Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add buildDepend for gi-gst. #51

Closed
wants to merge 134 commits into from

Conversation

mdorman
Copy link

@mdorman mdorman commented Sep 7, 2016

Motivation for this change

Final fix for the gi-gst work.

Things done
  • Tested using sandboxing
    (nix.useSandbox on NixOS,
    or option build-use-sandbox in nix.conf
    on non-NixOS)
  • Built on platform(s)
    • NixOS
    • OS X
    • Linux
  • Tested compilation of all pkgs that depend on this change using nix-shell -p nox --run "nox-review wip"
  • Tested execution of all binary files (usually in ./result/bin/)
  • Fits CONTRIBUTING.md.

domenkozar and others added 30 commits September 1, 2016 21:30
(cherry picked from commit 8bedff0)
After making multiple outputs in the mesa_glu package the headers are
not included in the mesa attribute.  The attached patch puts them in it.

From ced24208a300bea8234e7898ae6fec34fbd67289 Mon Sep 17 00:00:00 2001
From: Karn Kallio <kkallio@skami.org>
Date: Thu, 1 Sep 2016 16:18:23 -0400
Subject: [PATCH] mesa: Add the mesa glu headers to the mesa attribute.

(cherry picked from commit 49d59ce)
(cherry picked from commit d6dbe43)
Signed-off-by: Domen Kožar <domen@dev.si>
(cherry picked from commit 29e1fb9)
Signed-off-by: Domen Kožar <domen@dev.si>
(cherry picked from commit 0bdec31)
Signed-off-by: Domen Kožar <domen@dev.si>
Fixes build on linux 4.7

(cherry picked from commit ce0043b)
These are now showing up as broken builds in Hydra since 2daefaf.
None of these compiled even in 16.03 and I think all of them are
for pretty obsolete hardware, so just mark them as broken.

(In principle the xorg generator could be made to ignore them but that
would be more work.)

(cherry picked from commit 79d673e)
This is a bugfix release in the 1.10 branch.
See https://docs.djangoproject.com/en/1.10/releases/1.10.1/

(cherry picked from commit d77e003)
* the default output for buildGoPackage is not "out" anymore
* go 1.7 has removed the linker flag deprecation which breaks packer's
  Makefile

(cherry picked from commit 511344a)
Signed-off-by: Domen Kožar <domen@dev.si>
(cherry picked from commit 7bc711e)

The old version is no longer available.
http://hydra.nixos.org/build/39411311

````
hh_shared.c:142:6: error: #error "hh_shared.c requires a architecture that supports memfd_create"
````
(cherry picked from commit adf471c)
… by using an older version of SQLite.

Mentioned in NixOS#18209 and NixOS#18083

(cherry picked from commit 89fc959)
(cherry picked from commit 01fafc0)
Fixes NixOS#18213. Also add a fast mirror; hopefully the URL is persistent.

(cherry picked from commit 9cd2b2b)
(cherry picked from commit 757975c)
In the pygobject package of pythonPackages the codegen python files are
executable and get wrapped, which causes pygtk to not build because it
uses the python program to execute them.  The attached patch makes them
not executable so they do not get wrapped and cause pygtk to fail its
build.

From 931b7998658fa72323c9a76e7b336fe726a9cc61 Mon Sep 17 00:00:00 2001
From: Karn Kallio <kkallio@skami.org>
Date: Fri, 2 Sep 2016 15:30:42 -0400
Subject: [PATCH] pygobject: prevent wrapping of codegen/*.py files.

(cherry picked from commit ce3daae)
Fixes:

````
ft_font.h:24:22: fatal error: ft2build.h: No such file or directory
````

Probably something propagated this previously.
dezgeg and others added 21 commits September 6, 2016 23:43
Use dev outputs explicitly since they aren't the first output since the
recent changes.

(cherry picked from commit c5e9049)
Actually this can be improved since the client only needs network
connectivity if it needs to renew the certificate.
Fixes the following security problems:

