Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2016-04-08 | Make LocalStore thread-safe | Eelco Dolstra | 4 | -214/+243 | |
Necessary for multi-threaded commands like "nix verify-paths". | |||||
2016-04-07 | nix verify-paths: Add ‘--sigs-needed <N>’ flag | Eelco Dolstra | 2 | -1/+10 | |
This specifies the number of distinct signatures required to consider each path "trusted". Also renamed ‘--no-sigs’ to ‘--no-trust’ for the flag that disables verifying whether a path is trusted (since a path can also be trusted if it has no signatures, but was built locally). | |||||
2016-04-07 | Use secret-key-files for verifying | Eelco Dolstra | 1 | -1/+14 | |
2016-04-07 | Sign locally-built paths | Eelco Dolstra | 3 | -1/+24 | |
Locally-built paths are now signed automatically using the secret keys specified by the ‘secret-key-files’ option. | |||||
2016-04-06 | Fix "tar: This does not look like a tar archive" with fetchTarball / -I http:// | Eelco Dolstra | 1 | -2/+1 | |
The 304 Not Modified was not handled correctly, so the empty result from the conditional request would overwrite the previous tarball. | |||||
2016-04-05 | Add "nix sign-paths" command | Eelco Dolstra | 1 | -0/+3 | |
E.g. $ nix sign-paths -k ./secret -r $(type -p geeqie) signs geeqie and all its dependencies using the key in ./secret. | |||||
2016-04-05 | Add "nix copy-sigs" command | Eelco Dolstra | 7 | -3/+40 | |
This imports signatures from one store into another. E.g. $ nix copy-sigs -r /run/current-system -s https://cache.nixos.org/ imported 595 signatures | |||||
2016-04-05 | Probably fix SQLITE_BUSY errors | Eelco Dolstra | 2 | -0/+7 | |
2016-04-04 | throwSQLiteError(): Check for SIGINT so we don't loop forever | Eelco Dolstra | 1 | -0/+1 | |
2016-03-30 | LocalStore: Keep track of ultimately trusted paths | Eelco Dolstra | 6 | -12/+47 | |
These are content-addressed paths or outputs of locally performed builds. They are trusted even if they don't have signatures, so "nix verify-paths" won't complain about them. | |||||
2016-03-30 | Improve the SQLite wrapper API | Eelco Dolstra | 5 | -224/+157 | |
In particular, this eliminates a bunch of boilerplate code. | |||||
2016-03-30 | Factour out SQLite handling | Eelco Dolstra | 4 | -204/+224 | |
2016-03-30 | Turn retrying SQLite transactions into a higher-order function | Eelco Dolstra | 1 | -33/+42 | |
2016-03-30 | HttpBinaryCacheStore: Treat 403 errors as 404 | Eelco Dolstra | 1 | -1/+3 | |
2016-03-30 | CurlDownloader: Fix HTTP error processing | Eelco Dolstra | 1 | -1/+0 | |
2016-03-29 | Add "nix verify-paths" command | Eelco Dolstra | 2 | -0/+14 | |
Unlike "nix-store --verify-path", this command verifies signatures in addition to store path contents, is multi-threaded (especially useful when verifying binary caches), and has a progress indicator. Example use: $ nix verify-paths --store https://cache.nixos.org -r $(type -p thunderbird) ... [17/132 checked] checking ‘/nix/store/rawakphadqrqxr6zri2rmnxh03gqkrl3-autogen-5.18.6’ | |||||
2016-03-24 | Move signature support from NarInfo to ValidPathInfo | Eelco Dolstra | 4 | -39/+43 | |
2016-03-24 | Typos | Eelco Dolstra | 1 | -2/+2 | |
2016-03-24 | HttpBinaryCacheStore: Make thread-safe | Eelco Dolstra | 1 | -2/+6 | |
2016-03-23 | Drop support for daemon socket path >= 108 characters | Eelco Dolstra | 1 | -15/+3 | |
Doing a chdir() is a bad idea in multi-threaded programs, leading to failures such as error: cannot connect to daemon at ‘/nix/var/nix/daemon-socket/socket’: No such file or directory Since Linux doesn't have a connectat() syscall like FreeBSD, there is no way we can support this in a race-free way. | |||||
2016-03-23 | LocalStoreAccessor::stat: Handle ENOTDIR | Eelco Dolstra | 1 | -1/+1 | |
Closes https://github.com/NixOS/hydra/pull/286. | |||||
2016-03-22 | Don't overload dumpPath() | Eelco Dolstra | 6 | -10/+12 | |
2016-03-21 | Move signatures from NarInfo to ValidPathInfo | Eelco Dolstra | 4 | -11/+21 | |
This allows queryPathInfo() to return signatures. | |||||
2016-03-21 | Add Store::dumpPath() method | Eelco Dolstra | 6 | -6/+26 | |
