lix -

Age	Commit message (Collapse)	Author
2017-05-15	Simplify fixed-output check	Eelco Dolstra

2017-05-15	Disallow outputHash being null or an empty string	Eelco Dolstra
	Fixes #1384.
2017-05-15	Add --with-sandbox-shell configure flag	Eelco Dolstra
	And add a 116 KiB ash shell from busybox to the release build. This helps to make sandbox builds work out of the box on non-NixOS systems and with diverted stores.
2017-05-15	Linux sandbox: Don't barf on invalid paths	Eelco Dolstra
	This is useful when we're using a diverted store (e.g. "--store local?root=/tmp/nix") in conjunction with a statically-linked sh from the host store (e.g. "sandbox-paths =/bin/sh=/nix/store/.../bin/busybox").
2017-05-15	Make fmt() non-recursive	Eelco Dolstra

2017-05-15	nix ls: support '/' for the root directory	Benno Fünfstück

2017-05-11	Add an option for extending the user agent header	Eelco Dolstra
	This is useful e.g. for distinguishing traffic to a binary cache (e.g. certain machines can use a different tag in the user agent).
2017-05-11	Fix typo	Eelco Dolstra

2017-05-11	Tweak error message	Eelco Dolstra

2017-05-11	Don't allow untrusted users to set info.ultimate	Eelco Dolstra
	Note that a trusted signature was still required in this case so it was not a huge deal.
2017-05-11	Change the meaning of info.ultimate	Eelco Dolstra
	It now means "paths that were built locally". It no longer includes paths that were added locally. For those we don't need info.ultimate, since we have the content-addressability assertion (info.ca).
2017-05-11	LocalStore::addToStore(): Check info.narSize	Eelco Dolstra
	It allowed the client to specify bogus narSize values. In particular, Downloader::downloadCached wasn't setting narSize at all.
2017-05-10	Replace readline by linenoise	Eelco Dolstra
	Using linenoise avoids a license compatibility issue (#1356), is a lot smaller and doesn't pull in ncurses.
2017-05-08	Add "nix edit" command	Eelco Dolstra
	This is a little convenience command that opens the Nix expression of the specified package. For example, nix edit nixpkgs.perlPackages.Moose opens <nixpkgs/pkgs/top-level/perl-packages.nix> in $EDITOR (at the right line number for some editors). This requires the package to have a meta.position attribute.
2017-05-08	Minor cleanup	Eelco Dolstra

2017-05-08	Linux sandbox: Fix compatibility with older kernels	Eelco Dolstra

2017-05-08	build-remote: Check remote build status	Eelco Dolstra

2017-05-08	Remove superfluous #ifdef	Eelco Dolstra

2017-05-05	Make the location of the build directory in the sandbox configurable	Eelco Dolstra
	This is mostly for use in the sandbox tests, since if the Nix store is under /build, then we can't use /build as the build directory.
2017-05-05	Figure out the user's home directory if $HOME is not set	Eelco Dolstra

2017-05-04	Linux sandbox: Use /build instead of /tmp as $TMPDIR	Eelco Dolstra
	There is a security issue when a build accidentally stores its $TMPDIR in some critical place, such as an RPATH. If TMPDIR=/tmp/nix-build-..., then any user on the system can recreate that directory and inject libraries into the RPATH of programs executed by other users. Since /build probably doesn't exist (or isn't world-writable), this mitigates the issue.
2017-05-04	nix dump-path: Add	Eelco Dolstra
	This is primarily useful for extracting NARs from other stores (like binary caches), which "nix-store --dump" cannot do.
2017-05-03	Fix build on gcc 4.9	Eelco Dolstra
	http://hydra.nixos.org/build/52408843
2017-05-03	nix-shell: Implement passAsFile	Eelco Dolstra

2017-05-03	nix eval: Add a --raw flag	Eelco Dolstra
	Similar to "jq -r", this prints the evaluation result (which must be a string value) unquoted.
2017-05-02	Fix "nix ... --all"	Eelco Dolstra
	When "--all" is used, we should not fill in a default installable.
2017-05-02	LocalStoreAccessor: Fix handling of diverted stores	Eelco Dolstra

