depot - monorepo for the virus lounge

Age	Commit message (Collapse)	Author	Files	Lines
2017-01-16	AutoCloseDir: Use std::unique_ptr	Eelco Dolstra	4	-65/+20

2017-01-16	AutoDeleteArray -> std::unique_ptr	Eelco Dolstra	4	-23/+9
	Also, switch to C++14 for std::make_unique.
2017-01-16	nix-build: Use showManPage() and printVersion()	Eelco Dolstra	1	-7/+3

2017-01-10	builtins.readFile: Put the references of the file, not those needed to ↵	Shea Levy	1	-0/+3
	realize the file, into the context
2017-01-09	Merge pull request #1139 from Mic92/master	Eelco Dolstra	1	-6/+2
	Simplify remouting with MS_PRIVATE in sandbox build
2017-01-07	nix-shell: Fix 'nix-shell --command' doing nothing without TTY	Tuomas Tynkkynen	1	-1/+2
	Regression from a5f2750e ("Fix early removal of rc-file for nix-shell"). The removal of BASH_ENV causes nothing to be executed by bash if it detects itself in a non-interactive context. Instead, just use the same condition used by bash to launch bash differently. According to bash sources, the condition (stdin and stder both must be TTYs) is specified by POSIX so this should be pretty safe to rely on. Fixes #1171 on master, needs a backport to the Perl code in 1.11.
2017-01-03	nix-shell: In #! mode, pass the last argument	Eelco Dolstra	1	-13/+11
	"i < argc - 1" should be "i < argc".
2017-01-03	nix-shell: Don't act interactive in shebangs	Tuomas Tynkkynen	1	-0/+1
	I had observed that 'bash --rcfile' would do nothing in a non-interactive context and cause nothing to be executed if a script using nix-shell shebangs were run in a non-interactive context.
2017-01-03	nix-shell: Fix 'nix-shell -i'	Tuomas Tynkkynen	1	-1/+1
	The 'args' variable here is shadowing one in the outer scope and its contents end up unused. This causes any '#! nix-shell' lines to effectively be ignored. The intention here was to clear the args vector, as far as I can tell (and it seems to work).
2017-01-02	Provide /var/run/nscd/socket in the sandbox	Eelco Dolstra	1	-0/+1
	Otherwise sandbox builds can fail, e.g. $ NIX_REMOTE=local?root=/tmp/nix nix-build '<nixpkgs>' -A hello --option build-use-substitutes false ... downloading ‘http://ftpmirror.gnu.org/bash/bash-4.3-patches/bash43-047’... error: unable to download ‘http://ftpmirror.gnu.org/bash/bash-4.3-patches/bash43-047’: Couldn't resolve host name (6)
2016-12-22	Call Aws::InitAPI	Eelco Dolstra	1	-1/+17
	This is required now.
2016-12-22	Add comment	Eelco Dolstra	1	-1/+2

2016-12-19	Revert "Merge branch 'seccomp' of https://github.com/aszlig/nix"	Eelco Dolstra	2	-69/+29
	This reverts commit 9f3f2e21edb17dbcd674539dff96efb6cceca10c, reversing changes made to 47f587700d646f5b03a42f2fa57c28875a31efbe.
2016-12-19	Revert "Give root a valid home directory"	Eelco Dolstra	1	-3/+3
	This reverts commit ec7d498b72b0e283814c27cbc6c064496f95445d.
2016-12-15	Give root a valid home directory	Eelco Dolstra	1	-3/+3
	Some programs barf if the current user has a non-writable home directory, e.g. http://hydra.nixos.org/build/44818144.
2016-12-15	Merge branch 'master' of github.com:NixOS/nix	Eelco Dolstra	1	-1/+7

2016-12-15	Merge branch 'seccomp' of https://github.com/aszlig/nix	Eelco Dolstra	2	-29/+69

2016-12-13	Merge branch 'base32-overflow' of git://github.com/vcunat/nix	Shea Levy	1	-1/+7

2016-12-09	Probably fix a segfault in PathLocks	Eelco Dolstra	1	-37/+50

2016-12-08	Don't delete .check directories of running builds	Eelco Dolstra	2	-2/+7
	We need to keep them around for diffoscope.
2016-12-08	Fix warning on 32-bit systems	Eelco Dolstra	1	-1/+2
	http://hydra.nixos.org/build/44628517
2016-12-08	Fix build	Eelco Dolstra	1	-2/+2
	http://hydra.nixos.org/build/44628517
2016-12-08	S3BinaryCacheStore: Ensure it only builds on Linux	Eelco Dolstra	1	-0/+2

2016-12-08	Fix S3BinaryCacheStore	Eelco Dolstra	4	-53/+11
	It failed with AWS error uploading ‘6gaxphsyhg66mz0a00qghf9nqf7majs2.ls.xz’: Unable to parse ExceptionName: MissingContentLength Message: You must provide the Content-Length HTTP header. possibly because the istringstream_nocopy introduced in 0d2ebb4373e509521f27a6e8f16bfd39d05b2188 doesn't supply the seek method that the AWS library expects. So bring back the old version, but only for S3BinaryCacheStore.
2016-12-07	Add a hook to run diffoscope when non-determinism is detected	Eelco Dolstra	2	-7/+33

2016-12-07	Keep track of the exact build start/stop times	Eelco Dolstra	3	-2/+8

2016-12-07	Bail out early when non-determinism is detected	Eelco Dolstra	1	-0/+1

2016-12-07	Expose enforce-determinism and the result to Hydra	Eelco Dolstra	1	-1/+6

