Merge pull request #45638 from aanderse/incron

incron: init at 0.5.12

Changed files
+178
maintainers
nixos
modules
services
monitoring
pkgs
tools
top-level
+5
maintainers/maintainer-list.nix
···
github = "a1russell";
name = "Adam Russell";
};
+
aanderse = {
+
email = "aaron@fosslib.net";
+
github = "aanderse";
+
name = "Aaron Andersen";
+
};
aaronschif = {
email = "aaronschif@gmail.com";
github = "aaronschif";
+1
nixos/modules/module-list.nix
···
./services/monitoring/graphite.nix
./services/monitoring/hdaps.nix
./services/monitoring/heapster.nix
+
./services/monitoring/incron.nix
./services/monitoring/longview.nix
./services/monitoring/monit.nix
./services/monitoring/munin.nix
+98
nixos/modules/services/monitoring/incron.nix
···
+
+
{ config, lib, pkgs, ... }:
+
+
with lib;
+
+
let
+
+
cfg = config.services.incron;
+
+
in
+
+
{
+
options = {
+
+
services.incron = {
+
+
enable = mkOption {
+
type = types.bool;
+
default = false;
+
description = ''
+
Whether to enable the incron daemon.
+
+
Note that commands run under incrontab only support common Nix profiles for the <envar>PATH</envar> provided variable.
+
'';
+
};
+
+
allow = mkOption {
+
type = types.nullOr (types.listOf types.str);
+
default = null;
+
description = ''
+
Users allowed to use incrontab.
+
+
If empty then no user will be allowed to have their own incrontab.
+
If <literal>null</literal> then will defer to <option>deny</option>.
+
If both <option>allow</option> and <option>deny</option> are null
+
then all users will be allowed to have their own incrontab.
+
'';
+
};
+
+
deny = mkOption {
+
type = types.nullOr (types.listOf types.str);
+
default = null;
+
description = "Users forbidden from using incrontab.";
+
};
+
+
systab = mkOption {
+
type = types.lines;
+
default = "";
+
description = "The system incrontab contents.";
+
example = ''
+
/var/mail IN_CLOSE_WRITE abc $@/$#
+
/tmp IN_ALL_EVENTS efg $@/$# $&
+
'';
+
};
+
+
extraPackages = mkOption {
+
type = types.listOf types.package;
+
default = [];
+
example = literalExample "[ pkgs.rsync ]";
+
description = "Extra packages available to the system incrontab.";
+
};
+
+
};
+
+
};
+
+
config = mkIf cfg.enable {
+
+
warnings = optional (cfg.allow != null && cfg.deny != null)
+
''If `services.incron.allow` is set then `services.incron.deny` will be ignored.'';
+
+
environment.systemPackages = [ pkgs.incron ];
+
+
security.wrappers.incrontab.source = "${pkgs.incron}/bin/incrontab";
+
+
# incron won't read symlinks
+
environment.etc."incron.d/system" = {
+
mode = "0444";
+
text = cfg.systab;
+
};
+
environment.etc."incron.allow" = mkIf (cfg.allow != null) {
+
text = concatStringsSep "\n" cfg.allow;
+
};
+
environment.etc."incron.deny" = mkIf (cfg.deny != null) {
+
text = concatStringsSep "\n" cfg.deny;
+
};
+
+
systemd.services.incron = {
+
description = "File System Events Scheduler";
+
wantedBy = [ "multi-user.target" ];
+
path = cfg.extraPackages;
+
serviceConfig.PIDFile = "/run/incrond.pid";
+
serviceConfig.ExecStartPre = "${pkgs.coreutils}/bin/mkdir -m 710 -p /var/spool/incron";
+
serviceConfig.ExecStart = "${pkgs.incron}/bin/incrond --foreground";
+
};
+
};
+
+
}
+36
pkgs/tools/system/incron/default.nix
···
+
{ stdenv, fetchFromGitHub, bash }:
+
+
stdenv.mkDerivation rec {
+
name = "incron-0.5.12";
+
src = fetchFromGitHub {
+
owner = "ar-";
+
repo = "incron";
+
rev = name;
+
sha256 = "11d5f98cjafiv9h9zzzrw2s06s2fvdg8gp64km7mdprd2xmy6dih";
+
};
+
+
patches = [ ./default_path.patch ];
+
+
prePatch = ''
+
sed -i "s|/bin/bash|${bash}/bin/bash|g" usertable.cpp
+
'';
+
+
installFlags = [ "PREFIX=$(out)" ];
+
installTargets = [ "install-man" ];
+
+
preInstall = ''
+
mkdir -p $out/bin
+
+
# make install doesn't work because setuid and permissions
+
# just manually install the binaries instead
+
cp incrond incrontab $out/bin/
+
'';
+
+
meta = with stdenv.lib; {
+
description = "A cron-like daemon which handles filesystem events.";
+
homepage = https://github.com/ar-/incron;
+
license = licenses.gpl2;
+
maintainers = [ maintainers.aanderse ];
+
platforms = platforms.linux;
+
};
+
}
+36
pkgs/tools/system/incron/default_path.patch
···
+
diff --git usertable.cpp usertable.cpp
+
index 11fd04b..a8681bd 100644
+
--- a/usertable.cpp
+
+++ b/usertable.cpp
+
@@ -43,9 +43,6 @@
+
#define DONT_FOLLOW(mask) (false)
+
#endif // IN_DONT_FOLLOW
+
+
-// this is not enough, but...
+
-#define DEFAULT_PATH "/usr/local/bin:/usr/bin:/bin:/usr/X11R6/bin"
+
-
+
+
PROC_MAP UserTable::s_procMap;
+
+
@@ -597,12 +594,20 @@ void UserTable::RunAsUser(std::string cmd) const
+
if (clearenv() != 0)
+
goto failed;
+
+
+ // try to recreate the user path as best as possible
+
+ std::string DEFAULT_PATH;
+
+ DEFAULT_PATH += "/run/wrappers/bin:";
+
+ DEFAULT_PATH += pwd->pw_dir;
+
+ DEFAULT_PATH += "/.nix-profile/bin:/nix/var/nix/profiles/default/bin:/run/current-system/sw/bin:/etc/profiles/per-user/";
+
+ DEFAULT_PATH += pwd->pw_name;
+
+ DEFAULT_PATH += "/bin";
+
+
+
if ( setenv("LOGNAME", pwd->pw_name, 1) != 0
+
|| setenv("USER", pwd->pw_name, 1) != 0
+
|| setenv("USERNAME", pwd->pw_name, 1) != 0
+
|| setenv("HOME", pwd->pw_dir, 1) != 0
+
|| setenv("SHELL", pwd->pw_shell, 1) != 0
+
- || setenv("PATH", DEFAULT_PATH, 1) != 0)
+
+ || setenv("PATH", DEFAULT_PATH.c_str(), 1) != 0)
+
{
+
goto failed;
+
}
+2
pkgs/top-level/all-packages.nix
···
inboxer = callPackage ../applications/networking/mailreaders/inboxer { };
+
incron = callPackage ../tools/system/incron { };
+
inetutils = callPackage ../tools/networking/inetutils { };
infiniband-diags = callPackage ../tools/networking/infiniband-diags { };