Commit graph

32272 commits

Author SHA1 Message Date
github-actions[bot] 4632436394
Merge staging-next into staging 2023-03-16 06:02:13 +00:00
Adam Joseph 3da93fd582
Merge pull request #221365 from amjoseph-nixpkgs/pr/nixos/release/comment
nixos/release-small.nix: add instructions for running individual jobs
2023-03-16 02:54:05 +00:00
Thiago Kenji Okada 62d946fca0 doc: document i3status-rust 0.30.x breaking changes 2023-03-15 23:40:39 +00:00
Adam Joseph 1b0af10902 nixos/release-small.nix: add instructions for running individual jobs 2023-03-15 12:37:15 -07:00
github-actions[bot] 795332a826
Merge staging-next into staging 2023-03-15 18:01:44 +00:00
Martin Weinelt 578fb7fd1f
Merge pull request #220557 from mweinelt/libxcrypt-strong
libxcrypt: Build only with strong hashes
2023-03-15 16:43:12 +00:00
Vladimír Čunát a86610144f
Merge #219444: staging-next 2023-03-04 2023-03-15 17:35:39 +01:00
Sandro fbeb9b9a96
Merge pull request #215835 from illustris/hbase
nixos/hbase: add thrift and rest servers
2023-03-15 16:55:36 +01:00
Sandro 83dcadaf61
Merge pull request #218482 from illustris/ec2-metadata
nixos/ec2: don't populate nonexistent metadata files
2023-03-15 16:53:40 +01:00
Sandro c817b58614
Merge pull request #220278 from bdd/fix-binfmt-x86_64-windows-extension
nixos/binfmt: fix extension for Windows binaries
2023-03-15 16:15:47 +01:00
Mario Rodas 2f0db5eff8
Merge pull request #221311 from adamcstephens/nushell/0.77
nushell: 0.76.0 -> 0.77.0
2023-03-15 08:55:48 -05:00
Martin Weinelt 1c52b361a8
Merge remote-tracking branch 'origin/master' into staging-next 2023-03-15 14:36:40 +01:00
Adam Stephens a26d5fbdef
nushell: 0.76.0 -> 0.77.0 2023-03-15 08:42:32 -04:00
Robert Hensing 816b884b5c nixosTests.nixops.unstable.legacyNetwork: Use system.includeBuildDependencies 2023-03-15 13:37:59 +01:00
Robert Hensing c3b245d540
Merge pull request #195511 from DeterminateSystems/include-build-deps
nixos/top-level: add includeBuildDependencies option
2023-03-15 13:33:24 +01:00
Charles Hall 65c6ffaae9 don't enable lightdm if greetd is enabled 2023-03-15 13:26:41 +01:00
github-actions[bot] a3b786aa94
Merge staging-next into staging 2023-03-15 00:03:06 +00:00
Martin Weinelt 231c1145f2
Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
- pkgs/development/python-modules/rflink/default.nix
2023-03-14 22:33:40 +01:00
Janik H a8e4f58d90 rl-2305: Mention woodpecker addition 2023-03-14 20:31:39 +01:00
Janik H dafedbbba6 nixos/woodpecker: init 2023-03-14 20:31:39 +01:00
github-actions[bot] 9feb9fda3e
Merge staging-next into staging 2023-03-14 18:02:00 +00:00
github-actions[bot] 2df6c043e6
Merge master into staging-next 2023-03-14 18:01:25 +00:00
K900 1fab86929f nixos/pipewire: spring cleaning
- drop media-session (rip 💀)
- stop trying to let people override default configs, those never got merged correctly
- drop all the complexity arising from having to vendor default config files
- build docs in sandbox as we no longer recurse
2023-03-14 20:31:32 +03:00
K900 b8ac3f9a93 pipewire: 0.3.66 -> 0.3.67 2023-03-14 20:31:03 +03:00
Sandro 66e0910e86
Merge pull request #199729 from peat-psuwit/zoneminder-1.36.31
zoneminder, nixos/zoneminder: 1.36.28 -> 1.36.31, fix issues relating to upgrade
2023-03-14 17:02:05 +01:00
Martin Weinelt 9e4d592114
Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
- pkgs/development/python-modules/eve/default.nix
2023-03-14 16:49:37 +01:00
Linus Heckemann 7ca65eeecf
Merge pull request #219354 from Izorkin/update-profiles-base
nixos/profiles: optimize base and minimal profiles
2023-03-14 14:45:15 +01:00
Domen Kožar c08c079893
Merge pull request #216635 from DavHau/patch-4
services.cachix-watch-store: fix description of compressionLevel
2023-03-14 13:44:58 +00:00
Thomas Dy fbb554fa58 nixos/kubernetes: update coredns 1.7.1 -> 1.10.1 2023-03-14 22:15:43 +10:00
github-actions[bot] 60e9cbe0f9
Merge staging-next into staging 2023-03-14 12:02:08 +00:00
Linus Heckemann eb45cd5108 nixos/top-level: add includeBuildDependencies option
This option allows adding the build closure of the system to its
runtime closure, enabling fully-offline rebuilds (as long as no new
packages are added).
2023-03-14 11:55:13 +01:00
Martin Weinelt 6b67186fe9
Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
- pkgs/development/python-modules/crownstone-cloud/default.nix
- pkgs/development/python-modules/exrex/default.nix
- pkgs/development/python-modules/mkdocs-minify/default.nix
- pkgs/development/python-modules/myjwt/default.nix
- pkgs/development/tools/analysis/checkov/default.nix
2023-03-14 08:14:26 +01:00
Franz Pletz bc0a1dd982
Merge pull request #220461 from SuperSandro2000/prometheus
prometheus: 2.41.0 -> 2.42.0, split outputs, other cleanups
2023-03-14 05:28:59 +01:00
Artturi b978bf0f0f
Merge pull request #220570 from Artturin/fixlints1 2023-03-14 02:15:55 +02:00
Sandro 5e25ffd594
Merge pull request #218843 from teutat3s/garage-0.8.1 2023-03-13 22:23:53 +01:00
Artturi 9d18216aa3
Merge pull request #221050 from Luflosi/nixos-generate-config-microcode-condition
nixos-generate-config: update microcode only on bare metal
2023-03-13 22:56:28 +02:00
7c6f434c f7eeb48523
Merge pull request #213301 from bcc32/atop-dont-leave-new-log-files
nixos/atop: Remove upgraded logfiles if not replaced
2023-03-13 20:20:40 +00:00
Luflosi 1d65c7279c
nixos-generate-config: update microcode only on bare metal
Guest operating systems inside VMs or containers can't update the host CPU's microcode for obvious security reasons, so setting the `hardware.cpu.*.updateMicrocode` options is pointless.
2023-03-13 20:15:13 +01:00
github-actions[bot] 59ffe854f9
Merge staging-next into staging 2023-03-13 18:01:48 +00:00
Martin Weinelt bb14c4255b Merge remote-tracking branch 'origin/master' into staging-next 2023-03-13 17:14:19 +00:00
Florian Klink 504d66bae9
Merge pull request #216826 from gdamjan/systemd-253
systemd: 252.5 -> 253
2023-03-13 17:37:39 +01:00
Marcus Ramberg f834dfad8f nimdow: Add nixos windowmanager option 2023-03-13 11:37:32 -05:00
teutat3s 78286a06b0
garage: 0.8.0 -> 0.8.1
https://git.deuxfleurs.fr/Deuxfleurs/garage/compare/v0.8.0...v0.8.1

