Martin Weinelt
4472cf44eb
treewide: Make yescrypt the default algorithm for pam_unix.so
...
This ensures `passwd` will default to yescrypt for newly generated
passwords.
2023-03-13 07:54:27 +01:00
Martin Weinelt
0d7cd66652
nixos/users-groups: Update password scheme validation
...
Updates the warnings message for statefully set up passwords, now that
weak algorithms have been removed from our libxcrypt package.
Additionall we now add proper validation for hashing schemes used in
`hashedPassword`.
Neither will prevent a rebuiild, but instead issue a warning, that this
requires immediate remediation, or else users will be unable to login.
Reuses the crypt scheme ids as provided by the libxcrypt package.
2023-03-13 07:54:27 +01:00
Martin Weinelt
4e300e071b
libxcrypt: Build only with strong hashes
...
Effectively removes support for the following hashing algorithms
as announced in the NixOS 22.11 release notes:
- bcrypt_x ($2x$)
- sha256crypt ($5$)
- sha1crypt ($sha1$)
- sunmd5 ($md5$)
- md5crypt ($1$)
- nt ($3$)
- bdiscrypt (_)
- bigcrypt (:)
- descrypt (:)
And exposes the crypt scheme ids for enabled algorithms, so they can be
reused for validation in the users-groups module.
2023-03-13 07:54:27 +01:00
Martin Weinelt
d03d74aa67
Merge remote-tracking branch 'origin/master' into staging-next
...
Conflicts:
- pkgs/development/python-modules/aiopulse/default.nix
- pkgs/development/python-modules/identify/default.nix
- pkgs/development/python-modules/spur/default.nix
2023-03-12 23:28:23 +01:00
Guillaume Girol
db901673ea
Merge pull request #209156 from pwaller/issue-114594
...
nixos/grub: Name initrd-secrets by system, not by initrd
2023-03-12 18:50:33 +00:00
Vladimír Čunát
1dd94ad62f
Merge branch 'master' into staging-next
2023-03-12 09:06:28 +01:00
Martin Weinelt
2dbef07f09
Merge pull request #218126 from mweinelt/kea-dhcp-ddns-test
...
nixos/tests/kea: Test dhcp-ddns against knot
2023-03-11 22:58:53 +00:00
Martin Weinelt
487b6a38f3
nixos/tests/knot: Use more appropriate terminology
2023-03-11 22:23:10 +01:00
Martin Weinelt
1fc6f2c412
nixos/tests/knot: Use automatic-acl and drop explicit acls
...
This is more in line with expected production usage and if people use
this tests as a reference it should reflect that.
2023-03-11 22:23:10 +01:00
Martin Weinelt
2dc78b7a6d
nixos/tests/kea: Test dhcp-ddns against knot
...
Tests the propagation of DHCP hostnames into a DNS zone.
2023-03-11 22:23:09 +01:00
Ryan Lahfa
ac93edb3ac
Merge pull request #209829 from notgne2/fix/systemd-boot-always-profile-path
...
nixos/systemd-boot: always use profile_path() for system closure paths
2023-03-11 22:08:18 +01:00
Janne Heß
6798068e84
Merge pull request #220555 from lilyinstarlight/feature/fwupd-uefi-capsule
...
nixos/fwupd: add settings option for uefi_capsule.conf
2023-03-11 20:04:32 +01:00
github-actions[bot]
feb117e32c
Merge master into staging-next
2023-03-11 18:01:19 +00:00
Jonas Heinrich
161a1ca129
Merge pull request #191974 from tu-maurice/btrbk-doas
...
btrbk: Use sudo or doas based on configuration
2023-03-11 16:10:50 +01:00
Lily Foster
9c1d627508
Merge pull request #208414 from RossComputerGuy/feat/java-binfmt
...
nixos/java: add binfmt option
2023-03-11 10:04:43 -05:00
nachoslover813260
4b0bc9ea72
nixos/plasma5: add ark as an optional package instead
2023-03-11 21:29:24 +08:00
nachoslover813260
9e8f51fc6c
Adding Ark as a file archiver
...
Since the default plasma desktop already got dolphin-plugins adding ark for archiving would make plasma desktop more complete as well
2023-03-11 21:29:24 +08:00
github-actions[bot]
140a35879a
Merge master into staging-next
2023-03-11 12:01:11 +00:00
Mario Rodas
dae678ad8f
Merge pull request #186276 from typetetris/feature/add-timescaledb-toolkit
...
timescaledb_toolkit: init at 1.14.0
2023-03-11 06:50:54 -05:00
github-actions[bot]
d165f35883
Merge master into staging-next
2023-03-11 06:01:15 +00:00
Mario Rodas
2ce9b9842b
Merge pull request #219355 from tomfitzhenry/phosh-0.25.1
...
phosh: 0.23 -> 0.25.1
2023-03-10 21:03:33 -05:00
github-actions[bot]
9ffe17a0be
Merge master into staging-next
2023-03-11 00:02:37 +00:00
Sergei Trofimovich
93fc62fd29
Merge pull request #220308 from amjoseph-nixpkgs/pr/hydra/fix-eval
...
nixos/tests/installer.nix: fix hydra eval
2023-03-10 21:54:41 +00:00
Lily Foster
6e6d31f4bc
nixos/fwupd: add settings option for uefi_capsule.conf
2023-03-10 15:25:41 -05:00
Alyssa Ross
8c70bfb9f2
Merge remote-tracking branch 'origin/master' into staging-next
...
