guiwf/lix
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
d1db3e5fa3faa43b3d2f2e2e843e9cfc1e6e1b71
lix/tests/functional
T
History
Raito Bezarius fd35e86fc5 libstore: fallback on creating a safe space in the default tempdir 
If `settings.buildDir` cannot be written to, because we are in a chroot
store, unprivileged or anything.

We can and should always gracefully fallback to a *secure* location
inside of /tmp, i.e. `/tmp/<a directory under 0700>/<our temporary
directory for build under 0700>/...`.

This does not reintroduce CVE-2025-52991 because we are creating a
directory in-between compared to creating only ONE level of directory.

Fixes #876.

Change-Id: Ie521202923f763225e1901ab1b9b6c6132aaf548
Signed-off-by: Raito Bezarius <raito@lix.systems>
2025-06-27 17:39:59 +00:00
..
common
libstore/profiles: do not dereference current generation if it doesn't exist
2025-05-11 01:07:18 +02:00
config
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
flakes
Detect if in Nix3 shell
2025-03-07 07:45:08 -05:00
lang
tests/functional2/lang: Migrate trivial eval-okay tests
2025-06-02 21:52:34 +02:00
logging
libstore: more precise origin info for strange structured logs
2025-02-16 14:15:36 +01:00
nested-sandboxing
chore: rebrand Nix to Lix when it makes sense
2024-06-01 20:31:24 +02:00
nix-shell
nix-shell: stop using dynamic format strings!!
2024-10-13 23:12:45 -07:00
plugins
libexpr: remove positions from primops
2025-05-02 10:57:15 +00:00
repl_characterization
repl: fix repl-overlays in pure eval mode
2025-06-25 14:15:37 +00:00
test-libstoreconsumer
libstore: de-ref {Derived,Built}Path::Built drvPath
2025-05-12 13:37:54 +02:00
add.sh
libstore: don't abort when flat-importing non-files
2025-03-02 17:37:12 +00:00
bad.tar.xz
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
bash-profile.sh
chore: remove monolithic coreutils requirement
2024-10-30 15:12:35 +04:00
big-derivation-attr.nix
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
binary-cache-build-remote.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
binary-cache-regression-fj647.sh
Revert "libstore: always load localstore public keys"
2025-01-23 17:57:52 -08:00
binary-cache.sh
chore: rebrand Nix to Lix when it makes sense
2024-06-01 20:31:24 +02:00
brotli.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
build-delete.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
build-dry.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
build-hook-ca-fixed.nix
Merge pull request #9032 from Ma27/structured-attrs-env-vars
2024-03-07 10:46:47 +01:00
build-hook-ca-floating.nix
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
build-hook.nix
Merge pull request #9032 from Ma27/structured-attrs-env-vars
2024-03-07 10:46:47 +01:00
build-jobless.sh
libstore: diagnose local build failure in goal
2024-08-25 19:55:47 +02:00
build-remote-content-addressed-fixed.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
build-remote-input-addressed.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
build-remote-trustless-after.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
build-remote-trustless-should-fail-0.sh
libstore: don't default build-dir to temp-dir
2025-06-24 10:49:49 +00:00
build-remote-trustless-should-pass-0.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
build-remote-trustless-should-pass-1.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
build-remote-trustless-should-pass-2.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
build-remote-trustless-should-pass-3.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
build-remote-trustless.sh
libstore: don't default build-dir to temp-dir
2025-06-24 10:49:49 +00:00
build-remote.sh
libstore: don't default build-dir to temp-dir
2025-06-24 10:49:49 +00:00
build.sh
libstore: fallback on creating a safe space in the default tempdir
2025-06-27 17:39:59 +00:00
case-hack.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
case.nar
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
check-refs.nix
local-derivation-goal: improve "illegal reference" error
2025-01-20 15:05:50 +01:00
check-refs.sh
local-derivation-goal: improve "illegal reference" error
2025-01-20 15:05:50 +01:00
check-reqs.nix
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
check-reqs.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
check.nix
libstore: report all differing outputs rather than just the first
2024-10-29 18:34:54 +01:00
