puck 37b22dae04 Fix passing custom CA files into the builtin:fetchurl sandbox ... Without this, verifying TLS certificates would fail on macOS, as well as any system that doesn't have a certificate file at /etc/ssl/certs/ca-certificates.crt, which includes e.g. Fedora. Change-Id: Iaa2e0e9db3747645b5482c82e3e0e4e8f229f5f9		2024-09-26 15:25:28 +00:00
..
ca-fd-leak	Copy the output of fixed-output derivations before registering them	2024-03-07 01:44:58 +00:00
containers
coredumps	Allow enabling core dumps from builds for nix & child processes	2024-05-16 17:11:21 -07:00
fetch-git	treewide: Stop using URL literals	2024-08-17 15:48:10 +00:00
io_uring	libstore/build: block io_uring	2024-07-25 18:24:45 +02:00
no-new-privileges	libstore/build: always enable seccomp filtering and no-new-privileges	2024-05-24 21:19:29 +00:00
setuid	libstore/build: use an allowlist approach to syscall filtering	2024-07-25 18:24:40 +02:00
authorization.nix
broken-userns.nix	Fix /etc/group having desynced IDs from the actual UID in the sandbox	2024-05-04 17:36:50 -07:00
default.nix	[security] builtin:fetchurl: Enable TLS verification	2024-09-25 18:40:58 -07:00
fetchurl.nix	Fix passing custom CA files into the builtin:fetchurl sandbox	2024-09-26 15:25:28 +00:00
github-flakes.nix	Deprecate the online flake registries and vendor the default registry	2024-05-18 12:27:23 +10:00
nix-copy-closure.nix	make the multi-node vm tests a bit more reliable	2024-03-10 10:10:52 +01:00
nix-copy.nix	tests/nixos/nix-copy: fix NixOS >= 24.05 compatibility	2024-06-08 17:59:08 +02:00
nix-upgrade-nix.nix	nix3-upgrade-nix: always use the /new/ nix-env to perform the installation	2024-07-15 15:26:53 -06:00
nss-preload.nix	Merge pull request #9631 from cole-h/fixup-check-warnings	2024-03-07 09:58:15 +01:00
remote-builds-ssh-ng.nix	ssh-ng: Set log-fd for ssh to 4 by default	2024-04-26 19:04:06 +02:00
remote-builds.nix	make the multi-node vm tests a bit more reliable	2024-03-10 10:10:52 +01:00
sourcehut-flakes.nix	tests: unhaunt the flakes nixos tests	2024-04-18 20:09:19 +00:00
symlink-resolvconf.nix	libstore/build: set NO_NEW_PRIVS for the sandbox	2024-04-15 10:25:29 +03:00
tarball-flakes.nix	Reapply "libfetchers: make attribute / URL query handling consistent"	2024-08-01 15:41:30 -07:00
util.nix	Allow enabling core dumps from builds for nix & child processes	2024-05-16 17:11:21 -07:00