eldritch horrors
be438c62e1
it's broken, can write arbitrary file paths when run as root, and only supports strings and recursive sets of strings. this was only used for manpage generation in a build system that has not woken up since 1976. fixes #974 fixes #227 Change-Id: I4f18599685a3077c15ddc02c759558f986c8c6e4
28 lines
1.1 KiB
Bash
28 lines
1.1 KiB
Bash
source common.sh
|
|
|
|
clearStore
|
|
|
|
nix eval --expr 'assert 1 + 2 == 3; true'
|
|
|
|
[[ $(nix eval --impure --expr 'builtins.readFile ./pure-eval.sh') =~ clearStore ]]
|
|
|
|
missingImpureErrorMsg=$(! nix eval --expr 'builtins.readFile ./pure-eval.sh' 2>&1)
|
|
|
|
echo "$missingImpureErrorMsg" | grepQuiet -- --impure || \
|
|
fail "The error message should mention the “--impure” flag to unblock users"
|
|
|
|
[[ $(nix eval --expr 'builtins.pathExists ./pure-eval.sh') == false ]] || \
|
|
fail "Calling 'pathExists' on a non-authorised path should return false"
|
|
|
|
(! nix eval --expr builtins.currentTime)
|
|
(! nix eval --expr builtins.currentSystem)
|
|
|
|
(! nix-instantiate --pure-eval ./simple.nix)
|
|
(! nix eval --expr 'builtins.readDir "/"')
|
|
|
|
[[ $(nix eval --impure --expr "(import (builtins.fetchurl { url = \"file://$(pwd)/pure-eval.nix\"; })).x") == 123 ]]
|
|
(! nix eval --expr "(import (builtins.fetchurl { url = \"file://$(pwd)/pure-eval.nix\"; })).x")
|
|
nix eval --expr "(import (builtins.fetchurl { url = \"file://$(pwd)/pure-eval.nix\"; sha256 = \"$(nix hash file pure-eval.nix --type sha256)\"; })).x"
|
|
|
|
(! nix eval --expr '~/foo')
|