check.sh
libstore: don't default build-dir to temp-dir
2025-06-24 10:49:49 +00:00
common.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
completions.sh
libutil/args: fix crash when NIX_GET_COMPLETIONS is not a number
2025-05-27 22:20:22 +00:00
compression-levels.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
compute-levels.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
config.nix.in
chore: remove monolithic coreutils requirement
2024-10-30 15:12:35 +04:00
config.sh
Rename nix show-config to nix config show
2024-05-03 16:26:16 +02:00
db-migration.sh
chore: rebrand Nix to Lix when it makes sense
2024-06-01 20:31:24 +02:00
debugger.sh
Merge pull request #9933 from pennae/debugger-fix
2024-03-04 08:57:44 +01:00
dependencies.builder0.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
dependencies.nix
gc: delay throwing error until cleanup is complete
2025-06-02 20:05:32 +02:00
dependencies.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
derivation-json.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
dummy
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
dump-db.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
eval-store.sh
Merge pull request #9589 from obsidiansystems/floating-content-addressing-derivations-eval-store
2024-03-04 07:15:08 +01:00
eval.nix
feat(nix-instantiate): add --raw flag
2025-05-29 15:25:12 +02:00
eval.sh
feat(nix-instantiate): add --raw flag
2025-05-29 15:25:12 +02:00
experimental-features.sh
libexpr/flake: allow automatic rejection of configuration options from flakes
2024-06-30 19:28:14 +02:00
export-graph.nix
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
export-graph.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
export.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
extra-sandbox-profile.nix
libstore: Fix sandbox=relaxed
2024-05-08 19:31:43 +00:00
extra-sandbox-profile.sh
libstore: Fix sandbox=relaxed
2024-05-08 19:31:43 +00:00
failing.nix
Merge pull request #9032 from Ma27/structured-attrs-env-vars
2024-03-07 10:46:47 +01:00
fetchClosure.sh
Add pre-commit checks
2024-03-29 22:57:40 -07:00
fetchers.sh
libfetchers: factorize inputFromAttrs
2025-05-22 14:00:19 +02:00
fetchGit.sh
libfetchers/git: restore compat with builtins.fetchGit from 2.3
2024-09-28 14:52:06 +02:00
fetchGitLocked.sh
fix: Consider fetchGit locked when narHash is present
2025-05-28 22:24:23 +00:00
fetchGitRefs.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
fetchGitSubmodules.sh
treewide: Stop using URL literals
2024-08-17 15:48:10 +00:00
fetchMercurial.sh
libfetchers/mercurial: handle "evil refs" gracefully
2025-01-26 11:22:03 +01:00
fetchPath.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
fetchTree-file.sh
fix!: file type flake inputs are always recursive hashed
2025-03-21 13:19:15 -07:00
fetchurl.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
filter-source.nix
libexpr: rectify filtering logic for filter builtins under chroot stores
2025-02-27 00:26:48 +01:00
filter-source.sh
libexpr: rectify filtering logic for filter builtins under chroot stores
2025-02-27 00:26:48 +01:00
fixed.builder1.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
fixed.builder2.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
fixed.nix
libstore: Show illegal path references in fixed-outputs derivations
2025-05-08 20:23:12 +02:00
fixed.sh
libstore: Show illegal path references in fixed-outputs derivations
2025-05-08 20:23:12 +02:00
fmt.sh
fix(nix fmt): remove the default "." argument
2024-09-26 14:32:29 -07:00
fmt.simple.sh
fix(nix fmt): remove the default "." argument
2024-09-26 14:32:29 -07:00
fod-failing.nix
store: guess the URL of failing fixed-output derivations
2024-06-27 22:44:16 -07:00
function-trace.sh
Add pre-commit checks
2024-03-29 22:57:40 -07:00
gc-auto.sh
libstore/gc: fix auto-GC blocking indefinitely during evaluation
2025-06-01 18:59:23 +02:00
gc-concurrent2.builder.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
gc-concurrent.builder.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
gc-concurrent.nix
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
gc-concurrent.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
gc-non-blocking.sh
gc: refactor the gc server thread out into a class without changing it
2024-07-19 20:55:55 +00:00
gc-runtime.nix
gc: Find roots using libproc on Darwin
2024-04-25 23:24:21 -04:00
gc-runtime.sh
gc: Find roots using libproc on Darwin
