Age | Commit message (Collapse) | Author |
|
Co-Authored-By: Silvan Mosberger <contact@infinisil.com>
Add builtins.traceVerbose tests
|
|
|
|
|
|
chore: Set permissions for GitHub actions
|
|
nix-shell: restore backwards-compat with old nixpkgs
|
|
Allow specification of extra packages, maxLayers in Docker image
|
|
|
|
Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.
- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions
https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs
[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/)
Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
|
|
flakes: apply templates partially on conflicts
|
|
Nix repl flakes
|
|
virusdave/dnicponski/scratch/dont_capture_stdout_in_nix_repl_master
Don't capture `stdout` when launching subshells in `nix repl`
|
|
|
|
nix develop: save XDG_DATA_DIRS for loadable completion
|
|
|
|
Don't fail if we can't create ~/.local/share/nix/root
|
|
https://hydra.nixos.org/build/182135943
|
|
src/libexpr/tests/primops.cc: Quote Nix expressions
|
|
Otherwise they don't survive reformatting, see the failure in
https://github.com/NixOS/nix/pull/6721.
|
|
doc: Fix typo
|
|
nar-info-disk-cache: refresh nix-cache-info weekly
|
|
|
|
fetchGit: document `shallow` argument
|
|
After skipping because of being of identical content it tried to git add it.
|
|
|
|
https://github.com/NixOS/nix/pull/6699#discussion_r904097147
Co-authored-by: Théophane Hufschmitt <7226587+thufschmitt@users.noreply.github.com>
|
|
https://github.com/NixOS/nix/pull/6699#discussion_r904096906
Co-authored-by: Théophane Hufschmitt <7226587+thufschmitt@users.noreply.github.com>
|
|
|
|
Fetch flake-registry.json from channels.nixos.org
|
|
Automatically use a chroot store if /nix doesn't exist
|
|
|
|
https://github.com/NixOS/nix/pull/6708#issuecomment-1165912951
|
|
|
|
Forbid the tilde expansion in pure eval mode
|
|
|
|
eval-cache: cast rowId to correct type
|
|
libstore/nar-info: drop unused system field
|
|
Using fastly is slightly faster, provides some resilience due to a
high stale TTL, and allows some usage metrics.
|
|
Prevents errors when running with UBSan:
/nix/store/j5vhrywqmz1ixwhsmmjjxa85fpwryzh0-gcc-11.3.0/include/c++/11.3.0/bits/stl_pair.h:353:4: runtime error: load of value 229, which is not a valid value for type 'AttrType'
|
|
|
|
This was unused everywhere (and even the official NixOS binary cache
did not produce .narinfo files containing a "System:" field).
|
|
Co-authored-by: Cole Helbling <cole.e.helbling@outlook.com>
|
|
Specifically, if we're not root and the daemon socket does not exist,
then we use ~/.local/share/nix/root as a chroot store. This enables
non-root users to download nix-static and have it work out of the box,
e.g.
ubuntu@ip-10-13-1-146:~$ ~/nix run nixpkgs#hello
warning: '/nix' does not exists, so Nix will use '/home/ubuntu/.local/share/nix/root' as a chroot store
Hello, world!
|
|
Embed the sandbox shell into the statically linked 'nix' binary
|
|
|
|
libstore: improve warning message on missing sig
|
|
With this, Nix will write a copy of the sandbox shell to /bin/sh in
the sandbox rather than bind-mounting it from the host filesystem.
This makes /bin/sh work out of the box with nix-static, i.e. you no
longer get
/nix/store/qa36xhc5gpf42l3z1a8m1lysi40l9p7s-bootstrap-stage4-stdenv-linux/setup: ./configure: /bin/sh: bad interpreter: No such file or directory
|
|
Fix build-remote in nix-static
|
|
|
|
|
|
'build-remote' is now executed via /proc/self/exe so it always works.
|