346aeee1cb
Remove Debian 8 and Ubuntu 14.10
...
These have a GCC (4.9) that is too old.
https://hydra.nixos.org/eval/1391740
2017-09-14 18:56:33 +02:00
4af2611bd1
Allow builders to create activities
...
Actually, currently they can only create download activities. Thus,
downloads by builtins.fetchurl show up in the progress bar.
2017-08-21 12:18:46 +02:00
2c75945de5
Remove nix-mode.el from Nix.
...
This removes the file nix-mode.el from Nix. The file is now available within the
repository https://github.com/NixOS/nix-mode .
Fixes #662
Fixes #1040
Fixes #1054
Fixes #1055
Closes #1119
Fixes #1419
NOTE: all of the above should be fixed within NixOS/nix-mode. If one of those
hasn’t please reopen within NixOS/nix-mode and not within NixOS/nix.
2017-08-19 21:16:30 -07:00
fb40d73e23
Switch to a fancy multi-user installer on Darwin
2017-07-14 12:10:44 -04:00
a0ad8ba12e
Shellcheck the existing installer
2017-07-14 11:42:33 -04:00
38374a9d35
Tarball job: Include libseccomp on Linux only
2017-07-14 11:41:37 +02:00
04ed11a978
Let hydra choose an alternate list of systems
2017-06-19 14:21:06 -04:00
b4b1f4525f
Fix coverage job
2017-06-01 14:43:15 +02:00
ab5834f7a1
RPM, Deb: Add dependency on libseccomp
2017-06-01 14:28:21 +02:00
1d9ab273ba
Add test for setuid seccomp filter
2017-05-29 16:14:10 +02:00
6cc6c15a2d
Add a seccomp filter to prevent creating setuid/setgid binaries
...
This prevents builders from setting the S_ISUID or S_ISGID bits,
preventing users from using a nixbld* user to create a setuid/setgid
binary to interfere with subsequent builds under the same nixbld* uid.
This is based on aszlig's seccomp code
(47f587700d
2017-05-29 16:14:10 +02:00
a2d92bb20e
Add --with-sandbox-shell configure flag
...
And add a 116 KiB ash shell from busybox to the release build. This
helps to make sandbox builds work out of the box on non-NixOS systems
and with diverted stores.
2017-05-15 17:36:32 +02:00
c5f23f10a8
Replace readline by linenoise
...
Using linenoise avoids a license compatibility issue (#1356 ), is a lot
smaller and doesn't pull in ncurses.
2017-05-10 18:37:42 +02:00
44309c5067
Fix Ubuntu 16.10 build
...
http://hydra.nixos.org/build/52420073
2017-05-03 18:30:47 +02:00
d3dcdfa006
Fix perlBindings.x86_64-darwin
...
http://hydra.nixos.org/build/52401151
2017-05-03 11:30:22 +02:00
73bba12d8b
Check for libreadline
2017-04-28 16:53:56 +02:00
921a2aeb05
Make "nix repl" build
2017-04-25 18:48:40 +02:00
da76c72bc9
Build on aarch64-linux
2017-04-14 14:02:43 +02:00
b134c2d052
Drop WWW::Curl dependency
...
Somehow this came back after d1da6967b8
2017-04-11 15:41:50 +02:00
b9b8b8a63b
Fix evaluation error
2017-03-31 15:54:15 +02:00
c0745a2531
Merge branch 'remove-perl' of https://github.com/shlevy/nix
2017-03-31 14:13:32 +02:00
a75475ca61
Remove tabs
2017-03-30 16:51:50 -04:00
e8186085e0
Add support for brotli compression
...
Build logs on cache.nixos.org are compressed using Brotli (since this
allows them to be decompressed automatically by Chrome and Firefox),
so it's handy if "nix log" can decompress them.
