depot - monorepo for the virus lounge

Age	Commit message (Collapse)	Author	Files	Lines
2015-11-16	Default arguments belong at declaration, not definition	Shea Levy	1	-1/+1

2015-11-16	Fix copy-paste error	Shea Levy	1	-1/+1

2015-11-16	AutoDelete: Add default constructor with deletion disabled	Shea Levy	3	-1/+11

2015-11-15	Use AutoDelete for sandbox profile file	Shea Levy	1	-5/+14

2015-11-14	simplify build.cc using modern C++ features	Jude Taylor	1	-33/+31

2015-11-14	simplify build permissions	Jude Taylor	1	-13/+3

2015-11-14	remove sandbox-defaults.sb	Jude Taylor	2	-64/+0

2015-11-14	use per-derivation sandbox profiles	Jude Taylor	1	-28/+39

2015-11-09	Add option to verify build determinism	Eelco Dolstra	2	-12/+64
	Passing "--option build-repeat <N>" will cause every build to be repeated N times. If the build output differs between any round, the build is rejected, and the output paths are not registered as valid. This is primarily useful to verify build determinism. (We already had a --check option to repeat a previously succeeded build. However, with --check, non-deterministic builds are registered in the DB. Preventing that is useful for Hydra to ensure that non-deterministic builds don't end up getting published at all.)
2015-11-09	Revert "Allow using /bin and /usr/bin as impure prefixes on non-darwin by ↵	Eelco Dolstra	1	-1/+1
	default" This reverts commit 79ca5033329053caa364bb2f7e50953f859cc97f. Ouch, never noticed this. We definitely don't want to allow builds to have arbitrary access to /bin and /usr/bin, because then they can (for instance) bring in a bunch of setuid programs. Also, we shouldn't be encouraging the use of impurities in the default configuration.
2015-11-09	optimizePath(): Detect some .links corruption	Eelco Dolstra	1	-2/+9
	If automatic store optimisation is enabled, and a hard-linked file in the store gets corrupted, then the corresponding .links entry will also be corrupted. In that case, trying to repair with --repair or --repair-path won't work, because the new "good" file will be replaced by a hard link to the corrupted file. We can catch most of these cases by doing a sanity-check on the file sizes.
2015-11-09	Fix namespace issue	Eelco Dolstra	1	-2/+2

2015-11-04	Merge branch 'master' of https://github.com/pikajude/nix	Shea Levy	1	-2/+6
	> I made this change for two reasons: > 1. Darwin's locale data doesn't appear to be open source > 2. Privileged processes will always use /usr/share/locale regardless of environment variables
2015-11-04	Support SHA-512 hashes	Eelco Dolstra	2	-2/+10
	Fixes #679. Note: on x86_64, SHA-512 is considerably faster than SHA-256 (198 MB/s versus 131 MB/s).
2015-11-04	Require OpenSSL	Eelco Dolstra	9	-1752/+1

2015-11-03	fix syntax error	Jude Taylor	1	-1/+1

2015-11-03	darwin: allow reading system locale and zoneinfo	Jude Taylor	1	-2/+6

2015-10-31	allow reading ICU data	Jude Taylor	1	-1/+2

2015-10-30	add special devices to sandbox-defaults	Jude Taylor	1	-1/+4

2015-10-30	<nix/fetchurl.nix>: Support xz-compressed NARs	Eelco Dolstra	4	-1/+61

2015-10-30	<nix/fetchurl.nix>: Support downloading and unpacking NARs	Eelco Dolstra	1	-3/+14
	This removes the need to have multiple downloads in the stdenv bootstrap process (like a separate busybox binary for Linux, or curl/mkdir/sh/bzip2 for Darwin). Now all those files can be combined into a single NAR.
2015-10-29	int2String() -> std::to_string()	Eelco Dolstra	9	-24/+17

2015-10-26	Merge pull request #668 from svanderburg/master	Eelco Dolstra	1	-0/+1
	Fix compilation error due to missing ENOENT on cygwin
2015-10-21	use nixDataDir instead of appending /share to PREFIX	Jude Taylor	1	-1/+1

