about summary refs log tree commit diff
path: root/pkgs/build-support
Commit message (Collapse)AuthorAge
* buildRustPackage: add `cargoHash` for SRI hashes of vendored depsDaniël de Kok2020-12-31
| | | | | | | | | `buildRustPackage` currently accepts `cargoSha256` as a hash for vendored dependencies. This change adds `cargoHash` which accepts SRI hashes, setting `outputHashAlgo` to `null`. The hash mismatch message still uses `cargoSha256` as an example, which it probably should until we completely switch to SRI hashes.
* buildFhsUserenv: don't downgrade root userJörg Thalheim2020-12-27
|
* autoPatchelf: add comment why ignore failing ldd/sedDavHau2020-12-25
|
* autoPatchelfHook: fix shellcheck errorsDavHau2020-12-25
|
* autoPatchelfHook: fix bug introduced by #101142DavHau2020-12-25
|
* Merge pull request #107507 from LibreCybernetics/add-zen-infoJohn Ericson2020-12-24
|\ | | | | lib.systems: update processor architecture info
| * lib.systems: update processor architecture infoFabián Heredia Montiel2020-12-23
| |
* | Merge pull request #107435 from flokli/gnats-cc-wrapper-format-unsupportedFlorian Klink2020-12-24
|\ \ | |/ |/| gnats: format hardened flag isn't supported
| * gnats: format hardened flag isn't supportedFlorian Klink2020-12-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When invoking a simple Ada program with `gcc` from `gnats10`, the following warnings are shown: ``` $ gcc -c conftest.adb gnat1: warning: command-line option ‘-Wformat=1’ is valid for C/C++/ObjC/ObjC++ but not for Ada gnat1: warning: command-line option ‘-Wformat-security’ is valid for C/C++/ObjC/ObjC++ but not for Ada gnat1: warning: ‘-Werror=’ argument ‘-Werror=format-security’ is not valid for Ada $ echo $? 0 ``` This is only spammy when compiling Ada programs inside a Nix derivation, but certain configure scripts (such as the ./configure script from the gcc that's built by coreboot's `make crossgcc` command) fail entirely when getting that warning output. https://nixos.wiki/wiki/Coreboot currently suggests manually running > NIX_HARDENING_ENABLE="${NIX_HARDENING_ENABLE/ format/}" make crossgcc … but actually teaching the nixpkgs-provided cc wrapper that `format` isn't supported as a hardening flag seems to be the more canonical way to do this in nixpgks. After this, Ada programs still compile: ``` $ gcc -c conftest.adb $ echo $? 0 ``` And the compiler output is empty.
* | Merge pull request #107284 from r3v2d0g/emacs-wrapper-nativecompadisbladis2020-12-23
|\ \ | |/ |/| emacs: replace 'emacs.nativeComp' in wrapper with 'nativeComp'
| * emacs: replace 'emacs.nativeComp' in wrapper with 'nativeComp'Matthieu Le brazidec (r3v2d0g)2020-12-20
| |
* | buildDunePackage: use dune install instead of opalinesternenseemann2020-12-21
|/
* tests.buildRustCrate: Fix after hashing method changeJohn Ericson2020-12-19
| | | | | | As @lopsided98 points out in #105305, since the hashes are now target sensative, and until we find reason to actually care to test what they are exactly, we are best just normalizing them away in the tests.
* make-initrd: various improvementsLinus Heckemann2020-12-17
| | | | | | | | | | | | | | | | | | - Generate a link to the initramfs file with an appropriate file extension, guessed based on the compressor by default - Use correct metadata in u-boot images if generated, up to now this was hardcoded to gzip and would silently generate an erroneous image if another compressor was specified - Document all the parameters - Improve cross-building compatibility, by allowing passing either a string as before, or a function taking a package set and returning the path to a compressor in the "compressor" argument of the function. - Support more compression algorithms - Place compressor executable function and arguments in passthru, for reuse when appending initramfses Co-Authored-By: Dominik Xaver Hörl <hoe.dom@gmx.de>
* makeInitrd: include dotfiles at rootLinus Heckemann2020-12-17
|
* makeInitrd: don't assume uImage => armLinus Heckemann2020-12-17
| | | | mips for example might use uImages too
* makeInitrd: make uinitrd behaviour optionalLinus Heckemann2020-12-17
|
* vm: Remove runInWindowsVM implementationaszlig2020-12-17
| | | | | | | | | | | | Originally this was meant to support other Windows versions than just Windows XP, but before I actually got a chance to implement this I left the project that I implemented this for. The code has been broken for years now and I highly doubt anyone is interested in resurrecting this (including me), so in order to make this less of a maintenance burden for everybody, let's remove it. Signed-off-by: aszlig <aszlig@nix.build>
* emacs: Fix accidental double wrappingadisbladis2020-12-17
| | | | This makeWrapper invocation found it's way back via a rebase.
