Commit graph

30677 commits

Author SHA1 Message Date
Maximilian Bosch fa257ecb33
nixos/kernel: link manual (with backport policies) from boot.kernelPackages
Yes I know it's dirty to link the rendered HTML, but linking
`#sec-kernel-config` breaks the manual build for me with the following
error:

    element link: validity error : IDREF attribute linkend references an unknown ID "sec-kernel-config"

This is something that should probably be fixed, but for the current
change I'd argue that this is good enough (in fact even the
`nix.settings`-option uses that hack).
2022-12-06 14:38:16 +01:00
Robert Hensing ab823e3a11 cassandra_4: init 2022-12-06 14:09:38 +01:00
Robert Hensing 5775cfa4b8 nixos/cassandra: Prepare for cassandra 4
Its scripts disagree a bit with our flexible
logging approach and our default logging config.
Might want to revisit this at some point.

The `mkdir` failures in the log are harmless.
2022-12-06 14:09:38 +01:00
Robert Hensing 90b1c9fa10 nixos/cassandra: Refactor: extract version variables 2022-12-06 14:09:38 +01:00
Maximilian Bosch fcf0e540b1
nixos/manual: document kernel backporting policy and implications of it
I'm well aware that this issue is currently under discussion[1] and that
these things may change. Also, please don't misinterpret this as an
attempt to end the discussion.

This topic made it obvious that people are surprised by the way this
issue is handled and only finding out about this unwritten rule because
of asking is not a good state IMHO, so I decided to document the
following things:

* Right now we drop kernels as soon as they get out of maintenance (LTS
  kernels even before the next stable NixOS that will exceed their
  lifespan).
* The `latestCompatibleLinuxPackages` attribute from ZFS isn't
  monotonic since latest only refers to the latest supported kernel.
* In fact `latestCompatibleLinuxPackages` doesn't seem to be documented
  at all in the manual, so I also did that.

[1] https://discourse.nixos.org/t/aggressive-kernel-removal-on-eol-in-nixos/23097
2022-12-06 14:04:13 +01:00
github-actions[bot] 0ac4c6779e
Merge master into staging-next 2022-12-06 00:02:32 +00:00
Naïm Favier a6dd75809d
Merge pull request #204178 from ncfavier/iso-filter-nixpkgs 2022-12-05 19:00:03 +01:00
Bjørn Forsman 831fc4f86a nixos/tests/bazarr: remove unneeded timezone workaround
The issue was fixed in bazarr-1.1.3.
2022-12-05 18:51:53 +01:00
Maximilian Bosch 7f684f3160
Merge pull request #204618 from rapenne-s/openFirewall_off_2
make openFirewall options to false for NixOS services
2022-12-05 18:13:39 +01:00
Naïm Favier 98a5ae3e5d
Merge pull request #202956 from arcnmx/systemd-networkd-wait-online 2022-12-05 17:53:26 +01:00
Maximilian Bosch 38c786c6ef
Merge pull request #204269 from mayflower/fix-mailman-nginx
nixos/mailman: remove trailing slash from `/static` location
2022-12-05 16:48:57 +01:00
Solene Rapenne 0d805d3a0b nixos/rl-2305: mention openFirewall changed to false for services 2022-12-05 12:12:48 +01:00
Solene Rapenne 372a2d2111 nixos/unifi-video: openFirewall default to false 2022-12-05 12:03:09 +01:00
Solene Rapenne 659803e879 nixos/tmate-ssh-server: openFirewall default to false 2022-12-05 12:03:09 +01:00
Solene Rapenne efeb1e50d9 nixos/avahi-daemon: openFirewall default to false 2022-12-05 12:03:09 +01:00
Solene Rapenne 535c434fa8 nixos/snapserver: openFirewall default to false 2022-12-05 12:03:02 +01:00
github-actions[bot] d267d26578
Merge master into staging-next 2022-12-05 06:01:36 +00:00
Jacob Greenleaf 0111e9547e nixos/borgbackup: Add option for inhibiting sleep
Adds a new option for backup jobs `inhibitsSleep` which prevents
the system from going to sleep while a backup is in progress.
Uses `systemd-inhibit`, which holds a "lock" that prevents the
system from sleeping while the process it invokes is running.

This did require wrapping the existing backup script using
`writeShellScript` so that it could be run by `systemd-inhibit`.
2022-12-04 19:57:41 -08:00
Sandro Jäckel f2bd1b839c
nixos/no-x-libs: add pinentry 2022-12-05 02:42:50 +01:00
Sandro Jäckel de66678a60
nixos/no-x-libs: add zbar 2022-12-05 02:07:00 +01:00
Sandro Jäckel d0ffce42bb
nixos/no-x-libs: add imagemagick/imagemagickBig 2022-12-05 02:07:00 +01:00
Jack Cummings 75f2f8e753 passthrough config if there are no secrets defined 2022-12-04 16:37:51 -08:00
Robert Kovacsics 2c00429560 nixos/dnsmasq: Use attrs instead of plain text config
This should make it easier to configure in multiple places, override
defaults, etc.
2022-12-04 23:08:37 +00:00
Maximilian Bosch fcd4117b24
Merge pull request #203665 from KFearsoff/fix-grafana-markdown-release-notes
nixos/grafana: fix 22.11 release notes
2022-12-04 22:48:57 +01:00
Martin Weinelt fe8eef1ae4 Merge remote-tracking branch 'origin/master' into staging-next 2022-12-04 22:06:42 +01:00
Mario Rodas 4eebb34855
Merge pull request #204297 from bjornfor/nixos-fix-lxd-init
nixos/lxd: add missing util-linux to $PATH
2022-12-04 15:02:59 -05:00
Maximilian Bosch 331d854662
Merge pull request #203874 from noneucat/fix/grocy/storage
nixos/grocy: fix file uploads
2022-12-04 17:28:07 +01:00
Naïm Favier 170a98ba73
Merge pull request #167871 from asymmetric/doc-networkd 2022-12-04 16:24:02 +01:00
Lorenzo Manacorda 2ae17515e0 nixos/networkd: doc activation of systemd.networkd 2022-12-04 16:18:48 +01:00
Ryan Lahfa e1185ea096
Merge pull request #197382 from phaer/patch-4
initrd-ssh: allow empty hostKeys
2022-12-04 15:34:43 +01:00
Anderson Torres 3ec5fa600e
Merge pull request #201033 from linsui/firefox
nixos/firefox: add more options
2022-12-04 11:32:17 -03:00
Naïm Favier f9743988ad
linuxPackages.hyperv-daemons: add path conditions for kvp and vss 2022-12-04 15:25:26 +01:00
Naïm Favier 364d3609cd
nixos/installer/cd-dvd: use filtered nixpkgs source
Pin the `nixpkgs` registry entry to the *filtered* nixpkgs source to
avoid copying the entire `.git` directory to the ISO when building
from a local checkout.