This allows applying nix-store --verify-path to binary cache stores: NIX_REMOTE=https://cache.nixos.org nix-store --verify-path /nix/store/s5c7... | |||||
2016-03-21 | Drop support for upgrading from Nix <= 0.12 | Eelco Dolstra | 1 | -84/+7 | |
2016-03-15 | Fix Darwin build | Eelco Dolstra | 4 | -4/+6 | |
http://hydra.nixos.org/build/33279996 | |||||
2016-03-14 | Fix another mismatched tag | Eelco Dolstra | 1 | -1/+1 | |
http://hydra.nixos.org/build/33279570 | |||||
2016-03-14 | BinaryCacheStore::isValidPath(): Use .narinfo cache | Eelco Dolstra | 1 | -0/+9 | |
If a path is in the .narinfo cache, obviously it's valid. | |||||
2016-03-04 | Add option binary-cache-secret-key-file for signing binary caches | Eelco Dolstra | 2 | -2/+4 | |
2016-03-04 | BinaryCacheStore: Remove publicKeyFile argument | Eelco Dolstra | 7 | -25/+39 | |
The public key can be derived from the secret key, so there's no need for the user to supply it separately. | |||||
2016-03-04 | Eliminate some large string copying | Eelco Dolstra | 3 | -20/+20 | |
2016-03-04 | Merge branch 'new-cli' | Eelco Dolstra | 3 | -3/+92 | |
2016-03-03 | Add file missing from 201b48de60751979835037a4b4f78128ba3fb7b3 | Eelco Dolstra | 1 | -0/+76 | |
2016-03-03 | build.cc: fs.h doesn't appear to be necessary anymore | Nathan Zadoks | 1 | -1/+0 | |
2016-03-02 | Provide function required by Hydra | Eelco Dolstra | 2 | -3/+16 | |
2016-03-02 | Add an HTTP binary cache store | Eelco Dolstra | 3 | -55/+96 | |
Allowing stuff like NIX_REMOTE=https://cache.nixos.org nix-store -qR /nix/store/x1p1gl3a4kkz5ci0nfbayjqlqmczp1kq-geeqie-1.1 or NIX_REMOTE=https://cache.nixos.org nix-store --export /nix/store/x1p1gl3a4kkz5ci0nfbayjqlqmczp1kq-geeqie-1.1 | nix-store --import | |||||
2016-03-02 | Eliminate local-binary-cache-store.hh | Eelco Dolstra | 2 | -32/+25 | |
2016-03-02 | Make store implementations pluggable | Eelco Dolstra | 3 | -19/+50 | |
This for instance allows hydra-queue-runner to add the S3 backend at runtime. | |||||
2016-03-02 | Remove bad assertion | Eelco Dolstra | 1 | -1/+0 | |
2016-03-02 | importPaths(): Optionally add NARs to binary cache accessor | Eelco Dolstra | 7 | -38/+52 | |
This enables an optimisation in hydra-queue-runner, preventing a download of a NAR it just uploaded to the cache when reading files like hydra-build-products. | |||||
2016-02-29 | Add an HTTP binary cache store | Eelco Dolstra | 3 | -55/+96 | |
Allowing stuff like NIX_REMOTE=https://cache.nixos.org nix-store -qR /nix/store/x1p1gl3a4kkz5ci0nfbayjqlqmczp1kq-geeqie-1.1 or NIX_REMOTE=https://cache.nixos.org nix-store --export /nix/store/x1p1gl3a4kkz5ci0nfbayjqlqmczp1kq-geeqie-1.1 | nix-store --import | |||||
2016-02-29 | Eliminate local-binary-cache-store.hh | Eelco Dolstra | 2 | -32/+25 | |
2016-02-29 | Make store implementations pluggable | Eelco Dolstra | 3 | -19/+50 | |
This for instance allows hydra-queue-runner to add the S3 backend at runtime. | |||||
2016-02-26 | Remove bad assertion | Eelco Dolstra | 1 | -1/+0 | |
2016-02-26 | importPaths(): Optionally add NARs to binary cache accessor | Eelco Dolstra | 7 | -38/+52 | |
This enables an optimisation in hydra-queue-runner, preventing a download of a NAR it just uploaded to the cache when reading files like hydra-build-products. | |||||
2016-02-25 | Add NAR / Store accessor abstraction | Eelco Dolstra | 10 | -13/+351 | |
This is primary to allow hydra-queue-runner to extract files like "nix-support/hydra-build-products" from NARs in binary caches. | |||||
2016-02-24 | deletePath(): Succeed if path doesn't exist | Eelco Dolstra | 3 | -17/+13 | |
Also makes it robust against concurrent deletions. | |||||
2016-02-24 | Eliminate reserveSpace flag | Eelco Dolstra | 7 | -32/+29 | |
2016-02-24 | LocalStore::addTextToStore(): Don't read the path we just wrote | Eelco Dolstra | 1 | -3/+5 | |
This eliminates some unnecessary (presumably cached) I/O. | |||||
2016-02-24 | BinaryCacheStore: Implement addToStore() | Eelco Dolstra | 2 | -8/+58 | |
So now you can do $ NIX_REMOTE=file:///tmp/binary-cache nix-instantiate '<nixpkgs>' -A hello and lots of other operations. |