Commit Graph

241 Commits

Author SHA1 Message Date
Daiderd Jordan
5a02143c20
Merge pull request #33010 from LnL7/cacert-hook
cacert: add hook that sets SSL_CERT_FILE
2018-01-07 09:55:15 +01:00
Frederik Rietdijk
804285f589 Merge remote-tracking branch 'upstream/staging' into HEAD 2018-01-02 19:10:45 +01:00
John Ericson
046f091e0d treewide: Don't use envHook anymore
This commits needs a MAJOR audit as I oftentimes just guessed which of
`$hostOffset`, `$targetOffset`, or a fixed offset should be used.
2017-12-30 22:04:22 -05:00
Daiderd Jordan
091c2b9f04
cacert: cleanup exporting SSL_CERT_FILE 2017-12-27 21:36:32 +01:00
Ben Wolsieffer
23ffb9d701 go-1.8, go-1.9: use stdenv.shell instead of /usr/bin/env bash
Fixes tests on ARMv6/7 during sandboxed builds.
2017-12-23 20:20:08 -05:00
Orivej Desh
4a7a497fb6 go: add procps for sysctl in tests, print ulimits for debugging resource exhaustion 2017-12-02 12:19:14 +00:00
Orivej Desh
1161741351 Merge branch 'master' into staging
* master: (28 commits)
  go_1_9: skip flaky TestWaitGroupMisuse2
  erlangR18: fix patch hashes with fetchpatch
  xml2: replace dead links
  nixos/pam: fix docs about path to u2f_keys file
  cinelerra: add a note about parallel building
  msmtp: install docs and examples (#31769)
  kernel: Fix out-of-tree modules on aarch64
  nixos/tests/acme: update terms of service to fix test
  gixy: init at 0.1.8
  pythonPackages.ConfigArgParse: 0.9.3 -> 0.12.0, refactor, move to python-modules
  mono: init at 4.8
  wal-g: fix license so not to break evaluation
  wal-g: init at 0.1.2
  maintainers: add backuitist
  nixos/prometheus: Correct documentation for external_labels
  spidermonkey: replace broken links
  vagrant: removed custom rake gem
  vagrant: 2.0.0 -> 2.0.1
  nixos/prometheus: add external_labels option
  nixos/prometheus: add scrape_configs.honor_labels
  ...
2017-11-17 18:06:22 +00:00
Orivej Desh
73598e3787 go_1_9: skip flaky TestWaitGroupMisuse2
https://github.com/golang/go/issues/20072
https://hydra.nixos.org/build/64351217/nixlog/1
2017-11-17 18:05:30 +00:00
Orivej Desh
d99a2fc093 Merge branch 'master' into staging
* master: (293 commits)
  go_1_9: skip flaky TestServerCancelsReadTimeoutWhenIdle
  qsyncthingtray: fix build
  qt56.qtwebengine: fix build
  stdman: d860212 -> 2017.04.02
  jackett: use mono50
  hg-git: disable with python3
  hg-git: 0.8.5 -> 0.8.10
  xfce4-settings: enable parallel building
  gcc-snapshot: mark as broken
  heaptrack: 2017-02-14 -> 2017-10-30
  nixos-container: Modify existing test to cover show-ip command
  nixos-container: Make show-ip work together with ipv4 + netmask
  linux-copperhead: 4.13.12.a -> 4.13.13.a
  matterbridge: 1.1.0 -> 1.4.1
  nixos/nghttpx: add module for the nghttpx proxy server (#31680)
  mattermost: 4.3.0 -> 4.4.0
  breakpad: delete
  simp_le: 0.2.0 -> 0.6.1
  certbot: 0.11.1 -> 0.19.0
  afl: 2.51b -> 2.52b
  ...
2017-11-17 05:35:09 +00:00
Orivej Desh
3ac474aee6 go_1_9: skip flaky TestServerCancelsReadTimeoutWhenIdle
https://github.com/golang/go/issues/19608
https://hydra.nixos.org/build/64329767/nixlog/1
https://hydra.nixos.org/build/64244716/nixlog/1

