Janne Heß
cd139069fd
Merge pull request #173668 from mweinelt/slapd-notify
...
nixos/openldap: use upstream unit defaults
2022-05-20 10:20:13 +02:00
github-actions[bot]
ce95d139b7
Merge master into staging-next
2022-05-20 06:01:19 +00:00
Bobby Rong
cee75cb765
Merge pull request #173459 from bobby285271/pantheon-updates
...
Pantheon 7 updates 2022-05-18
2022-05-20 13:12:39 +08:00
github-actions[bot]
75906ed245
Merge master into staging-next
2022-05-20 00:02:29 +00:00
Maximilian Bosch
aea3ec632d
mailman: split python env for web and mailman
2022-05-20 01:36:48 +02:00
Maximilian Bosch
72a14ea563
mailman: refactor package structure
...
* Removed unused `.package`-option.
* Added explicit postgresql support.
* Create a new meta-package for mailman to make sure each component has
the **same** python and packages can be downgraded if needed (e.g.
psycopg2 or sqlalchemy) without interfering with `pythonPackages` in any way.
* Document why certain python overrides are needed.
Closes #170035
Closes #158424
2022-05-20 01:21:20 +02:00
Izorkin
0b1340f57b
nixos/peertube: use redis.servers
2022-05-19 23:52:50 +03:00
Martin Weinelt
885d4e047b
nixos/openldap: use upstream unit defaults
...
OpenLDAP since version 2.5.4¹ supports sd_notify, so we should make use
of it.
Also updates the unit description and documentation with the values
upstream provides.
Starts slapd only after reaching `network-online.target`, which ensures
binding to specific ip addresses is possible, since `network.target`
only guarantees interfaces exist, but not that addressing is finished.
[1] https://bugs.openldap.org/show_bug.cgi?id=8707
2022-05-19 22:31:26 +02:00
Jörg Thalheim
e56ae50ed9
Merge pull request #173109 from Mic92/upterm
...
nixos/upterm: additional hardening
2022-05-19 20:16:13 +01:00
Robert Hensing
90344e9f40
Merge pull request #171163 from hercules-ci/nixpkgs-config-doc
...
Add generated `nixpkgs.config` doc to Nixpkgs manual
2022-05-19 20:51:38 +02:00
github-actions[bot]
b833efbcd7
Merge master into staging-next
2022-05-19 18:06:51 +00:00
sternenseemann
f181d591ce
Merge pull request #173623 from xaverdh/xmonad-fix-example
...
nixos/xmonad: adjust to reflect v0.17.0 update of xmonad
2022-05-19 19:18:55 +02:00
Dominik Xaver Hörl
065085b340
rl-2205: mention changes to the xmonad haskell module
2022-05-19 18:11:39 +02:00
Dominik Xaver Hörl
34a1ff28e0
nixos/xmonad: adjust example to reflect v0.17.0 update of xmonad
2022-05-19 18:10:55 +02:00
Silvan Mosberger
f224a4f1b3
Merge pull request #76315 from nek0/restya-board-config-fix2
...
restya-board: further fix for functionality
2022-05-19 16:04:41 +02:00
Niklas Hambüchen
23aee34b6f
Merge pull request #171264 from NixOS/nebula-always-restart
...
nixos/nebula: Always restart
2022-05-19 14:05:49 +02:00
github-actions[bot]
bd83e4cf98
Merge master into staging-next
2022-05-19 12:01:54 +00:00
Vladimír Čunát
90e10f361f
Merge #172668 : installation-cd: add more guest tools to NixOS graphical installation base
2022-05-19 12:12:10 +02:00
Anillc
6958412083
nixos/frr: add extraOptions option
...
Support passing options to daemons. For example, bgpd needs '-M rpki' to
enable rpki functions.
2022-05-19 16:02:47 +08:00
sternenseemann
0520dda5ec
nixos/tests/xmonad: adjust to XMonad 0.17
2022-05-19 09:15:12 +02:00
github-actions[bot]
925219f62b
Merge master into staging-next
2022-05-18 18:01:13 +00:00
Artturi
974ba4eaa6
Merge pull request #173024 from edolstra/update-fallback-paths
...
nix-fallback-paths.nix: Update to 2.8.1
2022-05-18 20:42:56 +03:00
Lassulus
e7f5c53e02
Merge pull request #173439 from mweinelt/openldap
...
openldap: 2.4.58 -> 2.6.2
2022-05-18 19:01:11 +02:00
Sandro
9e44ffc043
nixos/gnupg: default to a reasonable pinentry program on headless systems
2022-05-18 18:31:34 +02:00
Robert Hensing
36fb9668f7
Merge pull request #172855 from bolt12/bol12-all-regions
...
Added all current available AWS regions
2022-05-18 16:39:17 +02:00
Kristoffer Føllesdal
298e2ce302
nixos/grafana: add disableLoginForm option
2022-05-18 16:09:04 +02:00
Kristoffer Føllesdal
ea8f7e7bbd
nixos/grafana: add serveFromSubPath option
2022-05-18 16:08:15 +02:00
Martin Weinelt
39ef6322b5
openldap: 2.4.58 -> 2.6.2
...
https://git.openldap.org/openldap/openldap/-/blob/OPENLDAP_REL_ENG_2_5/ANNOUNCEMENT
https://git.openldap.org/openldap/openldap/-/blob/OPENLDAP_REL_ENG_2_6/ANNOUNCEMENT
Co-Authored-By: Andreas Schrägle <nix@ajs124.de>
2022-05-18 15:25:52 +02:00
github-actions[bot]
bd9c07eb24
Merge master into staging-next
2022-05-18 12:01:24 +00:00
Shea Levy
7456be85db
Merge branch 'staging-next' into staging
2022-05-18 06:40:21 -04:00
Maximilian Bosch
f1f849afb8
Merge pull request #171736 from arnottcr/nextcloud
...
nextcloud24: init at 24.0.0
2022-05-18 12:14:01 +02:00
Silvan Mosberger
26ab617a10
Merge pull request #172393 from mweinelt/openssh/sntrup761x25519-sha512-kexmethod
...
nixos/openssh: Add sntrup761x25519-sha512 kexAlgo
2022-05-18 12:03:00 +02:00
Maximilian Bosch
a0bcf1e9ea
nixos/nextcloud: styling
2022-05-18 11:50:53 +02:00
Maximilian Bosch
e46bff9569
nixos/nextcloud: upgrade instructions / info for v23
2022-05-18 11:47:50 +02:00
Maximilian Bosch
6f80d6836a
nixos/nextcloud: mariadb workaround is for versions >=24 not needed anymore
2022-05-18 11:22:31 +02:00
Lassulus
a976121d57
Merge pull request #165474 from jian-lin/fix-wireguard-systemd-unit-dependency
...
nixos/wireguard: fix dependencies on network-related targets
2022-05-18 11:16:25 +02:00
Bobby Rong
c601126bc8
nixos/pantheon: enable power-profiles-daemon
...
switchboard-plug-power is providing support for this since 2.7.0.
