Commit graph

32197 commits

Author SHA1 Message Date
Martin Weinelt 4472cf44eb
treewide: Make yescrypt the default algorithm for pam_unix.so
This ensures `passwd` will default to yescrypt for newly generated
passwords.
2023-03-13 07:54:27 +01:00
Martin Weinelt 0d7cd66652
nixos/users-groups: Update password scheme validation
Updates the warnings message for statefully set up passwords, now that
weak algorithms have been removed from our libxcrypt package.

Additionall we now add proper validation for hashing schemes used in
`hashedPassword`.

Neither will prevent a rebuiild, but instead issue a warning, that this
requires immediate remediation, or else users will be unable to login.

Reuses the crypt scheme ids as provided by the libxcrypt package.
2023-03-13 07:54:27 +01:00
Martin Weinelt 4e300e071b
libxcrypt: Build only with strong hashes
Effectively removes support for the following hashing algorithms
as announced in the NixOS 22.11 release notes:

- bcrypt_x ($2x$)
- sha256crypt ($5$)
- sha1crypt ($sha1$)
- sunmd5 ($md5$)
- md5crypt ($1$)
- nt ($3$)
- bdiscrypt (_)
- bigcrypt (:)
- descrypt (:)

And exposes the crypt scheme ids for enabled algorithms, so they can be
reused for validation in the users-groups module.
2023-03-13 07:54:27 +01:00
Martin Weinelt d03d74aa67
Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
- pkgs/development/python-modules/aiopulse/default.nix
- pkgs/development/python-modules/identify/default.nix
- pkgs/development/python-modules/spur/default.nix
2023-03-12 23:28:23 +01:00
Guillaume Girol db901673ea
Merge pull request #209156 from pwaller/issue-114594
nixos/grub: Name initrd-secrets by system, not by initrd
2023-03-12 18:50:33 +00:00
Vladimír Čunát 1dd94ad62f
Merge branch 'master' into staging-next 2023-03-12 09:06:28 +01:00
Martin Weinelt 2dbef07f09
Merge pull request #218126 from mweinelt/kea-dhcp-ddns-test
nixos/tests/kea: Test dhcp-ddns against knot
2023-03-11 22:58:53 +00:00
Martin Weinelt 487b6a38f3
nixos/tests/knot: Use more appropriate terminology 2023-03-11 22:23:10 +01:00
Martin Weinelt 1fc6f2c412
nixos/tests/knot: Use automatic-acl and drop explicit acls
This is more in line with expected production usage and if people use
this tests as a reference it should reflect that.
2023-03-11 22:23:10 +01:00
Martin Weinelt 2dc78b7a6d
nixos/tests/kea: Test dhcp-ddns against knot
Tests the propagation of DHCP hostnames into a DNS zone.
2023-03-11 22:23:09 +01:00
Ryan Lahfa ac93edb3ac
Merge pull request #209829 from notgne2/fix/systemd-boot-always-profile-path
nixos/systemd-boot: always use profile_path() for system closure paths
2023-03-11 22:08:18 +01:00
Janne Heß 6798068e84
Merge pull request #220555 from lilyinstarlight/feature/fwupd-uefi-capsule
nixos/fwupd: add settings option for uefi_capsule.conf
2023-03-11 20:04:32 +01:00
github-actions[bot] feb117e32c
Merge master into staging-next 2023-03-11 18:01:19 +00:00
Jonas Heinrich 161a1ca129
Merge pull request #191974 from tu-maurice/btrbk-doas
btrbk: Use sudo or doas based on configuration
2023-03-11 16:10:50 +01:00
Lily Foster 9c1d627508
Merge pull request #208414 from RossComputerGuy/feat/java-binfmt
nixos/java: add binfmt option
2023-03-11 10:04:43 -05:00
nachoslover813260 4b0bc9ea72 nixos/plasma5: add ark as an optional package instead 2023-03-11 21:29:24 +08:00
nachoslover813260 9e8f51fc6c Adding Ark as a file archiver
Since the default plasma desktop already got dolphin-plugins adding ark for archiving would make plasma desktop more complete as well
2023-03-11 21:29:24 +08:00
github-actions[bot] 140a35879a
Merge master into staging-next 2023-03-11 12:01:11 +00:00
Mario Rodas dae678ad8f
Merge pull request #186276 from typetetris/feature/add-timescaledb-toolkit
timescaledb_toolkit: init at 1.14.0
2023-03-11 06:50:54 -05:00
github-actions[bot] d165f35883
Merge master into staging-next 2023-03-11 06:01:15 +00:00
Mario Rodas 2ce9b9842b
Merge pull request #219355 from tomfitzhenry/phosh-0.25.1
phosh: 0.23 -> 0.25.1
2023-03-10 21:03:33 -05:00
github-actions[bot] 9ffe17a0be
Merge master into staging-next 2023-03-11 00:02:37 +00:00
Sergei Trofimovich 93fc62fd29
Merge pull request #220308 from amjoseph-nixpkgs/pr/hydra/fix-eval
nixos/tests/installer.nix: fix hydra eval
2023-03-10 21:54:41 +00:00
Lily Foster 6e6d31f4bc
nixos/fwupd: add settings option for uefi_capsule.conf 2023-03-10 15:25:41 -05:00
Alyssa Ross 8c70bfb9f2
Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
	pkgs/development/libraries/librsvg/default.nix
	pkgs/development/python-modules/r2pipe/default.nix
2023-03-10 18:46:21 +00:00
genesis cab32f0f86 nixos/jellyseerr: init 2023-03-10 16:18:00 +01:00
Yureka 7efee351ec
Merge branch 'gitlab-pages' of github.com:talyz/nixpkgs into HEAD 2023-03-10 14:36:25 +01:00
Martin Weinelt ef91384e6f Merge remote-tracking branch 'origin/master' into staging-next 2023-03-10 13:09:25 +01:00
Sandro bca9ab3d26
Merge pull request #205060 from jslight90/patch-8
nixos/prometheus: Add new relabel_configs actions
2023-03-10 11:19:31 +01:00
Stanisław Pitucha 5496585eb8
Merge pull request #186076 from viraptor/gemstash-service
nixos/gemstash: init module
2023-03-10 14:21:53 +11:00
Martin Weinelt da1a690688 Merge remote-tracking branch 'origin/master' into staging-next 2023-03-10 01:50:42 +01:00
Artturi eec92afc64
Merge pull request #220374 from Artturin/qt5splicing 2023-03-09 23:26:49 +02:00
Rick van Schijndel 8d8f5ede91
Merge pull request #216451 from Mindavi/hydra/systemd-target
nixos/hydra: wait for network-online before evaluator start
2023-03-09 20:53:21 +01:00
Artturin 2cbbef006b qt5: use makeScopeWithSplicing
if there is more than one qt5 attr and this file is copied then the arg
to generateSplicesForMkScope should be changed
2023-03-09 21:16:03 +02:00
Martin Weinelt bda90e08eb Merge remote-tracking branch 'origin/master' into staging-next 2023-03-09 17:03:45 +01:00
Robert Hensing 6b79fe8cdc
Merge pull request #211855 from hercules-ci/lib-modules-disabledModules-module-with-key
lib/modules: Allow an "anonymous" module with key in disabledModules
2023-03-09 16:16:37 +01:00
github-actions[bot] 39f6788067
Merge master into staging-next 2023-03-09 12:01:27 +00:00
Florian Klink 2a278943b5
Merge pull request #220232 from aanderse/nixos/systemd-oomd
nixos/systemd-oomd: avoid unintentionally creating the systemd-oomd u…
2023-03-09 10:15:56 +01:00
Adam Joseph 4d15fb3ade nixos/tests/installer.nix: fix hydra eval
Hydra Eval has been throwing these eval errors for the past four
months, which makes the yellow "Eval Errors" bubble pretty useless:

