about summary refs log tree commit diff
path: root/src/libutil/serialise.hh
AgeCommit message (Collapse)AuthorFilesLines
2008-12-03 * A simple API for parsing NAR archives.Eelco Dolstra1-2/+2
2008-06-18 * Some refactoring: put the GC options / results in separate structs.Eelco Dolstra1-0/+2
* The garbage collector now also prints the number of blocks freed.
2006-12-12 * New primop builtins.filterSource, which can be used to filter filesEelco Dolstra1-0/+27
from a source directory. All files for which a predicate function returns true are copied to the store. Typical example is to leave out the .svn directory: stdenv.mkDerivation { ... src = builtins.filterSource (path: baseNameOf (toString path) != ".svn") ./source-dir; # as opposed to # src = ./source-dir; } This is important because the .svn directory influences the hash in a rather unpredictable and variable way.
2006-11-30 * More remote operations.Eelco Dolstra1-1/+3
* Added new operation hasSubstitutes(), which is more efficient than querySubstitutes().size() > 0.
2006-11-30 * When NIX_REMOTE is set to "slave", fork off nix-worker in slaveEelco Dolstra1-0/+10
mode. Presumably nix-worker would be setuid to the Nix store user. The worker performs all operations on the Nix store and database, so the caller can be completely unprivileged. This is already much more secure than the old setuid scheme, since the worker doesn't need to do Nix expression evaluation and so on. Most importantly, this means that it doesn't need to access any user files, with all resulting security risks; it only performs pure store operations. Once this works, it is easy to move to a daemon model that forks off a worker for connections established through a Unix domain socket. That would be even more secure.
2006-11-30 * Skeleton of the privileged worker program.Eelco Dolstra1-0/+71
* Some refactoring: put the NAR archive integer/string serialisation code in a separate file so it can be reused by the worker protocol implementation.