2015-10-21	revert libutil change	Jude Taylor	1	-5/+4

2015-10-21	clarifying comment	Jude Taylor	1	-1/+5

2015-10-21	move preBuildHook defaulting to globals.cc	Jude Taylor	2	-7/+5

2015-10-21	restore old DEFAULT_ALLOWED_IMPURE_PREFIXES	Jude Taylor	1	-1/+1

2015-10-21	Add resolve-system-dependencies.pl	Jude Taylor	2	-1/+8

2015-10-21	remove usr paths from allowed inputs	Jude Taylor	1	-2/+0

2015-10-21	allow access to SystemVersion for python builders	Jude Taylor	1	-0/+1

2015-10-21	fix line reading in preBuildHook	Jude Taylor	1	-1/+1

2015-10-21	remove sandbox defaults into a new file	Jude Taylor	3	-65/+62

2015-10-21	restore allowed impure prefixes	Jude Taylor	1	-1/+1

2015-10-21	remove an unneeded default impure-dep	Jude Taylor	1	-1/+0

2015-10-21	make sandbox builds more permissive	Jude Taylor	2	-6/+7

2015-10-21	add a few more permissions	Jude Taylor	1	-3/+45

2015-10-21	Allow builtin fetchurl regardless of the derivation's system attribute	Eelco Dolstra	1	-12/+13

2015-10-21	Show progress indicator for builtin fetchurl	Eelco Dolstra	3	-4/+7

2015-10-21	Disable TLS verification for builtin fetchurl	Eelco Dolstra	4	-12/+32
	This makes it consistent with the Nixpkgs fetchurl and makes it work in chroots. We don't need verification because the hash of the result is checked anyway.
2015-10-21	Fix segfault in builtin fetchurl	Eelco Dolstra	1	-3/+7
	The stack allocated for the builder was way too small (32 KB). This is sufficient for normal derivations, because they just do some setup and then exec() the actual builder. But for the fetchurl builtin derivation it's not enough. Also, allocating the stack on the caller's stack was fishy business.
2015-10-18	Fix compilation error due to missing ENOENT on cygwin	Sander van der Burg	1	-0/+1

2015-10-08	Allow building ARMv6 stuff on ARMv7	Tuomas Tynkkynen	1	-0/+1
	This allows building a Raspberry Pi image on modern, faster boards.
2015-10-08	isFunctor: Simplify	Eelco Dolstra	2	-11/+6

2015-10-08	forceFunction: allow functors as well	Mathnerd314	3	-1/+13

2015-10-08	Revert to CURLOPT_PROGRESSFUNCTION	Eelco Dolstra	1	-5/+5
	CURLOPT_XFERINFOFUNCTION isn't widely supported yet. http://hydra.nixos.org/build/26679495
2015-10-07	Show progress during downloads	Eelco Dolstra	2	-8/+47

2015-10-07	nix-prefetch-url: Add --name option	Eelco Dolstra	1	-3/+7
	This allows overriding the name component of the resulting Nix store path, which is necessary if the base name of the URI contains "illegal" characters.
2015-10-07	nix-prefetch-url -A: Use "name" attribute from Nix expression	Eelco Dolstra	1	-1/+8
	This is in particular useful for fetchFromGitHub et al., ensuring that the store path produced by nix-prefetch-url corresponds to what those functions expect.
2015-10-07	nix-prefetch-url: Support unpacking tarballs	Eelco Dolstra	1	-15/+47
	This allows nix-prefetch-url to prefetch the output of fetchzip and its wrappers (like fetchFromGitHub). For example: $ nix-prefetch-url --unpack https://github.com/NixOS/patchelf/archive/0.8.tar.gz or from a Nix expression: $ nix-prefetch-url -A nix-repl.src In the latter case, --unpack can be omitted because nix-repl.src is a fetchFromGitHub derivation and thus has "outputHashMode" set to "recursive".