Will Fancher
762b69f2ff
systemd-initrd: Fix up root directory mode
2023-04-11 15:20:47 -04:00
Will Fancher
fef26d88e2
systemd-initrd: Support secrets when boot loader doesn't
...
initrd-secrets: Fix service config with systemd-stage-1
2023-04-11 15:20:47 -04:00
Will Fancher
71983a6eb5
systemd-initrd: Don't use SYSTEMD_SULOGIN_FORCE
2023-04-11 15:20:47 -04:00
Felix Buehler
327b0cff7a
treewide: use more lib.optionalString
2023-04-07 13:38:33 +02:00
Robert Hensing
bcd2d49d85
nixos: Make services.resolved discoverable via "systemd-resolved" search
...
This query yielded no results on search.nixos.org.
I don't think I can make all options magically appear, but you can
the other options by reading the text.
2023-04-07 01:09:05 +02:00
Antoine Eiche
2638fb722e
systemd-boot-builder only ignores OSError "invalid argument"
...
In order to fix
https://github.com/NixOS/nixpkgs/issues/114552 (profile name with
special characters), all OSError have been ignored while only the OSError
with errno 22 (invalid argument) could has been ignored.
The drawback of ignoring all OSError is that the "No space left on
device" error is also ignored. When the /boot doesn't have enough
available disk space, the switch-to-configuration script succeeds
while the boot menu has not been updated: the user thinks it's system
has been updated, but on the next reboot it is actually rollbacked.
2023-04-04 09:16:41 +02:00
K900
48b2f723f5
nixos/system: disallow system.copySystemConfiguration in pure eval mode
...
This is already broken, so let's give it a better error message.
2023-03-29 17:49:30 +03:00
Jörg Thalheim
d9c92360a8
nixos/install-grub: stop using bare file handles for readFile/WriteFile
2023-03-27 19:25:46 +02:00
Jörg Thalheim
5a23a24ba2
nixos/grub-install: don't rely on shell to run commands
...
data passed to these programs might be accidentially interpreted as
shell. Discovered in https://github.com/Mic92/envfs/issues/111
2023-03-27 19:21:55 +02:00
Vladimír Čunát
12dd95fbb1
Merge branch 'master' into staging-next
2023-03-24 09:07:41 +01:00
Will Fancher
5a9b9e620d
Merge pull request #176828 from therishidesai/luks-multi-key-files
...
nixos/luksroot: add tryEmptyPassphrase option
2023-03-24 03:02:20 -04:00
github-actions[bot]
6a3714135d
Merge master into staging-next
2023-03-23 00:02:14 +00:00
pennae
31f422d95f
Merge pull request #218721 from apfelkuchen6/nw
...
nixos/networkd: add some missing options
2023-03-22 22:22:03 +01:00
Rishi Desai
cccc3f8a8e
nixos/luksroot: add tryEmptyPassphrase option
2023-03-22 09:17:23 -05:00
Sandro Jäckel
3a5de0e725
nixos/tmp: add a note to useTmpfs on potential issues
2023-03-20 17:27:06 +01:00
Sandro Jäckel
a5d95ac5fc
nixos/tmp: move /tmp options under boot.tmp
2023-03-19 18:49:37 +01:00
apfelkuchen06
0ddfb0a5df
nixos/networkd: add BridgeVLAN options
2023-03-16 03:31:04 +01:00
apfelkuchen06
cd650b3fa3
nixos/networkd: add QuickFairQueueingClass options
2023-03-16 03:31:04 +01:00
apfelkuchen06
fde806d5a5
nixos/networkd: add QuickFairQueueing options
2023-03-16 03:31:04 +01:00
apfelkuchen06
493ed75418
nixos/networkd: add HeavyHitterFilter options
2023-03-16 03:31:04 +01:00
apfelkuchen06
88d99a3630
nixos/networkd: add HierarchyTokenBucketClass options
2023-03-16 03:31:04 +01:00
apfelkuchen06
24df07c786
nixos/networkd: add HierarchyTokenBucket options
