depot - monorepo for the virus lounge

Age	Commit message (Collapse)	Author	Files	Lines
2016-04-20	Cache path info lookups in SQLite	Eelco Dolstra	4	-7/+52
	This re-implements the binary cache database in C++, allowing it to be used by other Store backends, in particular the S3 backend.
2016-04-19	Move path info caching from BinaryCacheStore to Store	Eelco Dolstra	21	-355/+320
	Caching path info is generally useful. For instance, it speeds up "nix path-info -rS /run/current-system" (i.e. showing the closure sizes of all paths in the closure of the current system) from 5.6s to 0.15s. This also eliminates some APIs like Store::queryDeriver() and Store::queryReferences().
2016-04-16	Print out all bad references/requisites at once	Dan Peebles	2	-3/+15
	Also updates tests to check for new information. Fixes #799
2016-04-15	Make the .narinfo cache bigger	Eelco Dolstra	1	-1/+1

2016-04-15	BinaryCacheStore: Do negative caching of .narinfo lookups	Eelco Dolstra	2	-3/+12

2016-04-15	BinaryCacheStore::readFile(): Return a shared_ptr to a string	Eelco Dolstra	11	-28/+52
	This allows readFile() to indicate that a file doesn't exist, and might eliminate some large string copying.
2016-04-15	Unify "nix verify-paths" and "nix verify-store"	Eelco Dolstra	3	-60/+31
	"verify-store" is now simply an "--all" flag to "nix verify". This flag can be used for any other store path command as well (e.g. "nix path-info", "nix copy-sigs", ...).
2016-04-14	Make $NIX_PATH parsing more robust	Eelco Dolstra	1	-5/+32

2016-04-14	Support channel:<channel-name> URIs	Eelco Dolstra	1	-5/+14
	For convenience, you can now say $ nix-env -f channel:nixos-16.03 -iA hello instead of $ nix-env -f https://nixos.org/channels/nixos-16.03/nixexprs.tar.xz -iA hello Similarly, $ nix-shell -I channel:nixpkgs-unstable -p hello $ nix-build channel:nixos-15.09 -A hello Abstracting over the NixOS/Nixpkgs channels location also allows us to use a more efficient transport (e.g. Git) in the future.
2016-04-14	Make the search path lazier with non-fatal errors	Eelco Dolstra	5	-34/+75
	Thus, -I / $NIX_PATH entries are now downloaded only when they are needed for evaluation. An error to download an entry is a non-fatal warning (just like non-existant paths). This does change the semantics of builtins.nixPath, which now returns the original, rather than resulting path. E.g., before we had [ { path = "/nix/store/hgm3yxf1lrrwa3z14zpqaj5p9vs0qklk-nixexprs.tar.xz"; prefix = "nixpkgs"; } ... ] but now [ { path = "https://nixos.org/channels/nixos-16.03/nixexprs.tar.xz"; prefix = "nixpkgs"; } ... ] Fixes #792.
2016-04-14	Add tests for restricted eval mode	Eelco Dolstra	2	-1/+19

2016-04-14	Set RLIMIT_CORE to 0, infinity in builders	Eelco Dolstra	1	-0/+7
	This prevents the builder from being affected by whatever the host system limits happen to be.
2016-04-14	Make primop registration pluggable	Eelco Dolstra	4	-3/+33
	This way we don't have to put all primops in one giant file.
2016-04-14	Fix std::atomic_flag build failure	Eelco Dolstra	1	-0/+1
	http://hydra.nixos.org/build/34453794
2016-04-14	install-nix-from-closure: Don't run nix-store --verify	Eelco Dolstra	1	-5/+0
	Verification is slow. Also, we really shouldn't advise users to nuke their store.
2016-04-14	Remove PDF manual	Eelco Dolstra	2	-28/+1
	More spring cleaning.
2016-04-13	nix-profile test: Set USER	Shea Levy	1	-2/+3

2016-04-11	Remove manifest support	Eelco Dolstra	37	-2143/+20
	Manifests have been superseded by binary caches for years. This also gets rid of nix-pull, nix-generate-patches and bsdiff/bspatch.
2016-04-10	Bring nix-profile.sh in line with NixOS	Wout Mertens	1	-13/+63
	Use the same logic as NixOS' profile and environment setup. Closes #414
2016-04-10	Remove information about nix-store --optimise	Wout Mertens	1	-9/+0

2016-04-10	Always verify nix store on install	wmertens	1	-1/+18
	Just wasted a couple hours chasing shadows because the nix store got corrupted and there was no indication of that anywhere. Since an install is one-time only, might as well verify. Optimization showed that the copied files aren't read-only; fixed that as well. Also, use /bin/sh since there's a good chance that this script will be run on systems without /bin/bash
2016-04-08	Remove failed build caching	Eelco Dolstra	17	-335/+12
	This feature was implemented for Hydra, but Hydra no longer uses it.
2016-04-08	Make LocalStore thread-safe	Eelco Dolstra	5	-217/+246
	Necessary for multi-threaded commands like "nix verify-paths".
2016-04-07	nix verify-paths: Add ‘--sigs-needed <N>’ flag	Eelco Dolstra	3	-16/+41
	This specifies the number of distinct signatures required to consider each path "trusted". Also renamed ‘--no-sigs’ to ‘--no-trust’ for the flag that disables verifying whether a path is trusted (since a path can also be trusted if it has no signatures, but was built locally).
2016-04-07	Use secret-key-files for verifying	Eelco Dolstra	1	-1/+14