2017-03-15 16:49:06 +01:00
b667abc699
Add signing and s3 support on darwin
2017-03-05 07:39:10 -05:00
fe2db1dae5
Doh
2017-02-22 15:39:17 +01:00
b8ce649a35
Fix 32-bit RPM/Deb builds
...
http://hydra.nixos.org/build/49130529
2017-02-22 13:54:11 +01:00
1a57f499b0
Drop some Ubuntu releases
2017-02-21 15:20:40 +01:00
b95ce3194d
Debian build: Use parallel make and add Ubuntu 16.10
2017-02-21 15:03:23 +01:00
e4dd7dadf4
RPM build: Use parallel make
2017-02-21 14:52:36 +01:00
bb6656b8a2
Build RPMs for Fedora 25
...
Disabled hardened build because it makes the linker fail with messages like
relocation R_X86_64_PC32 against undefined symbol `BZ2_bzWriteOpen' can not be used when making a shared object; recompile with -fPIC
See https://fedoraproject.org/wiki/Changes/Harden_All_Packages .
2017-02-21 14:26:23 +01:00
f7b7df8d1f
Add nix-perl package for the perl bindings
2017-02-07 15:56:32 -05:00
418a837897
Remove perl dependency.
...
Fixes #341
2017-02-07 15:56:32 -05:00
583ff4ec46
release.nix: Drop nix-shell references
2017-01-27 16:13:22 +01:00
3a4bd320c2
Revert "Merge branch 'seccomp' of https://github.com/aszlig/nix "
...
This reverts commit 9f3f2e21ed47f587700d
2016-12-19 11:52:57 +01:00
9f3f2e21ed
Merge branch 'seccomp' of https://github.com/aszlig/nix
2016-12-15 12:04:45 +01:00
d1da6967b8
Drop unused WWW::Curl dependency
2016-12-06 17:17:29 +01:00
651a18dd24
release.nix: Add a test for sandboxing
...
Right now it only tests whether seccomp correctly forges the return
value of chown, but the long-term goal is to test the full sandboxing
functionality at some point in the future.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2016-11-16 16:48:34 +01:00
1c52e344c4
Add build dependency for libseccomp
...
We're going to use libseccomp instead of creating the raw BPF program,
because we have different syscall numbers on different architectures.
Although our initial seccomp rules will be quite small it really doesn't
make sense to generate the raw BPF program because we need to duplicate
it and/or make branches on every single architecture we want to suuport.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
2016-11-16 16:48:26 +01:00
21c55ab3b5
Implement backwards-compatible RemoteStore::addToStore()
...
The SSHStore PR adds this functionality to the daemon, but we have to
handle the case where the Nix daemon is 1.11.
Also, don't require signatures for trusted users. This restores 1.11
behaviour.
Fixes https://github.com/NixOS/hydra/issues/398 .
2016-11-09 18:45:06 +01:00
dd85fc1c5a
Drop Fedora 19/20 builds
...
These don't support regex_replace either.
2016-08-30 14:36:04 +02:00
042c060f78
Drop Ubuntu 13.10, 14.04 builds
...
These don't support regex_replace.
http://hydra.nixos.org/build/39363999
http://hydra.nixos.org/build/39363981
2016-08-30 13:26:08 +02:00
2fad86f361
Remove $NIX_DB_DIR
...
This variable has no reason to exist, given $NIX_STATE_DIR.
2016-08-10 18:05:35 +02:00
1b5b654fe2
Fix OOM in the installer test
...
http://hydra.nixos.org/build/36462209
2016-05-31 15:16:21 +02:00
0a9d627e50
Doh
2016-05-31 13:38:36 +02:00
88b79cd55c
Fix Debian 8 build
...
http://hydra.nixos.org/build/36462150
2016-05-31 13:37:33 +02:00
10f3a2e5f2
Fix clang build failure
...
Apparently opinion is divided on whether [[noreturn]] is allowed on a
lambda: http://stackoverflow.com/questions/26888805/how-to-declare-a-lambdas-operator-as-noreturn
http://hydra.nixos.org/build/36462100
2016-05-31 13:23:54 +02:00
75d2492f20
Make the aws-cpp-sdk dependency optional
2016-05-04 17:16:48 +02:00
0f4dd4417e
Merge pull request #892 from domenkozar/ubuntu1604
...
add Ubuntu 16.03 .deb builds
2016-05-02 15:36:58 +02:00
bf386de9f2
add Ubuntu 16.03 .deb builds
2016-04-29 16:11:51 +01:00
d155d80155
Move S3BinaryCacheStore from Hydra
...
