| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2023-07-19 | move docs of the current system to the system setting | Valentin Gagarin | |
| add information what happens when Nix itself is cross-compiled | |||
| 2023-07-19 | one line per sentence for easier review | Valentin Gagarin | |
| 2023-07-19 | add information on the system type string | Valentin Gagarin | |
| 2023-07-17 | Merge pull request #8342 from NixLayeredStore/best-effort-supplementary-groups | Théophane Hufschmitt | |
| Best effort supplementary groups | |||
| 2023-07-16 | Nix Reference Manual: keep nix expressions uptodate with nixpkgs (#8703) | Sinan Mohd | |
| 2023-07-14 | Merge pull request #8696 from NixLayeredStore/nested-sandboxing | John Ericson | |
| Test nested sandboxing, and make nicer error | |||
| 2023-07-14 | Test nested sandboxing, and make nicer error | John Ericson | |
| We were bedeviled by sandboxing issues when working on the layered store. The problem ended up being that when we have nested nix builds, and the inner store is inside the build dir (e.g. store is `/build/nix-test/$name/store`, build dir is `/build`) bind mounts clobber each other and store paths cannot be found. After thoroughly cleaning up `local-derivation-goal.cc`, we might be able to make that work. But that is a lot of work. For now, we just fail earlier with a proper error message. Finally, test this: nested sandboxing without the problematic store dir should work, and with should fail with the expected error message. Co-authored-by: Dylan Green <67574902+cidkidnix@users.noreply.github.com> Co-authored-by: Robert Hensing <roberth@users.noreply.github.com> | |||
| 2023-07-14 | Merge pull request #8691 from obsidiansystems/built-path | Robert Hensing | |
| Move `BuiltPath` to its own header/C++ file in libcmd | |||
| 2023-07-13 | move unset NIX_STORE_DIR in supplementary-groups.sh | cidkidnix | |
| to inside the unshare | |||
| 2023-07-13 | Add comment regarding the unset of NIX_STORE_DIR | cidkidnix | |
| in build-remote.sh and supplementary-groups.sh | |||
| 2023-07-13 | Revert "Skip build-remote-trustless unless sandbox is supported." | John Ericson | |
| This reverts commit 41412dc4ae0fec2d08335c19724276d99e0c6056. | |||
| 2023-07-13 | Revert "Check _NIX_TEST_NO_SANDBOX when setting _canUseSandbox." | John Ericson | |
| This reverts commit c1d39de1fbceebbb6b46abc4a21fb8e34423df99. | |||
| 2023-07-13 | Merge remote-tracking branch 'upstream/master' into ↵ | John Ericson | |
| best-effort-supplementary-groups | |||
| 2023-07-13 | Merge pull request #8694 from obsidiansystems/fix-lang-tests | John Ericson | |
| Fix race condition in the language tests | |||
| 2023-07-13 | Fix race condition in the language tests | John Ericson | |
| When we pipe to `>(...)` like that, we unfortunately don't wait for the process to finish. Better to just substitute the file. Also, use the "unified" diff output that people (including myself) are more familiar with, thanks to Git. | |||
| 2023-07-12 | Move `BuiltPath` to its own header/C++ file in libcmd | John Ericson | |
| It is less important, and used less widely, than `DerivedPath`. | |||
| 2023-07-12 | Update src/libstore/globals.hh | Ben Radford | |
| Co-authored-by: Valentin Gagarin <valentin.gagarin@tweag.io> | |||
| 2023-07-12 | Update src/libstore/globals.hh | Ben Radford | |
| Co-authored-by: Valentin Gagarin <valentin.gagarin@tweag.io> | |||
| 2023-07-11 | Merge pull request #7954 from obsidiansystems/lang-test-improvements | John Ericson | |
| Language test improvements | |||
| 2023-07-11 | Expanded test suite | Mathnerd314 | |
| * Lang now verifies errors and parse output * Some new miscellaneous tests * Easy way to update the tests * Document workflow in manual * Use `!` not `~` as separater char for sed It is confusing to use `~` when we are talking about paths and home directories! * Test test suite itself (`test/lang-test/infra.sh`) Additionally, run shellcheck on `tests/lang.sh` to help ensure it is correct, now that is is more complex. Co-authored-by: Robert Hensing <roberth@users.noreply.github.com> Co-authored-by: Valentin Gagarin <valentin.gagarin@tweag.io> | |||
