Branch: refs/heads/release-17.03
  Home:   https://github.com/NixOS/nixpkgs
  Commit: 7e4d99d7da4d3b720b133bd87bb9c570a596fce5
      
https://github.com/NixOS/nixpkgs/commit/7e4d99d7da4d3b720b133bd87bb9c570a596fce5
  Author: Joachim Fasting <joach...@fastmail.fm>
  Date:   2017-03-29 (Wed, 29 Mar 2017)

  Changed paths:
    M nixos/modules/services/networking/dnscrypt-proxy.nix

  Log Message:
  -----------
  nixos/dnscrypt-proxy: get resolver list from github

The list has disappeared from its ordinary location at
download.dnscrypt.org.

(cherry picked from commit de15e7894b582efffceead81e437cd6992debb9f)


  Commit: 4030549d0113d3b2646b87f9176deafb0fcd7fe0
      
https://github.com/NixOS/nixpkgs/commit/4030549d0113d3b2646b87f9176deafb0fcd7fe0
  Author: Joachim Fasting <joach...@fastmail.fm>
  Date:   2017-03-29 (Wed, 29 Mar 2017)

  Changed paths:
    M nixos/modules/services/networking/dnscrypt-proxy.nix

  Log Message:
  -----------
  nixos/dnscrypt-proxy: log resolver list verification failure

Otherwise, the service unit just fails for no discernable
reason.  Verifcation failure is bad so it ought to be easily
discoverable.

(cherry picked from commit f122f0147bb0275bc4cb3eb5d62bbdb3ac34349f)


  Commit: de5d4dc14788bcf0c8e6ef8dd5d8f3500a568422
      
https://github.com/NixOS/nixpkgs/commit/de5d4dc14788bcf0c8e6ef8dd5d8f3500a568422
  Author: Joachim Fasting <joach...@fastmail.fm>
  Date:   2017-03-29 (Wed, 29 Mar 2017)

  Changed paths:
    M nixos/doc/manual/release-notes/rl-1703.xml

  Log Message:
  -----------
  rl-notes 17.03: add note about pre-NSS dnscrypt-proxy


  Commit: a26c5e5c43c36267643dc48458f5ffd61a478a1a
      
https://github.com/NixOS/nixpkgs/commit/a26c5e5c43c36267643dc48458f5ffd61a478a1a
  Author: Joachim Fasting <joach...@fastmail.fm>
  Date:   2017-03-29 (Wed, 29 Mar 2017)

  Changed paths:
    A pkgs/applications/networking/browsers/surf/webkit2.nix
    M pkgs/top-level/all-packages.nix

  Log Message:
  -----------
  surf-webkit2: init at 2017-03-06

(cherry picked from commit 69ce1ed5262be7427e46759b24f00381b73ba1fc)


  Commit: 6e04800f25514f3174291ee297649888f2b257fa
      
https://github.com/NixOS/nixpkgs/commit/6e04800f25514f3174291ee297649888f2b257fa
  Author: Joachim Fasting <joach...@fastmail.fm>
  Date:   2017-03-29 (Wed, 29 Mar 2017)

  Changed paths:
    M pkgs/applications/networking/browsers/surf/webkit2.nix

  Log Message:
  -----------
  surf-webkit2: 2017-03-06 -> 2017-03-22

Fixes a race condition

(cherry picked from commit 101cb04b6ae7be2fe7076223c104c725f9b74521)


  Commit: ed44bb70ec43ac610007aaeae0f9275f5a5b811a
      
https://github.com/NixOS/nixpkgs/commit/ed44bb70ec43ac610007aaeae0f9275f5a5b811a
  Author: Joachim Fasting <joach...@fastmail.fm>
  Date:   2017-03-29 (Wed, 29 Mar 2017)

  Changed paths:
    M pkgs/top-level/all-packages.nix

  Log Message:
  -----------
  torbrowser: callPackage can fill in missing params from xorg

(cherry picked from commit 116953ffc90ff09b00b0130defb52949e8d53392)


  Commit: 6dd07504236abf9f26c8fcdc120037b7c1bfa8ee
      
https://github.com/NixOS/nixpkgs/commit/6dd07504236abf9f26c8fcdc120037b7c1bfa8ee
  Author: Joachim Fasting <joach...@fastmail.fm>
  Date:   2017-03-29 (Wed, 29 Mar 2017)

  Changed paths:
    A pkgs/applications/networking/browsers/torbrowser/default.nix
    R pkgs/tools/security/tor/torbrowser.nix
    M pkgs/top-level/all-packages.nix

  Log Message:
  -----------
  torbrowser: reduce risk of stale Nix store references

This patch restructures the expression and wrapper to minimize Nix store
references captured by the user's state directory.

