lix -

Age	Commit message (Collapse)	Author
2006-12-06	* Start of the setuid helper (the program that performs the operations	Eelco Dolstra
	that have to be done as root: running builders under different uids, changing ownership of build results, and deleting paths in the store with the wrong ownership).
2006-12-01	* Merge addToStore and addToStoreFixed.	Eelco Dolstra
	* addToStore now adds unconditionally, it doesn't use readOnlyMode. Read-only operation is up to the caller (who can call computeStorePathForPath).
2006-11-30	* Skeleton of the privileged worker program.	Eelco Dolstra
	* Some refactoring: put the NAR archive integer/string serialisation code in a separate file so it can be reused by the worker protocol implementation.
2006-11-29	* Remove --enable-setuid, --with-nix-user and --with-nix-group.	Eelco Dolstra
	Rather, setuid support is now always compiled in (at least on platforms that have the setresuid system call, e.g., Linux and FreeBSD), but it must enabled by chowning/chmodding the Nix binaries.
2006-02-01	* bsdiff updated to 4.3. This makes Nix depend on libbz2.	Eelco Dolstra

2005-10-05	* log2xml -> nix-log2xml.	Eelco Dolstra

2004-12-29	* Integrated bsdiff/bspatch 4.2 (from	Eelco Dolstra
	http://www.daemonology.net/bsdiff/bsdiff-4.2.tar.gz) into the source tree. The license is a bit peculiar, but it does allow verbatim copying, which is what we do here (i.e., so don't make any changes to the sources).
2004-10-29	* Drop ATmake / ATMatcher also in handling store expressions.	Eelco Dolstra

2004-09-09	* A very dirty hack to make setuid installations a bit nicer to use.	Eelco Dolstra
	Previously there was the problem that all files read by nix-env etc. should be reachable and readable by the Nix user. So for instance building a Nix expression in your home directory meant that the home directory should have at least g+x or o+x permission so that the Nix user could reach the Nix expression. Now we just switch back to the original user just prior to reading sources and the like. The places where this happens are somewhat arbitrary, however. Any scope that has a live SwitchToOriginalUser object in it is executed as the original user. * Back out r1385. setreuid() sets the saved uid to the new real/effective uid, which prevents us from switching back to the original uid. setresuid() doesn't have this problem (although the manpage has a bug: specifying -1 for the saved uid doesn't leave it unchanged; an explicit value must be specified).
2004-09-09	* Use setre[ug]id() instead of setres[ug]id(), since the former is	Eelco Dolstra
	more common than the latter (which exists only on Linux and FreeBSD). We don't really care about dropping the saved IDs since there apparently is no way to quiry them in any case, so it can't influence the build (unlike the effective IDs which are checked by Perl for instance).
2004-08-20	* On systems that have the setresuid() and setresgid() system calls to	Eelco Dolstra
	set the real uid and gid to the effective uid and gid, the Nix binaries can be installed as owned by the Nix user and group instead of root, so no root involvement of any kind is necessary. Linux and FreeBSD have these functions.
2004-08-20	* Setuid support for sharing a Nix installation between multiple	Eelco Dolstra
	users. If the configure flag `--enable-setuid' is used, the Nix programs nix-env, nix-store, etc. are installed with the setuid bit turned on so that they are executed as the user and group specified by `--with-nix-user=USER' and `--with-nix-group=GROUP', respectively (with defaults `nix' and `nix'). The setuid programs drop all special privileges if they are executed by a user who is not a member of the Nix group. The setuid feature is a quick hack to enable sharing of a Nix installation between users who trust each other. It is not generally secure, since any user in the Nix group can modify (by building an appropriate derivation) any object in the store, and for instance inject trojans into binaries used by other users. The setuid programs are owned by root, not the Nix user. This is because on Unix normal users cannot change the real uid, only the effective uid. Many programs don't work properly when the real uid differs from the effective uid. For instance, Perl will turn on taint mode. However, the setuid programs drop all root privileges immediately, changing all uids and gids to the Nix user and group.
2004-03-15	* Added a utility that can be used to produce nice HTML pages from Nix	Eelco Dolstra
	build logs. The program `log2xml' converts a Nix build log (read from standard input) into XML file that can then be converted to XHTML by the `log2html.xsl' stylesheet. The CSS stylesheet `logfile.css' is necessary to make it look good. This is primarily useful if the log file has a tree structure, i.e., that sub-tasks such as the various phases of a build (unpack, configure, make, etc.) or recursive invocations of Make are represented as such. While a log file is in principle an unstructured plain text file, builders can communicate this tree structure to `log2xml' by using escape sequences: - "\e[p" starts a new nesting level; the first line following the escape code is the header; - "\e[q" ends the current nesting level. The generic builder in nixpkgs (not yet committed) uses this. It shouldn't be to hard to patch GNU Make to speak this protocol. Further improvements to the generated HTML pages are to allow collapsing/expanding of subtrees, and to abbreviate store paths (but to show the full path by hovering the mouse over it).
2003-11-19	* nix-env: a tool to manage user environments.	Eelco Dolstra
	* Replace all directory reading code by a generic readDirectory() function.
2003-11-19	* Refactoring (step 2).	Eelco Dolstra