Remove the patch for https://github.com/golang/go/issues/21559 because it is
skipped as flaky since Go 1.9.2.
2017-11-17 05:28:22 +00:00
Dan Peebles
7dc0cab794 Fix go bootstrap build on sandbox 2017-11-14 21:51:40 -05:00
adisbladis
df04f0cb63
go: 1.9.1 -> 1.9.2 2017-10-26 18:28:08 +08:00
adisbladis
1d1e0920d9
go: 1.8.4 -> 1.8.5 2017-10-26 18:27:57 +08:00
Orivej Desh
6b05fd71d2 Merge pull request #30101 from sigma/pr/go-1.9.1
go: 1.9 -> 1.9.1
2017-10-05 08:03:58 +00:00
Yann Hodique
ca685bb9a5 go: 1.9 -> 1.9.1 2017-10-04 14:44:34 -07:00
Yann Hodique
419d33305b go: 1.8.3 -> 1.8.4 2017-10-04 14:43:05 -07:00
Orivej Desh
8d4b0eefce go: declare support for aarch64 2017-10-01 21:33:28 +00:00
Orivej Desh
589574e5c9 go: fix tests and impurity 2017-09-28 10:21:17 +00:00
Daiderd Jordan
57ef1a3564
go: fix darwin build 2017-09-06 19:45:10 +02:00
Charles Strahan
3189b01647
go: init 1.9 (and set as default) 2017-09-05 16:44:13 -04:00
Eric Litak
723bd8b9c5 go: support for aarch64 via binary bootstrap 2017-08-11 23:02:20 +02:00
Robert Vollmert
f65b55d7ce go_1_6: Fix darwin (sierra) compile, backport systime syscall fix
This patches go1.6 minimally with a change that was backported
to upstream go1.4.
2017-07-08 00:44:45 +02:00
Daiderd Jordan
b9bea6b17f
go: disable tests on arm 2017-05-26 21:35:27 +02:00
Yann Hodique
c9e63ded80 go: 1.8.2 -> 1.8.3 2017-05-25 03:23:41 +02:00
Franz Pletz
760248360c Merge pull request #26050 from sigma/pr/go-1.8.2
go: 1.8.1 -> 1.8.2
2017-05-24 12:53:19 +02:00
Yann Hodique
ccfc81397b go: 1.8.1 -> 1.8.2 2017-05-24 01:30:39 -07:00
Yann Hodique
a69ae2c7f9 go: 1.7.5 -> 1.7.6 2017-05-24 01:18:56 -07:00
Willi Butz
458895db33
go: add dependencies for go get
go get expects git, subversion, mercurial and bazaar to be in PATH when
needed. (https://github.com/golang/go/wiki/GoGetTools)
2017-05-21 01:16:42 +02:00
Daiderd Jordan
0d6d47edd1 Merge pull request #25568 from sigma/pr/go-1.8.1
go: 1.8 -> 1.8.1
2017-05-09 18:44:12 +02:00
Yann Hodique
19ebff1d95 go: 1.7.4 -> 1.7.5 2017-05-08 13:14:46 +02:00
Yann Hodique
aa513180c5 go: 1.8 -> 1.8.1 2017-05-06 12:55:32 -07:00
Jörg Thalheim
36fca93290
rename iana_etc to iana-etc
fixes #23621
2017-03-28 22:35:15 +02:00
Daiderd Jordan
f36f21c650
go: Respect $NIX_SSL_CERT_FILE 2017-03-19 15:24:57 +01:00
Dan Peebles
2ffda66f11 go1.8: patch test to work with recent tzdata 2017-03-15 15:17:11 -04:00
Dan Peebles
e6a5ab85b4 go1.7: patch test to work with recent tzdata 2017-03-15 15:17:11 -04:00
Dan Peebles
08314598bb go1.6: patch test to work with recent tzdata 2017-03-15 15:17:11 -04:00
Dan Peebles
331f5a886d go1.4: patch test to work with recent tzdata 2017-03-15 15:17:11 -04:00
Parnell Springmeyer
8d6fbd0578
go: 1.7 -> 1.8 2017-03-06 08:47:50 -05:00
Daiderd Jordan
99f8e2c9cb
go_1_6: disable x509 tests on darwin 2017-01-22 02:03:50 +01:00
Daiderd Jordan
79a7729338
go_bootstrap: fix tests on darwin 2017-01-22 01:41:37 +01:00
Michael Raskin
5b1dad79cd go_1_6, go_1_7: comment out testLoadFixed in a way recommended by vcunat. The test depends on specific timezone names, and the latest tzdata changed the naming. Upstream only agrees to fix the test in the 1.8 branch that has no stable releases yer 2016-12-29 15:33:44 +01:00
Michael Raskin
581070147e go_bootstrap (go_1_4): 1.4.3 -> 1.4-bootstrap-20161024 2016-12-29 15:33:43 +01:00
Graham Christensen
3e1ad38909
go_bootstrap: Fix credential test for new user namespacing 2016-12-21 21:40:29 -05:00
Graham Christensen
adc2a8f648
Fix go_1_6 test
In a user namespace, sending credentials for an unmapped user return
EINVAL instead of EPERM. So handle that case.
2016-12-21 19:30:35 -05:00
Eelco Dolstra
45043abd2d
Fix go test
In a user namespace, sending credentials for an unmapped user return
EINVAL instead of EPERM. So handle that case.

