Commit Graph

3645 Commits

Author SHA1 Message Date
29620df85e Passwords: check in constant time
The default password comparison logic does not use
constant time validation. Switching to constant time
offers a meager improvement by removing a timing
oracle.

A prepatory step in moving to Argon2id password storage, since we'll need this change anyway after
for validating existing passwords.

Co-authored-by: Graham Christensen <graham@grahamc.com>
2021-04-15 11:34:56 -04:00
d4d8f1ba1b Plugin::Authentication config: modernize
Some time in the last decade the plugin switched to preferring
a flatter namespace for realm config.

Co-authored-by: Graham Christensen <graham@grahamc.com>
2021-04-15 11:34:47 -04:00
0bee194ce9 Merge pull request #914 from Ma27/fix-remote-builds
Fix `std::bad_alloc` errors for remote builds
2021-04-15 17:05:54 +02:00
2808227eb7 Fix std::bad_alloc errors for remote builds
In Nix the protocol was slightly altered[1] to also contain more
information about realisations. This however wasn't read from the pipe
that was used to read from the store.

After the `cmdBuildDerivation` command which caused this issue, Hydra
will issue a `cmdQueryPathInfos` that tries to read from the remote
store as well. However, there's still left over to read from the
previous command and thus Nix fails to properly allocate the expected
string.

