depot - monorepo for the virus lounge

Age	Commit message (Collapse)	Author	Files	Lines
2019-04-17	build: only skip hash rewriting for sandboxing on linux	Daiderd Jordan	1	-2/+18
	The sandbox on darwin, and possibly other future platforms, doesn't have enough isolation to redirect outputs without hash rewriting.
2019-04-01	primeCache(): Barf if builds are needed but not allowed	Eelco Dolstra	1	-0/+6
	Fixes #2753.
2019-04-01	getMachines(): Cache result	Eelco Dolstra	1	-4/+5

2019-03-25	store-api.hh: add missing include for unordered_map	Will Dietz	1	-0/+1

2019-03-15	Add a 5 seconds of timeouts to connect to S3.	Chaker Benhamed	1	-0/+1
	The default is 1000ms, but we can hit it a lot of we don't have direct link to AWS (e.g. using VPN).
2019-03-14	pkg-config files: Use c++17	Eelco Dolstra	1	-1/+1

2019-03-14	experimental/optional -> optional	Eelco Dolstra	4	-12/+12

2019-03-14	findRoots(): Add 'censor' parameter	Eelco Dolstra	5	-20/+28
	This is less brittle than filtering paths after the fact in nix-daemon.
2019-03-14	findRuntimeRoots: Simplify/fix handling of /proc files	Eelco Dolstra	2	-15/+14
	Scanning of /proc/<pid>/{exe,cwd} was broken because '{memory:' was prepended twice. Also, get rid of the whole '{memory:...}' thing because it's unnecessary, we can just list the file in /proc directly.
2019-03-10	Unify internal findRootsXxx() api	Guillaume Maudoux	2	-24/+15

2019-03-10	Make roots a map of store paths to pinning links	Guillaume Maudoux	3	-23/+20
	This new structure makes more sense as there may be many sources rooting the same store path. Many profiles can reference the same path but this is even more true with /proc/<pid>/maps where distinct pids can and often do map the same store path. This implementation is also more efficient as the `Roots` map contains only one entry per rooted store path.
2019-03-10	Obfuscate memory roots for non-root users	Guillaume Maudoux	1	-7/+7

2019-03-10	detail memory roots	Guillaume Maudoux	2	-31/+32

2019-02-26	fix indentation	Dzmitry Zaitsau	1	-2/+2

2019-02-25	Apply param values on S3Helper initialization	Dzmitry Zaitsau	1	-1/+8

2019-02-25	Extend S3 URL parsing with parameters extraction	Dzmitry Zaitsau	1	-5/+17

2019-02-25	Extract and expose splitUriAndParams function	Dzmitry Zaitsau	2	-4/+16
	which splits a URL into localtor and parameter parts
2019-02-05	Revert "Restore parent mount namespace before executing a child process"	Eelco Dolstra	3	-7/+0
	This reverts commit a0ef21262f4d5652bfb65cfacaec01d89c475a93. This doesn't work in 'nix run' and nix-shell because setns() fails in multithreaded programs, and Boehm GC mark threads are uncancellable. Fixes #2646.
2019-01-18	unsupported(): Show the name of the unsupported operation	Eelco Dolstra	4	-76/+31

2019-01-05	Remove mentions of `libformat`, it no longer exists	John Ericson	1	-1/+1

2018-12-12	libstore: improve hash mismatch error messages	zimbatm	3	-6/+6
	Use the same output ordering and format everywhere. This is such a common issue that we trade the single-line error message for more readability. Old message: ``` fixed-output derivation produced path '/nix/store/d4nw9x2sy9q3r32f3g5l5h1k833c01vq-example.com' with sha256 hash '08y4734bm2zahw75b16bcmcg587vvyvh0n11gwiyir70divwp1rm' instead of the expected hash '1xzwnipjd54wl8g93vpw6hxnpmdabq0wqywriiwmh7x8k0lvpq5m' ``` New message: ``` hash mismatch in fixed-output derivation '/nix/store/d4nw9x2sy9q3r32f3g5l5h1k833c01vq-example.com': wanted: sha256:1xzwnipjd54wl8g93vpw6hxnpmdabq0wqywriiwmh7x8k0lvpq5m got: sha256:08y4734bm2zahw75b16bcmcg587vvyvh0n11gwiyir70divwp1rm ```
2018-12-12	Fix assertion failure in NarInfoDiskCache	Eelco Dolstra	1	-15/+15
	https://hydra.nixos.org/build/85827920
2018-12-12	nar-info-disk-cache: include ca in the cache entries	Daiderd Jordan	1	-2/+5
	Without this information the content addressable state and hashes are lost after the first request, this causes signatures to be required for everything even tho the path could be verified without signing.
2018-12-07	s3: make scheme configurable	Daiderd Jordan	3	-7/+11
	This enables using for http for S3 request for debugging or implementations that don't have https configured. This is not a problem for binary caches since they should not contain sensitive information. Both package signatures and AWS auth already protect against tampering.
2018-11-20	Merge pull request #2216 from dtzWill/fix/curl-760-timeout	Eelco Dolstra	1	-1/+2
	download: if there are active requests, never sleep for 10s
2018-11-15	Fix 'Read-only file system' when building a derivation	Eelco Dolstra	1	-0/+2