- CVE-2016-5147: Universal XSS in Blink
- CVE-2016-5148: Universal XSS in Blink
- CVE-2016-5149: Script injection in extensions
- CVE-2016-5150: Use after free in Blink
- CVE-2016-5151: Use after free in PDFium
- CVE-2016-5152: Heap overflow in PDFium
- CVE-2016-5153: Use after destruction in Blink
- CVE-2016-5154: Heap overflow in PDFium
- CVE-2016-5155: Address bar spoofing
- CVE-2016-5156: Use after free in event bindings
- CVE-2016-5157: Heap overflow in PDFium
- CVE-2016-5158: Heap overflow in PDFium
- CVE-2016-5159: Heap overflow in PDFium
- CVE-2016-5160: Extensions web accessible resources bypass
- CVE-2016-5161: Type confusion in Blink.
- CVE-2016-5162: Extensions web accessible resources bypass
- CVE-2016-5163: Address bar spoofing
- CVE-2016-5164: Universal XSS using DevTools
- CVE-2016-5165: Script injection in DevTools
- CVE-2016-5166: SMB Relay Attack via Save Page As
- CVE-2016-5167: Various fixes from internal audits, fuzzing and other initiatives

(cherry picked from commit 7949e69)
Fixes CVE-2016-7143 (certificate fingerprint spoofing through crafted
SASL messages).

(cherry picked from commit 5f6557d)
…time.h

(cherry picked from commit 71fe391)
Signed-off-by: Domen Kožar <domen@dev.si>
(cherry picked from commit 1fef999)
Signed-off-by: Domen Kožar <domen@dev.si>
(cherry picked from commit f2ddf2a)
Signed-off-by: Domen Kožar <domen@dev.si>
@ehmry: please have a look so that we can cherry-pick in release-16.09
and move forward on NixOS#18209

(cherry picked from commit 39e197a)
Signed-off-by: Domen Kožar <domen@dev.si>
Fixes NixOS#14910 and NixOS#18358

Deployed to an existing server, restarted sshd and polkit to verify
they don't fail.'

(cherry picked from commit 8f95e6f)
Signed-off-by: Domen Kožar <domen@dev.si>
The following doesn't seem to be quite right and I have missed this when
I was introducing qtkeychain in the first place:

-- Installing: /nix/store/...-qtkeychain-0.4.0/$out/share/qt/translations/qtkeychain_de.qm
-- Installing: /nix/store/...-qtkeychain-0.4.0/$out/share/qt/translations/qtkeychain_ro.qm

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
(cherry picked from commit da24fbd)
This way, stage-2 behaves correctly also for libvirt-lxc containers.

Some more discussion on this:
NixOS@a7a0818
NixOS@bfe46a6

(cherry picked from commit ab9537c)
This update was generated by hackage2nix v2.0.1-6-geb712e9 using the following inputs:

  - Hackage: commercialhaskell/all-cabal-hashes@306f478
  - LTS Haskell: commercialhaskell/lts-haskell@d7ece2d
  - Stackage Nightly: commercialhaskell/stackage-nightly@e911d6e
@peti
Copy link
Owner

peti commented Sep 8, 2016

Fixed by NixOS/cabal2nix@2231107. Thank you very much for your efforts!

@mdorman
Copy link
Author

mdorman commented Sep 8, 2016

Certainly a reasonable alternative. Thanks!

@mdorman mdorman deleted the gi-gst-build-depend branch September 8, 2016 17:20
@mdorman mdorman restored the gi-gst-build-depend branch September 8, 2016 21:02
peti added a commit to NixOS/cabal2nix that referenced this pull request Sep 10, 2016
@mdorman mdorman deleted the gi-gst-build-depend branch September 11, 2016 16:50
peti pushed a commit that referenced this pull request Jul 9, 2018
Semi-automatic update generated by https://github.com/ryantm/nixpkgs-update tools.

This update was made based on information from https://repology.org/metapackage/libskk/versions.

Version release notes (from GitHub):
 * Don't consume key release events [#52]
 * Improve hankaku katakana conversion [#51]
 * Use the same typing rule in dict-edit mode [#50]
 * Add `abort-to-latin` and `abort-to-latin-unhandled` command [#48]
 * Add more z-* shortcuts from DDSKK
 * Fix memory leak caused by Vala array conversion
 * Bump build requirements (glib >= 2.36, valadoc >= 0.40)

These checks were done:

- built on NixOS
- /nix/store/bdfn6ravpxm5qrgf8j9zfip4w98d76i9-libskk-1.0.4/bin/skk passed the binary check.
- 1 of 1 passed binary check by having a zero exit code.
- 0 of 1 passed binary check by having the new version present in output.
- found 1.0.4 with grep in /nix/store/bdfn6ravpxm5qrgf8j9zfip4w98d76i9-libskk-1.0.4
- directory tree listing: https://gist.github.com/5b1ab808d49b2ef79a30b2188305f5e4
- du listing: https://gist.github.com/3dc4ba1b5b8124a3ac41c17b89fb5260
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet