Eelco Dolstra
3a4bd320c2
Revert "Merge branch 'seccomp' of https://github.com/aszlig/nix "
...
This reverts commit 9f3f2e21ed
, reversing
changes made to 47f587700d
.
2016-12-19 11:52:57 +01:00
Eelco Dolstra
9f3f2e21ed
Merge branch 'seccomp' of https://github.com/aszlig/nix
2016-12-15 12:04:45 +01:00
Eelco Dolstra
d1da6967b8
Drop unused WWW::Curl dependency
2016-12-06 17:17:29 +01:00
aszlig
651a18dd24
release.nix: Add a test for sandboxing
...
Right now it only tests whether seccomp correctly forges the return
value of chown, but the long-term goal is to test the full sandboxing
functionality at some point in the future.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2016-11-16 16:48:34 +01:00
aszlig
1c52e344c4
Add build dependency for libseccomp
...
We're going to use libseccomp instead of creating the raw BPF program,
because we have different syscall numbers on different architectures.
Although our initial seccomp rules will be quite small it really doesn't
make sense to generate the raw BPF program because we need to duplicate
it and/or make branches on every single architecture we want to suuport.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2016-11-16 16:48:26 +01:00
Eelco Dolstra
21c55ab3b5
Implement backwards-compatible RemoteStore::addToStore()
...
The SSHStore PR adds this functionality to the daemon, but we have to
handle the case where the Nix daemon is 1.11.
Also, don't require signatures for trusted users. This restores 1.11
behaviour.
Fixes https://github.com/NixOS/hydra/issues/398 .
2016-11-09 18:45:06 +01:00
Eelco Dolstra
dd85fc1c5a
Drop Fedora 19/20 builds
...
These don't support regex_replace either.
2016-08-30 14:36:04 +02:00
Eelco Dolstra
042c060f78
Drop Ubuntu 13.10, 14.04 builds
...
These don't support regex_replace.
http://hydra.nixos.org/build/39363999
http://hydra.nixos.org/build/39363981
2016-08-30 13:26:08 +02:00
Eelco Dolstra
2fad86f361
Remove $NIX_DB_DIR
...
This variable has no reason to exist, given $NIX_STATE_DIR.
2016-08-10 18:05:35 +02:00
Eelco Dolstra
1b5b654fe2
Fix OOM in the installer test
...
http://hydra.nixos.org/build/36462209
2016-05-31 15:16:21 +02:00
Eelco Dolstra
0a9d627e50
Doh
2016-05-31 13:38:36 +02:00
Eelco Dolstra
88b79cd55c
Fix Debian 8 build
...
http://hydra.nixos.org/build/36462150
2016-05-31 13:37:33 +02:00
Eelco Dolstra
10f3a2e5f2
Fix clang build failure
...
Apparently opinion is divided on whether [[noreturn]] is allowed on a
lambda: http://stackoverflow.com/questions/26888805/how-to-declare-a-lambdas-operator-as-noreturn
http://hydra.nixos.org/build/36462100
2016-05-31 13:23:54 +02:00
Eelco Dolstra
75d2492f20
Make the aws-cpp-sdk dependency optional
2016-05-04 17:16:48 +02:00
Eelco Dolstra
0f4dd4417e
Merge pull request #892 from domenkozar/ubuntu1604
...
add Ubuntu 16.03 .deb builds
2016-05-02 15:36:58 +02:00
Domen Kožar
bf386de9f2
add Ubuntu 16.03 .deb builds
2016-04-29 16:11:51 +01:00
Eelco Dolstra
d155d80155
Move S3BinaryCacheStore from Hydra
...
This allows running arbitrary Nix commands against an S3 binary cache.
To do: make this a compile time option to prevent a dependency on
aws-sdk-cpp.
2016-04-21 16:08:51 +02:00
Eelco Dolstra
58e423ce32
Remove PDF manual
...
More spring cleaning.
2016-04-14 12:50:01 +02:00
Dan Peebles
c89783b6a7
Kill the temporary darwin-specific channel
...
The issues have been resolved upstream in the main nixpkgs channel now
2016-03-28 20:06:46 -04:00
Eelco Dolstra
7251a81bde
Drop all distros that are not down with C++11
2016-02-17 13:36:56 +01:00
Eelco Dolstra
da4495eb17
Fix eval
2016-01-20 00:26:51 +01:00
Eelco Dolstra
9fff492561
Add tests for Nixpkgs/NixOS evaluation
2016-01-19 21:10:32 +01:00
Eelco Dolstra
4202b17666
Temporarily do Darwin builds from a different Nixpkgs branch
2016-01-08 10:48:48 +01:00
Eelco Dolstra
10a6aa3ad4
Revert accidental disable of doInstallCheck
2016-01-07 16:05:02 +01:00
Eelco Dolstra
458711e4ee
Fix "Bad address" executing build hook
...