This allows running arbitrary Nix commands against an S3 binary cache.
To do: make this a compile time option to prevent a dependency on
aws-sdk-cpp.
2016-04-21 16:08:51 +02:00
58e423ce32
Remove PDF manual
...
More spring cleaning.
2016-04-14 12:50:01 +02:00
c89783b6a7
Kill the temporary darwin-specific channel
...
The issues have been resolved upstream in the main nixpkgs channel now
2016-03-28 20:06:46 -04:00
7251a81bde
Drop all distros that are not down with C++11
2016-02-17 13:36:56 +01:00
da4495eb17
Fix eval
2016-01-20 00:26:51 +01:00
9fff492561
Add tests for Nixpkgs/NixOS evaluation
2016-01-19 21:10:32 +01:00
4202b17666
Temporarily do Darwin builds from a different Nixpkgs branch
2016-01-08 10:48:48 +01:00
10a6aa3ad4
Revert accidental disable of doInstallCheck
2016-01-07 16:05:02 +01:00
458711e4ee
Fix "Bad address" executing build hook
...
This was observed in the deb_debian7x86_64 build:
http://hydra.nixos.org/build/29973215
Calling c_str() on a temporary should be fine because the temporary
shouldn't be destroyed until after the execl() call, but who knows...
2016-01-07 15:10:14 +01:00
b07b3b0264
Make Debian package depend on libcurl3-nss
...
Otherwise nix-env fails to start if it is not installed
2015-12-14 19:42:42 -08:00
399397c907
Fix coverage build
2015-12-10 11:47:34 +01:00
efd6a8c9f6
Fix Ubuntu/Debian/Fedora builds
2015-11-25 16:12:30 +01:00
27d6ed5c68
Remove sandboxProfile from release.nix
...
There is really no conceivable reason why building Nix would need
access to the host's nix.conf. If it does, it's a bug, and we should
fix that instead.
2015-11-25 14:45:27 +01:00
279fa8f618
reintroduce host deps in tandem with sandbox profiles
2015-11-21 15:57:06 -08:00
4876bb012e
simplify build permissions
2015-11-14 14:11:03 -08:00
22dfd023fa
update sandbox profiles within nix
2015-11-14 14:11:03 -08:00
b83fb35f79
Fix tarball build
...
Fixes #671 .
2015-10-31 01:31:07 +01:00
1f735a3440
<nix/fetchurl.nix>: Support xz-compressed NARs
2015-10-30 12:34:30 +01:00
a7dd26961d
Don't depend on git when generating source tarball
2015-10-15 11:53:45 -07:00
164487a5ba
Simplify source tarball postUnpack cleanupx
2015-10-15 11:42:24 -07:00
fd74296e2f
release: fix #652 - PDF build after dblatex updates
...
... while not changing behavior when used with older nixpkgs.
2015-09-25 12:48:35 +02:00
0d4d92fcf9
Debian package: Declare runtime dependency on libsodium13
...
Fixes #558 .
2015-06-17 10:33:51 +02:00
898703e006
Build against libsodium on Ubuntu 15.04 and Debian 8
2015-06-02 13:14:31 +02:00
07c69aa03b
Add Debian 8.0 builds
...
Change-Id: I68a54a0c3f97da2d062f43b638de817fd40f2dcd
2015-05-29 11:54:37 +02:00
b2798902ea
Build on Ubuntu 15.04
2015-05-22 13:32:03 +02:00
be1ff23352
Add dependency on libcurl-dev
...
http://hydra.nixos.org/eval/1179370
2015-03-27 12:27:36 +01:00
5114a07d95
Improve setting the default chroot dirs
2015-03-24 11:57:46 +01:00
fd89f97be9
Add the closure of store paths to the chroot
...