2024-04-25 23:24:21 -04:00
gc.sh
gc: delay throwing error until cleanup is complete
2025-06-02 20:05:32 +02:00
hash-check.nix
Remove ancient let from 2 test files
2024-10-14 17:19:22 +04:00
hash.sh
Revert "Reject weak hash algorithms as SRIs, and warn in any other cases"
2024-11-01 11:59:59 +00:00
hermetic.nix
Merge pull request #9032 from Ma27/structured-attrs-env-vars
2024-03-07 10:46:47 +01:00
ifd.nix
Merge branch '2.18-maintenance' into ifd-buildStore-2.18
2024-01-11 07:21:16 -05:00
import-derivation.nix
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
import-derivation.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
impure-derivations.nix
cli: disallow impure derivations
2025-05-11 17:26:55 +02:00
impure-eval.sh
libcmd: munge evalSettings in the right place
2024-12-06 00:59:53 +01:00
init.sh
Fix failing darwin tests
2024-05-06 18:56:40 +02:00
install-darwin.sh
change shebangs of all .sh scripts to bash
2024-06-24 14:00:43 -07:00
lang-test-infra.sh
tests/functional/lang: Change base path to the lang directory
2025-05-21 20:36:20 +02:00
lang.sh
tests/functional2/lang: migrated first tests
2025-06-01 20:19:37 +02:00
legacy-ssh-store.sh
"but doctor, I AM the untrusted store": nix doctor had wrong trustedness
2024-04-08 15:40:12 -07:00
linux-sandbox-cert-test.nix
Add pre-commit checks
2024-03-29 22:57:40 -07:00
linux-sandbox.sh
libstore: don't delete already valid outputs after build
2025-06-27 15:38:53 +02:00
local-store.sh
"but doctor, I AM the untrusted store": nix doctor had wrong trustedness
2024-04-08 15:40:12 -07:00
logging.sh
libstore: more precise origin info for strange structured logs
2025-02-16 14:15:36 +01:00
meson.build
fix: Consider fetchGit locked when narHash is present
2025-05-28 22:24:23 +00:00
misc.sh
libexpr: significantly improve error messages for bad attr paths
2024-12-10 15:43:31 -08:00
multiple-outputs.nix
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
multiple-outputs.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
nar-access.nix
libstore/binary-cache-store: skip NAR listings if it's not possible to serialize it
2025-06-10 15:22:22 +00:00
nar-access.sh
libstore/binary-cache-store: skip NAR listings if it's not possible to serialize it
2025-06-10 15:22:22 +00:00
nested-sandboxing.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
nix_path.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
nix-build-examples.nix
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
nix-build.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
nix-channel.sh
Add pre-commit checks
2024-03-29 22:57:40 -07:00
nix-collect-garbage-d.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
nix-collect-garbage-dry-run.sh
Fix dry-run flag for nix-collect-garbage
2024-07-09 13:55:05 +00:00
nix-copy-ssh-common.sh
Merge pull request #9604 from obsidiansystems/test-substitute-on-destination
2024-03-07 03:34:00 +01:00
nix-copy-ssh-ng.sh
Merge pull request #9604 from obsidiansystems/test-substitute-on-destination
2024-03-07 03:34:00 +01:00
nix-copy-ssh.sh
Merge pull request #9604 from obsidiansystems/test-substitute-on-destination
2024-03-07 03:34:00 +01:00
nix-daemon-untrusting.sh
change shebangs of all .sh scripts to bash
2024-06-24 14:00:43 -07:00
nix-profile.sh
cli: disallow ca derivations
2025-05-20 13:27:04 +02:00
optimise-store.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
output-normalization.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
parallel.builder.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
parallel.nix
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
parallel.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
pass-as-file.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
path-from-hash-part.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
path.nix
libexpr: rectify filtering logic for filter builtins under chroot stores
2025-02-27 00:26:48 +01:00
placeholders.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
plugins.sh
tests: don't build test plugin shared libs on static builds
2024-05-12 23:04:21 +02:00
post-hook.sh
post-build-hook: don't emit config settings that aren't overridden
2025-03-17 15:25:52 -07:00
pre-hook.sh
fix: pre-build-hook did not run when useChroot == false
2025-02-17 16:05:06 -08:00
pure-eval.nix
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
pure-eval.sh
libexpr: fix checkSourcePath purity regression
2025-03-02 18:30:30 +01:00