2018-11-13	Restore parent mount namespace before executing a child process	Eelco Dolstra	2	-0/+5
	This ensures that they can't write to /nix/store. Fixes #2535.
2018-11-07	Enable sandboxing by default	Eelco Dolstra	1	-1/+7
	Closes #179.
2018-11-01	Disable the S3 content-encoding patch	Eelco Dolstra	1	-1/+4
	Since we're not using multi-part uploads at the moment, we can drop this patch.
2018-10-31	Merge pull request #2501 from mayflower/xdg_config_dirs	Eelco Dolstra	1	-1/+5
	config: use all of XDG_CONFIG_DIRS
2018-10-31	config: use all of XDG_CONFIG_DIRS	Linus Heckemann	1	-1/+5
	Previously, config would only be read from XDG_CONFIG_HOME. This change allows reading config from additional directories, which enables e.g. per-project binary caches or chroot stores with the help of direnv.
2018-10-30	Remove redundant message	Eelco Dolstra	1	-2/+0

2018-10-30	S3BinaryCacheStore: Allow disabling multipart uploads	Eelco Dolstra	1	-31/+57
	The use of TransferManager has several issues, including that it doesn't allow setting a Content-Encoding without a patch, and it doesn't handle exceptions in worker threads (causing termination on memory allocation failure). Fixes #2493.
2018-10-30	Fix broken uploadProgressCallback closure	Eelco Dolstra	1	-4/+4
	Since the callback is global we can't refer to 'path' in it. This could cause a segfault or printing of arbitrary data.
2018-10-29	copyStorePath: Fix hash errors when copying from older store	Falco Peijnenburg	1	-3/+7
	This commit partially reverts 48662d151bdf4a38670897beacea9d1bd750376a. When copying from an older store (in my case a store running Nix 1.11.7), nix would throw errors about there being no hash. This is fixed by recalculating the hash.
2018-10-27	Restore old (dis)allowedRequisites behaviour for self-references	Eelco Dolstra	1	-29/+34
	stdenv relies on this. So ignore self-references (but only in legacy non-structured attributes mode).
2018-10-27	Merge branch 'nix-doctor' of https://github.com/LnL7/nix	Eelco Dolstra	6	-0/+29

2018-10-26	remote-store.hh: ConnectionHandle is struct, minor fix warning	Will Dietz	1	-1/+1

2018-10-23	Merge pull request #2483 from mayflower/tail-config	Eelco Dolstra	1	-3/+3
	Promote verbose-build and log-lines
2018-10-23	Promote log-lines to a fully-qualified option	Linus Heckemann	1	-3/+3
	This allows commands like nix build --log-lines 30 nixpkgs.hello in order to obtain more information in case of a failure.
2018-10-23	Per-output reference and closure size checks	Eelco Dolstra	1	-51/+168
	In structured-attributes derivations, you can now specify per-output checks such as: outputChecks."out" = { # The closure of 'out' must not be larger than 256 MiB. maxClosureSize = 256 * 1024 * 1024; # It must not refer to C compiler or to the 'dev' output. disallowedRequisites = [ stdenv.cc "dev" ]; }; outputChecks."dev" = { # The 'dev' output must not be larger than 128 KiB. maxSize = 128 * 1024; }; Also fixed a bug in allowedRequisites that caused it to ignore self-references.
2018-10-16	Fix assertion failure in Store::queryPathInfo()	Eelco Dolstra	1	-0/+2
	$ nix-store -qR /nix/store/fnord nix-store: src/libstore/store-api.cc:80: std::__cxx11::string nix::storePathToHash(const Path&): Assertion `base.size() >= storePathHashLen' failed. Aborted
2018-10-16	RemoteStore: Close connection if an exception occurs	Eelco Dolstra	2	-62/+116
	Fixes #2075.
2018-10-16	Get rid of UDSRemoteStore::Connection	Eelco Dolstra	1	-5/+1
	Since its superclass RemoteStore::Connection contains 'to' and 'from' fields that refer to the file descriptor maintained in the subclass, it was possible for the flush() call in Connection::~Connection() to write to a closed file descriptor (or worse, a file descriptor now referencing another file). So make sure that the file descriptor survives 'to' and 'from'.
2018-09-28	Check requiredSystemFeatures for local builds	Eelco Dolstra	5	-15/+49
	For example, this prevents a "kvm" build on machines that don't have KVM. Fixes #2012.
2018-09-28	Move structured attrs handling into a separate class	Eelco Dolstra	5	-116/+145
	This is primarily because Derivation::{can,will}BuildLocally() depends on attributes like preferLocalBuild and requiredSystemFeatures, but it can't handle them properly because it doesn't have access to the structured attributes.
2018-09-28	Remove obsolete check on system features	Eelco Dolstra	1	-1/+0

2018-09-28	Support special attributes in structured attributes derivations	Eelco Dolstra	1	-94/+175
	E.g. __noChroot and allowedReferences now work correctly. We also now check that the attribute type is correct. For instance, instead of allowedReferences = "out"; you have to write allowedReferences = [ "out" ]; Fixes #2453.
2018-09-27	S3BinaryCacheStore: Don't create buckets	Eelco Dolstra	1	-28/+0
	This meant that making a typo in an s3:// URI would cause a bucket to be created. Also it didn't handle eventual consistency very well. Now it's up to the user to create the bucket.
2018-09-26	Ensure download thread liveness	Eelco Dolstra	1	-19/+26
	* Don't wait forever for the client to remove data from the buffer. This does mean that the buffer can grow without bounds (e.g. when downloading is faster than writing to disk), but meh. * Don't hold the state lock while calling the sink. The sink could take any amount of time to process the data (in particular when it's actually a coroutine), so we don't want to block the download thread.