Bold marked applicable changelog entries:
- Support extended attributes (xattr) in forward mode<Paste>
- Add -fsck function
- Fix several symlink race attacks
- Use memory pools for buffer handling
- Parallelize file content encryption
- Use HKDF to derive separate keys for GCM and EME
* treewide: http -> https sources
This updates the source urls of all top-level packages from http to
https where possible.
* buildtorrent: fix url and tab -> spaces
This swaps the fetchgit call to be more consistent with the majority of other
NixPkgs fetchgit calls. Moreover, almost every network will be able to do HTTPS,
while some enterprise networks may limit external SSH access.
Semi-automatic update generated by https://github.com/ryantm/nixpkgs-update tools.
This update was made based on information from https://repology.org/metapackage/e2fsprogs/versions.
These checks were done:
- built on NixOS
- Warning: no invocation of /nix/store/3c5r4b2a5cb6cpwr73ahrr03v965hhbg-e2fsprogs-1.44.2-bin/bin/chattr had a zero exit code or showed the expected version
- /nix/store/3c5r4b2a5cb6cpwr73ahrr03v965hhbg-e2fsprogs-1.44.2-bin/bin/lsattr passed the binary check.
- Warning: no invocation of /nix/store/3c5r4b2a5cb6cpwr73ahrr03v965hhbg-e2fsprogs-1.44.2-bin/bin/compile_et had a zero exit code or showed the expected version
- Warning: no invocation of /nix/store/3c5r4b2a5cb6cpwr73ahrr03v965hhbg-e2fsprogs-1.44.2-bin/bin/mk_cmds had a zero exit code or showed the expected version
- Warning: no invocation of /nix/store/3c5r4b2a5cb6cpwr73ahrr03v965hhbg-e2fsprogs-1.44.2-bin/bin/badblocks had a zero exit code or showed the expected version
- /nix/store/3c5r4b2a5cb6cpwr73ahrr03v965hhbg-e2fsprogs-1.44.2-bin/bin/debugfs passed the binary check.
- /nix/store/3c5r4b2a5cb6cpwr73ahrr03v965hhbg-e2fsprogs-1.44.2-bin/bin/dumpe2fs passed the binary check.
- Warning: no invocation of /nix/store/3c5r4b2a5cb6cpwr73ahrr03v965hhbg-e2fsprogs-1.44.2-bin/bin/e2freefrag had a zero exit code or showed the expected version
- /nix/store/3c5r4b2a5cb6cpwr73ahrr03v965hhbg-e2fsprogs-1.44.2-bin/bin/e2fsck passed the binary check.
- Warning: no invocation of /nix/store/3c5r4b2a5cb6cpwr73ahrr03v965hhbg-e2fsprogs-1.44.2-bin/bin/e2image had a zero exit code or showed the expected version
- Warning: no invocation of /nix/store/3c5r4b2a5cb6cpwr73ahrr03v965hhbg-e2fsprogs-1.44.2-bin/bin/e2label had a zero exit code or showed the expected version
- Warning: no invocation of /nix/store/3c5r4b2a5cb6cpwr73ahrr03v965hhbg-e2fsprogs-1.44.2-bin/bin/e2undo had a zero exit code or showed the expected version
- /nix/store/3c5r4b2a5cb6cpwr73ahrr03v965hhbg-e2fsprogs-1.44.2-bin/bin/e4crypt passed the binary check.
- Warning: no invocation of /nix/store/3c5r4b2a5cb6cpwr73ahrr03v965hhbg-e2fsprogs-1.44.2-bin/bin/e4defrag had a zero exit code or showed the expected version
- Warning: no invocation of /nix/store/3c5r4b2a5cb6cpwr73ahrr03v965hhbg-e2fsprogs-1.44.2-bin/bin/filefrag had a zero exit code or showed the expected version
- /nix/store/3c5r4b2a5cb6cpwr73ahrr03v965hhbg-e2fsprogs-1.44.2-bin/bin/fsck.ext2 passed the binary check.
- /nix/store/3c5r4b2a5cb6cpwr73ahrr03v965hhbg-e2fsprogs-1.44.2-bin/bin/fsck.ext3 passed the binary check.
