depot - monorepo for the virus lounge

Age	Commit message (Collapse)	Author	Files	Lines
2019-07-30	Merge pull request #3013 from basvandijk/disable-lsof-for-darwin-tests	Eelco Dolstra	1	-0/+1
	Disable findRuntimeRoots on darwin when running tests because lsof is slow
2019-07-30	Disable findRuntimeRoots on darwin when running tests because lsof is slow	Bas van Dijk	1	-0/+1
	See: https://github.com/NixOS/nix/issues/3011
2019-07-30	Allow builtins.pathExists to check the existence of /nix/store paths	Bas van Dijk	1	-1/+4
	This makes it consitent with builtins.readDir.
2019-07-25	Use $HOME instead of $USER	Matthew Bauer	1	-1/+1
	$USER/.nix-profile will not be a path. I think $HOME/.nix-profile was the origininal intent. /cc @Grahamc
2019-07-02	timeout: test for error code	Graham Christensen	1	-4/+8

2019-07-02	build: replace 100 offset for build exit codes	Daiderd Jordan	1	-2/+2

2019-07-02	build: add tests for --check status codes	Daiderd Jordan	2	-4/+24

2019-06-24	Fix abort in fromTOML	Eelco Dolstra	2	-1/+8
	Fixes #2969.
2019-06-24	Add more fromTOML tests	Eelco Dolstra	2	-1/+20

2019-06-15	Fix test failures when $TMPDIR changes	Eelco Dolstra	4	-10/+8
	(cherry picked from commit c38c726eb5d447c7e9d894d57cd05ac46c173ddd)
2019-06-01	Fix segfault in builtin fetchurl with hashed mirrors + SRI hashes	Eelco Dolstra	1	-0/+4

2019-05-29	Enable more fromTOML tests	Eelco Dolstra	2	-17/+15
	cpptoml now parses almost all examples from the spec.
2019-05-29	Fix eval-okay-fromTOML test	Eelco Dolstra	1	-1/+1
	Turns out we were mis-parsing single-quoted attributes, e.g. 'key2'.
2019-05-28	Merge branch 'attrPaths' of https://github.com/NinjaTrappeur/nix	Eelco Dolstra	6	-0/+23

2019-05-12	build: add test for sandboxed --check	Daiderd Jordan	1	-0/+3

2019-05-08	fix hashfile test that wasn't failing due to eval laziness	Will Dietz	1	-1/+1
	See: https://github.com/NixOS/nix/commit/7becb1bf1c2ec1544a5374580a97b36273506baf#r33450554
2019-05-03	Add builtins.hashFile	Daniel Schaefer	7	-1/+11
	For text files it is possible to do it like so: `builtins.hashString "sha256" (builtins.readFile /tmp/a)` but that doesn't work for binary files. With builtins.hashFile any kind of file can be conveniently hashed.
2019-03-27	Update eval-okay-types.exp to match #1828	Eelco Dolstra	1	-1/+1

2019-03-24	Add isPath primop	zimbatm	1	-0/+2
	this is added for completeness' sake since all the other possible `builtins.typeOf` results have a corresponding `builtins.is<Type>`
2019-03-10	Update tests to the new --roots format	Guillaume Maudoux	1	-1/+1

2019-03-04	Restore --init calls in tests	Eelco Dolstra	2	-0/+4

2019-02-22	remove noop uses of nix-store --init	zimbatm	2	-4/+0
	the nix-store --init command is a noop apparently
2019-01-31	Add builtins.appendContext.	Shea Levy	1	-2/+4
	A partner of builtins.getContext, useful for the same reasons.
2019-01-14	Add builtins.getContext.	Shea Levy	2	-0/+23
	This can be very helpful when debugging, as well as enabling complex black magic like surgically removing a single dependency from a string's context.
2018-12-14	tests/fetchurl: fix after changing default hash from 512 to 256	Will Dietz	1	-1/+1

2018-12-13	Support SRI hashes	Eelco Dolstra	2	-1/+22
	SRI hashes (https://www.w3.org/TR/SRI/) combine the hash algorithm and a base-64 hash. This allows more concise and standard hash specifications. For example, instead of import <nix/fetchurl.nl> { url = https://nixos.org/releases/nix/nix-2.1.3/nix-2.1.3.tar.xz; sha256 = "5d22dad058d5c800d65a115f919da22938c50dd6ba98c5e3a183172d149840a4"; }; you can write import <nix/fetchurl.nl> { url = https://nixos.org/releases/nix/nix-2.1.3/nix-2.1.3.tar.xz; hash = "sha256-XSLa0FjVyADWWhFfkZ2iKTjFDda6mMXjoYMXLRSYQKQ="; }; In fixed-output derivations, the outputHashAlgo is no longer mandatory if outputHash specifies the hash (either as an SRI or in the old "<type>:<hash>" format). 'nix hash-{file,path}' now print hashes in SRI format by default. I also reverted them to use SHA-256 by default because that's what we're using most of the time in Nixpkgs. Suggested by @zimbatm.
2018-11-20	Merge branch 'better-git-cache' of https://github.com/graham-at-target/nix	Eelco Dolstra	1	-2/+2

