guiwf/lix
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
5,803 Commits 37 Branches 40 Tags
e3c19ff9bcbcaf2ec8e7c3d7f964e8d8aefaea43
Commit Graph
5803 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Eelco Dolstra 8956ae1987 Add a "profile" option to S3BinaryCacheStore 
This allows specifying the AWS configuration profile to use. E.g.

  nix copy --from s3://my-cache?profile=aws-dev-account /nix/store/cf3isrlqavvd5w7rpky1fa8j9lcnlggm-...
 2017-11-15 14:18:20 +01:00
Eelco DolstraandGitHub 897ca33a1c Merge pull request #1678 from dtzWill/feature/anchor-exit-exception 
anchor nix::Exit exception
 2017-11-15 12:31:47 +01:00
Eelco Dolstra 27131866c9 Doh 2017-11-15 12:23:31 +01:00
Will Dietz 9d7ce0bf45 anchor nix::Exit exception 2017-11-14 12:39:30 -06:00
Eelco Dolstra 2f5789c5d6 Add dependencies for coverage test 2017-11-14 18:47:44 +01:00
Eelco Dolstra 4b45d8c95a Update lcov filter 2017-11-14 18:47:37 +01:00
Eelco Dolstra ec5b04862b nix sign-paths: Support binary caches 2017-11-14 18:44:05 +01:00
Eelco Dolstra d6dbda7004 Add tests for "nix verify", "nix sign-paths" etc. 2017-11-14 18:24:20 +01:00
Eelco Dolstra 2c39e4eca0 Revert "Don't parse "x:x" as a URI" 
This reverts commit f90f660b24.

This broke Hydra's release.nix, which contained

  preCheck = ''export LOGNAME=${LOGNAME:-foo}'';
 2017-11-14 15:10:52 +01:00
Eelco Dolstra 5773d667ee nix ls-{nar,store}: Don't abort on missing files 2017-11-14 14:49:06 +01:00
Eelco Dolstra b8d446829e Add some tests 2017-11-14 14:37:39 +01:00
Eelco Dolstra 4db0a9555e nix ls-{nar,store} --json: Respect -R 2017-11-14 14:31:38 +01:00
Eelco Dolstra c8155e9f5f Don't indent JSON output 2017-11-14 14:28:03 +01:00
Eelco Dolstra bac8055652 nix ls-{store,nar}: Add --json flag 2017-11-14 14:23:53 +01:00
Eelco Dolstra c0d93a01ee Remove ncurses-bin 2017-11-14 14:16:16 +01:00
Eelco Dolstra 5ef5d70b5e Make config options available to legacy commands 2017-11-14 14:04:09 +01:00
Eelco Dolstra c9c3fc710b Rename tests/nar-index -> tests/nar-access 2017-11-14 13:27:40 +01:00
Eelco Dolstra 9d87d03331 Remove extraneous comment 2017-11-08 16:17:32 +01:00
Eelco DolstraandGitHub 513b143cd8 Merge pull request #1650 from copumpkin/darwin-sandbox-unix-socket 
Always allow builds to use unix domain sockets in Darwin sandbox
 2017-11-08 16:16:42 +01:00
Eelco Dolstra fd10f6f241 Show when tests are skipped 
Also, don't depend on tput (ncurses). It's really not needed since
ANSI escape sequences have been standardized for 35 years or so.
 2017-11-07 12:09:57 +01:00
Eelco DolstraandGitHub dc30856141 Merge pull request #1632 from AmineChikhaoui/sigint-copy 
run query paths in parallel during nix copy and handle SIGINT
 2017-11-06 13:36:28 +01:00
Eelco Dolstra 7a4d9574d9 fetchgit.cc -> fetchGit.cc 2017-11-03 13:55:31 +01:00
Eelco Dolstra 6cf7c6a6b0 Remove git:// support in NIX_PATH 
This didn't support specifying a revision/branch, and was restricted
to git:// URIs (since https:// or ssh:// would be ambiguous).
 2017-11-03 13:55:31 +01:00
Eelco Dolstra ee6ac38848 fetchGit/fetchMercurial: Filter out directories with untracked files 2017-11-03 13:55:31 +01:00
Eelco Dolstra 4dee01da7c fetchGit: Add a test 2017-11-03 13:55:30 +01:00
Eelco Dolstra 0e77aa3982 fetchGit: Don't do a remote fetch if we already have the rev 2017-11-03 13:55:30 +01:00
Eelco DolstraandGitHub 9ccea31dc2 Merge pull request #1651 from LnL7/darwin-sandbox-getpwuid 
Allow getpwuid in the darwin sandbox
 2017-11-03 10:55:31 +01:00
Daiderd Jordan 453f675810 Allow getpwuid in the darwin sandbox. 2017-11-03 10:50:49 +01:00
Eelco DolstraandGitHub e104842f8b Merge pull request #1660 from 4z3/patch-1 
fetchMercurial: fix error message
 2017-11-03 10:49:57 +01:00
Eelco DolstraandGitHub 4070264613 Merge pull request #1655 from copumpkin/patch-1 
Don't freak out if we get a 403 from S3
 2017-11-03 10:49:38 +01:00
Daniel PeeblesandDan Peebles 3105679226 Don't freak out if we get a 403 from S3 
As far as we're concerned, not being able to access a file just means
the file is missing. Plus, AWS explicitly goes out of its way to
return a 403 if the file is missing and the requester doesn't have
permission to list the bucket.

