eldritch horrors ae3b8e58c3 libstore: chown build dirs with --keep-failed ...

although we only chown if the build was requested by a local daemon
user. daemonless invocations will not chown as they do not have to.
remote builds *can* chown to the remote builder user, but that does
not seem to happen (for some reason keep-failed is not propagated).

Change-Id: Ic0ead406b38b4ca0556fec42d84888efa25123bf

2025-07-17 15:05:32 +02:00

..

cgroups

libstore: NIX_REMOTE=auto tries the daemon socket *then* direct access

2025-06-25 14:59:58 +00:00

containers

libstore: NIX_REMOTE=auto tries the daemon socket *then* direct access

2025-06-25 14:59:58 +00:00

coredumps

Allow enabling core dumps from builds for nix & child processes

2024-05-16 17:11:21 -07:00

fetch-git

treewide: Stop using URL literals

2024-08-17 15:48:10 +00:00

io_uring

libstore/build: block io_uring

2024-07-25 18:24:45 +02:00

no-new-privileges

libstore/build: always enable seccomp filtering and no-new-privileges

2024-05-24 21:19:29 +00:00

setuid

libstore/build: use an allowlist approach to syscall filtering

2024-07-25 18:24:40 +02:00

authorization.nix

Allow to sign path as unprivileged user

2023-06-27 18:31:31 +02:00

broken-userns.nix

Fix /etc/group having desynced IDs from the actual UID in the sandbox

2024-05-04 17:36:50 -07:00

chown-to-user.nix

libstore: chown build dirs with --keep-failed

2025-07-17 15:05:32 +02:00

default.nix

libstore: chown build dirs with --keep-failed

2025-07-17 15:05:32 +02:00

fetchurl.nix

libstore: NIX_REMOTE=auto tries the daemon socket *then* direct access

2025-06-25 14:59:58 +00:00

github-flakes.nix

Deprecate the online flake registries and vendor the default registry

2024-05-18 12:27:23 +10:00

nix-copy-closure.nix

flake/inputs: 24.11-small -> 25.05-small

2025-06-13 18:15:47 +00:00

nix-copy.nix

tests: stop using OCR for nix copy tests

2024-10-26 17:50:54 +00:00

nix-upgrade-nix.nix

nix3-upgrade-nix: always use the /new/ nix-env to perform the installation

2024-07-15 15:26:53 -06:00

nss-preload.nix

Merge pull request #9631 from cole-h/fixup-check-warnings

2024-03-07 09:58:15 +01:00

remote-builds-ssh-ng.nix

daemon: prefer daemon stores for nix-daemon --stdio

2025-06-29 01:14:07 +01:00

remote-builds.nix

libstore: stop using ssh connection sharing

2025-04-21 13:43:44 +00:00

s3-cache.nix

libstore/s3: fulfill with PutObjectOutcome instead of HeadObjectOutcome

2025-06-22 19:45:53 +00:00

sourcehut-flakes.nix

tests: unhaunt the flakes nixos tests

2024-04-18 20:09:19 +00:00

symlink-resolvconf.nix

libstore/build: set NO_NEW_PRIVS for the sandbox

2024-04-15 10:25:29 +03:00

tarball-flakes.nix

libfetchers: ensure that lastModified is a uint64_t

2025-03-13 09:34:59 +01:00

util.nix

Allow enabling core dumps from builds for nix & child processes

2024-05-16 17:11:21 -07:00