lix -

Age	Commit message (Collapse)	Author
2013-04-04	Complain if /homeless-shelter exists	Eelco Dolstra

2013-03-25	makeStoreWritable: Ask forgiveness, not permission	Shea Levy
	It is surprisingly impossible to check if a mountpoint is a bind mount on Linux, and in my previous commit I forgot to check if /nix/store was even a mountpoint at all. statvfs.f_flag is not populated with MS_BIND (and even if it were, my check was wrong in the previous commit). Luckily, the semantics of mount with MS_REMOUNT \| MS_BIND make both checks unnecessary: if /nix/store is not a mountpoint, then mount will fail with EINVAL, and if /nix/store is not a bind-mount, then it will not be made writable. Thus, if /nix/store is not a mountpoint, we fail immediately (since we don't know how to make it writable), and if /nix/store IS a mountpoint but not a bind-mount, we fail at first write (see below for why we can't check and fail immediately). Note that, due to what is IMO buggy behavior in Linux, calling mount with MS_REMOUNT \| MS_BIND on a non-bind readonly mount makes the mountpoint appear writable in two places: In the sixth (but not the 10th!) column of mountinfo, and in the f_flags member of struct statfs. All other syscalls behave as if the mount point were still readonly (at least for Linux 3.9-rc1, but I don't think this has changed recently or is expected to soon). My preferred semantics would be for MS_REMOUNT \| MS_BIND to fail on a non-bind mount, as it doesn't make sense to remount a non bind-mount as a bind mount.
2013-03-25	makeStoreWritable: Use statvfs instead of /proc/self/mountinfo to find out ↵	Shea Levy
	if /nix/store is a read-only bind mount /nix/store could be a read-only bind mount even if it is / in its own filesystem, so checking the 4th field in mountinfo is insufficient. Signed-off-by: Shea Levy <shea@shealevy.com>
2013-03-14	Fix building against Bison 2.6	Eelco Dolstra

2013-03-14	Make sure that thunks are restored properly if an exception occurs	Eelco Dolstra
	Fixes Hydra bug #67.
2013-03-08	Revert "Prevent config.h from being clobbered"	Eelco Dolstra
	This reverts commit 28bba8c44f484eae38e8a15dcec73cfa999156f6.
2013-03-07	Prevent config.h from being clobbered	Eelco Dolstra

2013-02-28	Handle systems without lutimes() or lchown()	Eelco Dolstra

2013-02-28	Handle symlinks properly	Eelco Dolstra
	Now it's really brown paper bag time...
2013-02-27	Handle hard links to other files in the output	Eelco Dolstra

2013-02-27	Refactoring: Split off the non-recursive canonicalisePathMetaData()	Eelco Dolstra
	Also, change the file mode before changing the owner. This prevents a slight time window in which a setuid binary would be setuid root.
2013-02-26	Security: Don't allow builders to change permissions on files they don't own	Eelco Dolstra
	It turns out that in multi-user Nix, a builder may be able to do ln /etc/shadow $out/foo Afterwards, canonicalisePathMetaData() will be applied to $out/foo, causing /etc/shadow's mode to be set to 444 (readable by everybody but writable by nobody). That's obviously Very Bad. Fortunately, this fails in NixOS's default configuration because /nix/store is a bind mount, so "ln" will fail with "Invalid cross-device link". It also fails if hard-link restrictions are enabled, so a workaround is: echo 1 > /proc/sys/fs/protected_hardlinks The solution is to check that all files in $out are owned by the build user. This means that innocuous operations like "ln ${pkgs.foo}/some-file $out/" are now rejected, but that already failed in chroot builds anyway.
2013-02-19	build-remote: Use the --quiet flag	Eelco Dolstra
	‘--option verbosity 0’ doesn't actually do anything.
2013-02-19	Add `Settings::nixDaemonSocketFile'.	Ludovic Courtès

2013-02-19	Enable chroot support on old glibc versions.	Ludovic Courtès

2013-02-08	Make "${./path} ..." evaluate to a string, not a path	Eelco Dolstra
	Wacky string coercion semantics caused expressions like exec = "${./my-script} params..."; to evaluate to a path (‘/path/my-script params’), because anti-quotations are desuged to string concatenation: exec = ./my-script + " params..."; By constrast, adding a space at the start would yield a string as expected: exec = " ${./my-script} params..."; Now the first example also evaluates to a string.
2013-02-08	Rename "hash" to "hashString" and handle SHA-1	Eelco Dolstra

2013-02-08	experimental/hash	Marc Weber
	adding primop function calculating hash of a string Signed-off-by: Marc Weber <marco-oweber@gmx.de>
2013-01-30	Support the colonies	Eelco Dolstra

2013-01-23	Only warn about SQLite being busy once	Eelco Dolstra
	No need to get annoying.
2013-01-22	Correctly handle missing logs	Eelco Dolstra

2013-01-17	Store build logs in /nix/var/log/nix/drvs/<XX>	Eelco Dolstra
	...where <XX> is the first two characters of the derivation. Otherwise /nix/var/log/nix/drvs may become so large that we run into all sorts of weird filesystem limits/inefficiences. For instance, ext3/ext4 filesystems will barf with "ext4_dx_add_entry:1551: Directory index full!" once you hit a few million files.
2013-01-05	Delete a left-over trash directory before doing a GC	Eelco Dolstra

