1
0
Fork 0
mirror of https://github.com/NixOS/nix synced 2025-06-25 02:21:16 +02:00
No description
Find a file
eldritch horrors 88b7db1ba4 libstore: Don't default build-dir to temp-dir, store setting
If a build directory is accessible to other users it is possible to
smuggle data in and out of build directories. Usually this is only
a build purity problem, but in combination with other issues it can
be used to break out of a build sandbox. to prevent this we default
to using a subdirectory of nixStateDir (which is more restrictive).

(cherry picked from pennae Lix commit 55b416f6897fb0d8a9315a530a9b7f0914458ded)
(store setting done by roberth)
2025-06-22 16:49:44 +02:00
.github Revert "Drop magic-nix-cache" 2025-06-18 18:06:24 +02:00
contrib function-trace: always show the trace 2019-09-18 23:23:21 +02:00
doc/manual libstore: Don't default build-dir to temp-dir, store setting 2025-06-22 16:49:44 +02:00
maintainers flake: Add meson formatter 2025-06-11 22:08:03 +00:00
misc libstore: Don't default build-dir to temp-dir, store setting 2025-06-22 16:49:44 +02:00
nix-meson-build-support flake: Add meson formatter 2025-06-11 22:08:03 +00:00
packaging Remove propagated-build-inputs when static 2025-05-26 21:54:19 -07:00
scripts Merge pull request #13245 from stefanboca/sb/push-yoorqzwsxmzn 2025-05-26 00:14:40 +02:00
src libstore: Don't default build-dir to temp-dir, store setting 2025-06-22 16:49:44 +02:00
tests libstore: Don't default build-dir to temp-dir, store setting 2025-06-22 16:49:44 +02:00
.clang-format Factor out lookupExecutable and other PATH improvments 2024-08-07 18:12:58 -04:00
.clang-tidy Add .clang-tidy 2024-02-01 01:01:39 +01:00
.dir-locals.el .dir-locals.el: Set c-block-comment-prefix 2020-07-10 11:21:06 +02:00
.editorconfig No global eval settings in libnixexpr 2024-06-24 12:15:16 -04:00
.gitignore Overriding gtest with gmock 2025-05-31 07:41:27 -07:00
.mergify.yml .mergify.yml: Add backport 2.29-maintenance entry 2025-05-14 19:59:22 -04:00
.shellcheckrc housekeeping: shellcheck for tests/functional/ca/build-cache.sh 2024-06-12 17:41:16 -04:00
.version Bump version 2025-05-14 19:59:22 -04:00
CITATION.cff chore: PhD thesis as reference in CITATION.cff 2024-05-18 20:05:22 +02:00
CONTRIBUTING.md Rename doc/manual{src -> source} 2024-10-14 11:21:24 -04:00
COPYING * Change this to LGPL to keep the government happy. 2006-04-25 16:41:06 +00:00
default.nix Format .nix files 2025-01-24 17:04:02 +01:00
docker.nix docker: expose config.Cmd as parameter 2025-06-16 08:16:39 +02:00
flake.lock flake.lock: Update 2025-05-15 11:31:34 +02:00
flake.nix docker: use callPackage, parametrise the image build 2025-06-12 19:50:31 +02:00
HACKING.md Rename doc/manual{src -> source} 2024-10-14 11:21:24 -04:00
meson.build Restore multiline formatting of lists in meson files 2025-06-20 23:12:36 +03:00
meson.format flake: Add meson formatter 2025-06-11 22:08:03 +00:00
meson.options flake: Add meson formatter 2025-06-11 22:08:03 +00:00
README.md fix(docs): update Matrix channel links 2025-05-04 12:17:48 +02:00
shell.nix Remove url literals 2022-01-24 13:28:21 +01:00

Nix

Open Collective supporters CI

Nix is a powerful package manager for Linux and other Unix systems that makes package management reliable and reproducible. Please refer to the Nix manual for more details.

Installation and first steps

Visit nix.dev for installation instructions and beginner tutorials.

Full reference documentation can be found in the Nix manual.

Building and developing

Follow instructions in the Nix reference manual to set up a development environment and build Nix from source.

Contributing

Check the contributing guide if you want to get involved with developing Nix.

Additional resources

Nix was created by Eelco Dolstra and developed as the subject of his PhD thesis The Purely Functional Software Deployment Model, published 2006. Today, a world-wide developer community contributes to Nix and the ecosystem that has grown around it.

License

Nix is released under the LGPL v2.1.