Also set `to` directly instead of the `flake.outPath` hack.
2022-12-04 14:54:18 +01:00
Giulio De Pasquale 34ddff29a4
libreddit: Add package option 2022-12-04 14:00:17 +01:00
Anderson Torres b793d48515
Merge pull request #204352 from laalsaas/skim
skim: refactor and init module
2022-12-04 07:51:43 -03:00
Sandro e38618a657
Merge pull request #203825 from SuperSandro2000/mastodon-tootctl
Closes https://github.com/NixOS/nixpkgs/issues/199029
2022-12-04 11:29:45 +01:00
Sandro 9622693a4b
nixos/bluetooth: remove bluezFull alias from examples 2022-12-04 09:58:49 +01:00
Alexandre Acebedo 0905acf069 nixos/rog-control-center: init 2022-12-04 10:11:27 +03:00
Alexandre Acebedo 8f7537e34f nixos/asusctl: init 2022-12-04 10:11:27 +03:00
Alexandre Acebedo 8f14c05c50 nixos/supergfxctl: init 2022-12-04 10:11:27 +03:00
Bobby Rong 71fe9c0596
Merge pull request #204225 from bobby285271/cinnamon
Cinnamon updates 2022-12-02
2022-12-04 12:02:36 +08:00
Bobby Rong 35763bc43b
cinnamon.mint-artwork: 1.7.0 -> 1.7.2
Now sets cursor theme and size.
2022-12-04 11:20:51 +08:00
Bobby Rong 1b6468cfb4
nixos/lightdm-greeters/slick: Add options for cursor themes
These options are newly added in 1.6.0.
2022-12-04 11:20:51 +08:00
Sandro 9467d17255
Merge pull request #204316 from nagy/nixos/fzf-refactor 2022-12-04 01:55:13 +01:00
laalsaas a78621f9b0 skim: init module 2022-12-03 23:15:09 +01:00
Martin Weinelt f069b36483
Merge pull request #204331 from mweinelt/zigbee2mqtt-1.28.4 2022-12-03 22:27:44 +01:00
Luke Granger-Brown 7b7bff387b nixos: update release notes for unifi-poller --> unpoller. 2022-12-03 20:14:16 +00:00
Luke Granger-Brown c7918fed9e nixos/prometheus/unifi-poller: rename to unpoller. 2022-12-03 20:12:54 +00:00
Luke Granger-Brown ffcd97b521 nixos/unifi-poller: rename to unpoller. 2022-12-03 20:12:54 +00:00
Daniel Nagy 3126eb7621
nixos/fzf: refactor two options 2022-12-03 20:00:00 +01:00
Martin Weinelt 5d685e0eed nixos/zigbee2mqtt: Update syscall filter
The tests would fail after migrating to `buildNpmPackage`, likely
because we are now using nodejs 18.

> audit: type=1326 audit(1670092271.655:102): auid=4294967295 uid=317 gid=317 ses=4294967295 subj=kernel pid=995 comm="node" exe="/nix/store/dj805sw07vvpbxx39c8g67x8qddg0ikw-nodejs-18.12.1/bin/node" sig=31 arch=c000003e syscall=330 compat=0 ip=0x7ff8b655f37b code=0x8000000
2022-12-03 19:57:50 +01:00
github-actions[bot] e1399a2156
Merge master into staging-next 2022-12-03 18:01:02 +00:00
Mario Rodas 86c83ab79d
Merge pull request #204262 from hmenke/maintainers
maintainers: remove and add hmenke
2022-12-03 11:11:40 -05:00
Maximilian Bosch d85c685320
Merge pull request #201380 from Ma27/installer/vim-with-nix-support
nixos/profiles/base: install vim w/nix-syntax plugin
2022-12-03 16:20:08 +01:00
Maximilian Bosch 0b5a0cbc69
nixos/profiles/base: install vim w/nix-syntax plugin
Considering that you most likely edit Nix code in the installer, that
seems like a useful thing.

