mirror of
https://github.com/NixOS/nix
synced 2024-09-20 11:11:03 -04:00
4e84b532ed
macOS doesn't have user namespacing, so the gid of the builder needs to be nixbld. The logic got "has sandboxing enabled" confused with "has user namespaces". Fixes #7529.
39 lines
741 B
C++
39 lines
741 B
C++
#pragma once
|
|
|
|
#include "types.hh"
|
|
|
|
#include <optional>
|
|
|
|
#include <sys/types.h>
|
|
|
|
namespace nix {
|
|
|
|
struct UserLock
|
|
{
|
|
virtual ~UserLock() { }
|
|
|
|
/* Get the first and last UID. */
|
|
std::pair<uid_t, uid_t> getUIDRange()
|
|
{
|
|
auto first = getUID();
|
|
return {first, first + getUIDCount() - 1};
|
|
}
|
|
|
|
/* Get the first UID. */
|
|
virtual uid_t getUID() = 0;
|
|
|
|
virtual uid_t getUIDCount() = 0;
|
|
|
|
virtual gid_t getGID() = 0;
|
|
|
|
virtual std::vector<gid_t> getSupplementaryGIDs() = 0;
|
|
};
|
|
|
|
/* Acquire a user lock for a UID range of size `nrIds`. Note that this
|
|
may return nullptr if no user is available. */
|
|
std::unique_ptr<UserLock> acquireUserLock(uid_t nrIds, bool useUserNamespace);
|
|
|
|
bool useBuildUsers();
|
|
|
|
}
|