Note that we don't handle the conflict with tlp because we have
no way of knowing which way a user wants to resolve the conflict.
2022-05-18 14:19:53 +08:00
Bobby Rong
b93b4f71f2
nixos/pantheon: also treat gnome-font-viewer as non-core apps
2022-05-18 14:19:53 +08:00
Bobby Rong
6f23ca82bd
nixos/pantheon: use pantheon.gnome-settings-daemon
...
pantheon.gnome-settings-daemon *is* gnome.gnome-settings-daemon338,
doing this so I don't need to update this on every GSD update.
2022-05-18 13:13:54 +08:00
Robert Schütz
ae758a85d7
nixos/radicale: give access to /dev/urandom
...
A git command was failing in the test with
error: unable to get random bytes for temporary file: Operation not permitted
error: unable to create temporary file: Operation not permitted
error: .Radicale.lock: failed to insert into database
error: unable to index file '.Radicale.lock'
2022-05-17 22:23:57 +02:00
Robert Hensing
2d1a34b8cc
Merge pull request #172813 from hercules-ci/functionTo-properly
...
`lib.types.functionTo` type merging and docs
2022-05-17 22:22:21 +02:00
Cole Helbling
c0723eef37
nixos/prometheus: enable checking syntax only
...
This allows config checking with external files to not fail inside the
sandbox.
2022-05-17 10:45:49 -07:00
Maximilian Bosch
6e6ba864b3
Merge pull request #130434 from mrVanDalo/feature/fix_nextcloud_logging
...
nextcloud: fix logging parameter
2022-05-17 18:53:36 +02:00
Maximilian Bosch
ab8a7cae2c
nixos/nextcloud: remove unneeded log_level
-param
...
Actually it's called `loglevel` on both v22 and v23.
2022-05-17 18:11:40 +02:00
Maximilian Bosch
0b904cfc7e
Merge pull request #172926 from aidalgol/nextcloud-hsts-options
...
nixos/nextcloud: Add option for max-age HSTS directive
2022-05-17 18:04:25 +02:00
Daniel Beecham
7502133997
nixos/locate: clarification in warning message ( #173247 )
...
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2022-05-17 16:47:33 +02:00
Armando Santos
fdf74c7741
maintainers/create-amis.sh: Add more AWS regions
...
Add all currently available AWS regions
2022-05-17 10:20:30 +01:00
ners
fb4fc93a3e
Remove mkDefault
2022-05-17 10:36:59 +02:00
github-actions[bot]
9232271f66
Merge master into staging-next
2022-05-17 00:02:18 +00:00
Jan Tojnar
ff691ed9ba
nixos/gdm: Fix missing icons
...
Recent `wrapGAppsHook` change stops `adwaita-icon-theme` from being added to `XDG_DATA_DIRS`:
b1e73fa2e0
Since `display-manager.service` does not have `/run/current-system/sw/share` in `XDG_DATA_DIRS`, it does not pick up the globally installed icon theme either, preventing icons from showing.
Let’s make Adwaita available to fix that for now.
Fixes: https://github.com/NixOS/nixpkgs/issues/171692
2022-05-17 00:19:18 +02:00
Robert Hensing
0b02135d3b
nixosOptionsDoc: refactor
...
Thanks to Infinisil for pointing this out.
2022-05-16 22:53:23 +02:00
github-actions[bot]
e87bfef273
Merge staging-next into staging
2022-05-16 18:11:41 +00:00
github-actions[bot]
115f2f7878
Merge master into staging-next
2022-05-16 18:05:56 +00:00
Linus Heckemann
7c035dbb75
Merge pull request #156822 from xfix/wrapper-assert-argc-at-least-one
...
nixos/wrappers: require argc to be at least one
2022-05-16 18:52:51 +02:00
Ian Kerins
560ca02280
nixos/nitter: update example configuration file URL
...
It was moved.
2022-05-16 10:16:06 -05:00
Klemens Nanni
cbcc746f8f
nixos/systemd: Package only built component units
...
Account for all `with*` options causing their respective unit files to
not be built, just like the current code `withCryptsetup` already does.
This fixes build errors like the following:
```
missing /nix/store/5fafsfms64fn3ywv274ky7arhm9yq2if-systemd-250.4/example/systemd/system/systemd-importd.service
error: builder for '/nix/store/67rdli5q5akzwmqgf8q0a1yp76jgr0px-system-units.drv' failed with exit code 1
```
Found by using a customised systemd package as follows:
```
systemd.package = pkgs.systemd-small;
nixpkgs.config.packageOverrides = pkgs: {
"systemd-small" = pkgs.systemd.override {
withImportd = false;
withMachined = false;
...
};
};
```
2022-05-16 16:52:25 +02:00
Kristoffer Føllesdal
e13ec87217
nixos/grafana: add Azure AD OAuth options
2022-05-16 16:37:02 +02:00
github-actions[bot]
add75748e2
Merge staging-next into staging
2022-05-16 12:03:45 +00:00
github-actions[bot]
f10256fb7a
Merge master into staging-next
2022-05-16 12:02:51 +00:00
ners
3458d4cf89
installation-cd: remove broken virtualbox module
2022-05-16 12:34:55 +02:00
Manuel Bärenz
556ce9a40a
Merge pull request #166010 from Stunkymonkey/keepassxc-2.7.0
...
keepassxc: 2.6.6 -> 2.7.1
2022-05-16 11:08:23 +02:00
Manuel Bärenz
6423fcedb3
nixosTests.keepassxc: Simplify OCR test
2022-05-16 10:37:16 +02:00
Johannes Schleifenbaum
050e0aa6de
nixos/tests/mjolnir: set enable_registration_without_verification for matrix-synapse
2022-05-16 10:32:13 +02:00
Jörg Thalheim
9b5e36cf13
Merge pull request #173207 from SuperSandro2000/ddclient-verbose
...
nixos/ddclient: turn verbose off by default
2022-05-16 07:01:25 +01:00
github-actions[bot]
e2602ad62e
Merge staging-next into staging
2022-05-16 00:04:11 +00:00
github-actions[bot]
c8608fae00
Merge master into staging-next
2022-05-16 00:03:24 +00:00
Sandro
6c0dc6d621
nixos/ddclient: turn verbose off by default
...
verbose is a debugging setting one step noisier than debug and should only be turned on when debugging because it leaks quite some credentials and tokens in the journalctl.