2018-11-07	Enable sandboxing by default	Eelco Dolstra	2	-9/+7
	Closes #179.
2018-10-27	Restore old (dis)allowedRequisites behaviour for self-references	Eelco Dolstra	3	-1/+5
	stdenv relies on this. So ignore self-references (but only in legacy non-structured attributes mode).
2018-10-23	Per-output reference and closure size checks	Eelco Dolstra	1	-1/+1
	In structured-attributes derivations, you can now specify per-output checks such as: outputChecks."out" = { # The closure of 'out' must not be larger than 256 MiB. maxClosureSize = 256 * 1024 * 1024; # It must not refer to C compiler or to the 'dev' output. disallowedRequisites = [ stdenv.cc "dev" ]; }; outputChecks."dev" = { # The 'dev' output must not be larger than 128 KiB. maxSize = 128 * 1024; }; Also fixed a bug in allowedRequisites that caused it to ignore self-references.
2018-10-08	Merge pull request #2452 from ElvishJerricco/verify-sigs-overflow	Eelco Dolstra	1	-0/+4
	Fix overflow when verifying signatures of content addressable paths
2018-09-28	Check requiredSystemFeatures for local builds	Eelco Dolstra	1	-1/+2
	For example, this prevents a "kvm" build on machines that don't have KVM. Fixes #2012.
2018-09-25	Add a test for signed content-addressed paths	Will Fancher	1	-0/+4

2018-09-10	Prefer 'remote builder' over 'slave'	Graham Christensen	1	-18/+18

2018-08-19	FIx floating point evaluation	Eelco Dolstra	2	-0/+7
	Fixes #2361.
2018-08-17	fetchGit: use a better caching scheme	Graham Christensen	1	-2/+2
	The current usage technically works by putting multiple different repos in to the same git directory. However, it is very slow as Git tries very hard to find common commits between the two repositories. If the two repositories are large (like Nixpkgs and another long-running project,) it is maddeningly slow. This change busts the cache for existing deployments, but users will be promptly repaid in per-repository performance.
2018-08-06	Require libbrotli	Eelco Dolstra	2	-8/+0

2018-08-03	Add a test for LegacySSHStore that doesn't require a VM	Eelco Dolstra	2	-1/+22

2018-08-03	Merge pull request #2326 from aszlig/fix-symlink-leak	Eelco Dolstra	1	-0/+11
	Fix symlink leak in restricted eval mode
2018-08-03	Fix symlink leak in restricted eval mode	aszlig	1	-0/+11
	In EvalState::checkSourcePath, the path is checked against the list of allowed paths first and later it's checked again after resolving symlinks. The resolving of the symlinks is done via canonPath, which also strips out "../" and "./". However after the canonicalisation the error message pointing out that the path is not allowed prints the symlink target in the error message. Even if we'd suppress the message, symlink targets could still be leaked if the symlink target doesn't exist (in this case the error is thrown in canonPath). So instead, we now do canonPath() without symlink resolving first before even checking against the list of allowed paths and then later do the symlink resolving and checking the allowed paths again. The first call to canonPath() should get rid of all the "../" and "./", so in theory the only way to leak a symlink if the attacker is able to put a symlink in one of the paths allowed by restricted evaluation mode. For the latter I don't think this is part of the threat model, because if the attacker can write to that path, the attack vector is even larger. Signed-off-by: aszlig <aszlig@nix.build>
2018-08-02	Allows selectively adding environment variables to pure shells.	Samuel Dionne-Riel	1	-0/+7
	Includes documentation and test.
2018-07-05	lib.concatMap and lib.mapAttrs to be builtins	volth	4	-0/+10

2018-07-03	tests/search.sh: minor fix to unbreak tests after search ux merge	Will Dietz	1	-1/+1

2018-07-03	Add a fromTOML primop	Eelco Dolstra	2	-0/+185
	This is primarily useful for processing Cargo.lock files.
2018-06-06	tests: more robust check for user namespaces availability (canUseSandbox)	Aleksandr Pashkov	1	-5/+3
	Issue https://github.com/NixOS/nix/issues/2165
2018-06-05	Don't require --fallback to recover from disappeared binary cache NARs	Eelco Dolstra	1	-4/+13

2018-06-05	Improve binary cache fallback test	Eelco Dolstra	1	-7/+7

2018-06-05	Remove non-existent NIX_DEBUG_SUBST	Eelco Dolstra	1	-1/+1

2018-05-30	Modularize config settings	Eelco Dolstra	1	-4/+9
	Allow global config settings to be defined in multiple Config classes. For example, this means that libutil can have settings and evaluator settings can be moved out of libstore. The Config classes are registered in a new GlobalConfig class to which config files etc. are applied. Relevant to https://github.com/NixOS/nix/issues/2009 in that it removes the need for ad hoc handling of useCaseHack, which was the underlying cause of that issue.
2018-05-24	add docs and tests	volth	2	-1/+5