aboutsummaryrefslogtreecommitdiffhomepage
path: root/shell.nix
Commit message (Collapse)AuthorAgeFilesLines
* pod: read when zstd-wrappedRalph Amissah2026-09-221-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | sisupod using zstd compression recognised by first bytes. <doc>.sisupod: spine reads one before it writes one, so when the name changes (from .zip to .ssiupod) every pod already published stays readable. A .sisupod is one zstd frame wrapping the archive spine already builds. The reader unwraps the bytes and hands the same archive to the same parser, so every guard downstream is untouched: entry names, per-entry and total size, path depth, escape and symlinks. Which container it is comes from the first four bytes (rather than the name). A pod published as a plain .zip reads as it always did, a .sisupod reads, and either one renamed reads too. The suffix is still recognised, both spellings, for the argument and for a url. libzstd is declared rather than bound: provides the whole surface of fifteen extern C prototypes (there is nothing to generate and no upstream tree to track, which is the arrangement sqlite3 already has). dub links it with "libs": [ "zstd" ]; nix needs zstd.out rather than zstd, whose default output is the binaries and carries no library at all. A frame declares its uncompressed size in its own header, and for a pod fetched over https that number is attacker controlled. The declared size is checked against a ceiling before a buffer is asked for, a frame that will not declare one is refused, and what comes out is checked against what was promised. The ceiling is the extraction limit the archive reader already applies, so the two bounds agree. Measured: output built from a .sisupod is byte identical to output built from the same pod's .zip, 359 files over text, html, epub, odt and .ssp for three documents, live-manual's ten languages included. A truncated frame is refused and the document skipped. free_culture 2863504 -> 1099736 2.60x the_wealth_of_networks 4294022 -> 1172649 3.66x live-manual 6972418 -> 675970 10.31x (assisted by Claude-Code)
* nix keeping: nix-shell, nix-build derivation.nixRalph Amissah2026-04-111-40/+56
|
* nix cleanup flake.nix and shell.nixRalph Amissah2026-04-071-1/+8
|
* package housekeeping, minorRalph Amissah2026-03-191-0/+1
|
* flake.nix po4a perl depsRalph Amissah2026-01-081-1/+1
|
* nix build houskeeping, version updates, incl. dmd & dubRalph Amissah2024-12-021-2/+2
|
* nix minorRalph Amissah2024-06-291-0/+2
|
* nix flake and envrc-nix minorRalph Amissah2024-05-171-0/+1
|
* set nixVersions.nix_2_21Ralph Amissah2024-05-031-1/+1
|
* comment out nixpkg nixVersions.unstableRalph Amissah2024-05-021-1/+1
| | | | - nixVersions.unstable no longer available
* nix flake & env upkeepRalph Amissah2024-03-101-6/+7
|
* updates incl. ldc-1.35.0, direnv-2.4.0Ralph Amissah2023-10-151-1/+1
|
* housekeeping, updates incl. ldc-1.34.0, dub-1.34.0Ralph Amissah2023-09-051-1/+1
|
* nix configureRalph Amissah2023-06-231-16/+0
|
* nix dev + update direnv 2.2.1 => 2.3.0Ralph Amissah2023-04-291-3/+0
|
* nix org cleaningRalph Amissah2023-04-101-0/+2
|
* nix run alejandra formatter, decided to go with itRalph Amissah2023-04-101-65/+66
|
* nix flake & build, temp. remove gdcRalph Amissah2023-02-281-58/+26
|
* nix flake & build, devShells etc.Ralph Amissah2023-02-101-6/+4
|
* nix & build housekeeping, alternative D compilersRalph Amissah2023-01-251-0/+8
| | | | | | | | | - compilation status - dmd (@D2.100) ok, & has been fine - ldc (@D2.100) ok, & has been fine - gdc11 available in nixpkgs does not compile awaiting gdc12 (which would also be based on @D2.100 & just might)
* nix and build housekeepingRalph Amissah2022-12-311-3/+3
|
* gitignore & things nixRalph Amissah2022-12-231-7/+9
|
* 0.12.0sisudoc-spine_v0.12.0-devRalph Amissah2022-12-231-20/+29
|
* configs housekeeping, minorRalph Amissah2022-11-211-1/+1
|
* org nixRalph Amissah2022-10-031-49/+39
|
* org nix adjustRalph Amissah2022-08-031-1/+44
|
* build related, mostly nix flakesRalph Amissah2022-06-141-0/+1
|
* nix setup related but messyRalph Amissah2021-12-231-8/+17
|
* dlang dub & nix build related, includes dep updateRalph Amissah2021-11-271-7/+7
| | | | | | - nix-shell --pure - nix-build - dub build --compiler=ldc2 --build=release --force
* nix related config, direnv else minorRalph Amissah2021-10-221-32/+34
|
* org latex organizeRalph Amissah2021-09-091-0/+5
|
* xmls, epub3 toc_nav.xhtml toc.ncxRalph Amissah2021-09-091-0/+10
|
* config nixRalph Amissah2021-09-091-4/+8
|
* dir rename ./sundry (from ./misc)Ralph Amissah2021-08-011-15/+14
|
* nix-build cleanup, external sources localizedRalph Amissah2021-05-151-1/+13
| | | | | | - clean up as external sources kept locally, in ./src/ext_depends/ - remove dub2nix dependency, no longer needed/used
* cleaningRalph Amissah2021-03-051-3/+0
|
* shell_spine.nix addedRalph Amissah2021-02-041-1/+3
|
* nix build -f default.nix, experimentalRalph Amissah2021-01-281-2/+2
|
* shell.nix project.nix spine.nix mkDub.nixRalph Amissah2021-01-271-1/+2
|
* nix, work on buildRalph Amissah2021-01-231-1/+11
|
* directory nixEnv (renamed from nixDevEnv)Ralph Amissah2020-11-281-1/+1
|
* nix derivation, dub & dub2nix using ldc2 1.24.0 okRalph Amissah2020-11-281-1/+1
| | | | | | | | - dmd 2.091.1 & dub 1.14.0 broken in nix unstable - dmd 2.094.2 & dub 1.23.0 current dlang - built using modified local nixpkgs dub modified to use ldc (without calls to dmd) - provide overlay for current( dub using ldc )
* project nix shell(s)Ralph Amissah2020-10-201-21/+1
|
* build nix derivation (using dub2nix helper tool)Ralph Amissah2020-10-191-10/+14
| | | | | | | | | | - nix-shell - nix-build - dub2nix (dub to nix helper tool) - Lionello Lunesu - MIT License - https://github.com/lionello/dub2nix
* nixify stepRalph Amissah2020-10-191-17/+15
|
* shell.nixRalph Amissah2020-10-191-0/+19
generated by cgit v1.2.3 (git 2.25.1) at 2026-10-16 20:18:53 +0000