depot - monorepo for the virus lounge

Age	Commit message (Collapse)	Author	Files	Lines
2013-03-08	Revert "Prevent config.h from being clobbered"	Eelco Dolstra	16	-104/+177
	This reverts commit 28bba8c44f484eae38e8a15dcec73cfa999156f6.
2013-03-07	Prevent config.h from being clobbered	Eelco Dolstra	16	-177/+104

2013-02-28	Handle systems without lutimes() or lchown()	Eelco Dolstra	1	-1/+1

2013-02-28	Handle symlinks properly	Eelco Dolstra	1	-1/+1
	Now it's really brown paper bag time...
2013-02-27	Handle hard links to other files in the output	Eelco Dolstra	1	-6/+26

2013-02-27	Refactoring: Split off the non-recursive canonicalisePathMetaData()	Eelco Dolstra	3	-37/+52
	Also, change the file mode before changing the owner. This prevents a slight time window in which a setuid binary would be setuid root.
2013-02-26	Security: Don't allow builders to change permissions on files they don't own	Eelco Dolstra	5	-20/+17
	It turns out that in multi-user Nix, a builder may be able to do ln /etc/shadow $out/foo Afterwards, canonicalisePathMetaData() will be applied to $out/foo, causing /etc/shadow's mode to be set to 444 (readable by everybody but writable by nobody). That's obviously Very Bad. Fortunately, this fails in NixOS's default configuration because /nix/store is a bind mount, so "ln" will fail with "Invalid cross-device link". It also fails if hard-link restrictions are enabled, so a workaround is: echo 1 > /proc/sys/fs/protected_hardlinks The solution is to check that all files in $out are owned by the build user. This means that innocuous operations like "ln ${pkgs.foo}/some-file $out/" are now rejected, but that already failed in chroot builds anyway.
2013-02-19	build-remote: Use the --quiet flag	Eelco Dolstra	1	-5/+2
	‘--option verbosity 0’ doesn't actually do anything.
2013-02-19	Add `Settings::nixDaemonSocketFile'.	Ludovic Courtès	5	-10/+14

2013-02-19	Enable chroot support on old glibc versions.	Ludovic Courtès	1	-0/+6

2013-02-08	Make "${./path} ..." evaluate to a string, not a path	Eelco Dolstra	3	-5/+7
	Wacky string coercion semantics caused expressions like exec = "${./my-script} params..."; to evaluate to a path (‘/path/my-script params’), because anti-quotations are desuged to string concatenation: exec = ./my-script + " params..."; By constrast, adding a space at the start would yield a string as expected: exec = " ${./my-script} params..."; Now the first example also evaluates to a string.
2013-02-08	Rename "hash" to "hashString" and handle SHA-1	Eelco Dolstra	1	-19/+9

2013-02-08	experimental/hash	Marc Weber	1	-0/+26
	adding primop function calculating hash of a string Signed-off-by: Marc Weber <marco-oweber@gmx.de>
2013-01-30	Support the colonies	Eelco Dolstra	1	-3/+3

2013-01-23	Only warn about SQLite being busy once	Eelco Dolstra	1	-1/+5
	No need to get annoying.
2013-01-22	Correctly handle missing logs	Eelco Dolstra	1	-1/+3

2013-01-17	Store build logs in /nix/var/log/nix/drvs/<XX>	Eelco Dolstra	2	-30/+37
	...where <XX> is the first two characters of the derivation. Otherwise /nix/var/log/nix/drvs may become so large that we run into all sorts of weird filesystem limits/inefficiences. For instance, ext3/ext4 filesystems will barf with "ext4_dx_add_entry:1551: Directory index full!" once you hit a few million files.
2013-01-05	Delete a left-over trash directory before doing a GC	Eelco Dolstra	1	-1/+4

2013-01-04	Fix "0 store paths deleted" message	Eelco Dolstra	1	-0/+2

2013-01-03	Open the database after removing immutable bits	Eelco Dolstra	1	-1/+1

2013-01-03	Remove tabs	Eelco Dolstra	2	-46/+46

2013-01-03	Clear any immutable bits in the Nix store	Eelco Dolstra	9	-86/+66
	Doing this once makes subsequent operations like garbage collecting more efficient since we don't have to call makeMutable() first.
2013-01-02	If a substitute closure is incomplete, build dependencies, then retry the ↵	Eelco Dolstra	1	-7/+28
	substituter Issue #77.
2013-01-02	Automatically fall back if the references of a substitute are not substitutable	Eelco Dolstra	1	-1/+1
	Fixes #77.
2012-12-29	nix-build: Support talking to old daemons	Eelco Dolstra	1	-1/+10
	Fixes #76.
2012-12-29	Allow mounting a path in a different location in the chroot	Eelco Dolstra	3	-10/+17
	Fixes #24.
2012-12-20	nix-store -q --roots: Respect the gc-keep-outputs/gc-keep-derivations settings	Eelco Dolstra	9	-25/+64
	So if a path is not garbage solely because it's reachable from a root due to the gc-keep-outputs or gc-keep-derivations settings, ‘nix-store -q --roots’ now shows that root.
2012-12-20	Yet another rewrite of the garbage collector	Eelco Dolstra	2	-131/+138
	But this time it's obviously correct! No more segfaults due to infinite recursions for sure, etc. Also, move directories to /nix/store/trash instead of renaming them to /nix/store/bla-gc-<pid>. Then we can just delete /nix/store/trash at the end.
2012-12-19	If gc-keep-derivations is set, only keep the actual deriver	Eelco Dolstra	1	-1/+1
	This prevents zillions of derivations from being kept, and fixes an infinite recursion in the garbage collector (due to an obscure cycle that can occur with fixed-output derivations).
2012-12-19	Kill the build hook rather than shutting it down cleanly	Eelco Dolstra	1	-7/+1
	Waiting for the hook to shut down cleanly sometimes seems to lead to hangs.
2012-12-18	Revert brain fart	Eelco Dolstra	1	-2/+0
	This reverts commit cc511fd65b7b6de9e87e72fb4bed16fc7efeb8b7.
2012-12-18	Check for potential infinite select() loops when building	Eelco Dolstra	1	-0/+2