The size of the ISO I got from

    nix-build nixos/release.nix -A iso_minimal.x86_64-linux

is still at 877M.
2022-12-03 16:05:01 +01:00
Bjørn Forsman c3cfa83884 nixos/lxd: add missing util-linux to $PATH
This fixes `lxd init`, which previously failed like this:

  $ yes "" | lxd init
  [...]
  Error: Failed to create storage pool "default": Failed to run: losetup --find --nooverlap --direct-io=on --show /var/lib/lxd/disks/default.img: exec: "losetup": executable file not found in $PATH
2022-12-03 16:01:05 +01:00
phaer 3c1906b202 initrd-ssh: add ignoreEmptyHostKeys option 2022-12-03 15:10:43 +01:00
Artturi 645b5a2f9f
Revert "nixos/lib: add /home to pathsNeededForBoot" 2022-12-03 15:16:42 +02:00
Artturi 74ff2f1862
Merge pull request #203768 from linj-fork/pr-neededforboot
nixos/lib: add /home to pathsNeededForBoot
2022-12-03 15:16:34 +02:00
Martin Weinelt 39739a47b0 Merge remote-tracking branch 'origin/master' into staging-next 2022-12-03 13:55:28 +01:00
Maximilian Bosch 367897a68b
nixos/mailman: remove trailing slash from /static location
Otherwise HTTP routes such as `/static/django-mailman3/css/main.css`
will cause a 404.
2022-12-03 13:03:26 +01:00
Henri Menke da053d008f
maintainers: remove and add hmenke 2022-12-03 12:26:58 +01:00
SamLukeYes ad35d94ecc xonsh: migrate to /etc/xonsh/xonshrc 2022-12-03 17:42:47 +08:00
K900 3ee2fd4af0
Merge pull request #202661 from K900/goodbye-my-qt-goodbye
treewide: drop Qt5 < 5.15
2022-12-03 10:51:44 +03:00
K900 7348354e8e nixos/doc: add release note for Qt 5.1{2,4} deprecation 2022-12-03 10:51:04 +03:00
github-actions[bot] 7ec4183673
Merge master into staging-next 2022-12-03 06:01:28 +00:00
arcnmx 51b5602b45 nixos/networkd: add wait-online.enable option
When no interfaces are managed by systemd-networkd, it will
unconditionally fail. This option allows it to be disabled in those
situations where it prevents system switches from succeeding.
2022-12-02 19:00:31 -08:00
laalsaas 257a832e61 fzf: init module 2022-12-03 03:14:21 +01:00
Sandro Jäckel 6e845a8491
nixos/mastodon: replace mastodon-env with a proper wrapper mastodon-tootctl 2022-12-03 02:59:39 +01:00
Sandro 068e7cb340
Merge pull request #201817 from jhh/nut-exporter 2022-12-03 02:22:48 +01:00
github-actions[bot] a83c4dd193
Merge master into staging-next 2022-12-03 00:02:19 +00:00
Artturin a34d7b67fd nixos/top-level.nix: add forbiddenDependenciesRegex option
useful for making sure that there's no dev outputs in the system
2022-12-02 21:15:24 +02:00
Jasper Woudenberg bc3b07cb93 resilio: Add jwoudenberg as extra maintainer 2022-12-02 12:08:33 -06:00
Jasper Woudenberg c8f9d170d4 nixos/resilio: support secret files
When using the declarative shared folder configuration for resilio sync
it is now possible to pass a path from which to read the secret should
be read at runtime. The path will not be added to the nix store.

The 'secret' parameter to specify the secret directly is still
supported. This option will still store the secret in the nix store.

This commit follows the pattern described in this issue, for upstream
programs that do not provide support for setting a password using a
file: https://github.com/NixOS/nixpkgs/issues/24288
2022-12-02 12:08:33 -06:00
github-actions[bot] fcd7475a32
Merge master into staging-next 2022-12-02 18:01:15 +00:00
Valentin Gagarin 260de5901e
Merge pull request #204103 from ncfavier/doc-mkOrder
nixos/doc: document `mkOrder` and friends
2022-12-02 17:19:40 +01:00
Artturi dadca5c5e1
Merge pull request #140890 from seb314/wireguard/dyndns-restart-on-failure
wireguard: non-invasive fix for permanent disconnects on unstable network (e.g. laptops) from dyndns endpoints
2022-12-02 17:47:47 +02:00
Martin Weinelt b0df6347ae
Merge pull request #204067 from rapenne-s/release_2211 2022-12-02 16:46:45 +01:00
Solene Rapenne 11c32f4a71 nixos/rl-2211: make it clear NixOS isn't a set of packages
Co-authored-by: Valentin Gagarin <valentin.gagarin@tweag.io>

Co-authored-by: Martin Weinelt <mweinelt@users.noreply.github.com>
2022-12-02 16:40:00 +01:00
Naïm Favier 2f7f695dd7
Merge pull request #204001 from nagy/port-types 2022-12-02 14:52:35 +01:00
Naïm Favier e8927c46b8
nixos/doc: document mkOrder and friends
Add a section on ordering option definitions.

Also mention `mkDefault` in the section on `mkOverride`.

