Commit graph

18042 commits

Author SHA1 Message Date
Eelco Dolstra
a3dc1e65ab
Add X32 to the seccomp filter
Fixes #1432.
2017-07-04 19:00:51 +02:00
Eelco Dolstra
42c5774e78
Sort substituters by priority
Fixes #1438.
2017-07-04 16:34:53 +02:00
Eelco Dolstra
b7203e853e
getDefaultSubstituters(): Simplify initialisation
As shlevy pointed out, static variables in C++11 have thread-safe
initialisation.
2017-07-04 16:26:48 +02:00
Eelco Dolstra
6cf23c3e8f
Add allow-new-privileges option
This allows builds to call setuid binaries. This was previously
possible until we started using seccomp. Turns out that seccomp by
default disallows processes from acquiring new privileges. Generally,
any use of setuid binaries (except those created by the builder
itself) is by definition impure, but some people were relying on this
ability for certain tests.

Example:

  $ nix build '(with import <nixpkgs> {}; runCommand "foo" {} "/run/wrappers/bin/ping -c 1 8.8.8.8; exit 1")' --no-allow-new-privileges
  builder for ‘/nix/store/j0nd8kv85hd6r4kxgnwzvr0k65ykf6fv-foo.drv’ failed with exit code 1; last 2 log lines:
    cannot raise the capability into the Ambient set
    : Operation not permitted

  $ nix build '(with import <nixpkgs> {}; runCommand "foo" {} "/run/wrappers/bin/ping -c 1 8.8.8.8; exit 1")' --allow-new-privileges
  builder for ‘/nix/store/j0nd8kv85hd6r4kxgnwzvr0k65ykf6fv-foo.drv’ failed with exit code 1; last 6 log lines:
    PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.
    64 bytes from 8.8.8.8: icmp_seq=1 ttl=46 time=15.2 ms

Fixes #1429.
2017-07-04 15:48:25 +02:00
Eelco Dolstra
ad8b96f1f2
Fix handling of expression installables with a / in them 2017-07-04 15:38:23 +02:00
Eelco Dolstra
c0015e87af
Support base-64 hashes
Also simplify the Hash API.

Fixes #1437.
2017-07-04 15:07:41 +02:00
Eelco Dolstra
fe97c69898
<nix/fetchurl.nix>: Support sha512 argument 2017-07-04 14:45:50 +02:00
Vincent Ambo
9d26c17f13 feat context: Add ability to import extra variables from files
Kontemplate context specifications can now load extra variables from YAML
or JSON files by specifying a list of files (relative to the context file)
under the `import` key.
2017-07-03 14:27:48 +02:00
Vincent Ambo
68e1e48459 feat build: Test if 'go fmt' has been applied 2017-07-03 14:27:48 +02:00
Vincent Ambo
8c7a3d6c30 feat build: Run go vet before building 2017-07-03 14:27:48 +02:00
Vincent Ambo
5bc6370af2 fix main: Correctly print kubectl errors 2017-07-03 14:27:48 +02:00
Vincent Ambo
3728d0ae2e refactor context: Extract loadJsonOrYaml to util package
The logic to deserialise a structure from *either* JSON or YAML is reused several
times and can be easily extracted, which this commit does.
2017-07-03 14:27:48 +02:00
Eelco Dolstra
0a5a867758
nix-shell: Respect --dry-run
Fixes #824.
2017-07-03 11:54:30 +02:00
Eelco Dolstra
fcca702a96
Replace a few bool flags with enums
Functions like copyClosure() had 3 bool arguments, which creates a
severe risk of mixing up arguments.