The previous version would write lots of references to the Nix store into
the user's state directory, resulting in synchronization issues between
the Store and the local state directory.  At best, this would cause TBB to
stop working when the version used to instantiate the local state was
garbage collected; at worst, a user would continue to use the old version
even after an upgrade.

To solve the issue, hard-code as much as possible at the Store side and
minimize the amount of stuff being copied into the local state dir.
Currently, only a few files generated at firefox startup and fontconfig
cache files end up capturing store paths; these files are simply removed
upon every startup.  Otherwise, no capture should occur and the user
should always be using the TBB associated with the tor-browser wrapper
script.

To check for stale Store paths, do
   `grep -Ero '/nix/store/[^/]+' ~/.local/share/tor-browser`
This command should *never* return any other store path than the one
associated with the current tor-browser wrapper script, even after an
update (assuming you've run tor-browser at least once after updating).
Deviations from this general rule are considered bugs from now on.

Note that no attempt has been made to support pluggable transports; they
are still broken with this patch (to be fixed in a follow-up patch).

User visible changes:
- Wrapper retains only environment variables required for TBB to work
- pulseaudioSupport can be toggled independently of mediaSupport (the
  latter weakly implies the former).
- Store local state under $TBB_HOME.  Defaults to $XDG_DATA_HOME/tor-browser
- Stop obnoxious first-run stuff (NoScript redirect, in particular)
- Set desktop item GenericName to Web Browser

Some minor enhancements:
- Disable Hydra builds
- Specify system -> source mapping to make it easier to
  extend supported platforms.

(cherry picked from commit ecd0e1a2c736a9a609cd820de0cb2861129482c3)


  Commit: e0e237ebaa02798b7edf85dd0e6ed11a13020696
      
https://github.com/NixOS/nixpkgs/commit/e0e237ebaa02798b7edf85dd0e6ed11a13020696
  Author: Joachim Fasting <joach...@fastmail.fm>
  Date:   2017-03-29 (Wed, 29 Mar 2017)

  Changed paths:
    M pkgs/applications/networking/browsers/torbrowser/default.nix

  Log Message:
  -----------
  torbrowser: correct internal note about geoip

(cherry picked from commit 2ad44935f1bf545a97104c5e2430eb296d8e5686)


  Commit: 2c310a86ca2c6ae22b0bbe341ac94298e756fc2d
      
https://github.com/NixOS/nixpkgs/commit/2c310a86ca2c6ae22b0bbe341ac94298e756fc2d
  Author: Joachim Fasting <joach...@fastmail.fm>
  Date:   2017-03-29 (Wed, 29 Mar 2017)

  Changed paths:
    M pkgs/applications/networking/browsers/torbrowser/default.nix

  Log Message:
  -----------
  torbrowser: hard-code path to wrapper in desktop file

(cherry picked from commit f2cf8ffdcb4b117102b337417151b6e1178aaef7)


  Commit: 3d3728902332674c4a08790724141ca0e9bd7779
      
https://github.com/NixOS/nixpkgs/commit/3d3728902332674c4a08790724141ca0e9bd7779
  Author: Joachim Fasting <joach...@fastmail.fm>
  Date:   2017-03-29 (Wed, 29 Mar 2017)

  Changed paths:
    M pkgs/applications/networking/browsers/torbrowser/default.nix

  Log Message:
  -----------
  torbrowser: support obfs and fte transports

meek still broken, but then, sending all your traffic to Amazon seems like
something you'd do only if everything else fails.

(cherry picked from commit 6911ae7c0c688f85eb513e5f12c8452f87bd1070)


Compare: https://github.com/NixOS/nixpkgs/compare/743dbcc888dd...3d3728902332
_______________________________________________
nix-commits mailing list
nix-comm...@lists.science.uu.nl
http://lists.science.uu.nl/mailman/listinfo/nix-commits

Reply via email to