2003-11-19	* Refactoring: put the Nix expression evaluator in its own library so	Eelco Dolstra
	that it can be used by multiple programs.
2003-11-18	* "Fix expression" -> "Nix expression".	Eelco Dolstra
	* More refactoring.
2003-11-18	* nix -> nix-store, fix -> nix-instantiate.	Eelco Dolstra

2003-11-18	* libnix -> libstore.	Eelco Dolstra

2003-11-18	* Source tree refactoring.	Eelco Dolstra

2003-10-29	* Forked new version of Fix.	Eelco Dolstra

2003-10-20	* Finished refactoring the tree.	Eelco Dolstra

2003-10-07	* Synchronise terminology with the ICSE paper (e.g., slice -> closure,	Eelco Dolstra
	fstate -> Nix expression). * Fix src/test.cc.
2003-10-02	* Include the right files in a distribution.	Eelco Dolstra

2003-09-11	* Removed references to char_traits so that boost/format also works on	Eelco Dolstra
	GCC 2.95.
2003-09-03	* Factored out dot graph generation into a separate file.	Eelco Dolstra

2003-08-01	* normaliseFState() now locks all output paths prior to building, thus	Eelco Dolstra
	ensuring that simultaneous invocations of Nix don't clobber each other's builds. * Fixed a bug in `make install'.
2003-07-31	* Started using Berkeley DB environments. This is necessary for	Eelco Dolstra
	transaction support (but we don't actually use transactions yet).
2003-07-29	* Get garbage collection and cache population to work properly.	Eelco Dolstra
	Renamed `fstateRefs' to `fstateRequisites'. The semantics of this function is that it returns a list of all paths necessary to realise a given expression. For a derive expression, this is the union of requisites of the inputs; for a slice expression, it is the path of each element in the slice. Also included are the paths of the expressions themselves. Optionally, one can also include the requisites of successor expressions (to recycle intermediate results). * `nix-switch' now distinguishes between an expression and its normal form. Usually, only the normal form is registered as a root of the garbage collector. With the `--source-root' flag, it will also register the original expression as a root. * `nix-collect-garbage' now has a flag `--keep-successors' which causes successors not to be included in the list of garbage paths. * `nix-collect-garbage' now has a flag `--invert' which will print all paths that should not be garbage collected.
2003-07-28	* `nix --help'.	Eelco Dolstra
	* `nix --query --graph' to print a dot dependency graph of derive expressions.
2003-07-23	* Incorporated Berkeley DB and ATerm into the source tree.	Eelco Dolstra
	* `make dist'.
2003-07-22	* libdb_cxx-4 -> libdb_cxx	Eelco Dolstra

2003-07-20	* Refactorings.	Eelco Dolstra

2003-07-14	* After building, scan for actual file system references as	Eelco Dolstra
	opposed to declared references. This prunes the reference graph, thus allowing better garbage collection and more efficient derivate distribution.
2003-07-13	* Pass $(prefix) and other variables through -D..., not	Eelco Dolstra
	through config.h, to prevent silly Autoconf problems.
2003-07-13	* Generate the scripts so that we can substitute the prefix	Eelco Dolstra
	etc. correctly. * Fixed nix-switch.
2003-07-07	* Make dbRefs a mapping from Hash to [Path].	Eelco Dolstra

2003-07-07	* Refactoring on the file names.	Eelco Dolstra

2003-07-06	* A utility `nix-hash' to compute Nix path hashes.	Eelco Dolstra

2003-07-06	* Got Fix working again.	Eelco Dolstra

2003-07-04	* Refactoring: move initialisation and argument parsing into a shared	Eelco Dolstra
	file.
2003-07-04	* Caching of expression successors.	Eelco Dolstra

2003-06-25	* Minor cleanups.	Eelco Dolstra

2003-06-20	* Move most of Nix into a library (libnix.a).	Eelco Dolstra
	* Run `test' on `make check'.
2003-06-20	* Refactoring: move dump function into archive.cc.	Eelco Dolstra

2003-06-18	* Automake sucks.	Eelco Dolstra

2003-06-17	* Started integrating the new evaluation model into Nix.	Eelco Dolstra
	* Cleaned up command-line syntax.
2003-06-16	* Started implementing the new evaluation model.	Eelco Dolstra
	* Lots of refactorings. * Unit tests.
2003-06-15	* Refactoring: hash class.	Eelco Dolstra

2003-05-30	* Log the output of builders to $prefix/var/log/nix.	Eelco Dolstra