* Support for fixed-output hashes over directory trees (i.e., over the
NAR dump of the path).
This commit is contained in:
parent
eda2c3c253
commit
3a2c3f0cf2
3 changed files with 35 additions and 16 deletions
|
@ -25,7 +25,7 @@ if test -z "$hash"; then
|
|||
tmpPath1=/tmp/nix-prefetch-url-$$ # !!! security?
|
||||
fi
|
||||
|
||||
# Perform the checkout.
|
||||
# Perform the download.
|
||||
@curl@ --fail --location --max-redirs 20 "$url" > $tmpPath1
|
||||
|
||||
# Compute the hash.
|
||||
|
@ -47,7 +47,7 @@ storeExpr=$( \
|
|||
| @bindir@/nix-instantiate -)
|
||||
|
||||
# Realise it.
|
||||
finalPath=$(@bindir@/nix-store -q --force-realise $storeExpr)
|
||||
finalPath=$(@bindir@/nix-store -r $storeExpr)
|
||||
|
||||
if ! test -n "$QUIET"; then echo "path is $finalPath" >&2; fi
|
||||
|
||||
|
|
|
@ -194,6 +194,7 @@ static Expr primDerivation(EvalState & state, const ATermVector & _args)
|
|||
|
||||
string outputHash;
|
||||
string outputHashAlgo;
|
||||
bool outputHashRecursive = false;
|
||||
|
||||
for (ATermIterator i(attrs.keys()); i; ++i) {
|
||||
string key = aterm2String(*i);
|
||||
|
@ -228,6 +229,11 @@ static Expr primDerivation(EvalState & state, const ATermVector & _args)
|
|||
else if (key == "name") drvName = s;
|
||||
else if (key == "outputHash") outputHash = s;
|
||||
else if (key == "outputHashAlgo") outputHashAlgo = s;
|
||||
else if (key == "outputHashMode") {
|
||||
if (s == "recursive") outputHashRecursive = true;
|
||||
else if (s == "flat") outputHashRecursive = false;
|
||||
else throw Error(format("invalid value `%1%' for `outputHashMode' attribute") % s);
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
|
@ -255,6 +261,7 @@ static Expr primDerivation(EvalState & state, const ATermVector & _args)
|
|||
h = parseHash32(ht, outputHash);
|
||||
string s = outputHash;
|
||||
outputHash = printHash(h);
|
||||
if (outputHashRecursive) outputHashAlgo = "r:" + outputHashAlgo;
|
||||
}
|
||||
|
||||
/* Check the derivation name. It shouldn't contain whitespace,
|
||||
|
|
|
@ -1082,25 +1082,37 @@ void DerivationGoal::computeClosure()
|
|||
outputs (i.e., the content hash should match the specified
|
||||
hash). */
|
||||
if (i->second.hash != "") {
|
||||
HashType ht = parseHashType(i->second.hashAlgo);
|
||||
|
||||
bool recursive = false;
|
||||
string algo = i->second.hashAlgo;
|
||||
|
||||
if (string(algo, 0, 2) == "r:") {
|
||||
recursive = true;
|
||||
algo = string(algo, 2);
|
||||
}
|
||||
|
||||
if (!recursive) {
|
||||
/* The output path should be a regular file without
|
||||
execute permission. */
|
||||
struct stat st;
|
||||
if (lstat(path.c_str(), &st))
|
||||
throw SysError(format("getting attributes of path `%1%'") % path);
|
||||
if (!S_ISREG(st.st_mode) || (st.st_mode & S_IXUSR) != 0)
|
||||
throw Error(
|
||||
format("output path `%1% should be a non-executable regular file")
|
||||
% path);
|
||||
}
|
||||
|
||||
/* Check the hash. */
|
||||
HashType ht = parseHashType(algo);
|
||||
if (ht == htUnknown)
|
||||
throw Error(format("unknown hash algorithm `%1%'") % i->second.hashAlgo);
|
||||
throw Error(format("unknown hash algorithm `%1%'") % algo);
|
||||
Hash h = parseHash(ht, i->second.hash);
|
||||
Hash h2 = hashFile(ht, path);
|
||||
Hash h2 = recursive ? hashPath(ht, path) : hashFile(ht, path);
|
||||
if (h != h2)
|
||||
throw Error(
|
||||
format("output path `%1% should have %2% hash `%3%', instead has `%4%'")
|
||||
% path % i->second.hashAlgo % printHash(h) % printHash(h2));
|
||||
|
||||
/* Also, the output path should be a regular file withouth
|
||||
execute permission. */
|
||||
struct stat st;
|
||||
if (lstat(path.c_str(), &st))
|
||||
throw SysError(format("getting attributes of path `%1%'") % path);
|
||||
if (!S_ISREG(st.st_mode) || (st.st_mode & S_IXUSR) != 0)
|
||||
throw Error(
|
||||
format("output path `%1% should be a non-executable regular file")
|
||||
% path);
|
||||
% path % algo % printHash(h) % printHash(h2));
|
||||
}
|
||||
|
||||
canonicalisePathMetaData(path);
|
||||
|
|
Loading…
Reference in a new issue