Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2019-05-12 | handleDiffHook: stop passing allowVfork | Graham Christensen | 1 | -3/+1 | |
2019-05-12 | runProgram: support gid, uid, chdir | Graham Christensen | 3 | -24/+32 | |
2019-05-12 | chdir, setgroups | Graham Christensen | 1 | -0/+4 | |
2019-05-12 | diff hook: execute as the build user, and pass the temp dir | Graham Christensen | 3 | -14/+33 | |
2019-05-12 | build: run diff-hook under --check and document diff-hook | Graham Christensen | 1 | -12/+18 | |
2019-05-08 | nix-shell: Don't absolutize '-p' expressions | Eelco Dolstra | 1 | -5/+7 | |
This prevents spurious syscalls like 25011 lstat("/home/eelco/with import <nixpkgs> { }; (pkgs.runCommandCC or pkgs.runCommand) \"shell\" { buildInputs = [ (hello) ]; } \"\"", 0x7ffe9c67f580) = -1 ENOENT (No such file or directory) | |||||
2019-05-08 | Merge branch 'repl/ctrlc' of https://github.com/xbreak/nix | Eelco Dolstra | 1 | -0/+40 | |
2019-05-08 | Merge pull request #2790 from samueldr/fix/minor-comment-NIX_ROOT_FINDER | Eelco Dolstra | 1 | -4/+3 | |
findRootsNoTemp: fixes comment about findRuntimeRoots | |||||
2019-05-03 | Add builtins.hashFile | Daniel Schaefer | 1 | -0/+15 | |
For text files it is possible to do it like so: `builtins.hashString "sha256" (builtins.readFile /tmp/a)` but that doesn't work for binary files. With builtins.hashFile any kind of file can be conveniently hashed. | |||||
2019-05-03 | Fix "Bad system call" running i686-linux binaries on x86_64-linux | Eelco Dolstra | 3 | -4/+11 | |
To determine which seccomp filters to install, we were incorrectly using settings.thisSystem, which doesn't denote the actual system when --system is used. Fixes #2791. | |||||
2019-04-30 | findRootsNoTemp: fixes comment about findRuntimeRoots | Samuel Dionne-Riel | 1 | -4/+3 | |
The NIX_ROOT_FINDER environment variable was removed in 3c46fe62b833a4e66845665edc99555022d3d98c when porting from perl to C. | |||||
2019-04-17 | build: only skip hash rewriting for sandboxing on linux | Daiderd Jordan | 1 | -2/+18 | |
The sandbox on darwin, and possibly other future platforms, doesn't have enough isolation to redirect outputs without hash rewriting. | |||||
2019-04-11 | Add environment variable NIX_SHOW_SYMBOLS for dumping the symbol table | Eelco Dolstra | 2 | -0/+13 | |
2019-04-01 | primeCache(): Barf if builds are needed but not allowed | Eelco Dolstra | 1 | -0/+6 | |
Fixes #2753. | |||||
2019-04-01 | getMachines(): Cache result | Eelco Dolstra | 1 | -4/+5 | |
2019-03-27 | Fix Bison 3.3 warning | Eelco Dolstra | 1 | -1/+1 | |
2019-03-25 | Merge pull request #1828 from zimbatm/isPath | Eelco Dolstra | 1 | -0/+7 | |
Add isPath primop | |||||
2019-03-25 | store-api.hh: add missing include for unordered_map | Will Dietz | 1 | -0/+1 | |
2019-03-24 | Add isPath primop | zimbatm | 1 | -0/+7 | |
this is added for completeness' sake since all the other possible `builtins.typeOf` results have a corresponding `builtins.is<Type>` | |||||
2019-03-24 | repl: Restore CTRL-C behaviour | xbreak | 1 | -0/+40 | |
Install signal handler during `readline` to handle SIGINT to abort partially typed expressions. | |||||
2019-03-21 | eval: improve type description for primops and applied primops | Linus Heckemann | 1 | -2/+14 | |
This can make type errors a little easier to understand. | |||||
2019-03-15 | Add a 5 seconds of timeouts to connect to S3. | Chaker Benhamed | 1 | -0/+1 | |
The default is 1000ms, but we can hit it a lot of we don't have direct link to AWS (e.g. using VPN). | |||||
2019-03-14 | pkg-config files: Use c++17 | Eelco Dolstra | 3 | -3/+3 | |
2019-03-14 | experimental/optional -> optional | Eelco Dolstra | 14 | -26/+26 | |
2019-03-14 | nix-store --gc --print-roots: Sort output | Eelco Dolstra | 1 | -1/+5 | |
2019-03-14 | findRoots(): Don't censor for trusted users | Eelco Dolstra | 1 | -1/+1 | |
They're pretty much root anyway. | |||||
2019-03-14 | findRoots(): Add 'censor' parameter | Eelco Dolstra | 7 | -53/+40 | |
This is less brittle than filtering paths after the fact in nix-daemon. | |||||
2019-03-14 | findRuntimeRoots: Simplify/fix handling of /proc files | Eelco Dolstra | 2 | -15/+14 | |
