lix -

Age	Commit message (Collapse)	Author
2015-02-17	Use $<attr>Path instead of $<attr> for passAsFile	Eelco Dolstra

2015-02-17	Allow passing attributes via files instead of environment variables	Eelco Dolstra
	Closes #473.
2015-02-16	Use pivot_root in addition to chroot when possible	Harald van Dijk
	chroot only changes the process root directory, not the mount namespace root directory, and it is well-known that any process with chroot capability can break out of a chroot "jail". By using pivot_root as well, and unmounting the original mount namespace root directory, breaking out becomes impossible. Non-root processes typically have no ability to use chroot() anyway, but they can gain that capability through the use of clone() or unshare(). For security reasons, these syscalls are limited in functionality when used inside a normal chroot environment. Using pivot_root() this way does allow those syscalls to be put to their full use.
2015-02-04	Require linux 3.13 or later for chroot	Shea Levy
	Fixes #453
2015-01-18	Make inputs writeable in the sandbox (builds still can’t actually write ↵	Daniel Peebles
	due to user permissions)
2015-01-13	Allow using /bin and /usr/bin as impure prefixes on non-darwin by default	Shea Levy
	These directories are generally world-readable anyway, and give us the two most common linux impurities (env and sh)
2015-01-13	SysError -> Error	Eelco Dolstra

2015-01-13	Don't resolve symlinks while checking __impureHostDeps	Eelco Dolstra
	Since these come from untrusted users, we shouldn't do any I/O on them before we've checked that they're in an allowed prefix.
2015-01-12	Add basic Apple sandbox support	Daniel Peebles

2015-01-08	Doh^2	Eelco Dolstra

2015-01-08	Doh	Eelco Dolstra

2015-01-08	Set /nix/store permission to 1737	Eelco Dolstra
	I.e., not readable to the nixbld group. This improves purity a bit for non-chroot builds, because it prevents a builder from enumerating store paths (i.e. it can only access paths it knows about).
2015-01-06	Fix building on Darwin	Eelco Dolstra
	Fixes #433.
2014-12-29	LocalStore initialization: Don't die if build-users-group doesn't exist	Shea Levy
	See NixOS/nixpkgs@9245516
2014-12-23	Revive running builds in a PID namespace	Eelco Dolstra

2014-12-14	Pedantry	Eelco Dolstra

2014-12-14	Merge branch 'cygwin-master' of https://github.com/ternaris/nix	Eelco Dolstra

2014-12-13	Better error message	Eelco Dolstra

2014-12-12	Silence some warnings on GCC 4.9	Eelco Dolstra

2014-12-12	Shut up a Valgrind warning	Eelco Dolstra

2014-12-12	Fix some memory leaks	Eelco Dolstra

2014-12-12	Ensure we're writing to stderr in the builder	Eelco Dolstra
	http://hydra.nixos.org/build/17862041
2014-12-12	Remove chatty message	Eelco Dolstra
	This broke building with "-vv", because the builder is not allowed to write to stderr at this point.
2014-12-12	Doh	Eelco Dolstra

2014-12-10	Don't do vfork in conjunction with setuid	Eelco Dolstra

2014-12-10	Rename function	Eelco Dolstra

2014-12-10	Don't wait for PID -1	Eelco Dolstra
	The pid field can be -1 if forking the substituter process failed.
2014-12-09	Explicitly include required C headers	Marko Durkovic

2014-11-24	Build derivations in a more predictable order	Eelco Dolstra
	Derivations are now built in order of derivation name, so a package named "aardvark" is built before "baboon". Fixes #399.
2014-11-24	Don't create unnecessary substitution goals for derivations	Eelco Dolstra

2014-11-19	Disable vacuuming the DB after garbage collection	Eelco Dolstra
	Especially in WAL mode on a highly loaded machine, this is not a good idea because it results in a WAL file of approximately the same size ad the database, which apparently cannot be deleted while anybody is accessing it.
2014-11-19	Clean up temp roots in a more C++ way	Eelco Dolstra

2014-11-17	Fix message	Eelco Dolstra

2014-11-14	Don't use ADDR_LIMIT_3GB	Eelco Dolstra
	This gives 32-bit builds on x86_64-linux more memory.
2014-11-12	Make ~DerivationGoal more reliable	Eelco Dolstra

2014-11-04	nix-store --gc: Don't warn about missing manifests directory	Eelco Dolstra

2014-10-31	Improve error message if the daemon worker fails to start	Eelco Dolstra

2014-10-29	Remove comments claiming we use a private PID namespace	Eelco Dolstra
	This is no longer the case since 524f89f1399724e596f61faba2c6861b1bb7b9c5.
2014-10-14	Improved error message when encountering unsupported file types	Eelco Dolstra
	Fixes #269.
2014-10-03	Remove some duplicate code	Eelco Dolstra

2014-09-18	Update spec file	Eelco Dolstra
	http://hydra.nixos.org/build/14344391
2014-09-18	Install some pkgconfig files	Eelco Dolstra

2014-09-17	On Linux, disable address space randomization	Eelco Dolstra

2014-09-17	Settings: Add bool get()	Eelco Dolstra

2014-09-01	Add an 'optimiseStore' remote procedure call.	Ludovic Courtès

2014-08-28	Add disallowedReferences / disallowedRequisites	Eelco Dolstra
	For the "stdenv accidentally referring to bootstrap-tools", it seems easier to specify the path that we don't want to depend on, e.g. disallowedRequisites = [ bootstrapTools ];
2014-08-28	Introduce allowedRequisites feature	Gergely Risko

2014-08-21	fix disappearing bash arguments	Joel Taylor

2014-08-21	Use unshare() instead of clone()	Eelco Dolstra
	It turns out that using clone() to start a child process is unsafe in a multithreaded program. It can cause the initialisation of a build child process to hang in setgroups(), as seen several times in the build farm: The reason is that Glibc thinks that the other threads of the parent exist in the child, so in setxid_mark_thread() it tries to get a futex that has been acquired by another thread just before the clone(). With fork(), Glibc runs pthread_atfork() handlers that take care of this (in particular, __reclaim_stacks()). But clone() doesn't do that. Fortunately, we can use fork()+unshare() instead of clone() to set up private namespaces. See also https://www.mail-archive.com/lxc-devel@lists.linuxcontainers.org/msg03434.html.
2014-08-20	Use proper quotes everywhere	Eelco Dolstra