lix -

Age	Commit message (Collapse)	Author
2017-10-30	builtins.fetchgit: Support importing a working tree	Eelco Dolstra
	For example, you can write src = fetchgit ./.; and if ./. refers to an unclean working tree, that tree will be copied to the Nix store. This removes the need for "cleanSource".
2017-10-30	Merge pull request #1646 from copumpkin/optional-sandbox-local-network	Eelco Dolstra
	Allow optional localhost network access to sandboxed derivations
2017-10-30	Allow optional localhost network access to sandboxed derivations	Dan Peebles
	This will allow bind and connect to 127.0.0.1, which can reduce purity/ security (if you're running a vulnerable service on localhost) but is also needed for a ton of test suites, so I'm leaving it turned off by default but allowing certain derivations to turn it on as needed. It also allows DNS resolution of arbitrary hostnames but I haven't found a way to avoid that. In principle I'd just want to allow resolving localhost but that doesn't seem to be possible. I don't think this belongs under `build-use-sandbox = relaxed` because we want it on Hydra and I don't think it's the end of the world.
2017-10-30	Don't parse "x:x" as a URI	Eelco Dolstra
	URIs now have to contain "://" or start with "channel:".
2017-10-30	nix-build: Fix --hash	Eelco Dolstra

2017-10-30	Make "fetchGit /path" work	Eelco Dolstra

2017-10-30	fetchGit: Fix broken assertion	Eelco Dolstra
	Different URIs can map to the same cache entry if they have the same revision.
2017-10-30	Add option allowed-uris	Eelco Dolstra
	This allows network access in restricted eval mode.
2017-10-30	builtins.fetchGit: Return an attrset with revision info	Eelco Dolstra
	This adds rev, shortRev and revCount attributes, equal to what Hydra provides. E.g. $ nix eval '(fetchGit https://github.com/NixOS/patchelf.git)' { outPath = "/nix/store/ghigrkw02l440g8vfxa9wj4c3zpfmw99-source"; rev = "29c085fd9d3fc972f75b3961905d6b4ecce7eb2b"; revCount = 303; shortRev = "29c085f"; }
2017-10-30	enable-http2 -> http2	Eelco Dolstra

2017-10-30	fetchgit -> fetchGit	Eelco Dolstra
	Almost all other primops are camelCase so no reason not to use that here.
2017-10-30	fetchTarball: Use "source" as the default name	Eelco Dolstra
	This ensures that it produces the same output as fetchgit: $ nix eval --raw '(builtins.fetchgit https://github.com/NixOS/patchelf.git)' /nix/store/ghigrkw02l440g8vfxa9wj4c3zpfmw99-source $ nix eval --raw '(fetchTarball https://github.com/NixOS/patchelf/archive/master.tar.gz)' /nix/store/ghigrkw02l440g8vfxa9wj4c3zpfmw99-source
2017-10-30	fetchurl/fetchTarball: Respect name changes	Eelco Dolstra
	The computation of urlHash didn't take the name into account, so subsequent fetchurl calls with the same URL but a different name would resolve to the same cached store path.
2017-10-30	builtins.fetchgit: Don't mess up the progress indicator	Eelco Dolstra

2017-10-30	builtins.fetchgit: Support a "name" attribute	Eelco Dolstra
	The "name" attribute defaults to "source", which we should use for all similar functions (e.g. fetchTarball and in Hydra) to ensure that we get a consistent store path regardless of how the tree is fetched. "source" is not necessarily a correct label, but using an empty name is problematic: you get an ugly store path ending in a dash, and it's impossible to have a fixed-output derivation that produces that path because ".drv" is not a valid store name. Fixes #904.
2017-10-29	nix repl :t: Indicate strings that have a context	Eelco Dolstra

2017-10-25	Fix building on clang	Eelco Dolstra
	https://hydra.nixos.org/build/62945761
2017-10-25	exportReferencesGraph: Allow exporting a list of store paths	Eelco Dolstra

2017-10-25	Bump language version	Eelco Dolstra

2017-10-25	Fix exportReferencesGraph in the structured attrs case	Eelco Dolstra

2017-10-25	Pass lists/attrsets to bash as (associative) arrays	Eelco Dolstra

2017-10-24	Add --store argument to legacy commands	Eelco Dolstra

2017-10-24	Allow shorter syntax for chroot stores	Eelco Dolstra
	You can now say '--store /tmp/nix' instead of '--store local?root=/tmp/nix'.
2017-10-24	More progress indicator improvements	Eelco Dolstra
	In particular, don't show superfluous "fetching path" and "building path(s)" messages, and show the current round (with --repeat).
2017-10-24	More progress indicator improvements	Eelco Dolstra
	Fixes #1599.
2017-10-24	Progress indicator: Show on what machine we're building	Eelco Dolstra
	E.g. $ nix build nixpkgs.hello --builders 'root@wendy' [1/0/1 built] building hello-2.10 on ssh://root@wendy: checking for minix/config.h... no
2017-10-24	build-remote: Work properly on a chrooted store	Eelco Dolstra