2022-05-16 01:49:08 +02:00
Thiago Kenji Okada
1dc9931937
Merge pull request #173034 from Mic92/nix-ld
...
nix-ld: 1.0.0 -> 1.0.2
2022-05-15 21:18:54 +01:00
Jörg Thalheim
d5099630b1
nix-ld: 1.0.0 -> 1.0.2
2022-05-15 21:06:05 +02:00
Victor
e9b1375878
nixos/hedgedoc: fix and add config options
...
* fixed minio endpoint config option name
* add requireFreeURLAuthentication config option
2022-05-15 11:57:15 +02:00
pennae
c1115d37ff
nixos/mosquitto: fix attribute path display in assertions
2022-05-15 10:33:38 +02:00
pennae
2145dbc4fc
nixos/mosquitto: add missing listener option bind_interface
...
we expose it under settings instead of at the listener toplevel because
mosquitto seems to pick the addresses it will listen on
nondeterministically from the set of addresses configured on the
interface being bound to. encouraging its use by putting it into the
toplevel options for a listener seems inadvisable.
2022-05-15 10:33:38 +02:00
Jörg Thalheim
14e2c1e4fb
nixos/upterm: fix race condition in test
2022-05-15 09:57:52 +02:00
Jörg Thalheim
eefafb54ef
nixos/upterm: additional hardening
...
Before:
$ ps aux | grep upterm
root 2575046 0.0 0.0 1085080
6968 ? Ssl 07:03 0:00 /nix/store/ci97r1lqx4128w75k7dcsw82j5bl0n3g-upterm-0.8.2/bin/uptermd --ssh-addr [::]:2323 --private-key ssh_host_ed25519_key
After
$ ps aux | grep upterm
uptermd 2832993 0.4 0.0 1158812 6856 ? Ssl 07:08 0:00 /nix/store/ci97r1lqx4128w75k7dcsw82j5bl0n3g-upterm-0.8.2/bin/uptermd --ssh-addr [::]:2323 --private-key ssh_host_ed25519_key
2022-05-15 09:57:52 +02:00
github-actions[bot]
a41870fcba
Merge staging-next into staging
2022-05-15 06:01:50 +00:00
github-actions[bot]
a44988ac0d
Merge master into staging-next
2022-05-15 06:01:17 +00:00
Jan Tojnar
d1b77f990f
Merge branch 'staging-next' into staging
...
Conflicts:
pkgs/applications/networking/browsers/firefox/common.nix between f6c5761935
and a373324120
.
2022-05-15 07:08:29 +02:00
Aaron Andersen
82716bddb5
Merge pull request #170079 from bb2020/mbpfan
...
nixos/mbpfan: minor changes
2022-05-14 22:13:05 -04:00
github-actions[bot]
826104819b
Merge master into staging-next
2022-05-15 00:02:28 +00:00
Michael Weiss
084f2307d4
nixos/tests/chromium: Switch to nodes.machine (vs. deprecated machine attribute)
...
The old attribute is deprecated:
trace: warning: In test `chromium-stable': The `machine' attribute in NixOS
tests (pkgs.nixosTest / make-test-pyton.nix / testing-python.nix / makeTest) is
deprecated. Please use the equivalent `nodes.machine'.
Note: This is only a refactoring.
2022-05-14 23:54:41 +02:00
Eelco Dolstra
5ce31ec2fd
nix-fallback-paths.nix: Update to 2.8.1
2022-05-14 15:19:14 +02:00
Guillaume Girol
110c6e6c96
nixos/libvirtd: allow to provide both x86 and aarch64 ovmf
2022-05-14 12:00:00 +00:00
Federico Beffa
311aa6d05d
nixos/users-group: Update description of 'homeMode' option.
2022-05-14 11:59:44 +02:00
github-actions[bot]
3328bc9666
Merge master into staging-next
2022-05-14 00:02:10 +00:00
Aidan Gauland
59244e07f0
nixos/nextcloud: Add option for max-age HSTS directive
...
* Add an option services.nextcloud.nginx.hstsMaxAge for setting the max-age
directive of the Strict-Transport-Security HTTP header.
* Make the Strict-Transport-Security HTTP header in the Nginx virtualhost block
dependant upon the option services.nextcloud.https instead of
services.nextcloud.nginx.recommendedHttpHeaders, as this header makes no sense
when not using HTTPS. (Closes #169465 )
2022-05-14 09:04:45 +12:00
adisbladis
fb222e0086
Merge pull request #172820 from alyssais/compressed-firmware
...
Compressed firmware
2022-05-14 02:38:48 +08:00
github-actions[bot]
fe71877bbd
Merge staging-next into staging
2022-05-13 18:03:04 +00:00
github-actions[bot]
bcb22e9a7b
Merge master into staging-next
2022-05-13 18:01:23 +00:00
Martin Weinelt
3607d087ec
Merge pull request #112682 from hax404/upterm
2022-05-13 18:24:54 +02:00
fleaz
cd7e4a1b32
nixos/tests/uptermd: init
2022-05-13 17:45:02 +02:00
Georg Haas
18ffb9690c
nixos/uptermd: init
2022-05-13 17:44:44 +02:00
Sandro
c1b015df49
Merge pull request #172261 from jbedo/mercury
2022-05-13 17:30:11 +02:00
Alyssa Ross
8aa8e0ce7f
nixos/udev: compress all firmware if supported
...
This should be a significant disk space saving for most NixOS
installations. This method is a bit more complicated than doing it in
the postInstall for the firmware derivations, but this way it's
automatic, so each firmware package doesn't have to separately
implement its compression.
Currently, only xz compression is supported, but it's likely that
future versions of Linux will additionally support zstd, so I've
written the code in such a way that it would be very easy to implement
zstd compression for those kernels when they arrive, falling back to
xz for older (current) kernels.
