Commit Graph

554 Commits

Author SHA1 Message Date
Ryan Mulligan
3c15ad14cf command line options refactoring
* additionalUpdates -> additional-updates
* additional-updates is optional
* new flag cachix enables pushing to Cachix
2020-02-17 21:40:04 -08:00
Ryan Mulligan
abb91e5ddf update copyright year 2020-02-17 20:34:03 -08:00
Ryan Mulligan
e77b8f3b70 README: reorganize development section 2020-02-17 20:33:19 -08:00
Ryan Mulligan
080e3886cc README: fix command to run when testing config 2020-02-17 19:36:49 -08:00
Ryan Mulligan
1fe09df52b README: add note about incremental building 2020-02-17 19:33:35 -08:00
Ryan Mulligan
ac9c6c09dc
Merge pull request #145 from bhipple/doc/setup
Readme: update getting started guide
2020-02-17 19:31:58 -08:00
Ryan Mulligan
294d06c8b5
Merge pull request #144 from bhipple/fix/error-msg
Don't swallow error msg on nix-env failures
2020-02-17 19:29:59 -08:00
Ryan Mulligan
78ba007150
Merge pull request #143 from bhipple/fix/overlays
Bugfix: overlays should be ignored when importing/running NixPkgs
2020-02-17 19:28:54 -08:00
Benjamin Hipple
d54d6e8135 Readme: update getting started guide
1. Mention that `hub` has to be setup first.

2. `nixpkgs-update` can now generate the JSON file on its own without needing the
   `repology-api` steps.

3. Mention that the `update` cmds require `--additionalUpdates`

4. Since the `nixpkgs-update.nix` file is taking `src = ./.;`, it tends to
   recompile everything on any change to something like the JSON file. It's
   probably better to just run `nix-build` once and then re-use the binary.
2020-02-17 19:23:13 -05:00
Benjamin Hipple
5db20465f4 Don't swallow error msg on nix-env failures
Debatable change, depending on how big the logfiles are and how you have your
server setup for rotation, so I sent it in its own PR.

When debugging https://github.com/ryantm/nixpkgs-update/issues/137#issuecomment-587161413
and #143, it would be been significantly faster if I had the error msg coming
out of nix-env.
2020-02-17 18:42:16 -05:00
Benjamin Hipple
da3ae9b7fa Bugfix: overlays should be ignored when importing/running NixPkgs
Normally this is run on a server without any overlays, but if a user is
developing/testing it locally there may be some which the bot is not able to
understand (e.g, Nix User Repository or emacs-overlay imports).