Conflicts:
pkgs/development/libraries/librsvg/default.nix
pkgs/development/python-modules/r2pipe/default.nix
2023-03-10 18:46:21 +00:00
genesis
cab32f0f86
nixos/jellyseerr: init
2023-03-10 16:18:00 +01:00
Yureka
7efee351ec
Merge branch 'gitlab-pages' of github.com:talyz/nixpkgs into HEAD
2023-03-10 14:36:25 +01:00
Martin Weinelt
ef91384e6f
Merge remote-tracking branch 'origin/master' into staging-next
2023-03-10 13:09:25 +01:00
Sandro
bca9ab3d26
Merge pull request #205060 from jslight90/patch-8
...
nixos/prometheus: Add new relabel_configs actions
2023-03-10 11:19:31 +01:00
Stanisław Pitucha
5496585eb8
Merge pull request #186076 from viraptor/gemstash-service
...
nixos/gemstash: init module
2023-03-10 14:21:53 +11:00
Martin Weinelt
da1a690688
Merge remote-tracking branch 'origin/master' into staging-next
2023-03-10 01:50:42 +01:00
Artturi
eec92afc64
Merge pull request #220374 from Artturin/qt5splicing
2023-03-09 23:26:49 +02:00
Rick van Schijndel
8d8f5ede91
Merge pull request #216451 from Mindavi/hydra/systemd-target
...
nixos/hydra: wait for network-online before evaluator start
2023-03-09 20:53:21 +01:00
Artturin
2cbbef006b
qt5: use makeScopeWithSplicing
...
if there is more than one qt5 attr and this file is copied then the arg
to generateSplicesForMkScope should be changed
2023-03-09 21:16:03 +02:00
Martin Weinelt
bda90e08eb
Merge remote-tracking branch 'origin/master' into staging-next
2023-03-09 17:03:45 +01:00
Robert Hensing
6b79fe8cdc
Merge pull request #211855 from hercules-ci/lib-modules-disabledModules-module-with-key
...
lib/modules: Allow an "anonymous" module with key in disabledModules
2023-03-09 16:16:37 +01:00
github-actions[bot]
39f6788067
Merge master into staging-next
2023-03-09 12:01:27 +00:00
Florian Klink
2a278943b5
Merge pull request #220232 from aanderse/nixos/systemd-oomd
...
nixos/systemd-oomd: avoid unintentionally creating the systemd-oomd u…
2023-03-09 10:15:56 +01:00
Adam Joseph
4d15fb3ade
nixos/tests/installer.nix: fix hydra eval
...
Hydra Eval has been throwing these eval errors for the past four
months, which makes the yellow "Eval Errors" bubble pretty useless:
https://hydra.nixos.org/eval/1790611#tabs-errors
```
in job ‘nixos.tests.installer.separateBoot.aarch64-linux’:
error: Non-EFI boot methods are only supported on i686 / x86_64
in job ‘nixos.tests.installer.simple.aarch64-linux’:
error: Non-EFI boot methods are only supported on i686 / x86_64
in job ‘nixos.tests.installer.lvm.aarch64-linux’:
error: Non-EFI boot methods are only supported on i686 / x86_64
```
This PR moves the failure for the `!isEfi &&
!pkgs.stdenv.hostPlatform.isx86` case from eval-time to runtime, so
the failure gets categorized under the test that produced it, rather
than just being lumped in to the catch-all Eval Errors pile
which... apparently nobody cares about.
2023-03-09 00:58:26 -08:00
Domen Kožar
6a231a6eb7
Merge pull request #197613 from shyim/add-coder
...
coder: fix web frontend building
2023-03-09 12:04:16 +04:00
github-actions[bot]
98d00577f6
Merge master into staging-next
2023-03-09 06:01:01 +00:00
Will Fancher
46089f7efe
Merge pull request #217886 from lilyinstarlight/fix/qemu-vm-initrd-mkdir-0755
...
nixos/qemu-vm: fix minor typo
2023-03-08 19:17:28 -05:00
github-actions[bot]
c8c1423cd9
Merge master into staging-next
2023-03-09 00:02:23 +00:00
Aaron Andersen
374fc068ec
nixos/systemd-oomd: disable systemd-oomd when enableUnifiedCgroupHierarchy is false
...
fixup for https://github.com/NixOS/nixpkgs/pull/203596
2023-03-08 18:39:18 -05:00
Jonas Heinrich
9f10a2e82a
Merge pull request #218633 from onny/networkd-dispatcher-rules
...
nixos/networkd-dispatcher: add rules option
2023-03-08 20:41:06 +01:00
github-actions[bot]
7072ae38b6
Merge master into staging-next
2023-03-08 18:01:34 +00:00
Robert Hensing
1e383aada5
Merge pull request #214438 from agbrooks/master
...
dockerTools.buildImage: Handle base images w/ duplicate rootfs diffs
2023-03-08 18:55:20 +01:00
K900
23b0152ffb
Merge pull request #218530 from K900/murmur-dbus
...
nixos/murmur: expose dbus
2023-03-08 18:35:56 +03:00
K900
d8d8b55e7d
nixos/murmur: expose dbus
2023-03-08 18:03:51 +03:00
Martin Weinelt
4729f61158
Merge remote-tracking branch 'origin/master' into staging-next
2023-03-08 15:04:13 +01:00