http://hydra.nixos.org/build/44839000
(cherry picked from commit 1dd0fb6b5a7c44d1b632466f936ca74268d13298)
2016-12-21 19:30:34 -05:00
Daiderd Jordan
891e391cdb
go: 1.7.3 -> 1.7.4 2016-12-15 17:17:58 -05:00
Graham Christensen
503c57237f
go_1_6: 1.6.3 -> 1.6.4 for DoS vector 2016-12-15 17:17:58 -05:00
Pascal Bach
2ebe748113 go: 1.7.1 -> 1.7.3 2016-11-10 01:51:18 +01:00
Sheena Artrip
3e3a189cc6
go_1_7: make $out/bin a link to $GOROOT/share/go/bin 2016-10-10 00:10:05 -04:00
Daiderd Jordan
db7adbf69c
go: fix darwin build 2016-09-14 21:00:13 +02:00
Jaka Hudoklin
272c59a75b go_1_7: 1.7 -> 1.7.1 2016-09-11 20:22:17 +02:00
Eelco Dolstra
587348743c go: Remove unused version 2016-09-07 17:41:53 +02:00
Robin Gloster
f81b2da3d4
go_1_4: rename to go_bootstrap and remove refs
This has cgo disabled, so only use this for bootstrapping.
2016-08-29 01:48:55 +00:00
Robin Gloster
df935b01e7
go_1_5: remove 2016-08-29 01:44:55 +00:00
Franz Pletz
675848419e
go_1_5: set CGO_ENABLED=0 to cope with binutils 2.27 version bump
See 6eb4014874 and
https://github.com/golang/go/issues/16906.

cc @obadz @cstrahan @edolstra @lancelotsix @globin
2016-08-29 03:01:49 +02:00
Robin Gloster
e17bc25943
Merge remote-tracking branch 'upstream/master' into staging 2016-08-29 00:24:47 +00:00
Franz Pletz
ed0eb59cb5
go: remove unused expressions for 1.1, 1.2, 1.3 2016-08-28 16:08:03 +02:00
obadz
6eb4014874 go_1_4: set CGO_ENABLED=0 to cope with binutils 2.27 version bump
See also https://github.com/golang/go/issues/16906
cc @cstrahan @edolstra @lancelotsix @globin @fpletz
2016-08-28 13:29:44 +01:00
obadz
3de6e5be50 Merge branch 'master' into staging
Conflicts:
      pkgs/applications/misc/navit/default.nix
      pkgs/applications/networking/mailreaders/alpine/default.nix
      pkgs/applications/networking/mailreaders/realpine/default.nix
      pkgs/development/compilers/ghc/head.nix
      pkgs/development/libraries/openssl/default.nix
      pkgs/games/liquidwar/default.nix
      pkgs/games/spring/springlobby.nix
      pkgs/os-specific/linux/kernel/perf.nix
      pkgs/servers/sip/freeswitch/default.nix
      pkgs/tools/archivers/cromfs/default.nix
      pkgs/tools/graphics/plotutils/default.nix
2016-08-27 23:54:54 +01:00
Michael Stone
b9a4da47c0 go: fix on darwin, make go-1.7 build with clang-3.8. (#18001)
The darwin stdenv currently provides clang-3.7; however,

  a) go-1.7 currently expects a compiler that supports "-fdebug-prefix-map"
     arguments (which clang-3.8 supports but clang-3.7 does not) and

  b) even with clang-3.8, go-1.7 misinterprets the result of its runtime probes
     for support for the "-no-pie" flag, thereby failing to build runtime/cgo.

