mirror of
https://github.com/NixOS/nix.git
synced 2025-12-11 19:41:04 +01:00
Correct build-dir error in manual, link relevant settings
This fixes out-of-date information that is no longer true, and makes the
up-to-date information more accessible.
(cherry picked from commit c5fa5e503a)
This commit is contained in:
parent
5cbd7856de
commit
9a28460ab4
3 changed files with 7 additions and 2 deletions
|
|
@ -12,10 +12,11 @@
|
||||||
|
|
||||||
The [`builder`](./derivation/index.md#builder) is executed as follows:
|
The [`builder`](./derivation/index.md#builder) is executed as follows:
|
||||||
|
|
||||||
- A temporary directory is created under the directory specified by
|
- A temporary directory is created where the build will take place. The
|
||||||
`TMPDIR` (default `/tmp`) where the build will take place. The
|
|
||||||
current directory is changed to this directory.
|
current directory is changed to this directory.
|
||||||
|
|
||||||
|
See the per-store [`build-dir`](@docroot@/store/types/local-store.md#store-local-store-build-dir) setting for more information.
|
||||||
|
|
||||||
- The environment is cleared and set to the derivation attributes, as
|
- The environment is cleared and set to the derivation attributes, as
|
||||||
specified above.
|
specified above.
|
||||||
|
|
||||||
|
|
|
||||||
|
|
@ -776,6 +776,8 @@ public:
|
||||||
"build-dir",
|
"build-dir",
|
||||||
R"(
|
R"(
|
||||||
Override the `build-dir` store setting for all stores that have this setting.
|
Override the `build-dir` store setting for all stores that have this setting.
|
||||||
|
|
||||||
|
See also the per-store [`build-dir`](@docroot@/store/types/local-store.md#store-local-store-build-dir) setting.
|
||||||
)"};
|
)"};
|
||||||
|
|
||||||
Setting<PathSet> allowedImpureHostPrefixes{
|
Setting<PathSet> allowedImpureHostPrefixes{
|
||||||
|
|
|
||||||
|
|
@ -61,6 +61,8 @@ private:
|
||||||
> `build-dir` must not be set to a world-writable directory.
|
> `build-dir` must not be set to a world-writable directory.
|
||||||
> Placing temporary build directories in a world-writable place allows other users to access or modify build data that is currently in use.
|
> Placing temporary build directories in a world-writable place allows other users to access or modify build data that is currently in use.
|
||||||
> This alone is merely an impurity, but combined with another factor this has allowed malicious derivations to escape the build sandbox.
|
> This alone is merely an impurity, but combined with another factor this has allowed malicious derivations to escape the build sandbox.
|
||||||
|
|
||||||
|
See also the global [`build-dir`](@docroot@/command-ref/conf-file.md#conf-build-dir) setting.
|
||||||
)"};
|
)"};
|
||||||
public:
|
public:
|
||||||
Path getBuildDir() const;
|
Path getBuildDir() const;
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue