max/nix-super
1
0
Fork 0
mirror of https://github.com/privatevoid-net/nix-super.git synced 2024-11-10 08:16:15 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions
nix-super/Makefile.am

57 lines
2 KiB
Text
Raw Normal View History

* A Nix mode for Emacs.
2004-06-04 17:31:57 +03:00
SUBDIRS = externals src scripts corepkgs doc misc tests
* Added a global configuration file (/nix/etc/nix/nix.conf). It contains options for the garbage collector right now, but other stuff can be added here later.
2005-02-01 22:53:14 +02:00
EXTRA_DIST = substitute.mk nix.spec nix.spec.in bootstrap.sh \
* Check for w3m.
2005-09-15 18:21:57 +03:00
svn-revision nix.conf.example NEWS
* RPM spec file. * Respect DESTDIR variable.
2003-12-30 22:09:00 +02:00
* Generate RPM spec file.
2004-01-02 18:04:53 +02:00
include ./substitute.mk
nix.spec: nix.spec.in
rpm: nix.spec dist
* Add $prefix/store to the RPM. * Allow extra flags to be passed to RPM.
2004-01-02 16:58:25 +02:00
rpm $(EXTRA_RPM_FLAGS) -ta $(distdir).tar.gz
* Explicitly compute the release name.
2004-01-22 15:04:57 +02:00
relname:
echo -n $(distdir) > relname
* Do initialise state (the DB etc.) when doing a `make install', unless `--disable-init-state' is passed to configure.
2004-04-21 13:54:46 +03:00
install-data-local: init-state
* Added a global configuration file (/nix/etc/nix/nix.conf). It contains options for the garbage collector right now, but other stuff can be added here later.
2005-02-01 22:53:14 +02:00
$(INSTALL) -d $(DESTDIR)$(sysconfdir)/nix
* Support for srcdir != builddir (NIX-41).
2006-05-12 14:47:45 +03:00
$(INSTALL_DATA) $(srcdir)/nix.conf.example $(DESTDIR)$(sysconfdir)/nix
* Added a global configuration file (/nix/etc/nix/nix.conf). It contains options for the garbage collector right now, but other stuff can be added here later.
2005-02-01 22:53:14 +02:00
if ! test -e $(DESTDIR)$(sysconfdir)/nix/nix.conf; then \
* Support for srcdir != builddir (NIX-41).
2006-05-12 14:47:45 +03:00
$(INSTALL_DATA) $(srcdir)/nix.conf.example $(DESTDIR)$(sysconfdir)/nix/nix.conf; \
* Added a global configuration file (/nix/etc/nix/nix.conf). It contains options for the garbage collector right now, but other stuff can be added here later.
2005-02-01 22:53:14 +02:00
fi
* Install documentation in $(docdir) (i.e. share/doc/nix).
2008-11-19 15:19:09 +02:00
$(INSTALL) -d $(DESTDIR)$(docdir)
$(INSTALL_DATA) README $(DESTDIR)$(docdir)/
* Do initialise state (the DB etc.) when doing a `make install', unless `--disable-init-state' is passed to configure.
2004-04-21 13:54:46 +03:00
if INIT_STATE
* Remove --enable-setuid, --with-nix-user and --with-nix-group. Rather, setuid support is now always compiled in (at least on platforms that have the setresuid system call, e.g., Linux and FreeBSD), but it must enabled by chowning/chmodding the Nix binaries.
2006-11-29 23:06:58 +02:00
# For setuid operation, you can enable the following:
# INIT_FLAGS = -g @NIX_GROUP@ -o @NIX_USER@
# GROUP_WRITABLE = -m 775
* Do initialise state (the DB etc.) when doing a `make install', unless `--disable-init-state' is passed to configure.
2004-04-21 13:54:46 +03:00
init-state:
* Setuid support for sharing a Nix installation between multiple users. If the configure flag `--enable-setuid' is used, the Nix programs nix-env, nix-store, etc. are installed with the setuid bit turned on so that they are executed as the user and group specified by `--with-nix-user=USER' and `--with-nix-group=GROUP', respectively (with defaults `nix' and `nix'). The setuid programs drop all special privileges if they are executed by a user who is not a member of the Nix group. The setuid feature is a quick hack to enable sharing of a Nix installation between users who trust each other. It is not generally secure, since any user in the Nix group can modify (by building an appropriate derivation) any object in the store, and for instance inject trojans into binaries used by other users. The setuid programs are owned by root, not the Nix user. This is because on Unix normal users cannot change the real uid, only the effective uid. Many programs don't work properly when the real uid differs from the effective uid. For instance, Perl will turn on taint mode. However, the setuid programs drop all root privileges immediately, changing all uids and gids to the Nix user and group.
2004-08-20 17:49:05 +03:00
$(INSTALL) $(INIT_FLAGS) -d $(DESTDIR)$(localstatedir)/nix
$(INSTALL) $(INIT_FLAGS) -d $(DESTDIR)$(localstatedir)/nix/db
$(INSTALL) $(INIT_FLAGS) -d $(DESTDIR)$(localstatedir)/log/nix
* Put build logs in $prefix/var/nix/log/drvs/.
2005-02-17 15:54:45 +02:00
$(INSTALL) $(INIT_FLAGS) -d $(DESTDIR)$(localstatedir)/log/nix/drvs
* Setuid support for sharing a Nix installation between multiple users. If the configure flag `--enable-setuid' is used, the Nix programs nix-env, nix-store, etc. are installed with the setuid bit turned on so that they are executed as the user and group specified by `--with-nix-user=USER' and `--with-nix-group=GROUP', respectively (with defaults `nix' and `nix'). The setuid programs drop all special privileges if they are executed by a user who is not a member of the Nix group. The setuid feature is a quick hack to enable sharing of a Nix installation between users who trust each other. It is not generally secure, since any user in the Nix group can modify (by building an appropriate derivation) any object in the store, and for instance inject trojans into binaries used by other users. The setuid programs are owned by root, not the Nix user. This is because on Unix normal users cannot change the real uid, only the effective uid. Many programs don't work properly when the real uid differs from the effective uid. For instance, Perl will turn on taint mode. However, the setuid programs drop all root privileges immediately, changing all uids and gids to the Nix user and group.
2004-08-20 17:49:05 +03:00
$(INSTALL) $(INIT_FLAGS) -d $(DESTDIR)$(localstatedir)/nix/profiles
$(INSTALL) $(INIT_FLAGS) -d $(DESTDIR)$(localstatedir)/nix/gcroots
* Start of concurrent garbage collection. Processes write temporary roots to a per-process temporary file in /nix/var/nix/temproots while holding a write lock on that file. The garbage collector acquires read locks on all those files, thus blocking further progress in other Nix processes, and reads the sets of temporary roots.
2005-01-31 12:27:25 +02:00
$(INSTALL) $(INIT_FLAGS) -d $(DESTDIR)$(localstatedir)/nix/temproots
* Register channels as roots of the garbage collector (in $(localstatedir)/nix/gcroots/channels). * In setuid installations, create gcroots/tmp and gcroots/channels group-writable.
2004-10-20 17:42:38 +03:00
$(INSTALL) $(INIT_FLAGS) $(GROUP_WRITABLE) -d $(DESTDIR)$(localstatedir)/nix/gcroots/tmp
$(INSTALL) $(INIT_FLAGS) $(GROUP_WRITABLE) -d $(DESTDIR)$(localstatedir)/nix/gcroots/channels
* nix-pull: using nix-prefetch-url (so that we get caching for free), and store the manifests in the Nix store. (So now /nix/var/nix/manifests/ just contains symlinks to the store and is searched for GC roots.)
2007-08-10 02:52:53 +03:00
ln -sfn $(localstatedir)/nix/profiles $(DESTDIR)$(localstatedir)/nix/gcroots/profiles
* Prevent uids from being used for more than one build simultaneously. We do this using exclusive locks on uid files in /nix/var/nix/userpool, e.g., /nix/var/nix/userpool/123 for uid 123.
2005-10-20 19:58:34 +03:00
$(INSTALL) $(INIT_FLAGS) -d $(DESTDIR)$(localstatedir)/nix/userpool
2008-11-20 18:06:13 +02:00
$(INSTALL) $(INIT_FLAGS) -m 1777 -d $(DESTDIR)$(storedir)
* Remove `prebuilts.conf' file, it's not like anybody was using it. * Add /nix/var/nix/manifests directory.
2004-12-16 16:31:49 +02:00
$(INSTALL) $(INIT_FLAGS) $(GROUP_WRITABLE) -d $(DESTDIR)$(localstatedir)/nix/manifests
* nix-pull: using nix-prefetch-url (so that we get caching for free), and store the manifests in the Nix store. (So now /nix/var/nix/manifests/ just contains symlinks to the store and is searched for GC roots.)
2007-08-10 02:52:53 +03:00
ln -sfn $(localstatedir)/nix/manifests $(DESTDIR)$(localstatedir)/nix/gcroots/manifests
* Remove --enable-setuid, --with-nix-user and --with-nix-group. Rather, setuid support is now always compiled in (at least on platforms that have the setresuid system call, e.g., Linux and FreeBSD), but it must enabled by chowning/chmodding the Nix binaries.
2006-11-29 23:06:58 +02:00
* Do initialise state (the DB etc.) when doing a `make install', unless `--disable-init-state' is passed to configure.
2004-04-21 13:54:46 +03:00
else
init-state:
* Look for GC roots in @localstatedir@/nix/gcroots.
2004-04-22 17:17:57 +03:00
endif
* Revert r1594 - it didn't solve the problem. Instead add svn-revision to distributions, which should fix it.
2004-10-25 16:51:34 +03:00
svn-revision:
svnversion . > svn-revision
* Check for w3m.
2005-09-15 18:21:57 +03:00
all-local: NEWS
* Update NEWS in the root directory properly.
2005-10-05 16:01:45 +03:00
NEWS: doc/manual/NEWS.txt
* Support for srcdir != builddir (NIX-41).
2006-05-12 14:47:45 +03:00
cp $(srcdir)/doc/manual/NEWS.txt NEWS
Reference in a new issue Copy permalink