I chose the highest possible level of compression (xz -9) because even
at this level, decompression time is negligible. Here's how long it took
to decompress every firmware file my laptop uses:
i915/kbl_dmc_ver1_04.bin 2ms
regulatory.db 4ms
regulatory.db.p7s 3ms
iwlwifi-7265D-29.ucode 62ms
9d71-GOOGLE-EVEMAX-0-tplg.bin 22ms
intel/dsp_fw_kbl.bin 65ms
dsp_lib_dsm_core_spt_release.bin 6ms
intel/ibt-hw-37.8.10-fw-22.50.19.14.f.bseq 7ms
And since booting NixOS is a parallel process, it's unlikely (but
difficult to measure) that the time to user interaction was held up at
all by most of these.
Fixes (partially?) #148197
2022-05-13 14:36:34 +00:00
Jelle Besseling
0f69a517a4
nixos/mastodon: use redis.servers
2022-05-13 15:39:44 +02:00
Maximilian Bosch
4d0e1bfb3a
Merge pull request #172381 from mayflower/atlassian-service-restart
...
nixos/{jira,crowd,confluence}: restart service on failure
2022-05-13 14:10:30 +02:00
github-actions[bot]
814126147f
Merge staging-next into staging
2022-05-13 12:02:03 +00:00
github-actions[bot]
477cc9463d
Merge master into staging-next
2022-05-13 12:01:27 +00:00
Mario Rodas
9457a82e42
Merge pull request #171459 from ivan/postgresql-is-14
...
nixos/postgresql: use postgres 14 for 22.05
2022-05-13 06:44:25 -05:00
Artturi
a0ed85ef29
Merge pull request #165876 from tpwrules/slim-eltorito
...
iso-image: slim down UEFI El Torito image
2022-05-13 14:30:38 +03:00
Linus Heckemann
a7ee915179
Merge pull request #172378 from Mindavi/hydra-updates-3
...
Hydra updates 3
2022-05-13 12:55:53 +02:00
Max Hausch
2802e8f05c
nixos/hedgedoc: Set StateDirectory to workDir and uploadsPath
...
This is needed to make uploading files possible in the hedgedoc ui.
2022-05-13 10:27:51 +02:00
Robert Hensing
062bc5e74a
lib.types.functionTo: Add pseudo-attr to generated docs
2022-05-13 09:01:05 +02:00
github-actions[bot]
97ea1401a7
Merge master into staging-next
2022-05-13 00:03:00 +00:00
Justin Bedo
0d41bc81d6
mercury: 20.06.1 -> 22.01.1
2022-05-13 08:48:16 +10:00
Silvan Mosberger
486992aca7
Merge pull request #160752 from svrana/desktop-manager-script-start
...
desktop manager script: start properly
2022-05-12 20:49:13 +02:00
Silvan Mosberger
fd50826952
Merge pull request #104457 from ju1m/public-inbox
...
Update public-inbox to 1.8.0 and add systemd services
2022-05-12 20:46:39 +02:00
Sandro
d89d7af1ba
Merge pull request #171165 from justinas/teleport-9
...
teleport: 8.1.3 -> 9.1.2, add rdpclient
2022-05-12 20:08:26 +02:00
github-actions[bot]
6b23d26afc
Merge master into staging-next
2022-05-12 18:02:25 +00:00
Alyssa Ross
85d792a928
nixos: don't put non-firmware in hardware.firmware
...
These two packages don't have a lib/firmware directory, so putting
them in hardware.firmware has no effect. This will become a hard
error once firmware compression is implemented.
(In the case of Linux, the firmware was all moved to linux-firmware.)
2022-05-12 15:17:51 +00:00
Sandro
03c48beada
Merge pull request #172681 from LeSuisse/box-php-parallel-lint-zhf
...
php81Packages.php-parallel-lint: fix the build
2022-05-12 14:18:44 +02:00
Daniel Poelzleithner
64878e3a67
automysqlbackp: fix missing permissions for mysqldump
...
automysqldump passes the --events flag, but without the EVENTS permission a error occures:
> mysqldump: Couldn't execute 'show events': Access denied for user 'automysqlbackup'@'localhost' to database 'mysql' (1044)
2022-05-12 13:17:14 +02:00
Thomas Gerbet
3c90c28124
phpPackages.box: 2.7.5 -> 3.16.0
...
The source has been moved to the new upstream since Box2 is abandonned.
2022-05-12 11:42:27 +02:00
ners
49945f07cc
installation-cd: add more guest tools to graphical installation base
2022-05-12 09:36:49 +02:00
Julien Moutinho
c646d375d3
nixos/public-inbox: support enabling confinement
...
Add support for enabling confinement
but does not enable it by default yet
because so far no module within NixOS uses confinement
hence that would set a precedent.
2022-05-12 01:56:46 +02:00
Julien Moutinho
0e290442ba
nixos/public-inbox: add tests
2022-05-12 01:56:16 +02:00
Julien Moutinho
8514800c42
nixos/public-inbox: init
2022-05-12 01:56:15 +02:00
Jan Tojnar
5af93e6908
Merge branch 'staging-next' into staging
2022-05-12 01:24:26 +02:00
Artturi
c7b10b6df9
Merge pull request #172131 from euank/ena-2.7.1
...
ena: 2.5.0 -> 2.7.1 & nixos/amazon-image: default to 5.15 kernel
2022-05-12 01:38:24 +03:00
oxalica
085a5256c1
nixos/btrbk: inherit lib functions to simplify use-sites
2022-05-12 05:55:39 +08:00
oxalica
60e13131b6
nixos/btrbk: allow instances without timers
...
This allows btrbk instances without a triggering timer by setting
`onCalendar` to `null`.
This is useful for manual-starting only btrbk backup settings.
2022-05-12 05:55:17 +08:00
github-actions[bot]
7dbfbc2e90
Merge staging-next into staging
2022-05-11 18:10:52 +00:00
Thiago Kenji Okada
eb6c3e1591
Merge pull request #171101 from NickCao/dendrite-bump
...
dendrite: 0.8.1 -> 0.8.4
2022-05-11 14:27:50 +01:00
Nick Cao
82f0b53588
dendrite: 0.8.1 -> 0.8.4
2022-05-11 18:40:05 +08:00
github-actions[bot]
2d62d4f8e6
Merge staging-next into staging
2022-05-11 06:02:11 +00:00
Rick van Schijndel
3a7f7c1153
hydra-unstable -> hydra_unstable
2022-05-10 23:32:02 +02:00
Martin Weinelt
fa7ce6bc7f
nixos/openssh: Add sntrup761x25519-sha512 kexAlgo
...