2017-05-02	Replace $NIX_REMOTE_SYSTEMS with an option "builder-files"	Eelco Dolstra
	Also, to unify with hydra-queue-runner, allow it to be a list of files.
2017-05-02	build-remote: Fix fallback to other machines when connecting fails	Eelco Dolstra
	Opening an SSHStore or LegacySSHStore does not actually establish a connection, so the try/catch block here did nothing. Added a Store::connect() method to test whether a connection can be established.
2017-05-02	Add an option for specifying remote builders	Eelco Dolstra
	This is useful for one-off situations where you want to specify a builder on the command line instead of having to mess with nix.machines. E.g. $ nix-build -A hello --argstr system x86_64-darwin \ --option builders 'root@macstadium1 x86_64-darwin' will perform the specified build on "macstadium1". It also removes the need for a separate nix.machines file since you can specify builders in nix.conf directly. (In fact nix.machines is yet another hack that predates the general nix.conf configuration file, IIRC.) Note: this option is supported by the daemon for trusted users. The fact that this allows trusted users to specify paths to SSH keys to which they don't normally have access is maybe a bit too much trust...
2017-05-02	Factor out machines.conf parsing	Eelco Dolstra
	This allows hydra-queue-runner to use it.
2017-05-02	build-hook: If there are no machines defined, quit permanently	Eelco Dolstra

2017-05-02	build-remote: Ugly hackery to get build logs to work	Eelco Dolstra
	The build hook mechanism expects build log output to go to file descriptor 4, so do that.
2017-05-01	build-remote: Don't require signatures	Eelco Dolstra
	This restores the old behaviour.
2017-05-01	Support arbitrary store URIs in nix.machines	Eelco Dolstra
	For backwards compatibility, if the URI is just a hostname, ssh:// (i.e. LegacySSHStore) is prepended automatically. Also, all fields except the URI are now optional. For example, this is a valid nix.machines file: local?root=/tmp/nix This is useful for testing the remote build machinery since you don't have to mess around with ssh.
2017-05-01	Minor cleanup	Eelco Dolstra

2017-05-01	Implement LegacySSHStore::buildDerivation()	Eelco Dolstra
	This makes LegacySSHStore usable by build-remote and hydra-queue-runner.
2017-05-01	Chomp log output from the build hook	Eelco Dolstra

2017-05-01	Remove $NIX_BUILD_HOOK and $NIX_CURRENT_LOAD	Eelco Dolstra
	This is to simplify remote build configuration. These environment variables predate nix.conf. The build hook now has a sensible default (namely build-remote). The current load is kept in the Nix state directory now.
2017-05-01	build-remote: Don't copy the .drv closure	Eelco Dolstra
	Since build-remote uses buildDerivation() now, we don't need to copy the .drv file anymore. This greatly reduces the set of input paths copied to the remote side (e.g. from 392 to 51 store paths for GNU hello on x86_64-darwin).
2017-05-01	Pass verbosity level to build hook	Eelco Dolstra

2017-05-01	Reduce severity of EMLINK warnings	Eelco Dolstra
	Fixes #1357.
2017-05-01	Add a dummy Store::buildPaths() method	Eelco Dolstra
	This default implementation of buildPaths() does nothing if all requested paths are already valid, and throws an "unsupported operation" error otherwise. This fixes a regression introduced by c30330df6f67c81986dfb124631bc756c8e58c0d in binary cache and legacy SSH stores.
2017-05-01	lexer: remove catch-all rules hiding real errors	Guillaume Maudoux
	With catch-all rules, we hide potential errors. It turns out that a4744254 made one cath-all useless. Flex detected that is was impossible to reach. The other is more subtle, as it can only trigger on unfinished escapes in unfinished strings, which only occurs at EOF.
2017-05-01	Fix lexer to support `$'` in multiline strings.	Guillaume Maudoux

2017-04-28	Hopefully fix the Darwin build	Eelco Dolstra
	http://hydra.nixos.org/build/52080911
2017-04-28	Suppress warning about ssh-auth-sock	Eelco Dolstra

2017-04-28	Check for libreadline	Eelco Dolstra

2017-04-28	Fix brainfart	Eelco Dolstra

2017-04-28	Fix hash computation when importing NARs greater than 4 GiB	Eelco Dolstra
	This caused "nix-store --import" to compute an incorrect hash on NARs that don't fit in an unsigned int. The import would succeed, but "nix-store --verify-path" or subsequent exports would detect an incorrect hash. A deeper issue is that the export/import format does not contain a hash, so we can't detect such issues early. Also, I learned that -Wall does not warn about this.