Fix tests by adding cacert

Use garage version 0_8 by default for nixos tests

Use same rust feature set as upstream for release binary and tests:
https://git.deuxfleurs.fr/Deuxfleurs/garage/src/tag/v0.8.1/nix/compile.nix#L181-L192
https://git.deuxfleurs.fr/Deuxfleurs/garage/src/tag/v0.8.1/default.nix#L40-L52
2023-03-13 13:55:36 +01:00
sternenseemann 4fa82b9ecd Merge remote-tracking branch 'origin/master' into haskell-updates 2023-03-13 11:25:02 +01:00
Vladimír Čunát 2d51a0e8ad
Merge branch 'master' into staging-next 2023-03-13 08:25:10 +01:00
Martin Weinelt 4472cf44eb
treewide: Make yescrypt the default algorithm for pam_unix.so
This ensures `passwd` will default to yescrypt for newly generated
passwords.
2023-03-13 07:54:27 +01:00
Martin Weinelt 0d7cd66652
nixos/users-groups: Update password scheme validation
Updates the warnings message for statefully set up passwords, now that
weak algorithms have been removed from our libxcrypt package.

Additionall we now add proper validation for hashing schemes used in
`hashedPassword`.

Neither will prevent a rebuiild, but instead issue a warning, that this
requires immediate remediation, or else users will be unable to login.

Reuses the crypt scheme ids as provided by the libxcrypt package.
2023-03-13 07:54:27 +01:00
Martin Weinelt 4e300e071b
libxcrypt: Build only with strong hashes
Effectively removes support for the following hashing algorithms
as announced in the NixOS 22.11 release notes:

- bcrypt_x ($2x$)
- sha256crypt ($5$)
- sha1crypt ($sha1$)
- sunmd5 ($md5$)
- md5crypt ($1$)
- nt ($3$)
- bdiscrypt (_)
- bigcrypt (:)
- descrypt (:)

And exposes the crypt scheme ids for enabled algorithms, so they can be
reused for validation in the users-groups module.
2023-03-13 07:54:27 +01:00
Elis Hirwing ce76a6838c
Merge pull request #203487 from jocelynthode/init-readarr
readarr: init at 0.1.4.1596
2023-03-13 06:56:35 +01:00
Lassulus 47233b27c9
Merge pull request #167319 from schnusch/cgit 2023-03-13 09:51:08 +07:00