Introduced in OpenSSH 9.0 it became the part of the default kexAlgorithm
selection, visibile in sshd_config(5).
It is also enabled by default in the OpenSSH client, as can be seen from
$ ssh -Q KexAlgorithms
Also clarifies that we use the referenced documents as the lower bound,
given that they haven't been updated for 5-7y.
2022-05-10 23:20:54 +02:00
Maximilian Bosch
6f9099fa62
nixos/{jira,crowd,confluence}: restart service on failure
...
In case of unexpected failures of the services - such as an OOM - it
shouldn't be necessary for an administrator to restart the service by
hand (which is usually sufficient). Instead, this should happen
automatically.
Also, I decided to increase the interval between restart attempts from
100ms[1] to 10s for a small grace period as suggested by several online
resources[2][3].
[1] See `systemd.service(5)`
[2] https://it.megocollector.com/linux/create-systemd-services-for-atlassian-apps/
[3] https://anteru.net/blog/2017/jira-confluence-with-systemd-on-centos/
2022-05-10 22:31:22 +02:00
Rick van Schijndel
f433d91bb3
anbox: drop kernel modules package
...
All builds are broken:
- 4.14
- 4.19
- 5.4
https://hydra.nixos.org/eval/1761072?filter=anbox&compare=1760998&full=#tabs-still-fail
Let's just drop it.
This leaves the anbox module possibly in a broken-ish state,
but I'm not sure what to do about it.
2022-05-10 21:15:48 +02:00
github-actions[bot]
3a79190750
Merge staging-next into staging
2022-05-10 18:01:50 +00:00
D Anzorge
271905a33f
minetest: add aliases and release notes for v4 deprecation
2022-05-10 19:26:25 +02:00
Lara
8f54cca448
nixos/doc: Add Snipe-IT to 22.05 release notes
2022-05-10 16:57:21 +02:00
Lara
9cb388739f
nixos/snipe-it: init
...
Snipe-IT is a free open source IT asset/license management system
https://snipeitapp.com/
2022-05-10 16:57:21 +02:00
bb2020
8bdcffc4fe
nixos/mbpfan: minor changes
2022-05-10 15:40:17 +03:00
Justinas Stankevicius
25cf5ebcd0
teleport: 8.1.3 -> 9.1.2
2022-05-09 23:35:46 +03:00
github-actions[bot]
629adb097a
Merge staging-next into staging
2022-05-09 18:01:59 +00:00
Artturi
4ae23f5c7d
Merge pull request #156071 from Madouura/dev/bcachefs-installer
...
nixos/tests/installer: add bcachefs tests
2022-05-09 19:48:16 +03:00
Robert Hensing
ebf0465d09
Merge remote-tracking branch 'upstream/master' into testers
2022-05-09 14:27:13 +02:00
Robert Hensing
ae172a2bb4
treewide: nixosTest -> testers.nixosTest
2022-05-09 14:16:06 +02:00
github-actions[bot]
27575e98ee
Merge staging-next into staging
2022-05-09 12:08:45 +00:00
Klemens Nanni
199933efdf
nixos/mandoc: Leave shell argument quoting to nix
...
Manually crafting a quoted string that otherwise lacks any safe-guards
looks odd.
Use `escapeShellArg` instead before prepending the path.
2022-05-09 10:48:54 +02:00
Janne Heß
e6fb1e63d1
Merge pull request #171650 from helsinki-systems/feat/config-systemd-package
...
treewide: pkgs.systemd -> config.systemd.package
2022-05-09 10:23:04 +02:00
Euan Kemp
35cfe2c29c
nixos/amazon-image: default to 5.15 kernel
...
Previously, it was held back due to the ENA driver not building on the
current default (5.15). The previous commit bumps the ENA driver, which
allows 5.15 to work.
2022-05-08 21:13:50 -07:00
github-actions[bot]
31938a3f5c
Merge staging-next into staging
2022-05-09 00:03:28 +00:00
github-actions[bot]
f39e774f11
Merge master into staging-next
2022-05-09 00:02:27 +00:00
Sandro
8803756fd3
Merge pull request #172072 from ivan/tinc-unbreak
...
nixos/tinc: unbreak the service
2022-05-09 01:27:12 +02:00
Sandro
b196dea22d
Merge pull request #172080 from wentasah/usbrelay-1.0
...
usbrelay: 0.9 -> 1.0
2022-05-09 01:02:08 +02:00
Niklaus Giger
1d82f62aef
UHK-agent: Support for Ultimate Hacking Keyboard udev-rules and configuration application ( #132420 )
...
* maintainers: add ngiger
* uhk-agent: init at 1.5.17
* Apply suggestions from code review
* Update pkgs/os-specific/linux/uhk-agent/default.nix
* Apply suggestions from code review
* Update pkgs/os-specific/linux/uhk-agent/default.nix
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2022-05-08 22:40:52 +02:00
Michal Sojka
26ec7081d6
nixos/usbrelayd: set myself as module maintainer
...
I forgot setting that when creating the module.
2022-05-08 21:44:50 +02:00
Michal Sojka
3effbca0bc
usbrelay: 0.9 -> 1.0
2022-05-08 21:16:32 +02:00
ajs124
e4a1b1aacd
Merge pull request #171588 from mweinelt/tools-userpkgs
...
nixos/tools: move firefox into user packages
2022-05-08 19:02:47 +01:00
github-actions[bot]
6ab1fe48df
Merge staging-next into staging
2022-05-08 18:01:43 +00:00
github-actions[bot]
e92815729d
Merge master into staging-next
2022-05-08 18:01:10 +00:00
Ivan Kozik
9db1d1782b
nixos/tinc: unbreak the service
...
The user is actually tinc.${network}, as Mic92 points out in
https://github.com/NixOS/nixpkgs/pull/171703#discussion_r867506032
Sorry, I broke this in https://github.com/NixOS/nixpkgs/pull/171703 earlier.
coreutils 9.1 chown does not complain in this case with a valid dotted user.
