lix -

Age	Commit message (Collapse)	Author
2014-08-29	Shut up "Wide character" warnings in Perl scripts	Eelco Dolstra

2014-08-21	Set a curl timeout on binary cache lookups	Eelco Dolstra

2014-08-20	Use proper quotes everywhere	Eelco Dolstra

2014-08-07	Warn about untrusted binary caches in extra-binary-caches	Eelco Dolstra

2014-08-07	download-from-binary-cache.pl: Respect $SSL_CERT_FILE	Eelco Dolstra

2014-02-26	Also provide an option for setting the curl connection timeout	Eelco Dolstra

2014-02-26	Respect $NIX_CONNECT_TIMEOUT properly	Eelco Dolstra
	We were 1) using CURLOPT_TIMEOUT instead of CURLOPT_CONNECTTIMEOUT; 2) not passing it to the curl child process. Issue #93.
2014-02-26	Fix broken patch	Eelco Dolstra

2014-02-26	use USER environmental variable if getting user id by getpwuid is failed in ↵	Ian-Woo Kim
	perl scripts: download-from-binary-cache.pl and nix-channel
2014-01-08	Support cryptographically signed binary caches	Eelco Dolstra
	NAR info files in binary caches can now have a cryptographic signature that Nix will verify before using the corresponding NAR file. To create a private/public key pair for signing and verifying a binary cache, do: $ openssl genrsa -out ./cache-key.sec 2048 $ openssl rsa -in ./cache-key.sec -pubout > ./cache-key.pub You should also come up with a symbolic name for the key, such as "cache.example.org-1". This will be used by clients to look up the public key. (It's a good idea to number keys, in case you ever need to revoke/replace one.) To create a binary cache signed with the private key: $ nix-push --dest /path/to/binary-cache --key ./cache-key.sec --key-name cache.example.org-1 The public key (cache-key.pub) should be distributed to the clients. They should have a nix.conf should contain something like: signed-binary-caches = * binary-cache-public-key-cache.example.org-1 = /path/to/cache-key.pub If all works well, then if Nix fetches something from the signed binary cache, you will see a message like: *** Downloading ‘http://cache.example.org/nar/7dppcj5sc1nda7l54rjc0g5l1hamj09j-subversion-1.7.11’ (signed by ‘cache.example.org-1’) to ‘/nix/store/7dppcj5sc1nda7l54rjc0g5l1hamj09j-subversion-1.7.11’... On the other hand, if the signature is wrong, you get a message like NAR info file `http://cache.example.org/7dppcj5sc1nda7l54rjc0g5l1hamj09j.narinfo' has an invalid signature; ignoring Signatures are implemented as a single line appended to the NAR info file, which looks like this: Signature: 1;cache.example.org-1;HQ9Xzyanq9iV...muQ== Thus the signature has 3 fields: a version (currently "1"), the ID of key, and the base64-encoded signature of the SHA-256 hash of the contents of the NAR info file up to but not including the Signature line. Issue #75.
2013-10-24	Fix segfault on Darwin	Eelco Dolstra
	Ever since SQLite in Nixpkgs was updated to 3.8.0.2, Nix has randomly segfaulted on Darwin: http://hydra.nixos.org/build/6175515 http://hydra.nixos.org/build/6611038 It turns out that this is because the binary cache substituter somehow ends up loading two versions of SQLite: the one in Nixpkgs and the other from /usr/lib/libsqlite3.dylib. It's not exactly clear why the latter is loaded, but it appears to be because WWW::Curl indirectly loads /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation, which in turn seems to load /usr/lib/libsqlite3.dylib. This leads to a segfault when Perl exits: #0 0x00000001010375f4 in sqlite3_finalize () #1 0x000000010125806e in sqlite_st_destroy () #2 0x000000010124bc30 in XS_DBD__SQLite__st_DESTROY () #3 0x00000001001c8155 in XS_DBI_dispatch () ... #14 0x0000000100023224 in perl_destruct () #15 0x0000000100000d6a in main () ... The workaround is to explicitly load DBD::SQLite before WWW::Curl.
2013-07-01	Add support for uncompressed NARs in binary caches	Eelco Dolstra
	Issue NixOS/hydra#102.
2013-06-20	Don't keep "disabled" substituters running	Eelco Dolstra
	For instance, it's pointless to keep copy-from-other-stores running if there are no other stores, or download-using-manifests if there are no manifests. This also speeds things up because we don't send queries to those substituters.
2013-06-07	download-from-binary-cache.pl: Respect $NIX_CONNECT_TIMEOUT	Eelco Dolstra

2013-06-07	Replace $NIX_DEBUG_SUBST with an option ‘debug-subst’	Eelco Dolstra
	Thus passing ‘--option debug-subst 1’ allows daemon users to turn on debug info and see what the substituter is doing.
2013-06-07	download-from-binary-cache.pl: Show if we're waiting for a URL	Eelco Dolstra
	Previously, if a binary cache is hanging/unreachable/slow, download-from-binary-cache.pl would also hang without any indication to the user. Now, if fetching a URL takes more than 5 seconds, it will print a message to that effect.
2013-06-05	download-from-binary-cache.pl: Fix race condition	Eelco Dolstra
	Fixes the error "DBD::SQLite::db do failed: column url is not unique".
2013-06-05	Update the default binary cache URL to cache.nixos.org	Eelco Dolstra