Clarify the code a bit by renaming `defaultPriority` to
`defaultOverridePriority` and introducing `defaultOrderPriority`.
2022-12-02 14:15:24 +01:00
github-actions[bot] 1de884edb3
Merge master into staging-next 2022-12-02 06:01:28 +00:00
sternenseemann 2a04723331 nixos/rl-2211: remove reference to nowhere
The note this originally referred to was moved to the “Internal Changes”
section and later trimmed down, so the referenced content is no longer
there.
2022-12-01 22:31:24 -05:00
Raito Bezarius b22e868d22 sourcehut.dispatchsrht: move removal notice to 23.05 release notes 2022-12-01 22:31:01 -05:00
github-actions[bot] f2b70bba3e
Merge master into staging-next 2022-12-02 00:02:32 +00:00
Martin Weinelt 2755aba128
Merge pull request #204014 from AmineChikhaoui/rel22.11-ec2-amis 2022-12-02 00:03:29 +01:00
AmineChikhaoui 2c90cb9304
ec2-amis: add release 22.11 2022-12-01 17:21:34 -05:00
Daniel Nagy dbe8182e74
treewide: switch to port type for nixos modules 2022-12-01 22:30:00 +01:00
Ryan Lahfa d13437b014
Merge pull request #201052 from Stunkymonkey/octoprint-firewall
nixos/octoprint: add openFirewall option
2022-12-01 21:35:40 +01:00
Ryan Lahfa 5d87a1b9b8
Merge pull request #195735 from hax404/tayga_init
nixos/tayga: init
2022-12-01 21:14:50 +01:00
Bernardo Meurer 831b9b4c36
Merge pull request #203818 from qowoz/nix 2022-12-01 15:01:50 -05:00
github-actions[bot] 237453e7f7
Merge master into staging-next 2022-12-01 18:01:25 +00:00
Felix Buehler 6de9ec5969 nixos/octoprint: add openFirewall option 2022-12-01 17:38:08 +01:00
Ryan Lahfa 40b71c3e93
nixos/redmine: add missing lib.mdDoc (#203952) 2022-12-01 17:37:16 +01:00
figsoda 5195ca2346
Merge pull request #203826 from figsoda/lint
nixos/*: apply some lints from statix and nil
2022-12-01 11:20:11 -05:00
Ryan Lahfa 9f6a1541c7
Merge pull request #198592 from winterqt/remove-dispatchsrht
sourcehut.dispatchsrht: remove
2022-12-01 16:18:07 +01:00
Ryan Lahfa ec545378b5
Merge pull request #98633 from DavHau/patch-1
profiles: add HP Smart Array RAID scsi driver to all-hardware.nix
2022-12-01 16:07:29 +01:00
Ryan Lahfa bc7c15825b
Merge pull request #117371 from grahamc/sysctl-hostname
network-interfaces: set hostname from sysctl if defined
2022-12-01 16:03:04 +01:00
Ryan Lahfa 2ae5aa0bd6
Merge pull request #118036 from jluttine/add-jupyter-kernel-env
nixos/jupyter: add env kernel option
2022-12-01 16:02:16 +01:00
Ryan Lahfa 94ac413379
Merge pull request #140840 from erdnaxe/isso_hardening
nixos/isso: systemd unit hardening
2022-12-01 15:52:54 +01:00
Ryan Lahfa 78ef5b8663
Merge pull request #171930 from felixsinger/module/redmine/add-component-configs
nixos/redmine: Rework module
2022-12-01 15:35:08 +01:00
Ryan Lahfa a8a68c3427
Merge pull request #189935 from baloo/baloo/qemu-vm/fixup-efi-partitions
qemu-vm: ensure we do not overwrite the partition table when EFI is in use
2022-12-01 15:16:23 +01:00
Ryan Lahfa cc11eea79d
Merge pull request #195671 from amarshall/rename-readonlystore
nixos: nix.readOnlyStore -> boot.readOnlyNixStore
2022-12-01 15:06:23 +01:00
Ryan Lahfa 39f399f6ff
Merge pull request #199395 from owm111/physlock-m
nixos/physlock: add muteKernelMessages option
2022-12-01 14:51:50 +01:00
Ryan Lahfa da5ef17a96
Merge pull request #199520 from bjornfor/nixos-hardware-sane-open-firewal
nixos/sane: add openFirewall option
2022-12-01 14:50:11 +01:00
Ryan Lahfa cd08eded16
Merge pull request #202077 from Mic92/mandb-cross
nixos/mandb: fix cross compiling
2022-12-01 14:37:02 +01:00
Ryan Lahfa 1c5443f6cd
Merge pull request #203183 from teutat3s/fix/gitea-needs-gpg-in-path
gitea: needs gnupg in its path to sign commits
2022-12-01 14:29:34 +01:00
Ryan Lahfa e1c7bf6657
Merge pull request #203723 from rvolosatovs/fix/amd-sev
module-list: include AMD SEV module
2022-12-01 14:22:16 +01:00
Georg Haas 8d47058b32
nixos/tests/tayga: init 2022-12-01 11:17:39 +01:00
Alex Zero 16b7892876
nixos/tayga: init 2022-12-01 11:17:20 +01:00
Andy Chun @noneucat f8f19f84c6 nixos/grocy: add a basic smoke test for file uploads 2022-11-30 22:18:05 -08:00
Mike Placentra 518ef4d8d8 nixos/roon-server: persist installation ID to avoid re-login
Set environment variable ROON_ID_DIR to the same value as ROON_DATA_DIR
so that it knows it's the same installation after a restart.
Otherwise, each time the server process restarts, the user will need
to log in, and configure any server-local audio devices, again.

This environment variable was found in Roon's "easy installer" script:
https://help.roonlabs.com/portal/en/kb/articles/linux-install#The_Easy_Installer_Recommended
2022-12-01 01:05:39 -05:00
github-actions[bot] 7ea4004879
Merge master into staging-next 2022-12-01 06:01:22 +00:00
Andrew Marshall c88944f025 nixos: nix.readOnlyStore -> boot.readOnlyNixStore
The placement of this option under `nix` was misleading, as it is not
configuration of the Nix daemon, but rather configuration of the NixOS
boot process and how it mounts the Nix store. As such, make it an option
of `boot` to clarify what it actually affects, and imply that it will
only take effect on a reboot.