2022-05-08 16:04:20 +00:00
Sandro
befb337461
Merge pull request #169216 from Shawn8901/fix_prometheus_config_generation
...
nixos/prometheus: use pkgs.formats.json.generate to write config file
2022-05-08 15:09:09 +02:00
github-actions[bot]
c5da241985
Merge staging-next into staging
2022-05-08 12:01:39 +00:00
github-actions[bot]
eaaed3f1d2
Merge master into staging-next
2022-05-08 12:01:07 +00:00
Artturi
3c8e6248cb
Merge pull request #172040 from K900/fix-installer-eval
...
installation-cd-base: fix eval
2022-05-08 13:50:10 +03:00
Robert Schütz
2ddfd7e81b
nixos/borgmatic: use pkgs.formats.yaml
2022-05-08 01:08:28 -07:00
K900
e994576b0d
installation-cd-base: fix eval
2022-05-08 11:08:10 +03:00
github-actions[bot]
d2d66da45b
Merge staging-next into staging
2022-05-07 18:01:36 +00:00
github-actions[bot]
84277e82a5
Merge master into staging-next
2022-05-07 18:01:03 +00:00
Florian Klink
dbf2b9152f
nixos/tests/systemd-nspawn: add test for machinectl pull-tar
...
This will package up the closure of pkgs.hello in a tarball, and will
later on verify machinectl pull-tar properly unpacked it, serving as a
regression test for #108158 .
Closes #108158
2022-05-07 18:14:46 +02:00
Rick van Schijndel
17c252aab1
Merge pull request #153940 from tomfitzhenry/phosh-service
...
nixos/phosh: add Phosh, the Phone Shell
2022-05-07 17:56:44 +02:00
Artturi
1d09b16b0c
Merge pull request #171709 from avdv/fix-illum-segfault-and-restart
...
illum: Prevent segfault when unplugging keyboards
2022-05-07 17:40:52 +03:00
github-actions[bot]
00e5877c2f
Merge staging-next into staging
2022-05-07 00:02:47 +00:00
github-actions[bot]
fa99b3742a
Merge master into staging-next
2022-05-07 00:02:09 +00:00
Sandro
72565373a4
Merge pull request #170912 from Baughn/master
2022-05-07 01:14:08 +02:00
Maximilian Bosch
f0bb39d4b7
Merge pull request #167327 from lheckemann/networkd-usedhcp
...
nixos/networkd: reimplement useDHCP in a sensible way
2022-05-07 00:05:44 +02:00
Sandro
398cf5bf2d
Merge pull request #164698 from illustris/proxmox-lxc
2022-05-06 23:35:13 +02:00
Sandro
d21ebc62bf
Merge pull request #170851 from danderson/danderson/ts-warn-rpf
...
nixos/tailscale: warn if strict reverse path filtering is in use.
2022-05-06 23:21:50 +02:00
github-actions[bot]
730d96c6bd
Merge staging-next into staging
2022-05-06 18:01:53 +00:00
github-actions[bot]
6c361fbbd8
Merge master into staging-next
2022-05-06 18:01:18 +00:00
Svein Ove Aas
dcade93a25
factorio: Add loadLatestSave
2022-05-06 17:50:35 +01:00
Félix Baylac-Jacqué
7f76009e10
nixosTests.pleroma: fix test, remove toot patch
...
Initially applied via e7f6370701
, then
reverted by 96aaf29234
.
Re-applying this patch: the pleroma NixOS test is broken without it.
It was originally impossible to login in toot without having an
interactive shell. I opened https://github.com/ihabunek/toot/pull/180
upstream to fix that and fetch this patch for this test.
The author decided to fix the issue using a slightly different
approach at a3eb5dca24
Because of this upstream fix, our custom patch does not apply anymore.
Using that stdin-based login upstream feature.
Pointing pleroma_ctl to the right RELEASE_COOKIE as well.
2022-05-06 17:45:42 +02:00
Maximilian Bosch
f4e5bd8064
nixos/nixos-generate-config: update comment for useDHCP
2022-05-06 16:56:47 +02:00
Vladimír Čunát
8ad52489e9
Merge branch 'master' into staging-next
2022-05-06 16:07:25 +02:00
Maximilian Bosch
7dbfd6b997
Merge pull request #171783 from Ma27/linux-kernel-updates
...
Linux kernels 2022-05-06
2022-05-06 14:05:28 +02:00
github-actions[bot]
ad713fb84e
Merge staging-next into staging
2022-05-06 12:02:39 +00:00
github-actions[bot]
6e0aca3c43
Merge master into staging-next
2022-05-06 12:02:02 +00:00
Janne Heß
764d77f4c3
Merge pull request #124261 from helsinki-systems/feat/state-version-default-warn
...
nixos/version: Warn about using the default of system.stateVersion
2022-05-06 13:20:43 +02:00
Yureka
96aaf29234
Revert "Merge pull request #164398 from NinjaTrappeur/nin/pleroma-wrappers"
...
This reverts commit 05417a66e7
, reversing
changes made to 53e4f8d237
.
2022-05-06 12:38:28 +02:00
Maximilian Bosch
b79d9a846b
linux/hardened/patches/5.17: init at 5.17.5-hardened1
2022-05-06 10:17:59 +02:00
github-actions[bot]
4c4d0d6bc3
Merge staging-next into staging
2022-05-06 06:02:20 +00:00
github-actions[bot]
ff5c4d3404
Merge master into staging-next
2022-05-06 06:01:36 +00:00
Rick van Schijndel
32bebf42ea
Merge pull request #171703 from ivan/chown-colon
...
treewide: chown user:group instead of user.group to fix warnings from coreutils 9.1
2022-05-06 07:20:40 +02:00
David Anderson
3fdac0f981
nixos/tailscale: warn if strict reverse path filtering is in use.
...
Tailscale uses policy routing to enable certain traffic to bypass
routes that lead into the Tailscale mesh. NixOS's reverse path
filtering setup doesn't understand the policy routing at play,
and so incorrectly interprets some of this traffic as spoofed.
Since this only breaks some features of Tailscale, merely warn
users about it, rather than make it a hard error.
Updates tailscale/tailscale#4432
Signed-off-by: David Anderson <dave@natulte.net>
2022-05-05 18:28:48 -07:00
Sandro
b9e7f61c72
Merge pull request #171747 from danderson/danderson/tailscale-getent
...
nixos/tailscale: add glibc to PATH.