Also getting rid of an old hack that Eelco said was only relevant
to an older AWS SDK.
 2017-11-03 01:31:42 +01:00
tvandGitHub 5ab37f0e44 fetchMercurial: fix error message 2017-11-02 23:37:42 +01:00
Eelco DolstraandGitHub ac4a1ef0c1 Merge pull request #1657 from plesiv/docs-typeof-fix 
Mention "float" type in the docs
 2017-11-02 16:26:30 +01:00
Zoran Plesivčak ae506c1ea4 Mention isFloat function in "Built-in Functions" section 2017-11-01 23:00:08 +00:00
Zoran Plesivčak 3050395810 Mention "float" type in builtins.typeOf section of the docs 
+ remove trailing whitespace from the file
 2017-11-01 21:36:25 +00:00
Eelco Dolstra 212e72c609 Fix build 
https://hydra.nixos.org/build/63172338
 2017-11-01 21:32:30 +01:00
Eelco Dolstra e026bc3b05 fetchMercurial: Don't fetch hashes we already have 2017-11-01 18:43:11 +01:00
Eelco Dolstra 1969f357b7 Add fetchMercurial primop 
E.g.

  $ nix eval '(fetchMercurial https://www.mercurial-scm.org/repo/hello)'
  { branch = "default"; outPath = "/nix/store/alvb9y1kfz42bjishqmyy3pphnrh1pfa-source"; rev = "82e55d328c8ca4ee16520036c0aaace03a5beb65"; revCount = 1; shortRev = "82e55d328c8c"; }

  $ nix eval '(fetchMercurial { url = https://www.mercurial-scm.org/repo/hello; rev = "0a04b987be5ae354b710cefeba0e2d9de7ad41a9"; })'
  { branch = "default"; outPath = "/nix/store/alvb9y1kfz42bjishqmyy3pphnrh1pfa-source"; rev = "0a04b987be5ae354b710cefeba0e2d9de7ad41a9"; revCount = 0; shortRev = "0a04b987be5a"; }

  $ nix eval '(fetchMercurial /tmp/unclean-hg-tree)'
  { branch = "default"; outPath = "/nix/store/cm750cdw1x8wfpm3jq7mz09r30l9r024-source"; rev = "0000000000000000000000000000000000000000"; revCount = 0; shortRev = "000000000000"; }
 2017-11-01 17:45:32 +01:00
Eelco Dolstra cd532a9251 Fix filterSource 2017-10-31 16:18:32 +01:00
Dan Peebles bc6b3f7e8f Always allow builds to use unix domain sockets in Darwin sandbox 2017-10-31 15:33:57 +01:00
Eelco Dolstra 72cd52c3cd builtins.fetchgit: Support importing a working tree 
For example, you can write

  src = fetchgit ./.;

and if ./. refers to an unclean working tree, that tree will be copied
to the Nix store. This removes the need for "cleanSource".
 2017-10-30 19:59:25 +01:00
Eelco DolstraandGitHub 197922ea4e Merge pull request #1646 from copumpkin/optional-sandbox-local-network 
Allow optional localhost network access to sandboxed derivations
 2017-10-30 18:54:40 +01:00
Dan Peebles 4a4a009f78 Allow optional localhost network access to sandboxed derivations 
This will allow bind and connect to 127.0.0.1, which can reduce purity/
security (if you're running a vulnerable service on localhost) but is
also needed for a ton of test suites, so I'm leaving it turned off by
default but allowing certain derivations to turn it on as needed.

It also allows DNS resolution of arbitrary hostnames but I haven't found
a way to avoid that. In principle I'd just want to allow resolving
localhost but that doesn't seem to be possible.

I don't think this belongs under `build-use-sandbox = relaxed` because we
want it on Hydra and I don't think it's the end of the world.
 2017-10-30 17:59:12 +01:00
Eelco Dolstra f90f660b24 Don't parse "x:x" as a URI 
URIs now have to contain "://" or start with "channel:".
 2017-10-30 17:58:01 +01:00
Tyson Whitehead 07d2c6d213 Fix (highly unlikely) race condition in readLink 
Used to determine symlink size with stat and value with readlink.
This could technically result in garbage if symlink changed between
calls.  Also gets around the broken stat implementation in our
network filesystem (returns size + 1 giving a byte of garbage).
 2017-10-30 11:49:55 -04:00
Eelco Dolstra 12991152be nix-build: Fix --hash 2017-10-30 13:31:05 +01:00
Eelco Dolstra 63c80ae26f Make "fetchGit /path" work 2017-10-30 13:18:28 +01:00
Eelco Dolstra a5c392a80e fetchGit: Fix broken assertion 
Different URIs can map to the same cache entry if they have the same
revision.
 2017-10-30 12:55:46 +01:00
Eelco Dolstra 812e027e1d Add option allowed-uris 
This allows network access in restricted eval mode.
 2017-10-30 12:41:49 +01:00
Eelco Dolstra f1c555cef8 fetchurl/fetchTarball are *not* allowed in restricted mode 
Accidentally committed this change as part of
f9686885be.

Restricted mode != pure mode.
 2017-10-30 12:41:48 +01:00