2023-03-16 03:31:03 +01:00
apfelkuchen06
29e5451963
nixos/networkd: add TrivialLinkEqualizer options
2023-03-16 03:31:03 +01:00
apfelkuchen06
cf470ebd88
nixos/networkd: add FairQueueing options
2023-03-16 03:31:03 +01:00
apfelkuchen06
dbc14e5a44
nixos/networkd: add FairQueueingControlledDelay options
2023-03-16 03:31:03 +01:00
apfelkuchen06
5b5c79c6a0
nixos/networkd: add GenericRandomEarlyDetection options
2023-03-16 03:28:23 +01:00
apfelkuchen06
ca496f8754
nixos/networkd: add EnhancedTransmissionSelection options
2023-03-16 03:28:23 +01:00
apfelkuchen06
3cde7aaa36
nixos/networkd: add DeficitRoundRobinSchedulerClass options
2023-03-16 03:28:23 +01:00
apfelkuchen06
0d06e85996
nixos/networkd: add DeficitRoundRobinScheduler options
2023-03-16 03:28:23 +01:00
apfelkuchen06
49df6bc669
nixos/networkd: add ControlledDelay options
2023-03-16 03:28:23 +01:00
apfelkuchen06
728108555e
nixos/networkd: add CAKE options
2023-03-16 03:28:23 +01:00
apfelkuchen06
7a6cae0e15
nixos/networkd: add PFIFOFast options
2023-03-16 03:28:23 +01:00
apfelkuchen06
f75ec30fee
nixos/networkd: add PFIFOHeadDrop options
2023-03-16 03:28:23 +01:00
apfelkuchen06
d9e1963a15
nixos/networkd: add BFIFO options
2023-03-16 03:28:22 +01:00
apfelkuchen06
f2ca28f658
nixos/networkd: add PFIFO options
2023-03-16 03:28:22 +01:00
apfelkuchen06
51689e86b9
nixos/networkd: add StochasticFairnessQueueing options
2023-03-16 03:28:22 +01:00
apfelkuchen06
736650ccf1
nixos/networkd: add StochasticFairBlue options
2023-03-16 03:28:22 +01:00
apfelkuchen06
872a4823cf
nixos/networkd: add FlowQueuePIE options
2023-03-16 03:28:22 +01:00
apfelkuchen06
2784862e41
nixos/networkd: add PIE options
2023-03-16 03:28:22 +01:00
apfelkuchen06
d63035329e
nixos/networkd: add TokenBucketFilter options
2023-03-16 03:28:21 +01:00
apfelkuchen06
55cd970d73
nixos/networkd: add NetworkEmulator options
2023-03-16 03:28:21 +01:00
apfelkuchen06
b08e5be98d
nixos/networkd: add QDisc options
2023-03-16 03:28:21 +01:00
apfelkuchen06
09e745c784
nixos/networkd: add IPoIB options
2023-03-16 03:28:21 +01:00
apfelkuchen06
df14953724
nixos/networkd: add CAN options
2023-03-16 03:28:21 +01:00
apfelkuchen06
a7724b8f91
nixos/networkd: add LLDP options
2023-03-16 03:28:21 +01:00
apfelkuchen06
ae15b86d4d
nixos/networkd: add BridgeMDB option
2023-03-16 03:28:21 +01:00
apfelkuchen06
d646f7c7f2
nixos/networkd: add BridgeFDB options
2023-03-16 03:28:21 +01:00
apfelkuchen06
28ddd570f7
nixos/networkd: add Bridge options
2023-03-16 03:28:20 +01:00
apfelkuchen06
590ccae1f8
nixos/networkd: add L2TP options
2023-03-16 03:28:20 +01:00
github-actions[bot]
795332a826
Merge staging-next into staging
2023-03-15 18:01:44 +00:00
Vladimír Čunát
a86610144f
Merge #219444 : staging-next 2023-03-04
2023-03-15 17:35:39 +01:00
Sandro
c817b58614
Merge pull request #220278 from bdd/fix-binfmt-x86_64-windows-extension
...
nixos/binfmt: fix extension for Windows binaries
2023-03-15 16:15:47 +01:00
Martin Weinelt
1c52b361a8
Merge remote-tracking branch 'origin/master' into staging-next
2023-03-15 14:36:40 +01:00
Robert Hensing
c3b245d540
Merge pull request #195511 from DeterminateSystems/include-build-deps
...
nixos/top-level: add includeBuildDependencies option
2023-03-15 13:33:24 +01:00
Linus Heckemann
eb45cd5108
nixos/top-level: add includeBuildDependencies option
...