2022-05-06 03:10:00 +02:00
Sandro
e5e30371bc
Merge pull request #170210 from danderson/danderson/restart-tailscaled
...
nixos/tailscale: use systemctl restart during activation.
2022-05-06 03:09:01 +02:00
Colin Arnott
ecd8d42397
nextcloud24: init at 24.0.0
...
Added Nextcloud 23 and set it as the default Nextcloud version for the
NixOS module. Added PHP 8.1 as an option for phpPackage and default for
Nextcloud ≥ 24.
2022-05-06 00:37:39 +00:00
David Anderson
67b1fac192
nixos/tailscale: add glibc to PATH.
...
For some features, tailscaled uses getent(1) to get the shell
of OS users. getent(1) is in the glibc derivation. Without this
derivation in the path, tailscale falls back to /bin/sh for all
users.
Signed-off-by: David Anderson <dave@natulte.net>
2022-05-05 17:09:27 -07:00
github-actions[bot]
4cab9aed76
Merge staging-next into staging
2022-05-06 00:02:53 +00:00
github-actions[bot]
b962dee3e7
Merge master into staging-next
2022-05-06 00:02:16 +00:00
Bernardo Meurer
323fb482fb
Merge pull request #171634 from luochen1990/patch-2
...
Fix wg-quick: always generate postUp issue.
2022-05-05 15:05:19 -07:00
Ivan Kozik
59a76614f3
treewide: chown user:group instead of user.group to fix warnings from coreutils 9.1
2022-05-05 22:05:18 +00:00
Ivan Kozik
f18cc2cf02
nixos/security/wrappers: chown user:group instead of user.group to fix warnings from coreutils 9.1
...
activating the configuration...
setting up /etc...
chown: warning: '.' should be ':': ‘root.root’
chown: warning: '.' should be ':': ‘root.messagebus’
chown: warning: '.' should be ':': ‘root.root’
chown: warning: '.' should be ':': ‘root.root’
chown: warning: '.' should be ':': ‘root.root’
chown: warning: '.' should be ':': ‘root.root’
chown: warning: '.' should be ':': ‘root.root’
chown: warning: '.' should be ':': ‘root.root’
chown: warning: '.' should be ':': ‘root.root’
chown: warning: '.' should be ':': ‘root.root’
chown: warning: '.' should be ':': ‘root.root’
chown: warning: '.' should be ':': ‘root.root’
chown: warning: '.' should be ':': ‘root.root’
chown: warning: '.' should be ':': ‘root.root’
chown: warning: '.' should be ':': ‘root.root’
chown: warning: '.' should be ':': ‘root.root’
reloading user units for root...
2022-05-05 22:05:18 +00:00
Robert Schütz
ccf42c7987
nixos/home-assistant: fix openFirewall
2022-05-05 15:04:46 -07:00
Bernardo Meurer
c4ad7519ef
Merge pull request #170136 from helsinki-systems/feat/systemd-stage-1-plymouth
...
nixos/plymouth: Add systemd stage 1 support
2022-05-05 14:49:26 -07:00
Martin Weinelt
e237f3e459
Merge pull request #171716 from piegamesde/heisenbridge-module
2022-05-05 23:30:09 +02:00
piegames
6b1dcbb1db
nixos/heisenbridge: Fix stupid typo
2022-05-05 23:26:01 +02:00
Sandro
836c52e625
Merge pull request #167208 from devplayer0/fix/missing-systemd-nspawn-options
...
nixos/systemd/nspawn: Add missing nspawn unit options
2022-05-05 22:58:59 +02:00
Artturi
0a07034866
Merge pull request #171688 from erictapen/kanidm
2022-05-05 23:45:27 +03:00
Claudio Bley
fd3d1a834b
illum: Restart service on failure
...
If there is a fatal error and illum exits, it should be safe to restart it.
2022-05-05 22:31:56 +02:00
github-actions[bot]
aba90d9366
Merge master into staging-next
2022-05-05 18:05:32 +00:00
Janne Heß
57cd07f3a9
treewide: pkgs.systemd -> config.systemd.package
...
This ensures there is only one systemd package when e.g. testing the
next systemd version.
2022-05-05 20:00:31 +02:00
Jan Tojnar
a1439bc965
Merge pull request #171071 from jtojnar/fdo-updates
...
Update some low-key fdo packages
2022-05-05 19:55:24 +02:00
Kerstin Humm
881a8cbe80
nixos/kanidm: fix release notes
2022-05-05 19:18:41 +02:00
Kerstin Humm
c126babb28
nixos/kanidm: init
...
Co-Authored-By: Martin Weinelt <mweinelt@users.noreply.github.com>
Co-Authored-By: Flakebi <flakebi@t-online.de>
2022-05-05 19:06:13 +02:00
Will Fancher
b0431d9d91
Merge pull request #168269 from ElvishJerricco/systemd-stage-1-zfs
...
nixos/stage-1-systemd: ZFS support
2022-05-05 13:00:36 -04:00
Tom Fitzhenry
e0daeb01a7
programs/phosh: merge into services/x11/desktop-managers/phosh
2022-05-06 00:04:48 +10:00
Tom Fitzhenry
1d7cd163ce
nixos/phosh: add Phosh, the Phone Shell
2022-05-06 00:04:48 +10:00
github-actions[bot]
5b965b95d5
Merge master into staging-next
2022-05-05 12:04:22 +00:00
Robert Hensing
28f99aad31
nixos/testing-python.nix: Set meta.mainProgram
2022-05-05 12:33:57 +02:00
Janne Heß
4c5e7bde3e
nixos/matrix-synapse: Add a defaultText
2022-05-05 12:22:37 +02:00
Janne Heß
e2703d2697
nixos/version: Warn about using the default of system.stateVersion
2022-05-05 12:22:31 +02:00
Arnout Engelen
3275c08534
Merge pull request #171382 from Patryk27/nixos/improve-lxd-tests
...
nixos/lxd: improve tests
2022-05-05 11:18:52 +02:00
LuoChen
e4b942eccf
wg-quick: fix postUp always generated issue
2022-05-05 16:08:46 +08:00
github-actions[bot]
375b571b04
Merge master into staging-next
2022-05-05 06:01:10 +00:00
Artturi
0b64a2d69a
Merge pull request #167108 from aaronjheng/oath-toolkit
...
oath-toolkit: Rename from oathToolkit to oath-toolkit
2022-05-05 03:58:39 +03:00
Madoura
39b9cf311b
nixos/tests/installer: add bcachefs tests
2022-05-04 19:26:43 -05:00
github-actions[bot]
ae265ec922
Merge master into staging-next
2022-05-05 00:02:31 +00:00
Martin Weinelt
6051f8028d
nixos/tools: move firefox into user packages
...
