lix -

Age	Commit message (Collapse)	Author
2018-06-12	Fix #2162: use getaddrinfo instead of curl to preload NSS	Yorick van Pelt

2018-06-05	Don't require --fallback to recover from disappeared binary cache NARs	Eelco Dolstra

2018-05-30	Modularize config settings	Eelco Dolstra
	Allow global config settings to be defined in multiple Config classes. For example, this means that libutil can have settings and evaluator settings can be moved out of libstore. The Config classes are registered in a new GlobalConfig class to which config files etc. are applied. Relevant to https://github.com/NixOS/nix/issues/2009 in that it removes the need for ad hoc handling of useCaseHack, which was the underlying cause of that issue.
2018-05-03	Don't set a CA assertion for paths with references	Eelco Dolstra
	Really fixes #2133.
2018-05-02	Fix some random -Wconversion warnings	Eelco Dolstra

2018-04-23	Merge branch 'aarch64-armv7' of git://github.com/lheckemann/nix	Shea Levy
	Support extra compatible architectures (#1916)
2018-04-20	build.cc: fix bind-mount of /dev/{pts,ptmx} fallback	Will Dietz
	Don't bind-mount these to themselves, mount them into the chroot directory. Fixes pty issues when using sandbox on CentOS 7.4. (build of perlPackages.IOTty fails before this change)
2018-04-17	exportReferences: Check whether the path is in the input closure	Eelco Dolstra
	Fixes #2082.
2018-04-13	Fix #1921	Eelco Dolstra

2018-03-22	Merge branch 'fix/avoid-large-stack-buffers' of https://github.com/dtzWill/nix	Eelco Dolstra

2018-03-20	Make <nix/buildenv.nix> a builtin builder	Eelco Dolstra
	This avoids sandbox annoyances.
2018-03-20	Hack to get SSH error messages from build-remote	Eelco Dolstra
	E.g. cannot build on 'ssh://mac1': cannot connect to 'mac1': bash: nix-store: command not found cannot build on 'ssh://mac2': cannot connect to 'mac2': Host key verification failed. cannot build on 'ssh://mac3': cannot connect to 'mac3': Received disconnect from 213... port 6001:2: Too many authentication failures Authentication failed.
2018-03-14	Use boost::format from the boost package	Eelco Dolstra
	Note that this only requires headers from boost so it doesn't add a runtime dependency. Also, use Nixpkgs 18.03.
2018-03-13	Typo	Eelco Dolstra

2018-03-06	rand() -> random(), since we use srandom().	Will Dietz
	rand() requires we call srand() instead, but might as well use random().
2018-03-02	hoist vector out of loop just in case	Will Dietz

2018-03-02	don't allocate large buffers on the stack	Will Dietz

2018-02-27	seccomp: add 32-bit ARM on aarch64-linux	Linus Heckemann
	This allows building armv[67]l-linux derivations on compatible aarch64 machines. Failure to add the architecture may result from missing hardware support, in which case we can't run 32-bit binaries and don't need to restrict them with seccomp anyway,
2018-02-19	Fix incorrect (and unnecessary) format string	Eelco Dolstra
	https://hydra.nixos.org/eval/1434547#tabs-now-fail
2018-02-19	Don't silently succeed seccomp setup when !HAVE_SECCOMP.	Shea Levy
	Running Nix with build users without seccomp on Linux is dangerous, and administrators should very explicitly opt-in to it.
2018-02-18	configure: Add a flag to disable seccomp.	Shea Levy
	This is needed for new arches where libseccomp support doesn't exist yet. Fixes #1878.
2018-02-12	Fix 'deadlock: trying to re-acquire self-held lock'	Eelco Dolstra
	This was caused by derivations with 'allowSubstitutes = false'. Such derivations will be built locally. However, if there is another SubstitionGoal that has the output of the first derivation in its closure, then the path will be simultaneously built and substituted. There was a check to catch this situation (via pathIsLockedByMe()), but it no longer worked reliably because substitutions are now done in another thread. (Thus the comment 'It can't happen between here and the lockPaths() call below because we're not allowing multi-threading' was no longer valid.) The fix is to handle the path already being locked in both SubstitutionGoal and DerivationGoal.
2018-02-09	nix: Ensure that the user sees errors from substituters	Eelco Dolstra

2018-02-07	Improve filtering of ANSI escape sequences in build logs	Eelco Dolstra
	All ANSI sequences except color setting are now filtered out. In particular, terminal resets (such as from NixOS VM tests) are filtered out. Also, fix the completely broken tab character handling.
2018-02-05	Allow substituters to be marked as trusted	Eelco Dolstra
	This is needed by nixos-install, which uses the Nix store on the installation CD as a substituter. We don't want to disable signature checking entirely because substitutes from cache.nixos.org should still be checked. So now we can pas "local?trusted=1" to mark only the Nix store in /nix as not requiring signatures. Fixes #1819.
2018-02-05	Fix segfault using non-binary cache stores as substituters	Eelco Dolstra