2012-12-13	fix use-after-free bug in mkString(Value&, Symbol&)	Stuart Pernsteiner	1	-1/+1

2012-12-12	Allow setting the profile location using $NIX_PROFILE	Eelco Dolstra	1	-0/+3
	Fixes #69.
2012-12-11	On SQLITE_BUSY, wait a random amount of time	Eelco Dolstra	2	-1/+7
	If all contending processes wait a fixed amount of time (100 ms), there is a good probability that they'll just collide again.
2012-12-04	Tiny optimisation in the filter primop	Eelco Dolstra	1	-2/+9

2012-12-04	nix-env: Install all outputs of a derivation	Eelco Dolstra	1	-10/+25
	If you explicitly install a package, presumably you want all of it. So symlink all outputs in the user environment.
2012-12-03	Fix the ‘--prebuilt-only’ flag	Eelco Dolstra	1	-8/+11

2012-12-03	Whitespace	Eelco Dolstra	3	-60/+58

2012-11-28	nix-env -q --out-path: Support multiple outputs	Eelco Dolstra	5	-45/+94
	We now print all output paths of a package, e.g. openssl-1.0.0i bin=/nix/store/gq2mvh0wb9l90djvsagln3aqywqmr6vl-openssl-1.0.0i-bin;man=/nix/store/7zwf5r5hsdarl3n86dasvb4chm2xzw9n-openssl-1.0.0i-man;/nix/store/cj7xvk7fjp9q887359j75pw3pzjfmqf1-openssl-1.0.0i or (in XML mode) <item attrPath="openssl" name="openssl-1.0.0i" system="x86_64-linux"> <output name="bin" path="/nix/store/gq2mvh0wb9l90djvsagln3aqywqmr6vl-openssl-1.0.0i-bin" /> <output name="man" path="/nix/store/7zwf5r5hsdarl3n86dasvb4chm2xzw9n-openssl-1.0.0i-man" /> <output name="out" path="/nix/store/cj7xvk7fjp9q887359j75pw3pzjfmqf1-openssl-1.0.0i" /> </item>
2012-11-27	Optionally ignore null-valued derivation attributes	Eelco Dolstra	3	-11/+24
	This allows adding attributes like attr = if stdenv.system == "bla" then something else null; without changing the resulting derivation on non-<bla> platforms. We once considered adding a special "ignore" value for this purpose, but using null seems more elegant.
2012-11-27	Add builtin constants ‘langVersion’ and ‘nixVersion’	Eelco Dolstra	6	-2/+18
	The integer constant ‘langVersion’ denotes the current language version. It gets increased every time a language feature is added/changed/removed. It's currently 1. The string constant ‘nixVersion’ contains the current Nix version, e.g. "1.2pre2980_9de6bc5".
2012-11-26	queryMissing(): Handle partially valid derivations	Eelco Dolstra	1	-5/+6

2012-11-26	nix-instantiate: Fix read-only evaluation	Eelco Dolstra	5	-10/+17

2012-11-26	Only substitute wanted outputs of a derivation	Eelco Dolstra	4	-21/+77
	If a derivation has multiple outputs, then we only want to download those outputs that are actuallty needed. So if we do "nix-build -A openssl.man", then only the "man" output should be downloaded. Likewise if another package depends on ${openssl.man}. The tricky part is that different derivations can depend on different outputs of a given derivation, so we may need to restart the corresponding derivation goal if that happens.
2012-11-26	Make "nix-build -A <derivation>.<output>" do the right thing	Eelco Dolstra	8	-14/+82
	For example, given a derivation with outputs "out", "man" and "bin": $ nix-build -A pkg produces ./result pointing to the "out" output; $ nix-build -A pkg.man produces ./result-man pointing to the "man" output; $ nix-build -A pkg.all produces ./result, ./result-man and ./result-bin; $ nix-build -A pkg.all -A pkg2 produces ./result, ./result-man, ./result-bin and ./result-2.
2012-11-20	nix-store -r: Add ‘--ignore-unknown’ flag	Eelco Dolstra	3	-9/+36
	This flag causes paths that do not have a known substitute to be quietly ignored. This is mostly useful for Charon, allowing it to speed up deployment by letting a machine use substitutes for all substitutable paths, instead of uploading them. The latter is frequently faster, e.g. if the target machine has a fast Internet connection while the source machine is on a slow ADSL line.
2012-11-19	nix-store -r: Don't quietly ignore missing paths	Eelco Dolstra	1	-0/+1

2012-11-15	Revert "prim_toPath: Actually make the string a path"	Eelco Dolstra	1	-3/+1
	This reverts commit 2980d1fba97069805c3649c5d99d0356bce6c303. It causes a regression in NixOS evaluation: string `/nix/store/ya3s5gmj3b28170fpbjhgsk8wzymkpa1-pommed-1.39/etc/pommed.conf' cannot refer to other paths
2012-11-15	Disable use of vfork()	Eelco Dolstra	1	-1/+1
	vfork() is just too weird. For instance, in this build: http://hydra.nixos.org/build/3330487 the value fromHook.writeSide becomes corrupted in the parent, even though the child only reads from it. At -O0 the problem goes away. Probably the child is overriding some spilled temporary variable. If I get bored I may implement using posix_spawn() instead.