Puck Meerburg 37b22dae04 Fix passing custom CA files into the builtin:fetchurl sandbox ...

Without this, verifying TLS certificates would fail on macOS, as well
as any system that doesn't have a certificate file at /etc/ssl/certs/ca-certificates.crt,
which includes e.g. Fedora.

Change-Id: Iaa2e0e9db3747645b5482c82e3e0e4e8f229f5f9

2024-09-26 15:25:28 +00:00

..

ca-fd-leak

Copy the output of fixed-output derivations before registering them

2024-03-07 01:44:58 +00:00

containers

Re-enable systemd-nspawn test

2023-09-20 17:03:47 +00:00

coredumps

Allow enabling core dumps from builds for nix & child processes

2024-05-16 17:11:21 -07:00

fetch-git

treewide: Stop using URL literals

2024-08-17 15:48:10 +00:00

io_uring

libstore/build: block io_uring

2024-07-25 18:24:45 +02:00

no-new-privileges

libstore/build: always enable seccomp filtering and no-new-privileges

2024-05-24 21:19:29 +00:00

setuid

libstore/build: use an allowlist approach to syscall filtering

2024-07-25 18:24:40 +02:00

authorization.nix

Allow to sign path as unprivileged user

2023-06-27 18:31:31 +02:00

broken-userns.nix

Fix /etc/group having desynced IDs from the actual UID in the sandbox

2024-05-04 17:36:50 -07:00

default.nix

[security] builtin:fetchurl: Enable TLS verification

2024-09-25 18:40:58 -07:00

fetchurl.nix

Fix passing custom CA files into the builtin:fetchurl sandbox

2024-09-26 15:25:28 +00:00

github-flakes.nix

Deprecate the online flake registries and vendor the default registry

2024-05-18 12:27:23 +10:00

nix-copy-closure.nix

make the multi-node vm tests a bit more reliable

2024-03-10 10:10:52 +01:00

nix-copy.nix

tests/nixos/nix-copy: fix NixOS >= 24.05 compatibility

2024-06-08 17:59:08 +02:00

nix-upgrade-nix.nix

nix3-upgrade-nix: always use the /new/ nix-env to perform the installation

2024-07-15 15:26:53 -06:00

nss-preload.nix

Merge pull request #9631 from cole-h/fixup-check-warnings

2024-03-07 09:58:15 +01:00

remote-builds-ssh-ng.nix

ssh-ng: Set log-fd for ssh to 4 by default

2024-04-26 19:04:06 +02:00

remote-builds.nix

make the multi-node vm tests a bit more reliable

2024-03-10 10:10:52 +01:00

sourcehut-flakes.nix

tests: unhaunt the flakes nixos tests

2024-04-18 20:09:19 +00:00

symlink-resolvconf.nix

libstore/build: set NO_NEW_PRIVS for the sandbox

2024-04-15 10:25:29 +03:00

tarball-flakes.nix

Reapply "libfetchers: make attribute / URL query handling consistent"

2024-08-01 15:41:30 -07:00

util.nix

Allow enabling core dumps from builds for nix & child processes

2024-05-16 17:11:21 -07:00