[1] See rev a2b69660a9b326b95d48bd222993c5225bbd5b5f

Fixes #898
2021-04-15 15:16:52 +02:00
b9bcedbfdb Merge pull request #596 from kquick/local_inp_url
Update prompt for Local path input to indicate a URL is also valid.
2021-04-14 20:01:58 +00:00
d2512e327c Merge pull request #912 from grahamc/test-notifications
Notifications: Test behavior of the queue runner
2021-04-14 18:35:44 +00:00
cf4434bc9f queue runner: test notifications
Especially, test the difference in behavior of substituted and unsubstituted builds.
2021-04-14 14:19:10 -04:00
e45f852277 tests: allow specifying some nix config 2021-04-14 14:19:10 -04:00
c7ac123dc5 Setup.pm: specify NIX_ env vars for running yath
Otherwise yath will try to use global configuration.
2021-04-14 14:19:10 -04:00
74d34c0f80 t/Setup.pm: sort NIX_ env vars 2021-04-14 14:19:09 -04:00
8aa59dcc1b Drop references to NIX_MANFIESTS_DIR and NIX_BUILD_HOOK
Neither of these have been supported in ~years.
2021-04-14 14:19:09 -04:00
ffc4be6743 Merge pull request #910 from grahamc/ui-fixups
UI fixups
2021-04-12 17:42:01 +00:00
afd064d19d Merge pull request #867 from ck3d/fix-proxy-login
Fix login if Hydra runs behind HTTP proxy with sub-path location
2021-04-12 17:36:55 +00:00
82953389e4 Make new jobsets enabled by default in the UI
If the jobset is brand new, none of the options matched. This
makes all new jobsets default to Enabled.
2021-04-12 12:01:24 -04:00
0fe4cba5b7 edit-jobset: make the "add a new input" button span the whole way
Previously it would only cross 4 of the 5 columns.
2021-04-12 12:01:24 -04:00
f9e30d2550 Merge pull request #905 from grahamc/danger-user
User Roles: make checkboxes
2021-04-09 14:20:47 +00:00
e674fb6139 edit user: make the role changer checkboxes
Also, it makes the role changer a bit of a dangerzone visually for
admins.
2021-04-09 14:07:10 +00:00
258b39f1e5 Merge pull request #677 from twhitehead/javascripts-update
Javascript libraries update
2021-04-09 14:05:47 +00:00
20c1efeb5b Merge pull request #904 from Ma27/gitea-integration
Add `GiteaStatus`-Plugin
2021-04-08 17:57:38 +02:00
4338d904f0 Merge pull request #907 from NixOS/dependabot/github_actions/cachix/install-nix-action-v13
build(deps): bump cachix/install-nix-action from v12 to v13
2021-04-08 17:56:24 +02:00
2020ea1335 Merge pull request #909 from regnat/nix-master
Fix build with latest master
2021-04-08 17:56:09 +02:00
e51a6a4bca Cards are now required to decorate pre blocks 2021-04-08 11:32:30 -04:00
7d3bd08c9b Fix tab link spacing issue by dropping old sticky navbar css hack 2021-04-08 11:32:29 -04:00
def05105bb Add top spacing to tab contents 2021-04-08 11:32:26 -04:00
d85b846357 Fix spacing with search inputs
And more importantly, crucially, fix the "appended" button so the round
corners are on the right (heh) side.
2021-04-08 11:32:08 -04:00
20e3c51ba9 Style unstyled alerts 2021-04-08 11:32:02 -04:00
db2c9fe96a layout.tt: make the header constrained to the center 2021-04-08 11:31:56 -04:00
9c903e9991 renderEvals: fixup colspan on Jobs and More 2021-04-08 11:31:47 -04:00
c8dd5b57c4 src/root/Makefile: fixup extraction of the fontawesome and bootstrap archives 2021-04-08 11:31:39 -04:00
abe082c1d6 Couple of upstream/bootstrap items missed in rebase 2021-04-08 11:31:34 -04:00
b5e18ce62c Fix the empty popovers 2021-04-08 11:31:34 -04:00
2902684c61 Update jobset comparison button 2021-04-08 11:31:34 -04:00
3f77bd240f Bring deep-embedding (tab anchors) javascript up-to-date 2021-04-08 11:31:34 -04:00
b6f5b6eb38 Labels are now badges 2021-04-08 11:31:34 -04:00
70df5e6312 Update button styles as btn-mini is no more 2021-04-08 11:31:34 -04:00
1e34cd3d3d fixups to the rebase 2021-04-08 11:30:49 -04:00
26ffd4a93e Fix build with latest master 2021-04-08 17:11:15 +02:00
225634349e Merge pull request #908 from grahamc/manual-hacking
Manual: mention in hacking docs
2021-04-05 18:01:51 +00:00
5f91353824 doc/manual/src/installation.md: give a conf syntax type
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2021-04-05 16:42:15 +00:00
c69912b287 start-manual.sh: Drop explicit pwd's 2021-04-05 16:10:09 +00:00
c442f1aa14 Procfile: sort alphabetically 2021-04-05 16:10:09 +00:00
7bb9850656 doc: hacking: fixup nix-shell dependency comment 2021-04-05 16:10:09 +00:00
9788c52eff doc: hacking: remove duplicate 'by default' 2021-04-05 16:10:09 +00:00
b03fa96186 doc: hacking: Quote perl5lib 2021-04-05 16:10:09 +00:00
2e47970a97 doc: switch shell session code blocks to console type. 2021-04-05 16:10:09 +00:00
16902f3866 start-hydra: create a db for the current username
Otherwise the logs are spammed with database not existing errors:

15:46:07 postgres.1 | 2021-04-05 15:46:07.631 UTC [30742] FATAL:  database grahamc does not exist
15:46:08 postgres.1 | 2021-04-05 15:46:08.641 UTC [30759] FATAL:  database grahamc does not exist
15:46:09 postgres.1 | 2021-04-05 15:46:09.650 UTC [30765] FATAL:  database grahamc does not exist
2021-04-05 15:47:25 +00:00
0ddf3d43f2 manual: document working on docs 2021-04-05 15:40:09 +00:00
d764eabfcc docs: mention foreman under hacking 2021-04-05 15:40:09 +00:00
67d909322a build(deps): bump cachix/install-nix-action from v12 to v13
Bumps [cachix/install-nix-action](https://github.com/cachix/install-nix-action) from v12 to v13.
- [Release notes](https://github.com/cachix/install-nix-action/releases)
- [Commits](https://github.com/cachix/install-nix-action/compare/v12...8d6d5e949675fbadb765c6b1a975047fa5f09b27)

Signed-off-by: dependabot[bot] <support@github.com>
2021-04-05 05:21:35 +00:00
3bc5252c80 Get rid of now obsolte LD_PRELOAD hack 2021-04-03 09:56:15 +02:00