Thus, for example, to get /bin/sh in a chroot, you only need to
specify /bin/sh=${pkgs.bash}/bin/sh in build-chroot-dirs. The
dependencies of sh will be added automatically.
2015-03-24 11:52:34 +01:00
b0bad3e615
Revert "Remove Fedora 18, 19 builds"
...
This reverts commit 9c58691ce3
2015-02-12 17:44:29 +01:00
b4e7eec16a
Don't depend on libsodium on Darwin
...
It doesn't build at the moment.
http://hydra.nixos.org/build/19557641
2015-02-10 14:15:42 +01:00
5d9cd27dce
Add Fedora 21 build
...
Fixes #467 .
2015-02-10 11:33:33 +01:00
e0def5bc4b
Use libsodium instead of OpenSSL for binary cache signing
...
Sodium's Ed25519 signatures are much shorter than OpenSSL's RSA
signatures. Public keys are also much shorter, so they're now
specified directly in the nix.conf option ‘binary-cache-public-keys’.
The new command ‘nix-store --generate-binary-cache-key’ generates and
prints a public and secret key.
2015-02-04 17:10:31 +01:00
20cf0127f5
Include cacert in the binary tarball
...
This prevents having to fetch Nixpkgs or cacert over http.
2014-12-10 16:05:08 +01:00
9c58691ce3
Remove Fedora 18, 19 builds
...
http://hydra.nixos.org/build/17703462
2014-12-08 18:01:18 +01:00
b6f99e5a23
Remove some platforms with too-old compilers
2014-12-05 21:16:26 +01:00
d4c8ee7059
Rely on XML catalogs to find the DocBook schemas and stylesheets
2014-11-25 15:54:26 +01:00
fe37ed1219
Remove Hydra scheduling priorities
...
They're not so important anymore now that Hydra has jobset scheduling.
2014-11-20 13:26:10 +01:00
05cddf0f5a
Build Ubuntu 14.10 package
...
Fixes #397 .
2014-11-20 11:16:46 +01:00
ed306febb5
Remove Hydra build product
2014-11-18 18:40:47 +01:00
5d064e2698
Add a test for the binary tarball installer
2014-11-18 14:50:05 +01:00
087581a642
Doh
2014-11-05 13:32:57 +01:00
1cdbb9d724
Revert "Revert "Revert "Temporarily disable darwin builds while hydra's darwin is borked"""
...
This reverts commit a51f8d6747
2014-10-31 08:58:19 +01:00
1d02431b60
Don't pull in git when doing a nix-shell
2014-10-31 08:49:15 +01:00
a51f8d6747
Revert "Revert "Temporarily disable darwin builds while hydra's darwin is borked""
...
This reverts commit f72944b42f
2014-10-30 09:30:49 +01:00
f72944b42f
Revert "Temporarily disable darwin builds while hydra's darwin is borked"
...
This reverts commit 29f7e142fc
2014-10-29 16:34:48 +01:00
29f7e142fc
Temporarily disable darwin builds while hydra's darwin is borked
2014-10-23 09:16:55 -04:00
f040159f77
Revert "Drop support for pre-c++11 compilers."
...
The breakage this fixed can be worked around without removing support.
This reverts commit 84a13dc576
2014-10-20 11:33:48 -04:00
84a13dc576
Drop support for pre-c++11 compilers.
...
In particular, gcc 4.6's std::exception::~exception has an exception
specification in c++0x mode, which requires us to use that deprecated
feature in nix (and led to breakage after some recent changes that were
valid c++11).
nix already uses several c++11 features and gcc 4.7 has been around for
over 2 years.
2014-10-18 22:44:59 -04:00
570571a2b7
Remove release notes Hydra product
2014-09-23 10:55:38 +02:00
d64b8e9e53
Remove unused w3m dependency
2014-09-17 17:42:00 +02:00
a6a45bb722
Tweak
2014-09-05 11:49:35 +02:00
Eelco Dolstra