* emacs: Add comp-eln-load-path infrastructureTad Fisher2020-12-16
|
* Merge pull request #105787 from danieldk/build-rust-crate-njobsDaniël de Kok2020-12-16
|\ | | | | buildRustCrate: set NUM_JOBS to NIX_BUILD_CORES
| * buildRustCrate: set NUM_JOBS to NIX_BUILD_CORESDaniël de Kok2020-12-03
| | | | | | | | | | | | | | | | | | | | | | | | Bofore this change, NUM_JOBS was set to 1. Some crates for building C/C++ code (e.g. the cc and cmake crates), rely on this variable to set the number of jobs. As a consequence, we were compiling embedded libraries serially. Change this to NIX_BUILD_CORES to permit parallel builds. Prior discussion: https://github.com/NixOS/nixpkgs/pull/50452#issuecomment-439407547
* | Merge pull request #106000 from Luis-Hebendanz/firefoxWrapperAddonSettingsLassulus2020-12-15
|\ \ | | | | | | firefox: wrapper updating an addon perserves addon settings
| * | firefox: wrapper updating an addon perserves addon settingsLuis Hebendanz2020-12-15
| | |
* | | dockerTools: use go.GOARCH as default archRobert Hensing2020-12-15
| | |
* | | dockerTools: normalize arch to GOARCHTerin Stock2020-12-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Docker (via containerd) and the the OCI Image Configuration imply and suggest, respectfully, that the architecture set in images matches those of GOARCH in the Go Language document. This changeset updates the implimentation of getArch in dockerTools to return GOARCH values, to satisfy Docker. Fixes: #106695
* | | emacsWithPackages: fix application wrapper on darwinMario Rodas2020-12-12
|/ /
* | Merge pull request #106321 from NixOS/staging-nextFrederik Rietdijk2020-12-11
|\ \ | | | | | | Staging next
| * \ Merge master into staging-nextgithub-actions[bot]2020-12-11
| |\ \
| * \ \ Merge master into staging-nextgithub-actions[bot]2020-12-09
| |\ \ \
| * \ \ \ Merge master into staging-nextgithub-actions[bot]2020-12-09
| |\ \ \ \
| * | | | | setup-hooks/strip: more robust strippingEmery Hemingway2020-12-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Use "find -exec" to strip rather than "find … | xargs …". The former ensures that stripping is attempted for each file, whereas the latter will stop stripping at the first failure. Unstripped files can fool runtime dependency detection and bloat closure sizes.
| * | | | | Merge pull request #105818 from ↵Anderson Torres2020-12-07
| |\ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | raboof/symlink-compressed-manpages-deterministically compress-man-pages: symlink compressed manpages deterministically
| | * | | | | compress-man-pages: symlink compressed manpages deterministicallyArnout Engelen2020-12-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | For example graphviz has chained symlinked manpages: dot2gxl.1 is a symlink to gv2gxl.1 which is a symlink to gxl2gv.1 The second loop replaces each non-compressed symlink to a compressed symlink. The target is determined with 'readlink -f', which follows links recursively until the first name that is not a link (so either the 'target name' or the first 'dangling' symlink). This means that if the loop converted dot2gxl.1 before converting gv2gxl.1 it would add a symlink `dot2gxl.1.gz->gxl2gv.1.gz`. When it converted gv2gxl.1 first, it would then add a `dot2gxl.1.gz->gv2gxl.1.gz` symlink. Both are 'correct', but it's weird the result depends on the order in which 'find' returns the files. This PR makes the behaviour deterministic. fixes #104708
| * | | | | | Merge staging-next into staginggithub-actions[bot]2020-12-07
| |\ \ \ \ \ \
| * \ \ \ \ \ \ Merge staging-next into staginggithub-actions[bot]2020-12-06
| |\ \ \ \ \ \ \
| * \ \ \ \ \ \ \ Merge staging-next into staginggithub-actions[bot]2020-12-05
| |\ \ \ \ \ \ \ \
| * \ \ \ \ \ \ \ \ Merge staging-next into staginggithub-actions[bot]2020-12-03
| |\ \ \ \ \ \ \ \ \
| * \ \ \ \ \ \ \ \ \ Merge pull request #101142 from DavHau/improve-autopatchelfFrederik Rietdijk2020-12-03
| |\ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | autoPatchelfHook: optimize performance; better error handling
| | * | | | | | | | | | improve things shellcheck complains aboutDavHau2020-11-07
| | | | | | | | | | | |
| | * | | | | | | | | | autoPatchelfHook: fix typos in commentsDavHau2020-10-26
| | | | | | | | | | | |
| | * | | | | | | | | | autoPatchelfHook: store dependant for dependencyDavHau2020-10-23
| | | | | | | | | | | |
| | * | | | | | | | | | autoPatchelfHook: print dependant for missing depsDavHau2020-10-23
| | | | | | | | | | | |
| | * | | | | | | | | | Apply suggestions from code reviewDavHau2020-10-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Co-authored-by: symphorien <symphorien@users.noreply.github.com> Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
| | * | | | | | | | | | autoPatchelfHook: optimize performance, better error handlingDavHau2020-10-20
| | | | | | | | | | | |
* | | | | | | | | | | | fetchMavenArtifact: fix generated urlRobert Hensing2020-12-11
| | | | | | | | | | | |
* | | | | | | | | | | | fetchMavenArtifact: switch mirrors to httpsRobert Hensing2020-12-11
| |_|_|_|_|_|_|_|_|/ / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Maven repositories are disabling HTTP support for security. Even though Nix adds some security with its own hash validation, broken mirrors are a, well, suboptimal experience. I don't know of any plans by sonatype, but it seems like a matter of time. https://www.lightbend.com/blog/lightbend-to-require-https-on-repos-starting-august-5-2020
* | | | | | | | | | | Merge pull request #106606 from alyssais/elpa-metaadisbladis2020-12-11
|\ \ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | emacsPackages.elpaBuild: pass through meta
| * | | | | | | | | | | emacsPackages.elpaBuild: pass through metaAlyssa Ross2020-12-10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Previously, meta wasn't being passed through at all, because it's removed from args without being used anywhere. This made it so that rcirc-menu wasn't being marked as broken even though it was supposed to be. This patch copies the meta handling from melpaBuild, including the default home page (adapted for ELPA).
* | | | | | | | | | | | Merge pull request #106608 from alyssais/melpa-homepageadisbladis2020-12-11
|\ \ \ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | emacsPackages.melpaPackages: HTTPS for homepages