Since it no longer has the context of nix, adjust the name to include
it.
2022-11-30 22:57:08 -05:00
zowoq 34386263f7 nixos/nix-fallback-paths: 2.11.0 -> 2.11.1 2022-12-01 12:32:15 +10:00
Mario Rodas 4a057b08c4
Merge pull request #203733 from nagy/freenet-nixos-test
nixosTests.freenet: init
2022-11-30 21:18:55 -05:00
github-actions[bot] 818d9a61a3
Merge master into staging-next 2022-12-01 00:02:26 +00:00
Naïm Favier e989ef9671
Merge pull request #203595 from ncfavier/registry-paths 2022-12-01 01:01:30 +01:00
figsoda b865b96b97 nixos/invoiceplane: remove unnecessary parentheses 2022-11-30 18:13:58 -05:00
figsoda f97daa68bc nixos/gammu-smsd: remove unnecessary parentheses 2022-11-30 18:12:53 -05:00
figsoda 1ecbafd0a2 nixos/discourse: remove unnecessary parentheses 2022-11-30 18:01:29 -05:00
figsoda d1c73c2543 nixos/keepalived: remove unnecessary parentheses 2022-11-30 17:59:52 -05:00
figsoda 7dfc2a1369 nixos/user-groups: remove unnecessary parentheses 2022-11-30 17:58:55 -05:00
figsoda 55acad5c35 nixos/softether: apply statix suggestions 2022-11-30 17:56:56 -05:00
figsoda d65639ce40 nixos/redis: simplify 2022-11-30 17:38:52 -05:00
figsoda dfff1a2b83 nixos/prosody: simplify logic 2022-11-30 17:36:07 -05:00
figsoda 025142b808 nixos/hbase: remove unnecessary parenthesis 2022-11-30 17:32:53 -05:00
figsoda 1b9b057d92 nixos/buildbot: syntax clean up 2022-11-30 17:31:28 -05:00
figsoda a356511f1a nixos/crossfire-server: remove unnecessary parentheses 2022-11-30 17:29:36 -05:00
figsoda fd4f865645 nixos/nixpkgs: remove unused binding 2022-11-30 17:27:31 -05:00
figsoda ca6c2c2111 nixos/docker-image: clean up let-in binding 2022-11-30 17:27:23 -05:00
KFears 79d19d6c9c nixos/grafana: fix 22.11 release notes 2022-12-01 00:24:41 +04:00
Maciej Krüger 0c99764a00
Merge pull request #203609 from aanderse/nixos/lxc-container 2022-11-30 21:04:22 +01:00
Martin Weinelt 7ff150ec50
Merge pull request #203781 from SuperSandro2000/fix-link
nixos/release-notes: fix link formatting
2022-11-30 19:29:05 +01:00
Sandro Jäckel 29450f5d80
nixos/release-notes: fix link formatting 2022-11-30 19:19:55 +01:00
Martin Weinelt ce698e3f0b
Merge pull request #203735 from mweinelt/nixos-22.11-docs
Release NixOS 22.11
2022-11-30 19:19:48 +01:00
Martin Weinelt 384b898d18
Merge pull request #203774 from mweinelt/nixos-22.11-rl-fixups 2022-11-30 19:05:30 +01:00
maralorn 6184f635b3 nixos/doc: Fix typo in 22.11 release manual 2022-11-30 19:03:28 +01:00
Martin Weinelt 068f7348db nixos/doc/rl-2211: more cleanup 2022-11-30 19:01:13 +01:00
github-actions[bot] cb51cfe745
Merge master into staging-next 2022-11-30 18:01:11 +00:00
Taeer Bar-Yam 67d671d5b7 nixos/firejail: remove the need for qualifications 2022-11-30 12:45:16 -05:00
Jörg Thalheim 4d9ac448db
Merge pull request #203391 from winterqt/rl-2211-cleanup
nixos/doc/rl-2211: cleanup
2022-11-30 18:07:31 +01:00
Lin Jian 0c70035f24
nixos/lib: add /home to pathsNeededForBoot
Before this patch, if we:

  1. add a new user in the config,
  2. mount /home seperately,
  3. not set neededForBoot for /home,
  4. and run `nixos-rebuild boot`,

the newly added user's home will not be created after a reboot. This
is because when nixos/modules/config/update-users-groups.pl is running
in stage 2 to setup users, /home is not mounted.

This patch fixes this issue.
2022-12-01 00:49:46 +08:00
Jörg Thalheim 07fe1b987b nixos/doc/rl-2211: cleanup 2022-11-30 17:37:03 +01:00
Aaron Andersen ecf7441d25 nixos/lxc: apply recommendations from distrobuilder 2022-11-30 10:09:59 -05:00
Elis Hirwing 9126bcf608
Merge pull request #203634 from LeSuisse/pcre-jit-sealloc-issue
php8*: disable PCRE2 JIT SEAlloc to avoid crashes when forking
2022-11-30 16:03:36 +01:00
Thomas Gerbet 622f4ee354 php8*: disable PCRE2 JIT SEAlloc to avoid crashes when forking
This is a follow up to #200815 and #184634.

The PCRE2 JIT SEAlloc does not support the `fork()` as announced in
their README [0]:
> If you are enabling JIT under SELinux environment you may also want to add
>  --enable-jit-sealloc, which enables the use of an executable memory allocator
>  that is compatible with SELinux. Warning: this allocator is experimental!
>  It does not support fork() operation and may crash when no disk space is
>  available. This option has no effect if JIT is disabled.

As a result using it in PHP can break apps and tools, it can only be
enabled under very specific context where you have a full picture of
what the PHP code is doing.

This contribution disables again the PCRE2 JIT SEAlloc and extends the
existing PHP/PCRE2 tests to make sure we do not enable it again by
mistake.

[0] https://www.pcre.org/readme.txt
2022-11-30 13:22:39 +01:00
Bobby Rong d54eca4cbb
Merge pull request #203589 from bobby285271/cinnamon
Cinnamon updates 2022-11-29
2022-11-30 20:21:12 +08:00
github-actions[bot] b910b25976
Merge master into staging-next 2022-11-30 12:01:13 +00:00
Daniel Nagy 807c2f1fc0
nixosTests.freenet: init 2022-11-30 12:15:00 +01:00
Martin Weinelt f1b9cc23aa Release NixOS 22.11 2022-11-30 11:52:38 +01:00
Minijackson 31f1a9a2a9 nixos/netbox: fix ldap configuration 2022-11-30 10:10:28 +01:00
Minijackson 01932120ab nixos/netbox: set path of dynamic content
By default this paths are set in the Nix store, and so no media,
reports, or scripts could be added / modified
2022-11-30 10:10:28 +01:00
Roman Volosatovs a2251e2225
module-list: include AMD SEV module
Signed-off-by: Roman Volosatovs <rvolosatovs@riseup.net>
2022-11-30 09:11:50 +01:00
github-actions[bot] aff62e907a
Merge master into staging-next 2022-11-30 06:01:30 +00:00
Andrew Marshall 87245df5d3 nixos/stubby: Support fine-grained logLevel
In much older versions, Stubby only supported debug logging, but that is
no longer true, so support the fine-grained log level.
2022-11-29 20:14:00 -06:00
Winter 881f22670e nixos/doc/rl-2211: add entry for aarch64-linux jobset inclusion/images on homepage 2022-11-29 21:07:36 -05:00
Winter b937bf637f nixos/doc/rl-2211: add entry for libxcrypt migration 2022-11-29 21:07:36 -05:00
Winter e81b0cec91 nixos/doc/rl-2211: cleanup 2022-11-29 21:07:33 -05:00
Bobby Rong 590ec12c5b
cinnamon.mint-artwork: 1.6.8 -> 1.7.0
The cursors are moved from this package to mint-cursor-themes.