This patch resolves (a) by building go-1.7 with clang-3.8 and resolves (b) by
teaching go how to correctly probe "-no-pie" error messages from clang.
2016-08-26 07:36:06 +00:00
Franz Pletz
bd0b68f59a go_1_7: disable all hardening 2016-08-24 16:52:56 +02:00
obadz
78b7529ee3 Merge branch 'master' into staging 2016-08-24 11:57:44 +01:00
Alexander V. Nikolaev
800775e221 go: add 1.7 compiler 2016-08-21 21:20:07 +03:00
Robin Gloster
b7787d932e Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-08-12 09:46:53 +00:00
Domen Kožar
18c0be1b3a go: 1.6.2 -> 1.6.3 2016-08-11 16:34:34 +02:00
Robin Gloster
8031cba2ab Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-06-10 09:27:04 +00:00
rushmorem
0e262f52f3 go: v1.5.3 -> v1.5.4 2016-06-09 19:18:07 +02:00
Franz Pletz
f8d481754c
Merge remote-tracking branch 'origin/master' into hardened-stdenv 2016-05-18 17:10:02 +02:00
Vladimír Čunát
65a9fa8cdc Merge branch 'master' into staging 2016-05-08 21:24:48 +02:00
Charles Strahan
e965e42dc5 go: fix build on Darwin
The go tests get tripped up due to error messages along the lines of:

    ld: warning: /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation, ignoring unexpected dylib file

Which is due to us passing that along via $NIX_LDFLAGS in the `clang` wrapper.
To keep `go` from getting confused, I create a small `clang` wrapper that
filters out that warning.

Also, the strip.patch is no longer necessary, and only causes problems when
testing DWARF support:

    --- FAIL: TestDwarfAranges (0.59s)
        runtime-lldb_test.go:218: Missing aranges section
    FAIL
    FAIL    runtime 17.123s

Also, I disable the misc/cgo/errors test, as I suspect it is also due to similar
problems regarding `ld`:

    ##### ../misc/cgo/errors
    misc/cgo/errors/test.bash: BUG: expected error output to contain "err1.go:11:" but saw:
    # command-line-arguments
    cannot parse gcc output $WORK/command-line-arguments/_obj//_cgo_.o as ELF, Mach-O, PE object
    2016/05/07 02:07:58 Failed: exit status 1

Closes #14208
2016-05-06 22:34:16 -04:00
Robin Gloster
c92bca56f8 Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-05-02 22:58:02 +00:00
Nikolay Amiantov
5ff40ddedf add get* helper functions and mass-replace manual outputs search with them 2016-04-25 13:24:39 +03:00
Charles Strahan
0657ddca95 go: 1.6 -> 1.6.2 2016-04-23 00:39:17 -04:00
Robin Gloster
d020caa5b2 Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-04-18 13:49:22 +00:00
Vladimír Čunát
ab15a62c68 Merge branch 'master' into closure-size
Beware that stdenv doesn't build. It seems something more will be needed
than just resolution of merge conflicts.
2016-04-01 10:06:01 +02:00
Robin Gloster
f60c9df0ba Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-03-28 15:16:29 +00:00
Domen Kožar
b07e7bfc7b Merge remote-tracking branch 'origin/staging' 2016-03-27 13:19:04 +01:00
Charles Strahan
c18106a223 go-1.6: fix segfault when using musl
See https://github.com/golang/go/issues/14476
2016-03-23 18:14:02 -04:00
Charles Strahan
0547fd247f go-1.6: fix the build
One of the test scripts dynamically creates and executes a bash script,
which attempts to use `/usr/bin/env bash`. This patches the file to
use the stdenv's shell instead.

