Skip to content
Snippets Groups Projects
  1. Sep 08, 2004
  2. Sep 06, 2004
  3. Aug 31, 2004
  4. Aug 30, 2004
  5. Aug 25, 2004
    • Eelco Dolstra's avatar
      * `--min-age' flag in nix-store and nix-collect-garbage to only delete · eb233e72
      Eelco Dolstra authored
        unreachable paths that haven't been used for N hours.  For instance,
        `nix-collect-garbage --min-age 168' only deletes paths that haven't
        been accessed in the last week.
      
        This is useful for instance in the build farm where many derivations
        can be shared between consecutive builds, and we wouldn't want a
        garbage collect to throw them all away.  We could of course register
        them as roots, but then we'd to unregister them at some point, which
        would be a pain to manage.  The `--min-age' flag gives us a sort of
        MRU caching scheme.
      
        BUG: this really shouldn't be in gc.cc since that violates
        mechanism/policy separation.
      eb233e72
    • Eelco Dolstra's avatar
      * `nix-collect-garbage' now actually performs a garbage collection, it · fdec72c6
      Eelco Dolstra authored
        doesn't just print the set of paths that should be deleted.  So
        there is no more need to pipe the result into `nix-store --delete'
        (which doesn't even exist anymore).
      fdec72c6
    • Eelco Dolstra's avatar
      * Put the garbage collector in nix-store: operation `--gc', · 81804788
      Eelco Dolstra authored
        suboperations `--print-live', `--print-dead', and `--delete'.  The
        roots are not determined by nix-store; they are read from standard
        input.  This is to make it easy to customise what the roots are.
      
        The collector now no longer fails when store expressions are missing
        (which legally happens when using substitutes).  It never tries to
        fetch paths through substitutes.
      
        TODO: acquire a global lock on the store while garbage collecting.
        
      * Removed `nix-store --delete'.
      
      81804788
  6. Aug 24, 2004
  7. Aug 20, 2004
    • Eelco Dolstra's avatar
      * The gid should also match. · 8f58733e
      Eelco Dolstra authored
      8f58733e
    • Eelco Dolstra's avatar
    • Eelco Dolstra's avatar
      * On systems that have the setresuid() and setresgid() system calls to · e77fbe0f
      Eelco Dolstra authored
        set the real uid and gid to the effective uid and gid, the Nix
        binaries can be installed as owned by the Nix user and group instead
        of root, so no root involvement of any kind is necessary.
      
        Linux and FreeBSD have these functions.
      e77fbe0f
    • Eelco Dolstra's avatar
      * Setuid support for sharing a Nix installation between multiple · 2d35116c
      Eelco Dolstra authored
        users.
      
        If the configure flag `--enable-setuid' is used, the Nix programs
        nix-env, nix-store, etc. are installed with the setuid bit turned on
        so that they are executed as the user and group specified by
        `--with-nix-user=USER' and `--with-nix-group=GROUP', respectively
        (with defaults `nix' and `nix').
      
        The setuid programs drop all special privileges if they are executed
        by a user who is not a member of the Nix group.
      
        The setuid feature is a quick hack to enable sharing of a Nix
        installation between users who trust each other.  It is not
        generally secure, since any user in the Nix group can modify (by
        building an appropriate derivation) any object in the store, and for
        instance inject trojans into binaries used by other users.
      
        The setuid programs are owned by root, not the Nix user.  This is
        because on Unix normal users cannot change the real uid, only the
        effective uid.  Many programs don't work properly when the real uid
        differs from the effective uid.  For instance, Perl will turn on
        taint mode.  However, the setuid programs drop all root privileges
        immediately, changing all uids and gids to the Nix user and group.
      
      2d35116c
  8. Aug 19, 2004
  9. Aug 18, 2004
  10. Aug 13, 2004
  11. Aug 11, 2004
  12. Aug 05, 2004
  13. Aug 04, 2004
  14. Jul 30, 2004
  15. Jul 28, 2004
  16. Jul 18, 2004
  17. Jul 09, 2004
  18. Jul 06, 2004
  19. Jul 01, 2004
  20. Jun 29, 2004
  21. Jun 28, 2004
Loading