lix -

Age	Commit message (Collapse)	Author
2015-01-13	Allow using /bin and /usr/bin as impure prefixes on non-darwin by default	Shea Levy
	These directories are generally world-readable anyway, and give us the two most common linux impurities (env and sh)
2015-01-13	SysError -> Error	Eelco Dolstra

2015-01-13	Don't resolve symlinks while checking __impureHostDeps	Eelco Dolstra
	Since these come from untrusted users, we shouldn't do any I/O on them before we've checked that they're in an allowed prefix.
2015-01-12	Add basic Apple sandbox support	Daniel Peebles

2015-01-09	Fix builtins.readDir on XFS	Eelco Dolstra
	The DT_UNKNOWN fallback code was getting the type of the wrong path, causing readDir to report "directory" as the type of every file. Reported by deepfire on IRC.
2015-01-08	Doh^2	Eelco Dolstra

2015-01-08	Doh	Eelco Dolstra

2015-01-08	Set /nix/store permission to 1737	Eelco Dolstra
	I.e., not readable to the nixbld group. This improves purity a bit for non-chroot builds, because it prevents a builder from enumerating store paths (i.e. it can only access paths it knows about).
2015-01-07	Show position info for failing <...> lookups	Eelco Dolstra

2015-01-07	Remove quotes around filenames in position info	Eelco Dolstra

2015-01-06	Fix building on Darwin	Eelco Dolstra
	Fixes #433.
2015-01-02	Allow $NIX_PAGER to override $PAGER	Eelco Dolstra

2015-01-02	libutil: Limit readLink() error to only overflows.	aszlig
	Let's not just improve the error message itself, but also the behaviour to actually work around the ntfs-3g symlink bug. If the readlink() call returns a smaller size than the stat() call, this really isn't a problem even if the symlink target really has changed between the calls. So if stat() reports the size for the absolute path, it's most likely that the relative path is smaller and thus it should also work for file system bugs as mentioned in 93002d69fc58c2b71e2dfad202139230c630c53a. Signed-off-by: aszlig <aszlig@redmoonstudios.org> Tested-by: John Ericson <Ericson2314@Yahoo.com>
2015-01-02	libutil: Improve errmsg on readLink size mismatch.	aszlig
	A message like "error: reading symbolic link `...' : Success" really is quite confusing, so let's not indicate "success" but rather point out the real issue. We could also limit the check of this to just check for non-negative values, but this would introduce a race condition between stat() and readlink() if the link target changes between those two calls, thus leading to a buffer overflow vulnerability. Reported by @Ericson2314 on IRC. Happened due to a possible ntfs-3g bug where a relative symlink returned the absolute path (st_)size in stat() while readlink() returned the relative size. Signed-off-by: aszlig <aszlig@redmoonstudios.org> Tested-by: John Ericson <Ericson2314@Yahoo.com>
2014-12-29	LocalStore initialization: Don't die if build-users-group doesn't exist	Shea Levy
	See NixOS/nixpkgs@9245516
2014-12-23	Revive running builds in a PID namespace	Eelco Dolstra

2014-12-14	Pedantry	Eelco Dolstra

2014-12-14	Merge branch 'cygwin-master' of https://github.com/ternaris/nix	Eelco Dolstra

2014-12-13	Better error message	Eelco Dolstra

2014-12-12	Silence some warnings on GCC 4.9	Eelco Dolstra

2014-12-12	Shut up a Valgrind warning	Eelco Dolstra

2014-12-12	Fix some memory leaks	Eelco Dolstra

2014-12-12	Ensure we're writing to stderr in the builder	Eelco Dolstra
	http://hydra.nixos.org/build/17862041
2014-12-12	Don't abort if we get a signal while waiting for the pager	Eelco Dolstra

2014-12-12	Get rid of unnecessary "interrupted by the user" message with -vvv	Eelco Dolstra

2014-12-12	Remove chatty message	Eelco Dolstra
	This broke building with "-vv", because the builder is not allowed to write to stderr at this point.
2014-12-12	Doh	Eelco Dolstra