push-to-store-old.sh
change shebangs of all .sh scripts to bash
2024-06-24 14:00:43 -07:00
push-to-store.sh
change shebangs of all .sh scripts to bash
2024-06-24 14:00:43 -07:00
read-only-store.sh
Add pre-commit checks
2024-03-29 22:57:40 -07:00
readfile-context.nix
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
readfile-context.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
redirected-filter-source.nix
libexpr: rectify filtering logic for filter builtins under chroot stores
2025-02-27 00:26:48 +01:00
redirected-filter-source.sh
libexpr: rectify filtering logic for filter builtins under chroot stores
2025-02-27 00:26:48 +01:00
referrers.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
regression-484.sh
fix: good errors for failures caused by allowSubstitutes
2024-08-23 17:49:15 -07:00
regression-fj883.nix
libstore: don't delete already valid outputs after build
2025-06-27 15:38:53 +02:00
regression-reference-checks.nix
libstore: fix "illegal reference specifier 'man'"-error in postgresql_14
2025-01-05 14:50:45 +01:00
regression-reference-checks.sh
libstore: fix "illegal reference specifier 'man'"-error in postgresql_14
2025-01-05 14:50:45 +01:00
remote-store.sh
"but doctor, I AM the untrusted store": nix doctor had wrong trustedness
2024-04-08 15:40:12 -07:00
repair.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
repl.sh
cli: disallow ca derivations
2025-05-20 13:27:04 +02:00
restricted.nix
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
restricted.sh
libexpr: Deprecate overriding __sub and the like
2024-11-28 18:15:52 +01:00
search.nix
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
search.sh
cli: eat terminal codes from stdout also
2024-08-04 20:41:19 -07:00
secure-drv-outputs.nix
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
secure-drv-outputs.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
selfref-gc.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
shell-hello.nix
Merge pull request #9648 from cole-h/nix-shell-ordering
2024-03-04 07:50:55 +01:00
shell.sh
Detect if in Nix3 shell
2025-03-07 07:45:08 -05:00
signing.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
simple-failing.nix
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
simple.builder.sh
Add pre-commit checks
2024-03-29 22:57:40 -07:00
simple.nix
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
simple.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
ssh-relay.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
store-ping.sh
Merge pull request #9632 from cole-h/nix-daemon-testing
2024-03-04 08:17:32 +01:00
structured-attrs.nix
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
structured-attrs.sh
tests: move nix-shell related tests to subdir
2024-10-13 23:12:45 -07:00
substitute-truncated-nar.sh
libutil: remove sinkToSource eof callback
2024-06-23 11:52:49 +00:00
substitute-with-invalid-ca.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
suggestions.sh
libexpr: show all missing and unexpected arguments instead of just one
2025-03-11 20:21:24 +01:00
supplementary-groups.sh
libstore: don't default build-dir to temp-dir
2025-06-24 10:49:49 +00:00
symlink
libstore: don't abort when flat-importing non-files
2025-03-02 17:37:12 +00:00
symlink-derivation.nix
Merge pull request #10456 from NixOS/fixpermdeniedbind
2024-04-11 15:43:58 +03:00
tarball.sh
treewide: Stop using URL literals
2024-08-17 15:48:10 +00:00
test-infra.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
test-libstoreconsumer.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
test-repl-characterization.sh
Implement a parser for a literate testing system for the repl
2024-03-14 14:30:38 -07:00
timeout.nix
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
timeout.sh
tests: fix functional-timeout
2024-05-28 04:20:00 +00:00
toString-path.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
undefined-variable.nix
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
user-envs-migration.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
user-envs.builder.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
user-envs.nix
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
user-envs.sh
libstore/profiles: do not dereference current generation if it doesn't exist
2025-05-11 01:07:18 +02:00
why-depends.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00
zstd.sh
Put functional tests in tests/functional
2023-12-01 12:06:43 -05:00