2018-02-03	Remove nix-build --hash	Eelco Dolstra
	Instead, if a fixed-output derivation produces has an incorrect output hash, we now unconditionally move the outputs to the path corresponding with the actual hash and register it as valid. Thus, after correcting the hash in the Nix expression (e.g. in a fetchurl call), the fixed-output derivation doesn't have to be built again. It would still be good to have a command for reporting the actual hash of a fixed-output derivation (instead of throwing an error), but "nix-build --hash" didn't do that.
2018-01-23	Fix obscure corner case in name resolution for builtin:fetchurl in sandboxed ↵	Dan Peebles
	environments
2018-01-19	Rewrite builtin derivation environment	Eelco Dolstra
	Also add a test. Fixes #1803. Closes #1805.
2018-01-15	Barf when using a diverted store on macOS	Eelco Dolstra
	Fixes #1792.
2017-12-11	Mark comparison call operator as const	Will Dietz

2017-11-28	Show log tail when a remote build fails	Eelco Dolstra

2017-10-30	Merge pull request #1646 from copumpkin/optional-sandbox-local-network	Eelco Dolstra
	Allow optional localhost network access to sandboxed derivations
2017-10-30	Allow optional localhost network access to sandboxed derivations	Dan Peebles
	This will allow bind and connect to 127.0.0.1, which can reduce purity/ security (if you're running a vulnerable service on localhost) but is also needed for a ton of test suites, so I'm leaving it turned off by default but allowing certain derivations to turn it on as needed. It also allows DNS resolution of arbitrary hostnames but I haven't found a way to avoid that. In principle I'd just want to allow resolving localhost but that doesn't seem to be possible. I don't think this belongs under `build-use-sandbox = relaxed` because we want it on Hydra and I don't think it's the end of the world.
2017-10-25	Fix building on clang	Eelco Dolstra
	https://hydra.nixos.org/build/62945761
2017-10-25	exportReferencesGraph: Allow exporting a list of store paths	Eelco Dolstra

2017-10-25	Fix exportReferencesGraph in the structured attrs case	Eelco Dolstra

2017-10-25	Pass lists/attrsets to bash as (associative) arrays	Eelco Dolstra

2017-10-24	More progress indicator improvements	Eelco Dolstra
	In particular, don't show superfluous "fetching path" and "building path(s)" messages, and show the current round (with --repeat).
2017-10-24	More progress indicator improvements	Eelco Dolstra
	Fixes #1599.
2017-10-24	Progress indicator: Show on what machine we're building	Eelco Dolstra
	E.g. $ nix build nixpkgs.hello --builders 'root@wendy' [1/0/1 built] building hello-2.10 on ssh://root@wendy: checking for minix/config.h... no
2017-10-24	Handle log messages from build-remote	Eelco Dolstra
	This makes the progress indicator show statuses like "connecting to 'root@machine'".
2017-10-24	Remove the remote-builds option	Eelco Dolstra
	This is superfluous since you can now just set "builders" to empty, e.g. "--builders ''".
2017-10-23	Pass all settings to build-remote	Eelco Dolstra
	This ensures that command line flags such as --builders get passed correctly.
2017-10-17	Shift Darwin sandbox to separate installed files	Dan Peebles
	This makes it slightly more manageable to see at a glance what in a build's sandbox profile is unique to the build and what is standard. Also a first step to factoring more of our Darwin logic into scheme functions that will allow us a bit more flexibility. And of course less of that nasty codegen in C++! 😀
2017-10-12	Add option to disable the seccomp filter	Eelco Dolstra
	I needed this to test ACL/xattr removal in canonicalisePathMetaData(). Might also be useful if you need to build old Nixpkgs that doesn't have the required patches to remove setuid/setgid creation.
2017-09-08	Communicate the structured log FD to builders	Eelco Dolstra
	Since we may use a dedicated file descriptor in the future, this allows us to change it. So builders can do if [[ -n $NIX_LOG_FD ]]; then echo "@nix { message... }" >&$NIX_LOG_FD fi
2017-09-05	Add automatic garbage collection	Eelco Dolstra
	Nix can now automatically run the garbage collector during builds or while adding paths to the store. The option "min-free = <bytes>" specifies that Nix should run the garbage collector whenever free space in the Nix store drops below <bytes>. It will then delete garbage until "max-free" bytes are available. Garbage collection during builds is asynchronous; running builds are not paused and new builds are not blocked. However, there also is a synchronous GC run prior to the first build/substitution. Currently, no old GC roots are deleted (as in "nix-collect-garbage -d").
2017-08-31	Call queryMissing() prior to building	Eelco Dolstra
	Without this, substitute info is fetched sequentially, which is superslow. In the old UI (e.g. nix-build), we call printMissing(), which calls queryMissing(), thereby preheating the binary cache cache. But the new UI doesn't do that.
2017-08-31	Rename a few configuration options	Eelco Dolstra
	In particular, drop the "build-" and "gc-" prefixes which are pointless. So now you can say nix build --no-sandbox instead of nix build --no-build-use-sandbox