aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2022-11-23Merge remote-tracking branch 'origin/master' into auto-uid-allocationEelco Dolstra
2022-11-22Merge pull request #7328 from edolstra/nix-build-statsEelco Dolstra
nix build --json: Include build statistics
2022-11-22Merge pull request #7333 from fricklerhandwerk/language-overviewEelco Dolstra
fix error in language overview
2022-11-22fix error in language overviewValentin Gagarin
it is not possible to antiquote numbers.
2022-11-22SimpleUserLock::getSupplementaryGIDs(): Filter out main gidEelco Dolstra
This avoids having the user's gid in the supplementary group list as well.
2022-11-22Always call setgroups()Eelco Dolstra
We shouldn't skip this if the supplementary group list is empty, because then the sandbox won't drop the supplementary groups of the parent (like "root").
2022-11-21Merge pull request #6456 from amjoseph-nixpkgs/seccomp-mipsEelco Dolstra
local-derivation-goal.cc: enable seccomp filters for mips{32,64}
2022-11-21Use hex for startIdEelco Dolstra
Co-authored-by: Linus Heckemann <git@sphalerite.org>
2022-11-21AutoUserLock: If sandboxing is disabled, use the build users groupEelco Dolstra
We have to use a gid that has write access to the Nix store.
2022-11-21nix build --json: Include build statisticsEelco Dolstra
Example: # nix build -L --extra-experimental-features cgroups --impure --expr 'with import <nixpkgs> {}; runCommand "foo" {} "dd if=/dev/urandom bs=1M count=1024 | md5sum; mkdir $out"' --json [ { "cpuSystem": 1.911431, "cpuUser": 1.214249, "drvPath": "/nix/store/xzdqz67xba18hljhycp0hwfigzrs2z69-foo.drv", "outputs": { "out": "/nix/store/rh9mc9l2gkpq8kn2sgzndr6ll7ffjh6l-foo" }, "startTime": 1669024076, "stopTime": 1669024079 } ]
2022-11-21Rename derivedPathsWithHintsToJSON -> builtPathsToJSONEelco Dolstra
2022-11-21Fix macOS buildEelco Dolstra
2022-11-21Merge remote-tracking branch 'origin/master' into auto-uid-allocationEelco Dolstra
2022-11-21Fix indentationEelco Dolstra
2022-11-21nix build --json: Include build statisticsEelco Dolstra
Example: # nix build -L --extra-experimental-features cgroups --impure --expr 'with import <nixpkgs> {}; runCommand "foo" {} "dd if=/dev/urandom bs=1M count=1024 | md5sum; mkdir $out"' --json [ { "cpuSystem": 1.911431, "cpuUser": 1.214249, "drvPath": "/nix/store/xzdqz67xba18hljhycp0hwfigzrs2z69-foo.drv", "outputs": { "out": "/nix/store/rh9mc9l2gkpq8kn2sgzndr6ll7ffjh6l-foo" }, "startTime": 1669024076, "stopTime": 1669024079 } ]
2022-11-21Rename derivedPathsWithHintsToJSON -> builtPathsToJSONEelco Dolstra
2022-11-18Use cgroup.kill to quickly kill cgroupsEelco Dolstra
2022-11-18Get CPU stats from the cgroupEelco Dolstra
2022-11-18IndentationEelco Dolstra
2022-11-18Separate cgroup support from auto-uid-allocationEelco Dolstra
The new experimental feature 'cgroups' enables the use of cgroups for all builds. This allows better containment and enables setting resource limits and getting some build stats.
2022-11-18createTempDir(): Use std::atomicEelco Dolstra
2022-11-17Fix segfault in unprivileged modeEelco Dolstra
2022-11-16Merge pull request #7134 from yorickvP/disable-dbg-on-completeThéophane Hufschmitt
Temporarily disable the debugger during completion evaluation
2022-11-16Swallow the error in a more idiomatic wayThéophane Hufschmitt
2022-11-15Merge pull request #7294 from tobim/support-aws-sdk-1.10Théophane Hufschmitt
libstore: link to aws-crt-cpp
2022-11-15Merge pull request #7283 from hercules-ci/issue-6572Théophane Hufschmitt
Fix #6572 `requires non-existent output`
2022-11-15Merge pull request #7260 from ncfavier/readFile-scan-referencesThéophane Hufschmitt
Restrict `readFile` context to references that appear in the string
2022-11-14tests: Reproduce #6572Robert Hensing
2022-11-14derivation-goal: Fix `requires non-existing output` errorRobert Hensing
It occurred when a output of the dependency was already available, so it didn't need rebuilding and didn't get added to the inputDrvOutputs. This process-related info wasn't suitable for the purpose of finding the actual input paths for the builder. It is better to do this in absolute terms by querying the store.
2022-11-14Test that the result of `readFile` gets ref-scannedThéophane Hufschmitt
2022-11-14Merge pull request #7295 from Et7f3/pkg-config-lowdownEelco Dolstra
build: use pkg-config for lowdown
2022-11-14Add release-notes for the context-restriction in readFileThéophane Hufschmitt
2022-11-14Merge remote-tracking branch 'nixos/master' into readFile-scan-referencesThéophane Hufschmitt
2022-11-12build: use pkg-config for lowdownEt7f3
2022-11-12libstore: link to aws-crt-cppTobias Mayer
This change is needed to support aws-sdk-cpp 1.10 and newer. I opted not to make this dependent on the sdk version because the crt dependency has been in the interface of the older sdk as well, and it was only coincidence that libstore didn't make use of any privately defined symbols directly.
2022-11-11Merge pull request #7279 from fricklerhandwerk/uninstallThéophane Hufschmitt
add removing users to uninstall instructions
2022-11-11remove stray commaValentin Gagarin
2022-11-11Merge pull request #7229 from Mic92/ciValentin Gagarin
Auto-assign reviewers by file
2022-11-11Restrict `readFile` context to references that appear in the stringNaïm Favier
When calling `builtins.readFile` on a store path, the references of that path are currently added to the resulting string's context. This change makes those references the *possible* context of the string, but filters them to keep only the references whose hash actually appears in the string, similarly to what is done for determining the runtime references of a path.
2022-11-10Merge pull request #7258 from ncfavier/fix-eval-error-fmtThéophane Hufschmitt
Fix printing of eval errors with two format placeholders
2022-11-10Remove the SystemdCgroup featureEelco Dolstra
2022-11-09Merge pull request #7006 from fricklerhandwerk/redirectsThéophane Hufschmitt
manual: generalize anchor redirects
2022-11-09add removing users to uninstall instructionsValentin Gagarin
2022-11-09Merge pull request #6906 from fricklerhandwerk/language-overviewValentin Gagarin
add syntax overview from NixOS manual
2022-11-09fix typos in commentsValentin Gagarin
2022-11-08Fix build on macOSEelco Dolstra
2022-11-08Split auto UID allocation from cgroupsEelco Dolstra
Cgroups are now only used for derivations that require the uid-range range feature. This allows auto UID allocation even on systems that don't have cgroups (like macOS). Also, make things work on modern systems that use cgroups v2 (where there is a single hierarchy and no "systemd" controller).
2022-11-08Merge pull request #7257 from Artturin/ca-referencesremoveThéophane Hufschmitt
tests/impure-derivations.sh: remove unknown experimental feature 'ca-…
2022-11-07Merge pull request #7264 from patricksjackson/remote-bracketsEelco Dolstra
build-remote: Add brackets to error message
2022-11-07Merge pull request #7267 from fricklerhandwerk/build-taskEelco Dolstra
manual: build action -> build task