- /nix/store/3c5r4b2a5cb6cpwr73ahrr03v965hhbg-e2fsprogs-1.44.2-bin/bin/fsck.ext4 passed the binary check.
- Warning: no invocation of /nix/store/3c5r4b2a5cb6cpwr73ahrr03v965hhbg-e2fsprogs-1.44.2-bin/bin/logsave had a zero exit code or showed the expected version
- /nix/store/3c5r4b2a5cb6cpwr73ahrr03v965hhbg-e2fsprogs-1.44.2-bin/bin/mke2fs passed the binary check.
- /nix/store/3c5r4b2a5cb6cpwr73ahrr03v965hhbg-e2fsprogs-1.44.2-bin/bin/mkfs.ext2 passed the binary check.
- /nix/store/3c5r4b2a5cb6cpwr73ahrr03v965hhbg-e2fsprogs-1.44.2-bin/bin/mkfs.ext3 passed the binary check.
- /nix/store/3c5r4b2a5cb6cpwr73ahrr03v965hhbg-e2fsprogs-1.44.2-bin/bin/mkfs.ext4 passed the binary check.
- Warning: no invocation of /nix/store/3c5r4b2a5cb6cpwr73ahrr03v965hhbg-e2fsprogs-1.44.2-bin/bin/mklost+found had a zero exit code or showed the expected version
- Warning: no invocation of /nix/store/3c5r4b2a5cb6cpwr73ahrr03v965hhbg-e2fsprogs-1.44.2-bin/bin/resize2fs had a zero exit code or showed the expected version
- Warning: no invocation of /nix/store/3c5r4b2a5cb6cpwr73ahrr03v965hhbg-e2fsprogs-1.44.2-bin/bin/tune2fs had a zero exit code or showed the expected version
- 12 of 26 passed binary check by having a zero exit code.
- 0 of 26 passed binary check by having the new version present in output.
- found 1.44.2 with grep in /nix/store/3c5r4b2a5cb6cpwr73ahrr03v965hhbg-e2fsprogs-1.44.2-bin
- directory tree listing: https://gist.github.com/78b13b077d5f9da29fc2b256af44e638
- du listing: https://gist.github.com/356acc8c1a54a78ab93172cac717d3d5
Semi-automatic update generated by https://github.com/ryantm/nixpkgs-update tools.
This update was made based on information from https://repology.org/metapackage/duperemove/versions.
These checks were done:
- built on NixOS
- Warning: no invocation of /nix/store/mcgis270lv4waah1f68insh0n8j7ja52-duperemove-0.11/bin/btrfs-extent-same had a zero exit code or showed the expected version
- /nix/store/mcgis270lv4waah1f68insh0n8j7ja52-duperemove-0.11/bin/duperemove passed the binary check.
- /nix/store/mcgis270lv4waah1f68insh0n8j7ja52-duperemove-0.11/bin/hashstats passed the binary check.
- /nix/store/mcgis270lv4waah1f68insh0n8j7ja52-duperemove-0.11/bin/show-shared-extents passed the binary check.
- 2 of 4 passed binary check by having a zero exit code.
- 2 of 4 passed binary check by having the new version present in output.
- found 0.11 with grep in /nix/store/mcgis270lv4waah1f68insh0n8j7ja52-duperemove-0.11
- directory tree listing: https://gist.github.com/0df1e551a8c77ca4dd4bb8f2783f75c4
- du listing: https://gist.github.com/4dc88fc1b6adba1caf3a67e67383c3c9
Without these patches, the output of mksquashfs is not reproducible.
The patches are taken from https://github.com/squashfskit/squashfskit,
a fork of squashfs-tools, licensed under the GPL2 or later like
squashfs-tools itself.
This reverts commit 6c182dd14d.
No reason to drop working code, for which there is no other alternative
(in this case, formatting/checking HFS+ filesystems).
Semi-automatic update generated by https://github.com/ryantm/nixpkgs-update tools.
This update was made based on information from https://repology.org/metapackage/encfs/versions.