2014-12-12	Remove tabs	Eelco Dolstra

2014-12-12	Remove dead code	Eelco Dolstra

2014-12-12	Remove canary stuff	Eelco Dolstra

2014-12-10	Provide default pagers	Eelco Dolstra
	Borrowed from systemd.
2014-12-10	Don't do vfork in conjunction with setuid	Eelco Dolstra

2014-12-10	Use vfork	Eelco Dolstra

2014-12-10	Rename function	Eelco Dolstra

2014-12-10	Don't wait for PID -1	Eelco Dolstra
	The pid field can be -1 if forking the substituter process failed.
2014-12-10	Revert "Use posix_spawn to run the pager"	Eelco Dolstra
	This reverts commit d34d2b2bbf784c0bb420a50905af25e02c6e4989.
2014-12-10	builtins.readFile: realise context associated with the path	Shea Levy

2014-12-09	Explicitly include required C headers	Marko Durkovic

2014-12-05	Define ‘environ’	Eelco Dolstra
	http://hydra.nixos.org/build/17690555
2014-12-05	Use posix_spawn to run the pager	Eelco Dolstra
	In low memory environments, "nix-env -qa" failed because the fork to run the pager hit the kernel's overcommit limits. Using posix_spawn gets around this. (Actually, you have to use posix_spawn with the undocumented POSIX_SPAWN_USEVFORK flag, otherwise it just uses fork/exec...)
2014-12-02	Make all ExternalValueBase functions const	Shea Levy

2014-12-02	Allow external code using libnixexpr to add types	Shea Levy
	Code that links to libnixexpr (e.g. plugins loaded with importNative, or nix-exec) may want to provide custom value types and operations on values of those types. For example, nix-exec is currently using sets where a custom IO value type would be more appropriate. This commit provides a generic hook for such types in the form of tExternal and the ExternalBase virtual class, which contains all functions necessary for libnixexpr's type-polymorphic functions (e.g. `showType`) to be implemented.
2014-11-25	Add a primop for regular expression pattern matching	Eelco Dolstra
	The function ‘builtins.match’ takes a POSIX extended regular expression and an arbitrary string. It returns ‘null’ if the string does not match the regular expression. Otherwise, it returns a list containing substring matches corresponding to parenthesis groups in the regex. The regex must match the entire string (i.e. there is an implied "^<pat>$" around the regex). For example: match "foo" "foobar" => null match "foo" "foo" => [] match "f(o+)(.)" "foooobar" => ["oooo" "bar"] match "(./)?([^/])" "/dir/file.nix" => ["/dir/" "file.nix"] match "(./)?([^/])" "file.nix" => [null "file.nix"] The following example finds all regular files with extension .nix or .patch underneath the current directory: let findFiles = pat: dir: concatLists (mapAttrsToList (name: type: if type == "directory" then findFiles pat (dir + "/" + name) else if type == "regular" && match pat name != null then [(dir + "/" + name)] else []) (readDir dir)); in findFiles ".\\.(nix\|patch)" (toString ./.)
2014-11-25	forceString(): Accept pos argument	Eelco Dolstra

2014-11-24	Build derivations in a more predictable order	Eelco Dolstra
	Derivations are now built in order of derivation name, so a package named "aardvark" is built before "baboon". Fixes #399.
2014-11-24	Don't create unnecessary substitution goals for derivations	Eelco Dolstra

2014-11-20	import derivation: cleanup	Shea Levy
	Before this there was a bug where a `find` was being called on a not-yet-sorted set. The code was just a mess before anyway, so I cleaned it up while fixing it.
2014-11-19	Disable vacuuming the DB after garbage collection	Eelco Dolstra
	Especially in WAL mode on a highly loaded machine, this is not a good idea because it results in a WAL file of approximately the same size ad the database, which apparently cannot be deleted while anybody is accessing it.
2014-11-19	nix-daemon: Call exit(), not _exit()	Eelco Dolstra
	This was preventing destructors from running. In particular, it was preventing the deletion of the temproot file for each worker process. It may also have been responsible for the excessive WAL growth on Hydra (due to the SQLite database not being closed properly). Apparently broken by accident in 8e9140cfdef9dbd1eb61e4c75c91d452ab5e4a74.
2014-11-19	Clean up temp roots in a more C++ way	Eelco Dolstra