Installing Firefox is a good example for a package that could be
installed as a user, since it is a graphical one.
Also use thunderbird as a second example.
2022-05-05 00:41:55 +02:00
Will Fancher
f989e13983
zfs: Support zfs_force=y on the command line as well.
2022-05-04 18:32:27 -04:00
Jan Tojnar
ec0ae174f8
Revert "networkmanager-applet: rename from networkmanagerapplet"
...
network-manager-applet uses differrent naming scheme from the VPN plug-ins.
Let’s revert to the previous state, for now, to fix eval. We can do the rename later.
This reverts commit cecb014d5d
.
2022-05-04 23:29:42 +02:00
illustris
64a204d1a7
nixos/proxmox-lxc: use hostname provided by proxmox
2022-05-05 01:05:04 +05:30
Vladimír Čunát
453f19bb85
Merge branch 'master' into staging-next
2022-05-04 21:02:39 +02:00
Sandro
7e4329608c
Merge pull request #170952 from SuperSandro2000/firewalld
...
firewalld: init at 1.1.1
2022-05-04 20:51:27 +02:00
Kim Lindberger
ad5e4dacb4
Merge pull request #171066 from felixsinger/pkgs/keycloak/update
...
keycloak: 17.0.1 -> 18.0.0
2022-05-04 20:51:11 +02:00
Rick van Schijndel
14ad619e32
Merge pull request #171488 from K900/openssh-test-timeouts
...
nixos/tests/openssh: add timeouts to all ssh invocations
2022-05-04 20:05:46 +02:00
github-actions[bot]
747719f235
Merge master into staging-next
2022-05-04 18:01:28 +00:00
Bernardo Meurer
9a41fab23f
Merge pull request #171021 from helsinki-systems/feat/systemd-stage-1-udev-improvements
2022-05-04 09:09:09 -07:00
Sandro
451e27e302
Merge pull request #169370 from gador/pgadmin-update-6.8
...
Pgadmin update 6.8, fix build breakage on master
2022-05-04 18:03:32 +02:00
Sandro
b59d447a16
Merge pull request #171490 from danielfullmer/fix-ssh-hostkey
2022-05-04 14:29:29 +02:00
Sandro
aacb7ef4a6
Merge pull request #169966 from deinferno/vmware-host
2022-05-04 14:13:12 +02:00
github-actions[bot]
16684f8bd3
Merge master into staging-next
2022-05-04 12:01:10 +00:00
Artturi
f0e48dd98b
Merge pull request #119942 from hercules-ci/mkDerivation-overridable-recursive-attributes
2022-05-04 14:31:50 +03:00
Martin Weinelt
1d2a0b801a
nixos/tests/matrix-appservice-irc: disable registration verification
...
The test would previously error out like this:
> synapse_homeserver[1155]: synapse.config._base.ConfigError: You have
> enabled open registration without any verification. This is a known
> vector for spam and abuse. If you would like to allow public
> registration, please consider adding email, captcha, or token-based
> verification. Otherwise this check can be removed by setting the
> `enable_registration_without_verification` config option to `true`.
2022-05-04 10:25:20 +02:00
Pascal Bach
bf905c190c
Merge pull request #171390 from DarkKirb/matrix-1.58
...
matrix-synapse: 1.57.0 -> 1.58.0
2022-05-04 09:22:45 +02:00
github-actions[bot]
23791ce6d0
Merge staging-next into staging
2022-05-04 06:02:12 +00:00
Daniel Fullmer
ad38a2a646
nixos/ssh: remove empty host key files before generating new ones
...
In a previous PR [1], the conditional to generate a new host key file
was changed to also include the case when the file exists, but has zero
size. This could occur when the system is uncleanly powered off shortly
after first boot.
However, ssh-keygen prompts the user before overwriting a file. For
example:
$ touch hi
$ ssh-keygen -f hi
Generating public/private rsa key pair.
hi already exists.
Overwrite (y/n)?
So, lets just try to remove the empty file (if it exists) before running
ssh-keygen.
[1] https://github.com/NixOS/nixpkgs/pull/141258
2022-05-03 22:09:43 -07:00
K900
79265fba34
nixos/tests/openssh: add timeouts to all ssh invocations
...
It might still lock up, but at least it won't lock up for 10 hours.
2022-05-04 07:58:52 +03:00
Artturi
c8bbc62a64
Merge pull request #171152 from Luflosi/thefuck-improvements
...
nixos/thefuck: fix programs.thefuck.alias for fish
2022-05-04 05:32:40 +03:00
github-actions[bot]
ee7e3f30f3
Merge staging-next into staging
2022-05-04 00:02:57 +00:00
Ivan Kozik
96a8c0ac23
nixos/postgresql: use postgres 14 for 22.05
...
postgresql: alias to postgresql_14
2022-05-03 22:23:08 +00:00
fleaz
8b250ec5af
nixos/r53-ddns: init
2022-05-04 00:16:18 +02:00
deinferno
3e8e52bb91
nixos/vmware-host: init at 16.2.3
2022-05-04 01:58:32 +05:00
davidak
01143883ff
Merge pull request #161788 from vlinkz/calamares-nixos
...
calamares: fix calamares modules, add nixos modules, and add new iso
2022-05-03 22:55:24 +02:00
Jan Tojnar
b8b17d9b8e
power-profiles-daemon: 0.10.1 → 0.11.1
...
https://gitlab.freedesktop.org/hadess/power-profiles-daemon/-/releases/0.11
https://gitlab.freedesktop.org/hadess/power-profiles-daemon/-/releases/0.11.1
2022-05-03 22:51:48 +02:00
Will Fancher
e0b5ba5479
nixos: Don't use grep to request ZFS credentials, and consider keystatus
2022-05-03 14:56:50 -04:00
Will Fancher
3a71b11329
nixos: Include zfsroot in installer-systemd-stage-1 tests
2022-05-03 14:56:44 -04:00
github-actions[bot]
51a899bdc1
Merge staging-next into staging
2022-05-03 18:10:46 +00:00