These checks were done:
- built on NixOS
- ran ‘/nix/store/hyf73217fw2hx4kwkl7g2bg92rkabxlw-encfs-1.9.5/bin/encfs --version’ and found version 1.9.5
- ran ‘/nix/store/hyf73217fw2hx4kwkl7g2bg92rkabxlw-encfs-1.9.5/bin/encfsctl --version’ and found version 1.9.5
- found 1.9.5 with grep in /nix/store/hyf73217fw2hx4kwkl7g2bg92rkabxlw-encfs-1.9.5
- directory tree listing: https://gist.github.com/43f0591cfbd83d8f0ed7349f3b2cbec2
Semi-automatic update generated by https://github.com/ryantm/nixpkgs-update tools.
This update was made based on information from https://repology.org/metapackage/archivemount/versions.
These checks were done:
- built on NixOS
- ran `/nix/store/7dc19v4ibkd9a958mxrhbn8hi4dj6flw-archivemount-0.8.12/bin/archivemount -V` and found version 0.8.12
- ran `/nix/store/7dc19v4ibkd9a958mxrhbn8hi4dj6flw-archivemount-0.8.12/bin/archivemount --version` and found version 0.8.12
- found 0.8.12 with grep in /nix/store/7dc19v4ibkd9a958mxrhbn8hi4dj6flw-archivemount-0.8.12
- directory tree listing: https://gist.github.com/9f95a5aa5b6c354b2dd5db0351c8fb72
Uses the HTTPS url for cases where the existing URL has a permanent
redirect. For each domain, at least one fixed derivation URL was
downloaded to test the domain is properly serving downloads.
Also fixes jbake source URL, which was broken.
The ceph-mgr daemon needs to know the location of cephs own-made python modules for some of the modules
that you can enable for it.
With wrapProgram, a wrapper is added that sets the proper pythonpath environment variable for the ceph-mgr
daemon so its modules can find the ceph python modules
Semi-automatic update generated by https://github.com/ryantm/nix-update tools. These checks were done:
- built on NixOS
- ran `/nix/store/sn92kb7bgpg6arj6jfgg7yv78ap2fkll-archivemount-0.8.9/bin/archivemount -V` and found version 0.8.9
- ran `/nix/store/sn92kb7bgpg6arj6jfgg7yv78ap2fkll-archivemount-0.8.9/bin/archivemount --version` and found version 0.8.9
- found 0.8.9 with grep in /nix/store/sn92kb7bgpg6arj6jfgg7yv78ap2fkll-archivemount-0.8.9
Resolved the following conflicts (by carefully applying patches from the both
branches since the fork point):
pkgs/development/libraries/epoxy/default.nix
pkgs/development/libraries/gtk+/3.x.nix
pkgs/development/python-modules/asgiref/default.nix
pkgs/development/python-modules/daphne/default.nix
pkgs/os-specific/linux/systemd/default.nix
Semi-automatic update. These checks were performed:
- built on NixOS
- ran `/nix/store/frv798x9wv35ia6733bpwvq94w2mp9hm-reiser4progs-1.2.1/bin/debugfs.reiser4 -h` got 0 exit code
- ran `/nix/store/frv798x9wv35ia6733bpwvq94w2mp9hm-reiser4progs-1.2.1/bin/debugfs.reiser4 --help` got 0 exit code
- ran `/nix/store/frv798x9wv35ia6733bpwvq94w2mp9hm-reiser4progs-1.2.1/bin/debugfs.reiser4 -V` and found version 1.2.1
- ran `/nix/store/frv798x9wv35ia6733bpwvq94w2mp9hm-reiser4progs-1.2.1/bin/debugfs.reiser4 -v` and found version 1.2.1
- ran `/nix/store/frv798x9wv35ia6733bpwvq94w2mp9hm-reiser4progs-1.2.1/bin/debugfs.reiser4 --version` and found version 1.2.1
- ran `/nix/store/frv798x9wv35ia6733bpwvq94w2mp9hm-reiser4progs-1.2.1/bin/debugfs.reiser4 -h` and found version 1.2.1
