Graham Christensen 6e9281be6d Disable suid and atime on the /nix mount point on Darwin ...

The Determinate Nix Installer has set nosuid and noatime in https://github.com/DeterminateSystems/nix-installer/pull/1338, and figured this perf and security improvement is worthy of upstreaming.

The /nix volume shouldn't have setuid binaries anyway, and filesystems seem to generally be noatime on macOS.
Further, the garbage collector doesn't use atime.

(cherry picked from commit 4137ead7a1)

2025-01-10 09:56:36 +00:00

..

bigsur-nixbld-user-migration.sh

Merge pull request #10919 from abathur/macos_sequoia_fixes

2024-09-03 19:55:55 -04:00

binary-tarball.nix

binary-tarball: create tarball without listing files

2024-12-14 15:24:51 +00:00

build-checks

speed up ci by splitting off eval and build

2024-12-14 15:24:50 +00:00

create-darwin-volume.sh

Disable suid and atime on the /nix mount point on Darwin

2025-01-10 09:56:36 +00:00

install-darwin-multi-user.sh

install-darwin: increment base UID by 1 (#15)

2024-08-26 11:59:58 -05:00

install-multi-user.sh

install-darwin: move nixbld gid to match first UID

2024-08-20 09:20:24 -05:00

install-nix-from-closure.sh

A setting to follow XDG Base Directory standard

2023-02-10 20:14:06 +04:00

install-systemd-multi-user.sh

fix: make sure directory exists before using ln

2024-10-31 16:25:18 +01:00

install.in

scripts/install.in: add riscv64 support to installer

2024-05-30 15:03:20 +02:00

installer.nix

Merge remote-tracking branch 'upstream/master' into package-nix

2023-12-11 15:26:12 -05:00

local.mk

Revert "Merge pull request #11804 from obsidiansystems/remove-old-make"

2024-11-07 13:46:37 +01:00

meson.build

Remove dead code in the Meson build system

2024-10-09 11:07:15 -04:00

nix-profile-daemon.fish.in

Fix loop over $NIX_PROFILES in nix-profile-daemon.fish.in

2024-03-20 15:23:31 +11:00

nix-profile-daemon.sh.in

nix-daemon.sh profile script: operate under set -u in bash

2024-08-15 17:56:05 -07:00

nix-profile.fish.in

Fix logic for default XDG_DATA_DIRS value

2023-11-07 03:41:19 +01:00

nix-profile.sh.in

nix-profile.sh.in: fix envvar condition

2024-09-19 07:20:04 +03:00

prepare-installer-for-github-actions

installer: make sure we can always test the installer in ci and locally

2025-01-07 00:05:18 +01:00

sequoia-nixbld-user-migration.sh

sequoia-nixbld-user-migration: halt on error

2024-09-11 08:56:53 -05:00

serve-installer-for-github-actions

installer: make sure we can always test the installer in ci and locally

2025-01-07 00:05:18 +01:00