depot - monorepo for the virus lounge

Age	Commit message (Collapse)	Author	Files	Lines
2017-05-05	Make the location of the build directory in the sandbox configurable	Eelco Dolstra	3	-6/+6
	This is mostly for use in the sandbox tests, since if the Nix store is under /build, then we can't use /build as the build directory.
2017-05-05	Figure out the user's home directory if $HOME is not set	Eelco Dolstra	6	-32/+84

2017-05-04	Linux sandbox: Use /build instead of /tmp as $TMPDIR	Eelco Dolstra	1	-5/+15
	There is a security issue when a build accidentally stores its $TMPDIR in some critical place, such as an RPATH. If TMPDIR=/tmp/nix-build-..., then any user on the system can recreate that directory and inject libraries into the RPATH of programs executed by other users. Since /build probably doesn't exist (or isn't world-writable), this mitigates the issue.
2017-05-04	nix dump-path: Add	Eelco Dolstra	3	-0/+55
	This is primarily useful for extracting NARs from other stores (like binary caches), which "nix-store --dump" cannot do.
2017-05-03	Fix build on gcc 4.9	Eelco Dolstra	2	-3/+6
	http://hydra.nixos.org/build/52408843
2017-05-03	nix-shell: Implement passAsFile	Eelco Dolstra	1	-2/+15

2017-05-03	nix eval: Add a --raw flag	Eelco Dolstra	1	-1/+13
	Similar to "jq -r", this prints the evaluation result (which must be a string value) unquoted.
2017-05-02	Fix "nix ... --all"	Eelco Dolstra	2	-12/+16
	When "--all" is used, we should not fill in a default installable.
2017-05-02	LocalStoreAccessor: Fix handling of diverted stores	Eelco Dolstra	1	-3/+4

2017-05-02	Replace $NIX_REMOTE_SYSTEMS with an option "builder-files"	Eelco Dolstra	4	-14/+34
	Also, to unify with hydra-queue-runner, allow it to be a list of files.
2017-05-02	build-remote: Fix fallback to other machines when connecting fails	Eelco Dolstra	5	-1/+19
	Opening an SSHStore or LegacySSHStore does not actually establish a connection, so the try/catch block here did nothing. Added a Store::connect() method to test whether a connection can be established.
2017-05-02	Add an option for specifying remote builders	Eelco Dolstra	6	-12/+27
	This is useful for one-off situations where you want to specify a builder on the command line instead of having to mess with nix.machines. E.g. $ nix-build -A hello --argstr system x86_64-darwin \ --option builders 'root@macstadium1 x86_64-darwin' will perform the specified build on "macstadium1". It also removes the need for a separate nix.machines file since you can specify builders in nix.conf directly. (In fact nix.machines is yet another hack that predates the general nix.conf configuration file, IIRC.) Note: this option is supported by the daemon for trusted users. The fact that this allows trusted users to specify paths to SSH keys to which they don't normally have access is maybe a bit too much trust...
2017-05-02	Factor out machines.conf parsing	Eelco Dolstra	3	-87/+108
	This allows hydra-queue-runner to use it.
2017-05-02	build-hook: If there are no machines defined, quit permanently	Eelco Dolstra	2	-2/+14

2017-05-02	build-remote: Ugly hackery to get build logs to work	Eelco Dolstra	4	-3/+11
	The build hook mechanism expects build log output to go to file descriptor 4, so do that.
2017-05-01	build-remote: Don't require signatures	Eelco Dolstra	6	-16/+20
	This restores the old behaviour.
2017-05-01	Support arbitrary store URIs in nix.machines	Eelco Dolstra	4	-46/+66
	For backwards compatibility, if the URI is just a hostname, ssh:// (i.e. LegacySSHStore) is prepended automatically. Also, all fields except the URI are now optional. For example, this is a valid nix.machines file: local?root=/tmp/nix This is useful for testing the remote build machinery since you don't have to mess around with ssh.
2017-05-01	Minor cleanup	Eelco Dolstra	1	-2/+2

2017-05-01	Implement LegacySSHStore::buildDerivation()	Eelco Dolstra	1	-5/+32
	This makes LegacySSHStore usable by build-remote and hydra-queue-runner.
2017-05-01	Chomp log output from the build hook	Eelco Dolstra	1	-1/+1

2017-05-01	Remove $NIX_BUILD_HOOK and $NIX_CURRENT_LOAD	Eelco Dolstra	3	-9/+10
	This is to simplify remote build configuration. These environment variables predate nix.conf. The build hook now has a sensible default (namely build-remote). The current load is kept in the Nix state directory now.
2017-05-01	build-remote: Don't copy the .drv closure	Eelco Dolstra	2	-16/+8
	Since build-remote uses buildDerivation() now, we don't need to copy the .drv file anymore. This greatly reduces the set of input paths copied to the remote side (e.g. from 392 to 51 store paths for GNU hello on x86_64-darwin).
2017-05-01	Pass verbosity level to build hook	Eelco Dolstra	2	-6/+10