2016-12-07	Add an option to make non-determinism non-fatal	Eelco Dolstra	2	-11/+24
	That is, when build-repeat > 0, and the output of two rounds differ, then print a warning rather than fail the build. This is primarily to let Hydra check reproducibility of all packages.
2016-12-06	Use a steady clock for timeouts	Eelco Dolstra	2	-22/+29
	Fixes #1146.
2016-12-06	nix-store --serve: Suppress log output on stderr when repeating a build	Eelco Dolstra	3	-1/+8

2016-12-06	nix-store --serve: Support setting build-repeat	Eelco Dolstra	2	-1/+3
	This allows Hydra to test whether builds are reproducible.
2016-12-06	Tweak error message	Eelco Dolstra	1	-2/+2

2016-11-27	Improve error message on trailing path slashes	Guillaume Maudoux	1	-4/+12

2016-11-25	Simplify remouting with MS_PRIVATE in sandbox build	Jörg Thalheim	1	-6/+2
	also fix race condition if mounts are added after mountinfo is read.
2016-11-21	nix-channel: Fix --update <CHANNELS>	Eelco Dolstra	1	-2/+2
	This unbreaks "nixos-rebuild --upgrade".
2016-11-17	Typo	Eelco Dolstra	1	-1/+1

2016-11-17	Fix binary-cache-store build	Shea Levy	1	-7/+8

2016-11-17	istringstream_nocopy: Implement in a standards-compliant way	Shea Levy	1	-4/+40
	Fixes #1135.
2016-11-17	nix-daemon: Fix splice faking on non-Linux	Shea Levy	1	-2/+2

2016-11-17	Update darwin build for optional sandbox paths	Shea Levy	1	-3/+6
	Fixes #1132
2016-11-16	seccomp: Forge return values for *chown32	aszlig	1	-0/+4
	These syscalls are only available in 32bit architectures, but libseccomp should handle them correctly even if we're on native architectures that do not have these syscalls. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2016-11-16	seccomp: Forge return codes for POSIX ACL syscalls	aszlig	1	-0/+4
	Commands such as "cp -p" also use fsetxattr() in addition to fchown(), so we need to make sure these syscalls always return successful as well in order to avoid nasty "Invalid value" errors. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2016-11-16	libstore/build: Forge chown() to return success	aszlig	1	-0/+41
	What we basically want is a seccomp mode 2 BPF program like this but for every architecture: BPF_STMT(BPF_LD+BPF_W+BPF_ABS, offsetof(struct seccomp_data, nr)), BPF_JUMP(BPF_JMP+BPF_JEQ+BPF_K, __NR_chown, 4, 0), BPF_JUMP(BPF_JMP+BPF_JEQ+BPF_K, __NR_fchown, 3, 0), BPF_JUMP(BPF_JMP+BPF_JEQ+BPF_K, __NR_fchownat, 2, 0), BPF_JUMP(BPF_JMP+BPF_JEQ+BPF_K, __NR_lchown, 1, 0), BPF_STMT(BPF_RET+BPF_K, SECCOMP_RET_ALLOW), BPF_STMT(BPF_RET+BPF_K, SECCOMP_RET_ERRNO) However, on 32 bit architectures we do have chown32, lchown32 and fchown32, so we'd need to add all the architecture blurb which libseccomp handles for us. So we only need to make sure that we add the 32bit seccomp arch while we're on x86_64 and otherwise we just stay at the native architecture which was set during seccomp_init(), which more or less replicates setting 32bit personality during runChild(). The FORCE_SUCCESS() macro here could be a bit less ugly but I think repeating the seccomp_rule_add() all over the place is way uglier. Another way would have been to create a vector of syscalls to iterate over, but that would make error messages uglier because we can either only print the (libseccomp-internal) syscall number or use seccomp_syscall_resolve_num_arch() to get the name or even make the vector a pair number/name, essentially duplicating everything again. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2016-11-16	Add build dependency for libseccomp	aszlig	1	-0/+4
	We're going to use libseccomp instead of creating the raw BPF program, because we have different syscall numbers on different architectures. Although our initial seccomp rules will be quite small it really doesn't make sense to generate the raw BPF program because we need to duplicate it and/or make branches on every single architecture we want to suuport. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2016-11-16	Run builds as root in user namespace again	aszlig	1	-29/+16
	This reverts commit ff0c0b645cc1448959126185bb2fafe41cf0bddf. We're going to use seccomp to allow "cp -p" and force chown-related syscalls to always return 0. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2016-11-16	S3BinaryCacheStore:: Eliminate a string copy while uploading	Eelco Dolstra	4	-3/+17
	This cuts hydra-queue-runner's peak memory usage by about a third.
2016-11-14	buildPaths(): Handle ecIncompleteClosure	Eelco Dolstra	1	-1/+1
	buildPaths() on a non-derivation would incorrectly not throw an error if the path didn't have a substitute.
2016-11-14	Don't rely on %m	Eelco Dolstra	1	-1/+2

2016-11-14	daemon: Do not error out when deduplication fails due to ENOSPC.	Ludovic Courtès	1	-5/+19
	This solves a problem whereby if /gnu/store/.links had enough entries, ext4's directory index would be full, leading to link(2) returning ENOSPC. * nix/libstore/optimise-store.cc (LocalStore::optimisePath_): Upon ENOSPC from link(2), print a message and return instead of throwing a 'SysError'.