2016-04-07	Sign locally-built paths	Eelco Dolstra	3	-1/+24
	Locally-built paths are now signed automatically using the secret keys specified by the ‘secret-key-files’ option.
2016-04-06	Fix "tar: This does not look like a tar archive" with fetchTarball / -I http://	Eelco Dolstra	1	-2/+1
	The 304 Not Modified was not handled correctly, so the empty result from the conditional request would overwrite the previous tarball.
2016-04-05	Add "nix sign-paths" command	Eelco Dolstra	2	-1/+52
	E.g. $ nix sign-paths -k ./secret -r $(type -p geeqie) signs geeqie and all its dependencies using the key in ./secret.
2016-04-05	Add "nix copy-sigs" command	Eelco Dolstra	9	-3/+185
	This imports signatures from one store into another. E.g. $ nix copy-sigs -r /run/current-system -s https://cache.nixos.org/ imported 595 signatures
2016-04-05	Probably fix SQLITE_BUSY errors	Eelco Dolstra	2	-0/+7

2016-04-04	throwSQLiteError(): Check for SIGINT so we don't loop forever	Eelco Dolstra	1	-0/+1

2016-03-31	Add missing -pthread	Eelco Dolstra	1	-1/+1
	https://hydra.nixos.org/build/33908385
2016-03-30	LocalStore: Keep track of ultimately trusted paths	Eelco Dolstra	7	-12/+51
	These are content-addressed paths or outputs of locally performed builds. They are trusted even if they don't have signatures, so "nix verify-paths" won't complain about them.
2016-03-30	Fix nix-copy-closure test on 16.03	Eelco Dolstra	1	-1/+1

2016-03-30	Improve the SQLite wrapper API	Eelco Dolstra	5	-224/+157
	In particular, this eliminates a bunch of boilerplate code.
2016-03-30	Factour out SQLite handling	Eelco Dolstra	4	-204/+224

2016-03-30	Turn retrying SQLite transactions into a higher-order function	Eelco Dolstra	1	-33/+42

2016-03-30	nix verify: Support checking against signatures in other stores	Eelco Dolstra	1	-2/+33
	Typical usage is to check local paths using the signatures from a binary cache: $ nix verify-paths -r /run/current-system -s https://cache.nixos.org path ‘/nix/store/c1k4zqfb74wba5sn4yflb044gvap0x6k-nixos-system-mandark-16.03.git.fc2d7a5M’ is untrusted ... checked 844 paths, 119 untrusted
2016-03-30	HttpBinaryCacheStore: Treat 403 errors as 404	Eelco Dolstra	1	-1/+3

2016-03-30	CurlDownloader: Fix HTTP error processing	Eelco Dolstra	1	-1/+0

2016-03-29	Improve SIGINT handling in multi-threaded programs	Eelco Dolstra	4	-14/+12
	The flag remembering whether an Interrupted exception was thrown is now thread-local. Thus, all threads will (eventually) throw Interrupted. Previously, one thread would throw Interrupted, and then the other threads wouldn't see that they were supposed to quit.
2016-03-29	Add "nix verify-store" command	Eelco Dolstra	1	-13/+53
	Like "nix-store --verify --check-contents", but with the same advantages as "nix verify-paths".
2016-03-29	Add "nix verify-paths" command	Eelco Dolstra	11	-2/+432
	Unlike "nix-store --verify-path", this command verifies signatures in addition to store path contents, is multi-threaded (especially useful when verifying binary caches), and has a progress indicator. Example use: $ nix verify-paths --store https://cache.nixos.org -r $(type -p thunderbird) ... [17/132 checked] checking ‘/nix/store/rawakphadqrqxr6zri2rmnxh03gqkrl3-autogen-5.18.6’
2016-03-29	Re-enable sync_with_stdio	Eelco Dolstra	1	-3/+0
	Otherwise writing to std::cerr is not thread-safe (in particular, lines will be randomly duplicated).
2016-03-28	Kill the temporary darwin-specific channel	Dan Peebles	1	-3/+2
	The issues have been resolved upstream in the main nixpkgs channel now
2016-03-24	Use shorter daemon socket path in tests	Eelco Dolstra	3	-5/+5
	Otherwise we hit the 104 character limit. http://hydra.nixos.org/build/33562028
2016-03-24	Move signature support from NarInfo to ValidPathInfo	Eelco Dolstra	4	-39/+43

2016-03-24	Typos	Eelco Dolstra	1	-2/+2

2016-03-24	HttpBinaryCacheStore: Make thread-safe	Eelco Dolstra	1	-2/+6

2016-03-23	Drop support for daemon socket path >= 108 characters	Eelco Dolstra	1	-15/+3
	Doing a chdir() is a bad idea in multi-threaded programs, leading to failures such as error: cannot connect to daemon at ‘/nix/var/nix/daemon-socket/socket’: No such file or directory Since Linux doesn't have a connectat() syscall like FreeBSD, there is no way we can support this in a race-free way.