Age | Commit message (Collapse) | Author |
|
|
|
speed up CI
|
|
|
|
|
|
For example, for building the Nix flake, you would do:
$ nix develop --configure
$ nix develop --install
$ nix develop --installcheck
|
|
For some reason, the bash shell started by 'nix develop' sometimes
reads from stdin, which can hang.
|
|
Currently, they're set to $(pwd)/outputs/$outputName. This allows
commands like 'make install' to work.
|
|
|
|
Pass all args when auto-calling a function with an ellipsis
|
|
The command line options --arg and --argstr that are used by a bunch of
CLI commands to pass arguments to top-level functions in files go
through the same code-path as auto-calling top-level functions with
their default arguments - this, however, was only passing the arguments
that were *explicitly* mentioned in the formals of the function - in the
case of an as-pattern with an ellipsis (eg args @ { ... }) extra passed
arguments would get omitted. This fixes that to instead pass *all*
specified auto args in the case that our function has an ellipsis.
Fixes #598
|
|
Revise division of labor in deserialization of derivations
|
|
|
|
As pointed out by @B4dM4n, the call to to.flush() on stderrThread is
unsafe because the NAR writer thread is also writing to 'to'.
Fixes #3943.
|
|
set Content-Type to "text/plain" for install script
|
|
tabs -> spaces
|
|
`writeDerivation` just needs a plain store reference
|
|
|
|
Sorry I let the tab sneak in there in the first place.
|
|
`queryDerivationOutputMap` no longer assumes all outputs have a mapping
|
|
- `queryDerivationOutputMapAssumeTotal` -> `queryPartialDerivationOutputMap`
- `queryDerivationOutputMapAssumeTotal` -> `queryDerivationOutputMap`
|
|
fixes #3947
|
|
fix spelling
|
|
|
|
derivation-header-include-order
|
|
Simplify code as output env vars are unconditional
|
|
Add commented-out test for remote building with fixed output derivations
|
|
Define `LegacySSHStore::buildPaths` using `cmdBuildPaths`
|
|
|
|
Don't try to parse signature check as commit timestamp
|
|
|
|
https://github.com/obsidiansystems/nix
|
|
|
|
|
|
Co-authored-by: Eelco Dolstra <edolstra@gmail.com>
|
|
Offer a safer interface for path and pathOpt
|
|
Make `system-features` a store setting
|
|
Add hashed-mirrors back
|
|
Make narHash in ValidPathInfo not optional
|
|
When the log.showSignature git setting is enabled, the output of
"git log" contains signature verification information in addition to the
timestamp GitInputScheme::fetch wants:
$ git log -1 --format=%ct
gpg: Signature made Sat 07 Sep 2019 02:02:03 PM PDT
gpg: using RSA key 0123456789ABCDEF0123456789ABCDEF01234567
gpg: issuer "user@example.com"
gpg: Good signature from "User <user@example.com>" [ultimate] 1567890123
1567890123
For folks that had log.showSignature set, this caused all nix operations
on flakes to fail:
$ nix build
error: stoull
|
|
Evidentally this was never implemented because Nix switched to using
`buildDerivation` exclusively before `build-remote.pl` was rewritten.
The `nix-copy-ssh` test (already) tests this.
|
|
Include a long comment explaining the policy. Perhaps this can be moved
to the manual at some point in the future.
Also bump the daemon protocol minor version, so clients can tell whether
`wopBuildDerivation` supports trustless CA derivation building. I hope
to take advantage of this in a follow-up PR to support trustless remote
building with the minimal sending of derivation closures.
|
|
Use `TeeSink` and `TeeSouce` in a few more places
|
|
|
|
Separate auth and logic for the daemon
|
|
Fix `wopNarFromPath` which needed a `toRealPath`.
|
|
|
|
This seems more correct. It also means one can specify the features a
store should support with --store and remote-store=..., which is useful.
I use this to clean up the build remotes test.
|
|
Before, processConnection wanted to know a user name and user id, and
`nix-daemon --stdio`, when it isn't proxying to an underlying daemon,
would just assume "root" and 0. But `nix-daemon --stdio` (no proxying)
shouldn't make guesses about who holds the other end of its standard
streams.
Now processConnection takes an "auth hook", so `nix-daemon` can provide
the appropriate policy and daemon.cc doesn't need to know or care what
it is.
|
|
demote remote build message to Info
|
|
|