Otherwise, the only way this could have worked was by building go_1_6
outside of the sandbox.
2016-03-22 21:39:45 -04:00
Eelco Dolstra
a11a281071 go-1.4: Update binutils patch to handle i686-linux
http://hydra.nixos.org/build/32872391
2016-03-10 21:06:13 +01:00
Vladimír Čunát
09af15654f Merge master into closure-size
The kde-5 stuff still didn't merge well.
I hand-fixed what I saw, but there may be more problems.
2016-03-08 09:58:19 +01:00
Eelco Dolstra
ff69fc6fb9 go-1.4: Fix build against binutils 2.26
The go linker barfed on the new relocation types emitted by binutils
2.26.

https://github.com/golang/go/issues/13114
http://hydra.nixos.org/build/32554876
2016-03-07 13:03:31 +01:00
Franz Pletz
aff1f4ab94 Use general hardening flag toggle lists
The following parameters are now available:

  * hardeningDisable
    To disable specific hardening flags
  * hardeningEnable
    To enable specific hardening flags

Only the cc-wrapper supports this right now, but these may be reused by
other wrappers, builders or setup hooks.

cc-wrapper supports the following flags:

  * fortify
  * stackprotector
  * pie (disabled by default)
  * pic
  * strictoverflow
  * format
  * relro
  * bindnow
2016-03-05 18:55:26 +01:00
Robin Gloster
3477e662e6 Merge remote-tracking branch 'upstream/master' into hardened-stdenv 2016-02-27 00:08:08 +00:00
Graham Christensen
8132a5ae76 go-1.6: remove the cacert 1.5 patch
Removed in 58dbaf69b7
2016-02-26 12:32:33 -06:00
zimbatm
accc1f1484 go: 1.4: disable failing test in sandbox 2016-02-26 18:00:11 +00:00
zimbatm
58dbaf69b7 go: remove ssl certs patches
Those are not needed since we now use a standard location to store our
bundles.

See bfebc7342e
2016-02-26 17:58:58 +00:00
Robin Gloster
c677109fcd go_1_6: disable all hardening 2016-02-24 22:56:56 +00:00
Robin Gloster
bb2639aafc Merge branch 'curl-7.15-fixup' of https://github.com/zimbatm/nixpkgs into hardened-stdenv 2016-02-22 01:14:22 +00:00
Nathan Zadoks
673bc7f32a go: add 1.6 compiler and packages 2016-02-19 12:26:47 +01:00
Robin Gloster
179ae282e0 go_1_4: turn off all hardening 2016-02-07 19:59:43 +00:00
Robin Gloster
0516626101 go: turn off all hardening 2016-01-30 16:36:57 +00:00
Franz Pletz
c4537af1dc go: Disable stackprotector 2016-01-30 16:36:57 +00:00
Robin Gloster
f6d3b7a2ae switch hardening flags 2016-01-30 16:36:57 +00:00
Franz Pletz
954e9903ad Use a hardened stdenv by default 2016-01-30 16:36:57 +00:00
Vladimír Čunát
716aac2519 Merge branch 'staging' into closure-size 2016-01-19 09:55:31 +01:00
Nathan Zadoks
174221b744 go: 1.5.2 -> 1.5.3
This addresses CVE-2015-8618 (a vulnerability in math/big)
This issue can affect RSA computations in crypto/rsa, which is used by
crypto/tls. TLS servers on 32-bit systems could plausibly leak their RSA
private key due to this issue. Other protocol implementations that
create many RSA signatures could also be impacted in the same way.
https://groups.google.com/forum/#!topic/golang-dev/MEATuOi_ei4
2016-01-14 14:55:43 +01:00
Benjamin Staffin
212b83433d go1.5: Fix Darwin build by disabling a broken test (close #12075)
TestNohup appears to work on Darwin if the test suite is running
attached to a terminal, but not when Nix runs it.
2016-01-02 12:29:26 +01:00
Luca Bruno
5b0352a6a4 Merge branch 'master' into closure-size 2015-12-11 18:31:00 +01:00
zimbatm
8111e1c902 go: 1.5.1 -> 1.5.2, fixes #11498 2015-12-08 02:09:59 +01:00