| 2023-07-11 | Skip build-remote-trustless unless sandbox is supported. | Ben Radford | |
| 2023-07-11 | Check _NIX_TEST_NO_SANDBOX when setting _canUseSandbox. | Ben Radford | |
| 2023-07-11 | Say a bit about default value in setting description. | Ben Radford | |
| 2023-07-11 | Default should depend on whether we are root. | Ben Radford | |
| 2023-07-11 | Be clearer about the security implications. | Ben Radford | |
| 2023-07-11 | Update description for require-drop-supplementary-groups. | Ben Radford | |
| 2023-07-11 | Always attempt setgroups but allow failure to be ignored. | Ben Radford | |
| 2023-07-11 | Merge remote-tracking branch 'origin/master' into ↵ | Ben Radford | |
| best-effort-supplementary-groups | |||
| 2023-07-10 | Fix test file name | John Ericson | |
| It's UTF-8, not UFT-8. | |||
| 2023-07-10 | Merge pull request #8579 from obsidiansystems/findPath-cleanup-2 | John Ericson | |
| Further search path cleanups | |||
| 2023-07-10 | Merge pull request #8681 from inclyc/libexpr/parser-move-noeffect | Eelco Dolstra | |
| libexpr: remove std::move() for `basePath` in parser, it has no effect | |||
| 2023-07-10 | Merge pull request #8660 from Hoverbear/nix-daemon.service-tasksmax-infinity | Eelco Dolstra | |
| nix-daemon.service: Add TasksMax=1048576 | |||
| 2023-07-10 | Fix some grammar in installables doc (#8682) | Bader AlAttar | |
| 2023-07-10 | libexpr: remove std::move() for `basePath` in parser, it has no effect | Yingchi Long | |
| 2023-07-09 | Merge pull request #8370 from hercules-ci/fetchClosure-input-addressed | John Ericson | |
| `fetchClosure`: input addressed and pure | |||
| 2023-07-09 | Clean up `SearchPath` | John Ericson | |
| - Better types - Own header / C++ file pair - Test factored out methods - Pass parsed thing around more than strings Co-authored-by: Robert Hensing <roberth@users.noreply.github.com> | |||
| 2023-07-09 | Clean up `resolveSearchPathElem` | John Ericson | |
| We should use `std::optional<std::string>` not `std::pair<bool, std::string>` for an optional string. | |||
| 2023-07-08 | Merge pull request #8612 from NixOS/labeler-tests-to-with-tests | Robert Hensing | |
| labeler.yml: tests -> with-tests | |||
| 2023-07-07 | Choose a reasonable number similar to LimitNOFile | Ana Hobden | |
| 2023-07-07 | signing.sh: Revert test improvement because it fails on GHA + macOS | Robert Hensing | |
| 2023-07-07 | fetchClosure: Interleave the examples in the docs | Robert Hensing | |
| 2023-07-07 | fetchClosure: Apply suggestions from code review | Robert Hensing | |
| Co-authored-by: Valentin Gagarin <valentin.gagarin@tweag.io> | |||
| 2023-07-06 | nix-daemon.service: Add TasksMax=infinity | Ana Hobden | |
| 2023-07-05 | Merge pull request #8631 from iFreilicht/profile-list | Eelco Dolstra | |
| Profile list improvements | |||
| 2023-07-04 | Document the path flakeref format (#8640) | Théophane Hufschmitt | |
| * Document the path flakeref format Fix https://github.com/NixOS/nix/issues/8482 Co-authored-by: Valentin Gagarin <valentin.gagarin@tweag.io> | |||
| 2023-07-03 | Merge pull request #8633 from inclyc/libexpr/fix-data-race-in-lexer.l | Eelco Dolstra | |
| libexpr: use `thread_local` to make the parser thread-safe | |||
| 2023-07-03 | Fix test | Eelco Dolstra | |
| 2023-07-03 | nix profile list: Add --json flag | Eelco Dolstra | |
| This just dumps the profile manifest to stdout. | |||
| 2023-07-03 | Rename 'resolvedRef' to 'lockedRef' | Eelco Dolstra | |
| 'resolvedRef' was incorrect, since a resolved ref is one after registry resolution, which may still be unlocked (e.g. 'nixpkgs' -> 'github:NixOS/nixpkgs'). | |||
| 2023-07-03 | libexpr: use `thread_local` to make the parser thread-safe | Yingchi Long | |
| If we call `adjustLoc`, the global variable `prev_yylloc` is shared between threads and racy. Currently, nix itself does not concurrently parsing files, but this is helpful for libexpr users. (The parser is thread-safe except this.) | |||
 |
index : lix | |
| User & |
| aboutsummaryrefslogtreecommitdiff |