Scanning of /proc/<pid>/{exe,cwd} was broken because '{memory:' was prepended twice. Also, get rid of the whole '{memory:...}' thing because it's unnecessary, we can just list the file in /proc directly. | |||||
2019-03-10 | Fix warning about unused variable | Guillaume Maudoux | 1 | -2/+5 | |
2019-03-10 | Unify internal findRootsXxx() api | Guillaume Maudoux | 2 | -24/+15 | |
2019-03-10 | unify naming of roots as links & targets | Guillaume Maudoux | 1 | -6/+6 | |
2019-03-10 | Also obfuscate the number of memory roots | Guillaume Maudoux | 1 | -2/+16 | |
2019-03-10 | Also print rooted path in `nix-store -q --roots` | Guillaume Maudoux | 1 | -1/+1 | |
2019-03-10 | fixup! Make roots a map of store paths to pinning links | Guillaume Maudoux | 1 | -3/+3 | |
2019-03-10 | Make roots a map of store paths to pinning links | Guillaume Maudoux | 5 | -35/+39 | |
This new structure makes more sense as there may be many sources rooting the same store path. Many profiles can reference the same path but this is even more true with /proc/<pid>/maps where distinct pids can and often do map the same store path. This implementation is also more efficient as the `Roots` map contains only one entry per rooted store path. | |||||
2019-03-10 | Obfuscate memory roots for non-root users | Guillaume Maudoux | 2 | -9/+16 | |
2019-03-10 | detail memory roots | Guillaume Maudoux | 2 | -31/+32 | |
2019-03-06 | canBuildLocally: check for features | volth | 1 | -3/+10 | |
It could happen that the local builder match the system but lacks some features. Now it results a failure. The fix gracefully excludes the local builder from the set of available builders for derivation which requires the feature, so the derivation is built on remote builders only (as though it has incompatible system, like ```aarch64-linux``` when local is x86) | |||||
2019-03-01 | archive.cc: ignore more posix_fallocate "not supported" error codes | Will Dietz | 1 | -1/+1 | |
Fixes w/musl. | |||||
2019-02-26 | fix indentation | Dzmitry Zaitsau | 1 | -2/+2 | |
2019-02-25 | Apply param values on S3Helper initialization | Dzmitry Zaitsau | 1 | -1/+8 | |
2019-02-25 | Extend S3 URL parsing with parameters extraction | Dzmitry Zaitsau | 1 | -5/+17 | |
2019-02-25 | Extract and expose splitUriAndParams function | Dzmitry Zaitsau | 2 | -4/+16 | |
which splits a URL into localtor and parameter parts | |||||
2019-02-14 | Merge pull request #2579 from catern/dumpdb | Eelco Dolstra | 1 | -5/+10 | |
nix-store: make --dump-db take a list of paths to dump | |||||
2019-02-12 | Merge pull request #2628 from shlevy/context-introspection | Eelco Dolstra | 3 | -54/+192 | |
Context introspection | |||||
2019-02-05 | Revert "Restore parent mount namespace before executing a child process" | Eelco Dolstra | 9 | -52/+4 | |
This reverts commit a0ef21262f4d5652bfb65cfacaec01d89c475a93. This doesn't work in 'nix run' and nix-shell because setns() fails in multithreaded programs, and Boehm GC mark threads are uncancellable. Fixes #2646. | |||||
2019-01-31 | Add builtins.appendContext. | Shea Levy | 1 | -2/+57 | |
A partner of builtins.getContext, useful for the same reasons. | |||||
2019-01-23 | nix-store: make --dump-db take a list of paths to dump | Spencer Baugh | 1 | -5/+10 | |
Inside a derivation, exportReferencesGraph already provides a way to dump the Nix database for a specific closure. On the command line, --dump-db gave us the same information, but only for the entire Nix database at once. With this change, one can now pass a list of paths to --dump-db to get the Nix database dumped for just those paths. (The user is responsible for ensuring this is a closure, like for --export). Among other things, this is useful for deploying a closure to a new host without using --import/--export; one can use tar to transfer the store paths, and --dump-db/--load-db to transfer the validity information. This is useful if the new host doesn't actually have Nix yet, and the closure that is being deployed itself contains Nix. | |||||
2019-01-18 | unsupported(): Show the name of the unsupported operation | Eelco Dolstra | 4 | -76/+31 | |
2019-01-14 | Add builtins.getContext. | Shea Levy | 3 | -38/+135 | |
This can be very helpful when debugging, as well as enabling complex black magic like surgically removing a single dependency from a string's context. |