When NixPkgs is imported, if we explicitly pass overlays as an empty list, it
will not search the environment or the user's home directory for overlays in
impure.nix:
https://github.com/NixOS/nixpkgs/blob/master/pkgs/top-level/impure.nix
2020-02-17 18:38:14 -05:00
Ryan Mulligan
08fbdd6742 format all files with Ormolu 2020-02-09 09:29:32 -08:00
Ryan Mulligan
125c727800 add update command with --additionalUpdates switch 2020-02-09 09:13:46 -08:00
Ryan Mulligan
d1f4c1327f only use GC_INITIAL_HEAP_SIZE for outpaths 2020-02-08 15:24:37 -08:00
Ryan Mulligan
f5aa09c7f9 blacklist reposurgeon 2020-02-08 07:27:12 -08:00
Ryan Mulligan
bba263476e
Merge pull request #142 from Synthetica9/explicit-url
Explicitly specify source URL (fixes #140)
2020-02-06 21:04:15 -08:00
Patrick Hilhorst
35d8ab537a
Explicitly specify source URL (fixes #140) 2020-02-03 20:44:58 +01:00
Ryan Mulligan
e3cfbbdc89 Revert "try to stop waiting for ofBorg"
This reverts commit e26b367b55.
2020-01-30 21:07:54 -08:00
Ryan Mulligan
a6fd377407 speed up delete-done by only using one git command to delete all the branches 2020-01-25 17:34:57 -08:00
Ryan Mulligan
26d722e41a delete branches all at once 2020-01-25 16:39:29 -08:00
Ryan Mulligan
7cee8d561d rename update to update-list 2020-01-25 14:37:29 -08:00
Ryan Mulligan
e31db55949 blacklist gjs checks
closes #141
2020-01-21 05:59:13 -08:00
Ryan Mulligan
d58957768a print log file we are using 2020-01-19 15:39:44 -08:00
Ryan Mulligan
80e3f910d6 use current date in log filename 2020-01-19 15:17:42 -08:00
Ryan Mulligan
2de0ca244d integrate Repology fetching code 2020-01-19 15:13:28 -08:00
Ryan Mulligan
6b84b3d9b5 use LOGS_DIRECTORY for logs if set
fixes problem where on build01 systemd would delete the runtime
directory and the logs would be lost
2020-01-19 14:38:10 -08:00
Ryan Mulligan
3f559eb4c2 buffer stdout and stderr by line 2020-01-13 07:52:39 -08:00
Ryan Mulligan
1ee75c9b0e really fix hardcoded cache dir 2020-01-12 18:02:37 -08:00
Ryan Mulligan
2eae405c05 fix hardcoded reference to cache directory 2020-01-12 15:46:22 -08:00
Ryan Mulligan
df72830cd6 default.nix: expose returnShellEnv param and format 2020-01-12 14:57:51 -08:00
Ryan Mulligan
02e6ccfd26 improve documentation about Cachix downloads and trusted-users
closes #134
2020-01-01 21:21:26 -08:00
Ryan Mulligan
53f4d36689 log URLs of matched PRs
closes #135
2020-01-01 21:16:21 -08:00
Ryan Mulligan
64a512048a [CVE] add isuse relating to doas 2019-12-21 06:48:31 -08:00
Ryan Mulligan
9a395bdd48 [CVE] fix kanboard issue 2019-12-07 20:56:08 -08:00
Ryan Mulligan
c6f7aa5d5f [CVE] add TODO for cpeUpdatePresentAndNotPartOfVersion 2019-12-07 20:44:36 -08:00
Ryan Mulligan
42d01c92bb [CVE] resolve socat issue 2019-12-07 20:43:23 -08:00
Ryan Mulligan
1aa24ed735 [CVE] also try package names with - converted to _
This is something that Vulnix tries, so we should too.
2019-12-07 20:19:23 -08:00
Ryan Mulligan
e26b367b55 try to stop waiting for ofBorg
OfBorg is a lot different from when we started waiting for it. Let's
see if this breaks stuff. If it does we can revert it.
2019-12-07 20:19:00 -08:00
Ryan Mulligan
634699585a [CVE] Fix getCVE SQL query 2019-12-07 20:08:46 -08:00
Ryan Mulligan
c75a9b730d remove extra newline in PR message 2019-12-07 20:08:29 -08:00
Ryan Mulligan
4cffa2ae96 [CVE] search more CVE fields for the package name
Sometimes a package name might appear in other fields, so search these
ones too:

vendor,
edition,
software_edition, and
target_software.

The rational for this change is explained in the accompanied README
changes.
2019-12-07 14:36:42 -08:00
Ryan Mulligan
e8a2b6d054 spellcheck README 2019-12-07 14:22:28 -08:00
Ryan Mulligan
92926e0502 [CVE] document security report in readme 2019-12-07 14:17:05 -08:00
Ryan Mulligan
6a4c47b51c [CVE] remove experimental status of security report 2019-12-07 14:16:13 -08:00
Ryan Mulligan
fc9c340cb8 [CVE] add socat issue 2019-11-28 13:51:10 -08:00
Ryan Mulligan
27c59e4f46 [CVE] add issue for kanboard 2019-11-28 06:17:50 -08:00
Ryan Mulligan
403d6b8310 remove debug lines 2019-11-24 21:56:35 -08:00
Ryan Mulligan
fc4d20b8ca [CVE] fix CVENOTES merge resolution mistakes 2019-11-24 21:36:49 -08:00
Ryan Mulligan
65fcc8dc21 Merge branch 'cve' 2019-11-24 21:35:18 -08:00
Ryan Mulligan
4435e4912f [CVE] fix go issues, improve uzbl handling
Before it was going to always ignore certain uzbl CVEs, but now it
only ignores them if the version doesn't look like a date (start with
four numbers).
2019-11-24 16:16:29 -08:00