2013-01-04	Fix "0 store paths deleted" message	Eelco Dolstra

2013-01-03	Open the database after removing immutable bits	Eelco Dolstra

2013-01-03	Remove tabs	Eelco Dolstra

2013-01-03	Clear any immutable bits in the Nix store	Eelco Dolstra
	Doing this once makes subsequent operations like garbage collecting more efficient since we don't have to call makeMutable() first.
2013-01-02	If a substitute closure is incomplete, build dependencies, then retry the ↵	Eelco Dolstra
	substituter Issue #77.
2013-01-02	Automatically fall back if the references of a substitute are not substitutable	Eelco Dolstra
	Fixes #77.
2012-12-29	nix-build: Support talking to old daemons	Eelco Dolstra
	Fixes #76.
2012-12-29	Allow mounting a path in a different location in the chroot	Eelco Dolstra
	Fixes #24.
2012-12-20	nix-store -q --roots: Respect the gc-keep-outputs/gc-keep-derivations settings	Eelco Dolstra
	So if a path is not garbage solely because it's reachable from a root due to the gc-keep-outputs or gc-keep-derivations settings, ‘nix-store -q --roots’ now shows that root.
2012-12-20	Yet another rewrite of the garbage collector	Eelco Dolstra
	But this time it's obviously correct! No more segfaults due to infinite recursions for sure, etc. Also, move directories to /nix/store/trash instead of renaming them to /nix/store/bla-gc-<pid>. Then we can just delete /nix/store/trash at the end.
2012-12-19	If gc-keep-derivations is set, only keep the actual deriver	Eelco Dolstra
	This prevents zillions of derivations from being kept, and fixes an infinite recursion in the garbage collector (due to an obscure cycle that can occur with fixed-output derivations).
2012-12-19	Kill the build hook rather than shutting it down cleanly	Eelco Dolstra
	Waiting for the hook to shut down cleanly sometimes seems to lead to hangs.
2012-12-18	Revert brain fart	Eelco Dolstra
	This reverts commit cc511fd65b7b6de9e87e72fb4bed16fc7efeb8b7.
2012-12-18	Check for potential infinite select() loops when building	Eelco Dolstra

2012-12-13	fix use-after-free bug in mkString(Value&, Symbol&)	Stuart Pernsteiner

2012-12-12	Allow setting the profile location using $NIX_PROFILE	Eelco Dolstra
	Fixes #69.
2012-12-11	On SQLITE_BUSY, wait a random amount of time	Eelco Dolstra
	If all contending processes wait a fixed amount of time (100 ms), there is a good probability that they'll just collide again.
2012-12-04	Tiny optimisation in the filter primop	Eelco Dolstra

2012-12-04	nix-env: Install all outputs of a derivation	Eelco Dolstra
	If you explicitly install a package, presumably you want all of it. So symlink all outputs in the user environment.
2012-12-03	Fix the ‘--prebuilt-only’ flag	Eelco Dolstra

2012-12-03	Whitespace	Eelco Dolstra

2012-11-28	nix-env -q --out-path: Support multiple outputs	Eelco Dolstra
	We now print all output paths of a package, e.g. openssl-1.0.0i bin=/nix/store/gq2mvh0wb9l90djvsagln3aqywqmr6vl-openssl-1.0.0i-bin;man=/nix/store/7zwf5r5hsdarl3n86dasvb4chm2xzw9n-openssl-1.0.0i-man;/nix/store/cj7xvk7fjp9q887359j75pw3pzjfmqf1-openssl-1.0.0i or (in XML mode) <item attrPath="openssl" name="openssl-1.0.0i" system="x86_64-linux"> <output name="bin" path="/nix/store/gq2mvh0wb9l90djvsagln3aqywqmr6vl-openssl-1.0.0i-bin" /> <output name="man" path="/nix/store/7zwf5r5hsdarl3n86dasvb4chm2xzw9n-openssl-1.0.0i-man" /> <output name="out" path="/nix/store/cj7xvk7fjp9q887359j75pw3pzjfmqf1-openssl-1.0.0i" /> </item>
2012-11-27	Optionally ignore null-valued derivation attributes	Eelco Dolstra
	This allows adding attributes like attr = if stdenv.system == "bla" then something else null; without changing the resulting derivation on non-<bla> platforms. We once considered adding a special "ignore" value for this purpose, but using null seems more elegant.
2012-11-27	Add builtin constants ‘langVersion’ and ‘nixVersion’	Eelco Dolstra
	The integer constant ‘langVersion’ denotes the current language version. It gets increased every time a language feature is added/changed/removed. It's currently 1. The string constant ‘nixVersion’ contains the current Nix version, e.g. "1.2pre2980_9de6bc5".
2012-11-26	queryMissing(): Handle partially valid derivations	Eelco Dolstra

2012-11-26	nix-instantiate: Fix read-only evaluation	Eelco Dolstra

2012-11-26	Only substitute wanted outputs of a derivation	Eelco Dolstra
	If a derivation has multiple outputs, then we only want to download those outputs that are actuallty needed. So if we do "nix-build -A openssl.man", then only the "man" output should be downloaded. Likewise if another package depends on ${openssl.man}. The tricky part is that different derivations can depend on different outputs of a given derivation, so we may need to restart the corresponding derivation goal if that happens.