summaryrefslogtreecommitdiff
path: root/nix
AgeCommit message (Expand)AuthorFilesLines
2025-06-01daemon: Fix build failure with gcc@15.wrobell2-2/+3
2025-05-28daemon: Remove ‘AutoDeleteArray’.Congcong Kuo3-26/+12
2025-05-25daemon: Remove ‘defined’ in macro definition.Congcong Kuo1-2/+11
2025-05-14build: Fix substitutions for .service files.Ludovic Courtès1-2/+3
2025-05-12daemon: Replace ‘random_shuffle’ with ‘shuffle’.Congcong Kuo1-1/+4
2025-04-25daemon: Use the guest GID in /etc/group.Ludovic Courtès1-1/+1
2025-04-14daemon: Catch SIGINT, SIGTERM, and SIGHUP for proper termination.Ludovic Courtès1-0/+22
2025-04-11daemon: Do not make chroot root directory read-only.Ludovic Courtès1-11/+25
2025-03-26daemon: Move comments where they belong.Ludovic Courtès1-6/+7
2025-03-26daemon: Drop Linux ambient capabilities before executing builder.Ludovic Courtès1-0/+9
2025-03-26daemon: Create /var/guix/profiles/per-user unconditionally.Ludovic Courtès1-4/+4
2025-03-26daemon: Allow running as non-root with unprivileged user namespaces.Ludovic Courtès2-31/+174
2025-03-26daemon: Remount root directory as read-only.Ludovic Courtès1-0/+16
2025-03-26daemon: Remount inputs as read-only.Ludovic Courtès1-0/+7
2025-03-26daemon: Bind-mount all the inputs, not just directories.Ludovic Courtès1-25/+14
2025-03-26daemon: Bind-mount /etc/nsswitch.conf & co. only if it exists.Ludovic Courtès1-4/+5
2025-03-26daemon: Close the read end of the logging pipe.Ludovic Courtès1-0/+3
2025-03-26daemon: Use ‘close_range’ where available.Ludovic Courtès1-6/+17
2025-03-02nix: Install guix-gc systemd timer.Efraim Flashner1-3/+9
2025-03-02Revert "nix: Install guix-gc systemd timer."Efraim Flashner1-2/+1
2025-02-26nix: Install guix-gc systemd timer.Efraim Flashner1-1/+2
2024-12-30daemon: Explicitly unlock output path in the has-become-valid case.Reepca Russelstein1-0/+2
2024-12-09daemon: Fix linking gcrypt when --as-needed linker arg is usedDoğan Çeçen1-2/+6
2024-11-17daemon: Improve error message in ‘checkStoreName’.Brennan Vincent1-1/+1
2024-10-21daemon: Sanitize successful build outputs prior to exposing them.Reepca Russelstein1-9/+14
2024-10-21daemon: Sanitize failed build outputs prior to exposing them.Reepca Russelstein1-1/+35
2024-06-26etc: Add explicit ‘--substitute-urls’ in guix-daemon service files.Ludovic Courtès1-7/+10
2024-05-13daemon: Loop over ‘copy_file_range’ upon short writes.Ludovic Courtès1-3/+8
2024-03-12daemon: Address shortcoming in previous security fix for CVE-2024-27297.Ludovic Courtès3-8/+14
2024-03-11daemon: Protect against FD escape when building fixed-output derivations (CVE...Ludovic Courtès3-5/+129
2024-01-05daemon: Change default ‘timeout’ and ‘max-silent-time’ values.Ludovic Courtès1-2/+2
2023-12-17daemon: Fix my own whitespace errors.Tobias Geerinckx-Rice1-5/+5
2023-12-10daemon: Sacrifice builders on OOM.Tobias Geerinckx-Rice1-0/+6
2023-12-11daemon: Implement ‘substitute-urls’ RPC.Ludovic Courtès2-2/+20
2023-12-04daemon: Simplify “empty status” substitute error message.Ludovic Courtès1-2/+2
2023-09-24Revert "build: Add missing guix-gc.timer file to binary tarball."Tobias Geerinckx-Rice1-3/+2
2023-09-26daemon: Add “git-download” built-in builder.Ludovic Courtès1-2/+3
2023-09-09daemon: Fix build with GCC 13.Sören Tempel1-0/+1
2023-08-31build: Add missing guix-gc.timer file to binary tarball.Maxim Cournoyer1-2/+3
2023-01-09daemon: Improve error message for wrong hash sizes.Ludovic Courtès1-2/+5
2022-12-18daemon: Make "opening file" error messages distinguishable.Ludovic Courtès3-4/+4
2022-10-17Revert "nix: Guard against removing temporary roots of living processes."Ludovic Courtès1-5/+4
2022-10-07nix: Guard against removing temporary roots of living processes.Ludovic Courtès1-4/+5
2022-09-11daemon: Remove unused function findOutput.Maxime Devos2-12/+0
2022-09-11daemon: Remove unused function exportPaths.Maxime Devos2-18/+0
2022-09-11daemon: Remove unused function openStore.Maxime Devos2-11/+0
2022-06-05daemon: Quote consistently within a string.Tobias Geerinckx-Rice1-1/+1
2022-05-29daemon: Clarify ‘--check’ error when outputs are missing.Tobias Geerinckx-Rice1-1/+1
2022-05-18daemon: runChild() is forbidden to talk during environment set upyarl-baudig@mailoo.org1-1/+0
2022-04-14daemon: Support systemd-style socket activation.Ludovic Courtès1-5/+37