- ran `/nix/store/frv798x9wv35ia6733bpwvq94w2mp9hm-reiser4progs-1.2.1/bin/debugfs.reiser4 --help` and found version 1.2.1
- ran `/nix/store/frv798x9wv35ia6733bpwvq94w2mp9hm-reiser4progs-1.2.1/bin/make_reiser4 -h` got 0 exit code
- ran `/nix/store/frv798x9wv35ia6733bpwvq94w2mp9hm-reiser4progs-1.2.1/bin/make_reiser4 --help` got 0 exit code
- ran `/nix/store/frv798x9wv35ia6733bpwvq94w2mp9hm-reiser4progs-1.2.1/bin/make_reiser4 -V` and found version 1.2.1
- ran `/nix/store/frv798x9wv35ia6733bpwvq94w2mp9hm-reiser4progs-1.2.1/bin/make_reiser4 -v` and found version 1.2.1
- ran `/nix/store/frv798x9wv35ia6733bpwvq94w2mp9hm-reiser4progs-1.2.1/bin/make_reiser4 --version` and found version 1.2.1
- ran `/nix/store/frv798x9wv35ia6733bpwvq94w2mp9hm-reiser4progs-1.2.1/bin/make_reiser4 -h` and found version 1.2.1
- ran `/nix/store/frv798x9wv35ia6733bpwvq94w2mp9hm-reiser4progs-1.2.1/bin/make_reiser4 --help` and found version 1.2.1
- ran `/nix/store/frv798x9wv35ia6733bpwvq94w2mp9hm-reiser4progs-1.2.1/bin/measurefs.reiser4 -h` got 0 exit code
- ran `/nix/store/frv798x9wv35ia6733bpwvq94w2mp9hm-reiser4progs-1.2.1/bin/measurefs.reiser4 --help` got 0 exit code
- ran `/nix/store/frv798x9wv35ia6733bpwvq94w2mp9hm-reiser4progs-1.2.1/bin/measurefs.reiser4 -V` and found version 1.2.1
- ran `/nix/store/frv798x9wv35ia6733bpwvq94w2mp9hm-reiser4progs-1.2.1/bin/measurefs.reiser4 -v` and found version 1.2.1
- ran `/nix/store/frv798x9wv35ia6733bpwvq94w2mp9hm-reiser4progs-1.2.1/bin/measurefs.reiser4 --version` and found version 1.2.1
- ran `/nix/store/frv798x9wv35ia6733bpwvq94w2mp9hm-reiser4progs-1.2.1/bin/measurefs.reiser4 -h` and found version 1.2.1
- ran `/nix/store/frv798x9wv35ia6733bpwvq94w2mp9hm-reiser4progs-1.2.1/bin/measurefs.reiser4 --help` and found version 1.2.1
- ran `/nix/store/frv798x9wv35ia6733bpwvq94w2mp9hm-reiser4progs-1.2.1/bin/mkfs.reiser4 -h` got 0 exit code
- ran `/nix/store/frv798x9wv35ia6733bpwvq94w2mp9hm-reiser4progs-1.2.1/bin/mkfs.reiser4 --help` got 0 exit code
- ran `/nix/store/frv798x9wv35ia6733bpwvq94w2mp9hm-reiser4progs-1.2.1/bin/mkfs.reiser4 -V` and found version 1.2.1
- ran `/nix/store/frv798x9wv35ia6733bpwvq94w2mp9hm-reiser4progs-1.2.1/bin/mkfs.reiser4 -v` and found version 1.2.1
- ran `/nix/store/frv798x9wv35ia6733bpwvq94w2mp9hm-reiser4progs-1.2.1/bin/mkfs.reiser4 --version` and found version 1.2.1
- ran `/nix/store/frv798x9wv35ia6733bpwvq94w2mp9hm-reiser4progs-1.2.1/bin/mkfs.reiser4 -h` and found version 1.2.1
- ran `/nix/store/frv798x9wv35ia6733bpwvq94w2mp9hm-reiser4progs-1.2.1/bin/mkfs.reiser4 --help` and found version 1.2.1
- found 1.2.1 with grep in /nix/store/frv798x9wv35ia6733bpwvq94w2mp9hm-reiser4progs-1.2.1
- found 1.2.1 in filename of file in /nix/store/frv798x9wv35ia6733bpwvq94w2mp9hm-reiser4progs-1.2.1
Semi-automatic update. These checks were performed:
- built on NixOS
- found 1.1.1 in filename of file in /nix/store/izfdcr9hld3rmcwcmvwfv9mc2pd414x3-zerofree-1.1.1
cc "@theuni"
Semi-automatic update. These checks were performed:
- built on NixOS
- ran `/nix/store/r1icgafqy02cz35kjkxr86hxj8mj1nyv-securefs-0.8.1/bin/securefs version` and found version 0.8.1