2017-10-24	Handle log messages from build-remote	Eelco Dolstra
	This makes the progress indicator show statuses like "connecting to 'root@machine'".
2017-10-24	nix: Respect -I, --arg, --argstr	Eelco Dolstra
	Also, random cleanup to argument handling.
2017-10-24	Remove the remote-builds option	Eelco Dolstra
	This is superfluous since you can now just set "builders" to empty, e.g. "--builders ''".
2017-10-24	Remove the builder-files option	Eelco Dolstra
	You can now include files via the "builders" option, using the syntax "@<filename>". Having only one option makes it easier to override builders completely. For backward compatibility, the default is "@/etc/nix/machines", or "@<filename>" for each file name in NIX_REMOTE_SYSTEMS.
2017-10-23	Pass all settings to build-remote	Eelco Dolstra
	This ensures that command line flags such as --builders get passed correctly.
2017-10-23	Turn $NIX_REMOTE into a configuration option	Eelco Dolstra

2017-10-23	build-remote: Put current load under the store state directory	Eelco Dolstra
	Fixes the error error: opening lock file '/nix/var/nix/current-load/main-lock': Permission denied when using a chroot store.
2017-10-20	Merge pull request #1616 from copumpkin/separate-darwin-sandbox	Eelco Dolstra
	Shift Darwin sandbox to separate installed files
2017-10-19	nix-shell: Fix file name resolution in shebangs	Shea Levy

2017-10-19	Revert "Let's not populate the NAR cache from hydra-queue-runner for now"	Eelco Dolstra
	This reverts commit 908590dc6cfcca3a98755b194d93b2da39aee95c. Since hydra-server can have a different store URI from hydra-queue-runner now, we don't really need this.
2017-10-18	Let's not populate the NAR cache from hydra-queue-runner for now	Eelco Dolstra

2017-10-18	Errors writing to the NAR cache should not be fatal	Eelco Dolstra

2017-10-18	Suppress "copying 0 paths" message	Eelco Dolstra

2017-10-17	Shift Darwin sandbox to separate installed files	Dan Peebles
	This makes it slightly more manageable to see at a glance what in a build's sandbox profile is unique to the build and what is standard. Also a first step to factoring more of our Darwin logic into scheme functions that will allow us a bit more flexibility. And of course less of that nasty codegen in C++! 😀
2017-10-17	BinaryCacheStore::addToStore(): Add NARs to the local cache	Eelco Dolstra

2017-10-17	BinaryCacheStore: Support local caching of NARs	Eelco Dolstra
	This speeds up commands like "nix cat-store". For example: $ time nix cat-store --store https://cache.nixos.org?local-nar-cache=/tmp/nar-cache /nix/store/i60yncmq6w9dyv37zd2k454g0fkl3arl-systemd-234/etc/udev/udev.conf real 0m4.336s $ time nix cat-store --store https://cache.nixos.org?local-nar-cache=/tmp/nar-cache /nix/store/i60yncmq6w9dyv37zd2k454g0fkl3arl-systemd-234/etc/udev/udev.conf real 0m0.045s The primary motivation is to allow hydra-server to serve files from S3 binary caches. Previously Hydra had a hack to do "nix-store -r <path>", but that fetches the entire closure so is prohibitively expensive. There is no garbage collection of the NAR cache yet. Also, the entire NAR is read when accessing a single member file. We could generate the NAR listing to provide random access. Note: the NAR cache is indexed by the store path hash, not the content hash, so NAR caches should not be shared between binary caches, unless you're sure that all your builds are binary-reproducible.
2017-10-17	Remove BinaryCacheStoreAccessor	Eelco Dolstra
	Probably as a result of a bad merge in 4b8f1b0ec066a5b994747b1afd050f5f62d857f6, we had both a BinaryCacheStoreAccessor and a RemoteFSAccessor. BinaryCacheStore::getFSAccessor() returned the latter, but BinaryCacheStore::addToStore() checked for the former. This probably caused hydra-queue-runner to download paths that it just uploaded.
2017-10-17	fetchgit: Remove incomplete/unneeded ref check.	Shea Levy
	This check fails for tags and branches, and is made redundant by the checks git itself will do when fetching the repo.
2017-10-16	fetchgit: Remove incomplete/unneeded isURI check.	Shea Levy
	This check spuriously fails for e.g. git@github.com:NixOS/nixpkgs.git, and even for ssh://git@github.com/NixOS/nixpkgs.git, and is made redundant by the checks git itself will do when fetching the repo. We instead pass a -- before passing the URI to git to avoid injection.
2017-10-12	Add option to disable the seccomp filter	Eelco Dolstra
	I needed this to test ACL/xattr removal in canonicalisePathMetaData(). Might also be useful if you need to build old Nixpkgs that doesn't have the required patches to remove setuid/setgid creation.
2017-10-12	Merge pull request #1571 from teto/improve_priority_msg	Eelco Dolstra
	Improve error message for conflicting priorities
2017-10-12	Merge pull request #1580 from copumpkin/retry-after-timeout	Eelco Dolstra
	Retry in all error cases but a few
2017-10-09	Fix a hang in ThreadPool	Eelco Dolstra
	The worker threads could exit prematurely if they finished processing all items while the main thread was still adding items. In particular, this caused hanging nix-store --serve processes in the build farm. Also, process items from the main thread.