2017-05-01	Reduce severity of EMLINK warnings	Eelco Dolstra	1	-2/+1
	Fixes #1357.
2017-05-01	Add a dummy Store::buildPaths() method	Eelco Dolstra	5	-38/+36
	This default implementation of buildPaths() does nothing if all requested paths are already valid, and throws an "unsupported operation" error otherwise. This fixes a regression introduced by c30330df6f67c81986dfb124631bc756c8e58c0d in binary cache and legacy SSH stores.
2017-05-01	lexer: remove catch-all rules hiding real errors	Guillaume Maudoux	1	-10/+17
	With catch-all rules, we hide potential errors. It turns out that a4744254 made one cath-all useless. Flex detected that is was impossible to reach. The other is more subtle, as it can only trigger on unfinished escapes in unfinished strings, which only occurs at EOF.
2017-05-01	Fix lexer to support `$'` in multiline strings.	Guillaume Maudoux	1	-1/+2

2017-04-28	Hopefully fix the Darwin build	Eelco Dolstra	1	-0/+1
	http://hydra.nixos.org/build/52080911
2017-04-28	Suppress warning about ssh-auth-sock	Eelco Dolstra	1	-1/+3

2017-04-28	Check for libreadline	Eelco Dolstra	2	-1/+7

2017-04-28	Fix brainfart	Eelco Dolstra	1	-1/+1

2017-04-28	Fix hash computation when importing NARs greater than 4 GiB	Eelco Dolstra	1	-1/+1
	This caused "nix-store --import" to compute an incorrect hash on NARs that don't fit in an unsigned int. The import would succeed, but "nix-store --verify-path" or subsequent exports would detect an incorrect hash. A deeper issue is that the export/import format does not contain a hash, so we can't detect such issues early. Also, I learned that -Wall does not warn about this.
2017-04-26	Merge pull request #1358 from shlevy/store-nesting	Eelco Dolstra	2	-0/+18
	Add Store nesting to fix import-from-derivation within filterSource
2017-04-26	Add Store nesting to fix import-from-derivation within filterSource	Shea Levy	2	-0/+18

2017-04-26	Doh	Eelco Dolstra	1	-1/+1

2017-04-25	nix repl: Fix Ctrl-C	Eelco Dolstra	1	-0/+10

2017-04-25	Minor cleanup	Eelco Dolstra	1	-10/+7

2017-04-25	"using namespace std" considered harmful	Eelco Dolstra	1	-6/+5

2017-04-25	nix repl: Use $XDG_DATA_HOME for the readline history	Eelco Dolstra	3	-3/+19

2017-04-25	Make "nix repl" build	Eelco Dolstra	2	-32/+36

2017-04-25	Merge nix-repl repository	Eelco Dolstra	1	-0/+719

2017-04-25	Cleanup in preparation of merging nix-repl repo into nix repo	Eelco Dolstra	1	-0/+719

2017-04-25	StorePathCommands: Build installables	Eelco Dolstra	3	-20/+13
	So for instance "nix copy --to ... nixpkgs.hello" will build nixpkgs.hello first. It's debatable whether this is a good idea. It seems desirable for commands like "nix copy" but maybe not for commands like "nix path-info".
2017-04-25	Set default installable	Eelco Dolstra	1	-1/+7
	Thus $ nix build -f foo.nix will build foo.nix. And $ nix build will build default.nix. However, this may not be a good idea because it's kind of inconsistent, given that "nix build foo" will build the "foo" attribute from the default installation source (i.e. the synthesis of $NIX_PATH), rather than ./default.nix. So I may revert this.
2017-04-25	Interpret any installable containing a slash as a path	Eelco Dolstra	1	-11/+7
	So "nix path-info ./result" now works.
2017-04-25	Make StorePathsCommand a subclass of InstallablesCommand	Eelco Dolstra	2	-24/+33
	This allows commands like 'nix path-info', 'nix copy', 'nix verify' etc. to work on arbitrary installables. E.g. to copy geeqie to a binary cache: $ nix copy -r --to file:///tmp/binary-cache nixpkgs.geeqie Or to get the closure size of thunderbird: $ nix path-info -S nixpkgs.thunderbird
2017-04-25	Move code around	Eelco Dolstra	8	-80/+68

2017-04-25	Add "nix eval" command	Eelco Dolstra	1	-0/+44
	This replaces "nix-instantiate --eval". The result is evaluated strictly since this seems more useful.
2017-04-25	Restructure installables handling in the "nix" command	Eelco Dolstra	9	-124/+257

2017-04-24	Remove debug statement	Eelco Dolstra	1	-1/+0