Go to file
regnat 5985b8b527 Check the CA hash when importing stuff in the local store
When adding a path to the local store (via `LocalStore::addToStore`),
ensure that the `ca` field of the provided `ValidPathInfo` does indeed
correspond to the content of the path.
Otherwise any untrusted user (or any binary cache) can add arbitrary
content-addressed paths to the store (as content-addressed paths don’t
need a signature).
2021-06-01 15:09:24 +02:00
.github throw freenode down the memory hole 2021-05-27 21:48:39 +02:00
config Run autoupdate 2021-06-01 11:42:38 +02:00
contrib function-trace: always show the trace 2019-09-18 23:23:21 +02:00
doc/manual doc/nix-shell: Remove outdated bashrc information 2021-05-11 14:33:35 +02:00
m4 autoconf: Fix C++17 detection not working on Ubuntu 16.04. 2019-07-03 04:32:25 +02:00
maintainers Update nix-fallback-paths.nix only 2021-05-14 14:03:53 +02:00
misc launchd: Use exec to avoid leaving the extra shell wrapper running 2021-05-04 14:33:47 -07:00
mk Merge pull request #4582 from puckipedia/cppflags 2021-03-01 13:08:14 +01:00
nix-rust Only link with libdl on Linux 2021-06-01 08:05:21 +00:00
perl Make sodium a required dependency 2021-01-06 17:56:53 +01:00
scripts Include aarch64-darwin in installer 2021-06-01 09:48:35 +02:00
src Check the CA hash when importing stuff in the local store 2021-06-01 15:09:24 +02:00
tests Check the CA hash when importing stuff in the local store 2021-06-01 15:09:24 +02:00
.dir-locals.el .dir-locals.el: Set c-block-comment-prefix 2020-07-10 11:21:06 +02:00
.editorconfig Add .editorconfig 2017-06-05 22:57:28 +01:00
.gitignore Add a test for nix run with CA derivations 2021-05-17 15:10:48 +02:00
.version Revert "Bump version to 3.0" 2020-10-26 11:30:18 +01:00
bootstrap.sh bootstrap: Simplify & make more robust. 2011-09-06 12:11:05 +00:00
configure.ac Run autoupdate 2021-06-01 11:42:38 +02:00
COPYING * Change this to LGPL to keep the government happy. 2006-04-25 16:41:06 +00:00
default.nix Simplify shell.nix and default.nix 2020-06-17 19:21:46 +02:00
flake.lock enable aarch64-darwin build 2021-06-01 09:45:14 +02:00
flake.nix Include aarch64-darwin in installer 2021-06-01 09:48:35 +02:00
local.mk Remove 'dist' target 2020-12-03 16:17:58 +01:00
Makefile Move command plugin interface to libnixcmd 2021-01-26 06:22:24 -05:00
Makefile.config.in Drop libbz2 / zlib / lzma dependency + style fixes 2021-04-15 13:55:22 +02:00
precompiled-headers.h Config: Use nlohmann/json 2020-08-20 11:02:16 +02:00
README.md throw freenode down the memory hole 2021-05-27 21:48:39 +02:00
shell.nix Add back flake-compat shell.nix 2020-07-17 14:58:59 +00:00

Nix

Open Collective supporters Test

Nix is a powerful package manager for Linux and other Unix systems that makes package management reliable and reproducible. Please refer to the Nix manual for more details.

Installation

On Linux and macOS the easiest way to install Nix is to run the following shell command (as a user other than root):

$ curl -L https://nixos.org/nix/install | sh

Information on additional installation methods is available on the Nix download page.

Building And Developing

See our Hacking guide in our manual for instruction on how to build nix from source with nix-build or how to get a development environment.

Additional Resources

License

Nix is released under the LGPL v2.1.