https://hydra.nixos.org/eval/1790611#tabs-errors

```
in job ‘nixos.tests.installer.separateBoot.aarch64-linux’:
error: Non-EFI boot methods are only supported on i686 / x86_64

in job ‘nixos.tests.installer.simple.aarch64-linux’:
error: Non-EFI boot methods are only supported on i686 / x86_64

in job ‘nixos.tests.installer.lvm.aarch64-linux’:
error: Non-EFI boot methods are only supported on i686 / x86_64
```

This PR moves the failure for the `!isEfi &&
!pkgs.stdenv.hostPlatform.isx86` case from eval-time to runtime, so
the failure gets categorized under the test that produced it, rather
than just being lumped in to the catch-all Eval Errors pile
which... apparently nobody cares about.
2023-03-09 00:58:26 -08:00
Domen Kožar 6a231a6eb7
Merge pull request #197613 from shyim/add-coder
coder: fix web frontend building
2023-03-09 12:04:16 +04:00
github-actions[bot] 98d00577f6
Merge master into staging-next 2023-03-09 06:01:01 +00:00
Will Fancher 46089f7efe
Merge pull request #217886 from lilyinstarlight/fix/qemu-vm-initrd-mkdir-0755
nixos/qemu-vm: fix minor typo
2023-03-08 19:17:28 -05:00
github-actions[bot] c8c1423cd9
Merge master into staging-next 2023-03-09 00:02:23 +00:00
Aaron Andersen 374fc068ec nixos/systemd-oomd: disable systemd-oomd when enableUnifiedCgroupHierarchy is false
fixup for https://github.com/NixOS/nixpkgs/pull/203596
2023-03-08 18:39:18 -05:00
Jonas Heinrich 9f10a2e82a
Merge pull request #218633 from onny/networkd-dispatcher-rules
nixos/networkd-dispatcher: add rules option
2023-03-08 20:41:06 +01:00
github-actions[bot] 7072ae38b6
Merge master into staging-next 2023-03-08 18:01:34 +00:00
Robert Hensing 1e383aada5
Merge pull request #214438 from agbrooks/master
dockerTools.buildImage: Handle base images w/ duplicate rootfs diffs
2023-03-08 18:55:20 +01:00
K900 23b0152ffb
Merge pull request #218530 from K900/murmur-dbus
nixos/murmur: expose dbus
2023-03-08 18:35:56 +03:00
K900 d8d8b55e7d nixos/murmur: expose dbus 2023-03-08 18:03:51 +03:00
Martin Weinelt 4729f61158 Merge remote-tracking branch 'origin/master' into staging-next 2023-03-08 15:04:13 +01:00