Also, implement copyClosure() using copyPaths().
2017-07-03 11:38:08 +02:00
Eelco Dolstra
90da34e421
processGraph(): Call getEdges in parallel 2017-07-03 11:38:08 +02:00
William Carroll
b24740626e Adds basic vim motion kbds to man mode 2017-07-01 23:15:13 -04:00
William Carroll
82a5db6133 Updates aliases script 2017-07-01 23:09:25 -04:00
William Carroll
821eda6764 Whitelists *scratch* buffers for linum mode 2017-07-01 22:55:11 -04:00
William Carroll
96c08612a2 Whitelists dired for solaire-mode 2017-07-01 22:54:43 -04:00
William Carroll
935ce33753 Conditionally activates tabbar-mode 2017-07-01 22:54:19 -04:00
William Carroll
f92f70a711 Updates deps 2017-07-01 22:53:41 -04:00
William Carroll
abb61dade2 Updates symlinking script for custom emacs funcs 2017-07-01 16:46:46 -04:00
William Carroll
296fe1b8f6 Stylizes tabbar; extends emacs config 2017-07-01 16:21:44 -04:00
William Carroll
e812876dd3 Impls git-discard function 2017-07-01 15:53:11 -04:00
William Carroll
467b5212cf Adds tabbar support for buffers 2017-07-01 15:53:11 -04:00
William Carroll
4a872bbe7c Extends indentation configuration 2017-07-01 15:52:21 -04:00
William Carroll
c3ff91d35e Updates dependencies 2017-07-01 15:52:21 -04:00
William Carroll
a4b2f49671 Adds solaire-mode for aesthetic adjustments 2017-07-01 11:03:13 -04:00
William Carroll
e7f276b9d4 Supports highlighting current line number 2017-07-01 10:54:56 -04:00
Eelco Dolstra
63d6e0ad3f Merge pull request #1417 from corngood/cygwin-fix
Call SetDllDirectory("") after sqlite3 init on cygwin
2017-06-30 19:50:00 +02:00
William Carroll
de77b31e7f Updates emacs theme 2017-06-26 17:12:32 -04:00
William Carroll
05339cf3b0 Displays time in emacs modeline 2017-06-26 10:59:06 -04:00
William Carroll
813edb7c3d Adds zshrc to repo 2017-06-26 10:58:55 -04:00
William Carroll
e52c4330c7 Disables QuickEdit prototype 2017-06-26 10:30:17 -04:00
William Carroll
6dc3c703aa Adds function to get live directory space updates 2017-06-25 16:31:52 -04:00
William Carroll
257246aed5 Updates ZSH_THEME and trims fat from config 2017-06-25 15:44:18 -04:00
William Carroll
b91fdbd28f Configures aliases for installed dependencies 2017-06-25 15:42:58 -04:00
William Carroll
9c41fabf57 Deletes vim wishlist 2017-06-25 15:42:17 -04:00
Niklas Hambüchen
b591536e93 Fix potential crash/wrong result two hashes of unequal length are compared 2017-06-24 02:17:45 +02:00
William Carroll
73ecea2030 Formats echo strings in config script 2017-06-23 13:11:03 -04:00
William Carroll
35594873ed Adds gitconfig 2017-06-23 13:01:44 -04:00
William Carroll
b7cfc618e7 Removes fish shell 2017-06-23 13:01:31 -04:00
William Carroll
f344f2e370 Adds os detection for bootstrapping configs 2017-06-23 13:01:16 -04:00
William Carroll
e51d11e4bc Updates kbd to search through projects 2017-06-23 11:46:31 -04:00
William Carroll
9cc1c0512a Adds kbds to cycle through flycheck errors 2017-06-23 11:46:09 -04:00
William Carroll
bcde7fabc4 Centers evil search results vertically on a page 2017-06-23 11:45:23 -04:00
William Carroll
b757f26394 Reduces flycheck error display delay 2017-06-23 11:42:45 -04:00
Dr. J. Kubernaught
e2f7cf6258 docs: Add official code of conduct
As dictated by the goddess to the eternal polyfather of love.

Signed-off-by: Reverend Dr. J. Kubernaughtt The Most Recent <tazjin@gmail.com>
2017-06-22 15:12:51 +02:00
William Carroll
e476c5d9a7 Extends dired windmove kbds 2017-06-21 23:53:56 -04:00
William Carroll
8418083b64 Runs evil mode for buffers that activate linum-on 2017-06-21 23:53:11 -04:00