usr/share/mint-artwork/sounds/* are updated under a license of cc-by-40.
2022-11-30 09:22:08 +08:00
github-actions[bot] 541466e966
Merge master into staging-next 2022-11-30 00:02:24 +00:00
Maximilian Bosch 70bd3715e0
Merge pull request #202918 from SuperSandro2000/rleease-notes-191713
nixos/release-notes: add entry for #191713
2022-11-30 00:36:03 +01:00
KFears bb4cc151b6 nixos/openrgb: fix linking in release notes 2022-11-30 01:31:46 +04:00
Bjørn Forsman 19a6b85e8f nixos: disable systemd-oomd when enableUnifiedCgroupHierarchy is false
Or else systemd-oomd gets marked as failed due to
"Userspace Out-Of-Memory (OOM) Killer was skipped because of a failed condition check (ConditionControlGroupController=v2)."
and cause the system to enter degraded state.

Ref https://github.com/NixOS/nixpkgs/issues/195085
2022-11-29 20:39:05 +01:00
github-actions[bot] 843fc7a4a5
Merge master into staging-next 2022-11-29 18:01:54 +00:00
Florian Klink 83807f3aaa nixos/doc/rl-2211: document nsncd option 2022-11-29 17:00:19 +00:00
Bruno Bigras 86730cdb4b
Merge pull request #203452 from robryk/restic
nixos/tests/restic: readability & not parsing human-readable output
2022-11-29 11:35:39 -05:00
Sandro 5b408166d8
Merge pull request #203063 from fabianhauser/fix/musescore-test 2022-11-29 17:24:08 +01:00
Naïm Favier bcb5f0decc
nixos/nix-daemon: allow registry paths to be... paths
Currently paths are handled by `types.package`, whose semantics are a
bit of a mess. In particular, it converts path values to derivations
using `toDerivation`, which will lead to problems when flake `outPath`s
become paths in https://github.com/NixOS/nix/pull/6530.

This change makes the "incompatible changes" section in the above PR
obsolete: `nix.registry.nixpkgs.flake = nixpkgs;` works as expected (the
flake is copied to the store).
2022-11-29 14:18:04 +01:00
github-actions[bot] a6c80cc1ae
Merge master into staging-next 2022-11-29 12:01:28 +00:00
sandydoo 11fbf96e2b
nixos/rosetta: add release notes 2022-11-29 10:33:37 +00:00
sandydoo 624ebdc10d
nixos/rosetta: init module
Run x86_64 binaries through Rosetta inside NixOS guests running on
Apple silicon.
2022-11-29 10:27:51 +00:00
Mario Rodas 22c4865309
Merge pull request #203484 from asbachb/lxd/check-for-lxcfs
lxd: Check if `lxcfs` is enabled before adding it as service dependency
2022-11-29 01:45:25 -05:00
Bobby Rong d91da6d1fb
Merge pull request #201328 from NixOS/cinnamon
Cinnamon 5.6
2022-11-29 14:33:07 +08:00
Bobby Rong 89f3049f9d
rl-23.05: Mention cinnamon 5.6 update 2022-11-29 10:12:36 +08:00
Bobby Rong faed103fb7
cinnamon.mint-artwork: 1.6.0 -> 1.6.8
Hided home/trash/network desktop icons by default.

Also changed their default logo settings (cs_info and menu), so what we
should modify to cinnamon-symbolic is now linuxmint-logo-ring-symbolic.
We are lucky, linuxmint-logo-ring-symbolic only appears in a few other
places and non of them are useful, menu@cinnamon.org/settings-override.json
simply won't work because cinnamon-common doesn't know that file.

