f7a9gml36kk8cq1igaghbspg3k.nar.xz'
2017-08-16	nix copy: Improve progress indicator	Eelco Dolstra	1	-4/+28
	It now shows the amount of data copied: [8/1038 copied, 160.4/1590.9 MiB copied] copying path '...'
2017-08-16	nix copy: Revive progress bar	Eelco Dolstra	2	-2/+25

2017-08-16	Disallow SSH host names starting with a dash	Eelco Dolstra	2	-8/+12

2017-08-10	Style fix	Eelco Dolstra	1	-1/+2

2017-08-09	Use /proc/self/fd to efficiently close all FDs on Linux	Eelco Dolstra	1	-1/+1
	Issue #1506.
2017-07-31	Merge branch 'macOS' of https://github.com/davidak/nix	Eelco Dolstra	1	-2/+2

2017-07-30	Replace Unicode quotes in user-facing strings by ASCII	Jörg Thalheim	28	-320/+320
	Relevant RFC: NixOS/rfcs#4 $ ag -l \| xargs sed -i -e "/\"/s/’/'/g;/\"/s/‘/'/g"
2017-07-30	replace "OS X" with "macOS"	davidak	1	-2/+2

2017-07-20	FD_SETSIZE check: BuildError -> Error	Eelco Dolstra	1	-3/+2
	BuildError denotes a permanent build failure, which is not the case here.
2017-07-18	Do not try to fill fd_set with fd>=FD_SETSIZE	Dmitry Kalinkin	1	-0/+3
	This is UB and causes buffer overflow and crash on linux.
2017-07-17	Always use base-16 for hashed mirror lookups	Eelco Dolstra	1	-1/+2
	In particular, don't use base-64, which we don't support. (We do have base-32 redirects for hysterical reasons.) Also, add a test for the hashed mirror feature.
2017-07-17	Make the hashes mirrors used by builtins.fetchurl configurable	Eelco Dolstra	2	-6/+12
	In particular, this allows it to be disabled in our tests.
2017-07-17	Fix accidental printError	Eelco Dolstra	1	-1/+1

2017-07-14	nix path-info: Show download sizes for binary cache stores	Eelco Dolstra	2	-8/+29
	E.g. $ nix path-info --json --store https://cache.nixos.org nixpkgs.thunderbird -S ... "downloadHash": "sha256:1jlixpzi225wwa0f4xdrwrqgi47ip1qpj9p06fyxxg07sfmyi4q0", "downloadSize": 43047620, "closureDownloadSize": 84745960 } ]
2017-07-14	nix path-info: Don't barf on invalid paths	Eelco Dolstra	2	-29/+37
	Now you get [ { "path": "/nix/store/fzvliz4j5xzvnd0w5zgw2l0ksqh578yk-bla", "valid": false } ]
2017-07-11	fetchTarball: Prevent concurrent downloads of the same file	Eelco Dolstra	1	-0/+4
	Fixes #849.