This was observed in the deb_debian7x86_64 build:
http://hydra.nixos.org/build/29973215
Calling c_str() on a temporary should be fine because the temporary
shouldn't be destroyed until after the execl() call, but who knows...
2016-01-07 15:10:14 +01:00
Jim Garrison
b07b3b0264
Make Debian package depend on libcurl3-nss
...
Otherwise nix-env fails to start if it is not installed
2015-12-14 19:42:42 -08:00
Eelco Dolstra
399397c907
Fix coverage build
2015-12-10 11:47:34 +01:00
Eelco Dolstra
efd6a8c9f6
Fix Ubuntu/Debian/Fedora builds
2015-11-25 16:12:30 +01:00
Eelco Dolstra
27d6ed5c68
Remove sandboxProfile from release.nix
...
There is really no conceivable reason why building Nix would need
access to the host's nix.conf. If it does, it's a bug, and we should
fix that instead.
2015-11-25 14:45:27 +01:00
Jude Taylor
279fa8f618
reintroduce host deps in tandem with sandbox profiles
2015-11-21 15:57:06 -08:00
Jude Taylor
4876bb012e
simplify build permissions
2015-11-14 14:11:03 -08:00
Jude Taylor
22dfd023fa
update sandbox profiles within nix
2015-11-14 14:11:03 -08:00
Eelco Dolstra
b83fb35f79
Fix tarball build
...
Fixes #671 .
2015-10-31 01:31:07 +01:00
Eelco Dolstra
1f735a3440
<nix/fetchurl.nix>: Support xz-compressed NARs
2015-10-30 12:34:30 +01:00
John Ericson
a7dd26961d
Don't depend on git when generating source tarball
2015-10-15 11:53:45 -07:00
John Ericson
164487a5ba
Simplify source tarball postUnpack cleanupx
2015-10-15 11:42:24 -07:00
Vladimír Čunát
fd74296e2f
release: fix #652 - PDF build after dblatex updates
...
... while not changing behavior when used with older nixpkgs.
2015-09-25 12:48:35 +02:00
Eelco Dolstra
0d4d92fcf9
Debian package: Declare runtime dependency on libsodium13
...
Fixes #558 .
2015-06-17 10:33:51 +02:00
Eelco Dolstra
898703e006
Build against libsodium on Ubuntu 15.04 and Debian 8
2015-06-02 13:14:31 +02:00
Benjamin Staffin
07c69aa03b
Add Debian 8.0 builds
...
Change-Id: I68a54a0c3f97da2d062f43b638de817fd40f2dcd
2015-05-29 11:54:37 +02:00
Eelco Dolstra
b2798902ea
Build on Ubuntu 15.04
2015-05-22 13:32:03 +02:00
Eelco Dolstra
be1ff23352
Add dependency on libcurl-dev
...
http://hydra.nixos.org/eval/1179370
2015-03-27 12:27:36 +01:00
Eelco Dolstra
5114a07d95
Improve setting the default chroot dirs
2015-03-24 11:57:46 +01:00
Eelco Dolstra
fd89f97be9
Add the closure of store paths to the chroot
...
Thus, for example, to get /bin/sh in a chroot, you only need to
specify /bin/sh=${pkgs.bash}/bin/sh in build-chroot-dirs. The
dependencies of sh will be added automatically.
2015-03-24 11:52:34 +01:00
Eelco Dolstra
b0bad3e615
Revert "Remove Fedora 18, 19 builds"
...
This reverts commit 9c58691ce3
. Fedora
18/19 images should build again.
2015-02-12 17:44:29 +01:00
Eelco Dolstra
b4e7eec16a
Don't depend on libsodium on Darwin
...
It doesn't build at the moment.
http://hydra.nixos.org/build/19557641
2015-02-10 14:15:42 +01:00
Eelco Dolstra
5d9cd27dce
Add Fedora 21 build
...
Fixes #467 .
2015-02-10 11:33:33 +01:00
Eelco Dolstra
e0def5bc4b
Use libsodium instead of OpenSSL for binary cache signing
...
Sodium's Ed25519 signatures are much shorter than OpenSSL's RSA
signatures. Public keys are also much shorter, so they're now
specified directly in the nix.conf option ‘binary-cache-public-keys’.
The new command ‘nix-store --generate-binary-cache-key’ generates and
prints a public and secret key.
2015-02-04 17:10:31 +01:00
Eelco Dolstra
20cf0127f5
Include cacert in the binary tarball
...
This prevents having to fetch Nixpkgs or cacert over http.
2014-12-10 16:05:08 +01:00
Eelco Dolstra
9c58691ce3
Remove Fedora 18, 19 builds
...
http://hydra.nixos.org/build/17703462
2014-12-08 18:01:18 +01:00