Also set default cursor theme, this package now directly provides those
cursor themes. And, we now default to the Mint-Y-Aqua theme.
2022-11-29 10:11:43 +08:00
github-actions[bot] e6be0713d4
Merge master into staging-next 2022-11-29 00:02:37 +00:00
Sandro 03b9249971
Merge pull request #202087 from Shawn8901/pve-load-credential 2022-11-28 23:17:26 +01:00
Jonas Heinrich 3aff916914 nixos/opensnitch: Add option to configure rules 2022-11-28 14:19:16 -05:00
Jonas Heinrich 11fdcb163e
Merge pull request #202541 from yayayayaka/gitlab-15.6.0
gitlab: 15.4.4 -> 15.6.0
2022-11-28 20:07:40 +01:00
github-actions[bot] c9cba1ab24
Merge master into staging-next 2022-11-28 18:01:25 +00:00
Benjamin Asbach 96424ddf55 lxd: Check if lxcfs is enabled before adding it as service dependency
Without that check `lxc.service` cannot be manage manually as a manual start fails due to missing dependency to `lxcfs` when not enabled.
2022-11-28 21:48:34 +04:00
Robert Obryk ccfc1d2421 nixos/tests/restic: use machine-readable output
This change causes us to stop relying on the way `restic snapshots`
formats its human-readable output.
2022-11-28 14:55:32 +01:00
Robert Obryk 7cdb313558 nixos/tests/restic: unify naming
This commit makes the correspondence between a backup job and location
of its repository clearer.
2022-11-28 14:55:28 +01:00
Robert Obryk 84e05961f8 nixos/tests/restic: cleanup 2022-11-28 14:55:21 +01:00
georgewhewell 2fc9e88c8c nixos/erigon: add extraArgs 2022-11-28 08:38:50 -05:00
github-actions[bot] 5b74f8b399
Merge master into staging-next 2022-11-28 12:01:29 +00:00
Izorkin 93de6bf9ed nixos/mastodon: add smtp assertions 2022-11-28 12:07:32 +01:00
github-actions[bot] 6aeef7531c
Merge staging-next into staging 2022-11-28 06:01:53 +00:00
Sandro 4991514dbd
Merge pull request #200114 from SuperSandro2000/changedetection-io 2022-11-28 02:54:54 +01:00
Sandro Jäckel a4f053f0e4
nixos/release-notes: add entry for #191713 2022-11-28 02:19:18 +01:00
Sandro 543a5be21a
Merge pull request #197922 from SuperSandro2000/modprobeconfig 2022-11-28 01:35:53 +01:00
Sandro 853077236a
Merge pull request #202124 from SuperSandro2000/dbus-passthru-daemon 2022-11-28 01:35:34 +01:00
github-actions[bot] 23dcd1620e
Merge staging-next into staging 2022-11-28 00:03:09 +00:00
Sandro 9185121c22
Merge pull request #201060 from gador/sqlite3-to-mysql-init 2022-11-28 00:55:45 +01:00
Vladimír Čunát cdad0ce127
nixos/filesystems: fix a typo in docs 2022-11-27 21:57:35 +01:00
Elis Hirwing 9222c47479
Merge pull request #202799 from drupol/php/november-2022-bumps
{php80,php81,php82}: November bumps
2022-11-27 20:23:42 +01:00
github-actions[bot] 38af11b9ce
Merge staging-next into staging 2022-11-27 18:01:39 +00:00
Gerd Flaig adddfe7932 Use file sink encoding json
Encoding ndjson isn't supported in recent versions.
2022-11-27 12:56:00 -05:00
Alexander Bantyev df85dda331
Merge pull request #198314 from Izorkin/update-nginx-cache
nixos/nginx: add proxyCache options
2022-11-27 18:51:09 +04:00
teutat3s 6033e4e5ed
gitea: needs gnupg in its path to sign commits
See: https://docs.gitea.io/en-us/signing/#installing-and-generating-a-gpg-key-for-gitea
2022-11-27 15:01:32 +01:00
Mario Rodas 98d30160b4
Merge pull request #202619 from NickCao/stratis
stratisd: 3.3.0 -> 3.4.0

Closes #203194
2022-11-27 08:58:59 -05:00
Martin Weinelt 8e46323226 nixos/tests/pinnwand: drop reaper, refactor steck setup 2022-11-27 13:50:44 +01:00
Martin Weinelt 2882a76651 nixos/pinnwand: convert to freeform type, drop reaper unit 2022-11-27 13:50:44 +01:00
github-actions[bot] f1f9569cde
Merge staging-next into staging 2022-11-27 00:03:04 +00:00
Martin Weinelt 35d7617d81
Merge pull request #200354 from mweinelt/kanidm-1.1.0-alpha.10 2022-11-26 22:11:29 +01:00
Flakebi 272ac9ec64 kanidm: add release not for tls requirement 2022-11-26 21:43:12 +01:00
Flakebi 887020f39c nixos/kanidm: Add tls options
Since 1.1.0-alpha.10 kanidm requires TLS to be set up or it won't start.
2022-11-26 21:42:35 +01:00
Silvan Mosberger a566d0842e
Merge pull request #172736 from infinisil/docker-nix-shell 2022-11-26 20:21:59 +01:00
github-actions[bot] 6d0026d4d6
Merge staging-next into staging 2022-11-26 18:01:45 +00:00
Guillaume Bouchard d1b6d2d0ab haskellPackages.callHackage: updating all-cabal-hashes do not invalidate callHackage
Packages built with `haskellPackages.callHackage` won't be rebuilt when
updating `all-cabal-hashes`.

The removed comment was keeping a reference to the `cabal2nix` call,
which itself depends on `all-cabal-hashes`, in order to keep this file
during a garbage collection.

The tradeoff is between:

- The current behavior: a mass rebuild, any change of `all-cabal-hashes`
  triggers a rebuild of all the packages built with `callHackage` and
  packages which depend on them. This can take hours, and may happen
  after a "small" unrelated change (i.e. an user is bumping
  `all-cabal-hashes` in order to use a new package from hackage). It
  also have global impacts in a project (long rebuild in CI, new entries
  in cache, developers need to fetch the new entries, ...). In this
  context, `cabal2nix` entries are not garbage collected.
- The new behavior: No mass rebuild, but `cabal2nix` derivations need to
  be recomputed after a garbage collection. This is usually fast (a few
  seconds by call), linear with the number of calls and should not
  happen a lot (i.e. users are not garbage collecting everyday).