- found 0.8.1 with grep in /nix/store/r1icgafqy02cz35kjkxr86hxj8mj1nyv-securefs-0.8.1
- found 0.8.1 in filename of file in /nix/store/r1icgafqy02cz35kjkxr86hxj8mj1nyv-securefs-0.8.1
Semi-automatic update. These checks were performed:
- built on NixOS
- found 3.0.1 in filename of file in /nix/store/lwcvnbi1i9w8y84zi6b2g3ayqzzyxd0p-hubicfuse-3.0.1
cc "@jpierre03"
Semi-automatic update. These checks were performed:
- built on NixOS
- ran `/nix/store/cfhzvmll3rjhgrhl4ypv40ap726dlgh2-encfs-1.9.4/bin/encfs --version` and found version 1.9.4
- ran `/nix/store/cfhzvmll3rjhgrhl4ypv40ap726dlgh2-encfs-1.9.4/bin/encfsctl --version` and found version 1.9.4
- found 1.9.4 with grep in /nix/store/cfhzvmll3rjhgrhl4ypv40ap726dlgh2-encfs-1.9.4
- found 1.9.4 in filename of file in /nix/store/cfhzvmll3rjhgrhl4ypv40ap726dlgh2-encfs-1.9.4
Semi-automatic update. These checks were performed:
- built on NixOS
- ran `/nix/store/23glaba4yda3cyjixsxni52i2grvi799-btrfs-progs-4.15.1/bin/btrfs --help` got 0 exit code
- ran `/nix/store/23glaba4yda3cyjixsxni52i2grvi799-btrfs-progs-4.15.1/bin/btrfs help` got 0 exit code
- ran `/nix/store/23glaba4yda3cyjixsxni52i2grvi799-btrfs-progs-4.15.1/bin/btrfs --version` and found version 4.15.1
- ran `/nix/store/23glaba4yda3cyjixsxni52i2grvi799-btrfs-progs-4.15.1/bin/btrfs version` and found version 4.15.1
- ran `/nix/store/23glaba4yda3cyjixsxni52i2grvi799-btrfs-progs-4.15.1/bin/mkfs.btrfs --help` got 0 exit code
- ran `/nix/store/23glaba4yda3cyjixsxni52i2grvi799-btrfs-progs-4.15.1/bin/mkfs.btrfs -V` and found version 4.15.1
- ran `/nix/store/23glaba4yda3cyjixsxni52i2grvi799-btrfs-progs-4.15.1/bin/mkfs.btrfs --version` and found version 4.15.1
- ran `/nix/store/23glaba4yda3cyjixsxni52i2grvi799-btrfs-progs-4.15.1/bin/btrfs-debug-tree help` got 0 exit code
- ran `/nix/store/23glaba4yda3cyjixsxni52i2grvi799-btrfs-progs-4.15.1/bin/btrfs-image --help` got 0 exit code
- ran `/nix/store/23glaba4yda3cyjixsxni52i2grvi799-btrfs-progs-4.15.1/bin/btrfs-find-root --help` got 0 exit code
- ran `/nix/store/23glaba4yda3cyjixsxni52i2grvi799-btrfs-progs-4.15.1/bin/btrfstune --help` got 0 exit code
- ran `/nix/store/23glaba4yda3cyjixsxni52i2grvi799-btrfs-progs-4.15.1/bin/btrfs-convert --help` got 0 exit code
- ran `/nix/store/23glaba4yda3cyjixsxni52i2grvi799-btrfs-progs-4.15.1/bin/fsck.btrfs -h` got 0 exit code
- ran `/nix/store/23glaba4yda3cyjixsxni52i2grvi799-btrfs-progs-4.15.1/bin/fsck.btrfs --help` got 0 exit code
- found 4.15.1 with grep in /nix/store/23glaba4yda3cyjixsxni52i2grvi799-btrfs-progs-4.15.1
- found 4.15.1 in filename of file in /nix/store/23glaba4yda3cyjixsxni52i2grvi799-btrfs-progs-4.15.1
Semi-automatic update. These checks were performed:
- built on NixOS
- ran `/nix/store/56lvl3w77zgwsk1v618bklq10aq7fp17-bindfs-1.13.9/bin/bindfs -h` got 0 exit code
- ran `/nix/store/56lvl3w77zgwsk1v618bklq10aq7fp17-bindfs-1.13.9/bin/bindfs --help` got 0 exit code
- ran `/nix/store/56lvl3w77zgwsk1v618bklq10aq7fp17-bindfs-1.13.9/bin/bindfs -V` and found version 1.13.9
- ran `/nix/store/56lvl3w77zgwsk1v618bklq10aq7fp17-bindfs-1.13.9/bin/bindfs --version` and found version 1.13.9