2013-06-04	download-from-binary-cache.pl: Treat a 403 error as a 404	Eelco Dolstra
	Amazon S3 returns HTTP status code 403 if a file doesn't exist and the user has no permission to list the contents of the bucket. So treat it as 404 (meaning it's cached in the NARExistence table).
2013-05-15	download-from-binary-cache.pl: Get rid of an uninitialized value warning	Eelco Dolstra
	Reported by Pablo Costa.
2013-05-07	Add option ‘extra-binary-caches’	Eelco Dolstra
	This allows providing additional binary caches, useful in scripts like Hydra's build reproduction scripts, in particular because untrusted caches are ignored.
2013-04-23	Fix --fallback with the binary cache substituter	Eelco Dolstra
	Reported by Peter Simons.
2013-04-23	Test NAR info caching	Eelco Dolstra

2013-01-02	Reinstate the http://nixos.org/binary-cache default for the binary-caches ↵	Eelco Dolstra
	setting
2012-12-21	download-from-binary-cache: Use the channels of the calling user rather than ↵	Eelco Dolstra
	root This should make live easier for single-user (non-daemon) installations. Note that when the daemon is used, the "calling user" is root so we're not using any untrusted caches.
2012-12-06	Set a long SQLite timeout in the binary cache substituter	Eelco Dolstra

2012-11-06	download-from-binary-cache: Try next cache if downloading a NAR fails	Eelco Dolstra

2012-11-06	Process binary caches in order of priority	Eelco Dolstra
	Binary caches can now specify a priority in their nix-cache-info file. The binary cache substituter checks caches in order of priority. This is to ensure that fast, static caches like nixos.org/binary-cache are processed before slow, dynamic caches like hydra.nixos.org.
2012-11-06	Add an option ‘use-binary-caches’	Eelco Dolstra
	This allows disabling the use of binary caches, e.g. $ nix-build ... --option use-binary-caches false Note that $ nix-build ... --option binary-caches '' does not disable all binary caches, since the caches defined by channels will still be used.
2012-11-06	Fix "Not an ARRAY reference" error	Eelco Dolstra
	It's a mystery why this error is not triggered in the build farm (e.g. http://hydra.nixos.org/build/3265602). Ah well.
2012-10-17	nix-push: Only generate and copy a NAR if it doesn't already exist	Eelco Dolstra
	This prevents unnecessary and slow rebuilds of NARs that already exist in the binary cache.
2012-10-11	download-from-binary-cache: Remove duplicate entries in trustedURLs	Eelco Dolstra

2012-10-02	Add operation ‘nix-store --repair-path’	Eelco Dolstra
	This operation allows fixing corrupted or accidentally deleted store paths by redownloading them using substituters, if available. Since the corrupted path cannot be replaced atomically, there is a very small time window (one system call) during which neither the old (corrupted) nor the new (repaired) contents are available. So repairing should be used with some care on critical packages like Glibc.
2012-09-21	Style fix	Eelco Dolstra

2012-09-13	Put a time-to-live on negative binary cache lookups	Eelco Dolstra
	Negative lookups are purged from the DB after a day, at most once per day. However, for non-"have" lookups (e.g. all except "nix-env -qas"), negative lookups are ignored after one hour. This is to ensure that you don't have to wait a day for an operation like "nix-env -i" to start using new binaries in the cache. Should probably make this configurable.
2012-09-13	Doh	Eelco Dolstra

2012-09-13	Delete manifests in "nix-channel --remove" or when a binary cache is available	Eelco Dolstra

2012-09-12	Compatibility fix for WWW::Curl < 4.14	Eelco Dolstra
	Older versions of WWW::Curl don't support scalar references for CURLOPT_WRITEDATA directly. http://hydra.nixos.org/build/3017188
2012-08-27	Disable the binary cache substituter by default for now	Eelco Dolstra

2012-08-27	Drop dependency on List::MoreUtils	Eelco Dolstra

2012-08-01	nix-channel: Use binary caches advertised by channels	Eelco Dolstra
	Channels can now advertise a binary cache by creating a file <channel-url>/binary-cache-url. The channel unpacker puts these in its "binary-caches" subdirectory. Thus, the URLS of the binary caches for the channels added by root appear in /nix/var/nix/profiles/per-user/eelco/channels/binary-caches/*. The binary cache substituter reads these and adds them to the list of binary caches.
2012-08-01	download-from-binary-cache: Remove duplicate URLs	Eelco Dolstra

2012-08-01	Report substituter errors to clients of the Nix daemon	Eelco Dolstra

2012-07-31	Allow daemon users to override ‘binary-caches’	Eelco Dolstra
	For security reasons, daemon users can only specify caches that appear in the ‘binary-caches’ and ‘trusted-binary-caches’ options in nix.conf.
2012-07-30	Do some validation of URLs	Eelco Dolstra

2012-07-30	Get rid of $NIX_BINARY_CACHES	Eelco Dolstra
	You can use ‘--option binary-caches URLs’ instead.
2012-07-27	Allow a binary cache to declare that it doesn't support "nix-env -qas"	Eelco Dolstra
	Querying all substitutable paths via "nix-env -qas" is potentially hard on a server, since it involves sending thousands of HEAD requests. So a binary cache must now have a meta-info file named "nix-cache-info" that specifies whether the server wants this. It also specifies the store prefix so that we don't send useless queries to a binary cache for a different store prefix.
2012-07-27	Let build.cc verify the expected hash of a substituter's output	Eelco Dolstra
	Since SubstitutionGoal::finished() in build.cc computes the hash anyway, we can prevent the inefficiency of computing the hash twice by letting the substituter tell Nix about the expected hash, which can then verify it.
2012-07-27	download-using-manifests: Don't use nix-prefetch-url	Eelco Dolstra
	Instead call curl directly and pipe it into ‘nix-store --restore’. This saves I/O and prevents creating garbage in the Nix store.
2012-07-27	Remove trailing whitespace / tabs	Eelco Dolstra