See https://github.com/NixOS/nixpkgs/issues/194751 for details.
2022-11-26 19:00:56 +01:00
Silvan Mosberger 22d1a12f8b
Merge pull request #203028 from NixOS/pure-nixos-tests 2022-11-26 17:13:32 +01:00
Fabian Hauser 7dd3214c52 nixos/tests/musescore: fix 2022-11-26 14:24:45 +01:00
sternenseemann 7b9b222763 nixos/doc: update RL entry for GNAT update 2022-11-26 14:20:09 +01:00
github-actions[bot] 9ce2c2146e
Merge staging-next into staging 2022-11-26 12:02:03 +00:00
Silvan Mosberger 47813a3214 nixos/tests: Make pure
Just had @fabianhauser at the #ZurichZHF hackathon run into this, causing the
tests to fail evaluation due to some system impurity
2022-11-26 11:52:51 +01:00
Naïm Favier 3200a56924
Merge pull request #202866 from miniBill/patch-1 2022-11-26 11:31:44 +01:00
Tom Fitzhenry cc16ce5945 nixos/tests/phosh: add subtest to check the on-screen keyboard 2022-11-26 10:17:04 +01:00
Francesco Gazzetta e518978869
Merge pull request #202728 from fgaz/warzone2100/4.3.2
warzone2100: 4.3.1 -> 4.3.2, add nixos test
2022-11-26 08:54:21 +00:00
github-actions[bot] e5a45ed6d9
Merge staging-next into staging 2022-11-25 18:02:16 +00:00
Leonardo Taglialegne 6d77ca3ffd Fix typo in 22.11 release notes 2022-11-25 16:11:54 +01:00
Izorkin 5cfb7fb716 nixos/tests/mastodon: update test 2022-11-25 15:00:19 +01:00
Izorkin e8927f2631 nixos/tests/mastodon: remove CA service 2022-11-25 15:00:19 +01:00
github-actions[bot] f8c61f361e
Merge staging-next into staging 2022-11-25 12:02:07 +00:00
Maximilian Bosch 71b00e8112
Merge pull request #202816 from mayflower/fix-hedgedoc-docs
nixos/hedgedoc: configuration -> settings in option's description
2022-11-25 12:45:33 +01:00
Maximilian Bosch df50f73b57
nixos/hedgedoc: configuration -> settings in option's description
`configuration` has been renamed to `settings` and our docs should
reflect that.
2022-11-25 10:32:34 +01:00
Pol Dellaiera aa634993cd php82: 8.2.0rc6 -> 8.2.0rc7
News: https://github.com/php/php-src/blob/php-8.2.0RC7/NEWS
2022-11-25 09:32:07 +01:00
github-actions[bot] 442fcc94e1
Merge staging-next into staging 2022-11-25 06:01:40 +00:00
Martin Weinelt a4e5468bc0
Merge pull request #202187 from hmenke/alps 2022-11-25 01:34:53 +01:00
github-actions[bot] d002d690a2
Merge staging-next into staging 2022-11-25 00:02:54 +00:00
Anderson Torres 0603e83936
Merge pull request #202734 from jmbaur/flashrom-package-option
nixos/flashrom: Add package option
2022-11-24 20:13:59 -03:00
Lassulus 43b6a1ffe9
Merge pull request #202216 from helsinki-systems/feat/nixos-acme-test-20y
nixos/tests/acme/server: generate certs with longer validity
2022-11-24 21:42:50 +01:00
Jared Baur 53021e3340
nixos/flashrom: Add package option
Allow for custom flashrom package to be used.
2022-11-24 12:31:07 -08:00
Francesco Gazzetta cc0182e2d1 nixosTests.warzone2100: init 2022-11-24 20:48:42 +01:00
github-actions[bot] db4a84c993
Merge staging-next into staging 2022-11-24 18:01:45 +00:00
Luke Granger-Brown b7a9466d54
Merge pull request #202563 from mfenniak/fix-unifi-poller-service
nixos/prometheus-unifi-poller-exporter: fix executable name in systemd
2022-11-24 15:45:57 +01:00
Robert Hensing d08a22c7ce
Merge pull request #201937 from panda2134/master
netlify-cli: 6.13.2 -> 12.2.4, esbuild_netlify: 0.13.6 -> 0.14.39
2022-11-24 13:52:52 +00:00
Sandro Jäckel f4d8e64bed
nixos/modprobe: replace boot.isContainer with boot.modprobeConfig.enable 2022-11-24 14:07:46 +01:00
Sandro f92201f461
Merge pull request #197925 from SuperSandro2000/lvm2 2022-11-24 13:58:29 +01:00
Jeff Hutchison a587e528c5
Add prometheus-nut-exporter module 2022-11-24 07:50:09 -05:00
github-actions[bot] d54f37c561
Merge staging-next into staging 2022-11-24 06:01:50 +00:00
Nick Cao 7d2faad3b7
nixos/stratis: update tests to use new features 2022-11-24 10:02:20 +08:00
Sandro 4976c161f8
Merge pull request #201949 from Icy-Thought/picom-backend-egl 2022-11-24 02:38:23 +01:00
github-actions[bot] a6dbfe6906
Merge staging-next into staging 2022-11-24 00:02:35 +00:00
Martin Weinelt 8cbf9ed05b
Merge pull request #202567 from phfroidmont/master 2022-11-23 22:04:36 +01:00
Paul-Henri Froidmont b8ffc572d2
nixos/patroni: only run tests on x86_64-linux
etcd doesn't support other architectures and refuses to start
2022-11-23 21:54:19 +01:00
Mathieu Fenniak eed28ead0c Workaround for upstream crash when !datadog 2022-11-23 12:58:07 -07:00
Mathieu Fenniak e7f761fe60 Fix executable name 2022-11-23 10:31:46 -07:00
Linus Heckemann 36ca2b495f nixos/ec2: use only curl in metadata fetcher, log to console
We don't need both wget and curl, so let's use only curl (which is
part of a minimal NixOS closure, unlike wget).

Logging to the console is helpful for debugging.
2022-11-23 17:19:16 +01:00
Linus Heckemann 6fb582e030 ec2-metadata-fetcher: ignore failure when fetching metadata parts
Instances without SSH keys configured will receive a 404 from the
metadata server when attempting to fetch an SSH key. This is not an
actual problem though, and shouldn't result in the service failing.

If the metadata server cannot be reached, the script will fail at an
earlier stage when attempting to get authentication data.
2022-11-23 17:19:16 +01:00