- found 1.13.9 with grep in /nix/store/56lvl3w77zgwsk1v618bklq10aq7fp17-bindfs-1.13.9
With adding a patch that makes 2 absolute paths into 2 relative paths, ensuring the third-party libraries are available
in the python environment used and wrapping the python tools with wrapPrograms does so that the fixed ceph pkg can
compile and run as intended on NixOS.
- Update Ceph to last version
- Solve vulernatibility problem in the old version
- Patch rocksdb ceph rocksdb API
- Simplify a lot ceph build by switching to CMake
This Pull request require #34662 and #34661 to be effective
This continues #23374, which always kept around both attributes, by
always including both propagated files: `propgated-native-build-inputs`
and `propagated-build-inputs`. `nativePkgs` and `crossPkgs` are still
defined as before, however, so this change should only barely
observable.
This is an incremental step to fully keeping the dependencies separate
in all cases.
One should depend on
- `stdenv.cc.bintools`: for executables at build time
- `libbfd` or `libiberty`: for those libraries
- `targetPackages.cc.bintools`: for exectuables at *run* time
- `binutils`: only for specifically GNU Binutils's executables, regardless of
the host platform, at run time.
Netatalk 3.1.11 is the latest stable release. There is also a nasty bug
with netatalk < 3.1.11 (https://sourceforge.net/p/netatalk/bugs/636/)
that prevents using netatalk shares for time machine backups.
The biggest benefit is that we no longer have to update the registry
package. This means that just about any cargo package can be built by
nix. No longer does `cargo update` need to be feared because it will
update to packages newer then what is available in nixpkgs.
Instead of fetching the cargo registry this bundles all the source code
into a "vendor/" folder.
This also uses the new --frozen and --locked flags which is nice.
Currently cargo-vendor only provides binaries for Linux and
macOS 64-bit. This can be solved by building it for the other
architectures and uploading it somewhere (like the NixOS cache).
This also has the downside that it requires a change to everyone's deps
hash. And if the old one is used because it was cached it will fail to
build as it will attempt to use the old version. For this reason the
attribute has been renamed to `cargoSha256`.
Authors:
* Kevin Cox <kevincox@kevincox.ca>
* Jörg Thalheim <Mic92@users.noreply.github.com>
* zimbatm <zimbatm@zimbatm.com>
This requires some small changes in the stdenv, then working around the
weird choice LLVM made to hardcode @rpath in its install name, and then
lets us remove a ton of annoying workaround hacks in many of our Go
packages. With any luck this will mean less hackery going forward.
Changes:
* The patch `glusterfs-fix-unsubstituted-autoconf-macros` was deleted
because the issue was fixed upstream:
https://bugzilla.redhat.com/show_bug.cgi?id=1450588
* The `glusterd-ganesha.c` part of `glusterfs-use-PATH-instead-of-hardcodes`
was detleted because `glusterd-ganesha.c` was removed upstream
without replacement that has the relevant hardcoded paths.
Closes https://github.com/NixOS/nixpkgs/pull/29062