This option allows adding the build closure of the system to its
runtime closure, enabling fully-offline rebuilds (as long as no new
packages are added).
2023-03-14 11:55:13 +01:00
Florian Klink
504d66bae9
Merge pull request #216826 from gdamjan/systemd-253
...
systemd: 252.5 -> 253
2023-03-13 17:37:39 +01:00
Martin Weinelt
d03d74aa67
Merge remote-tracking branch 'origin/master' into staging-next
...
Conflicts:
- pkgs/development/python-modules/aiopulse/default.nix
- pkgs/development/python-modules/identify/default.nix
- pkgs/development/python-modules/spur/default.nix
2023-03-12 23:28:23 +01:00
Guillaume Girol
db901673ea
Merge pull request #209156 from pwaller/issue-114594
...
nixos/grub: Name initrd-secrets by system, not by initrd
2023-03-12 18:50:33 +00:00
Vladimír Čunát
1dd94ad62f
Merge branch 'master' into staging-next
2023-03-12 09:06:28 +01:00
Ryan Lahfa
ac93edb3ac
Merge pull request #209829 from notgne2/fix/systemd-boot-always-profile-path
...
nixos/systemd-boot: always use profile_path() for system closure paths
2023-03-11 22:08:18 +01:00
github-actions[bot]
39f6788067
Merge master into staging-next
2023-03-09 12:01:27 +00:00
Berk D. Demir
147186a95b
nixos/binfmt: fix extension for Windows binaries
...
Extension based matching for Windows targets define it '.exe' but kernel
documentation explicitly states it should be passed "without the .".
From https://docs.kernel.org/admin-guide/binfmt-misc.html
> * magic:
> [...] If you chose filename extension matching, this is the
> extension to be recognised (without the ., the \x0a specials are not
> allowed).
2023-03-08 21:07:31 -08:00
Aaron Andersen
374fc068ec
nixos/systemd-oomd: disable systemd-oomd when enableUnifiedCgroupHierarchy is false
...
fixup for https://github.com/NixOS/nixpkgs/pull/203596
2023-03-08 18:39:18 -05:00
Дамјан Георгиевски
83f65146ab
nixos/systemd: systemd-growfs* units are real files now
...
`systemd-growfs@.service` and `systemd-growfs-root.service` became real units since:
50072ccf1b
we need to add them to the nixos module so growfs works again
2023-03-05 20:05:00 +01:00
notgne2
ca9f0682fd
nixos/systemd-boot: always use profile_path() for system closure paths
2023-03-05 06:13:45 -07:00
Дамјан Георгиевски
d2837a9cb3
nixos/systemd-initrd: create the /tmp mount point in the initrd
...
systemd now requires the /tmp mount point in the initrd cpio archive
since https://github.com/systemd/systemd/pull/25723
setting `"/tmp/.keep".text` will create the directory.
this fixes a boot failure:
```
(sd-gens): Failed to overmount /tmp/: No such file or directory
```
2023-03-05 04:41:08 +01:00
github-actions[bot]
8480c21d06
Merge master into staging-next
2023-03-04 12:01:17 +00:00
Naïm Favier
45e44c56f1
Merge pull request #217342 from pennae/nrd-html-manual
...
nixos-render-docs: add manual html renderer, use it for the nixos manual
2023-03-04 12:58:38 +01:00
github-actions[bot]
387a5e220d
Merge staging-next into staging
2023-02-28 00:03:08 +00:00
Will Fancher
ace4d26ccc
Merge pull request #217887 from lilyinstarlight/fix/allow-overriding-systemd-initrd-bins
...
nixos/systemd-initrd: allow overriding initrdBin with extraBin
2023-02-27 17:43:30 -05:00
github-actions[bot]
de3f71e277
Merge staging-next into staging
2023-02-26 06:02:30 +00:00
Winter
15f1369b95
Revert "nixos/systemd-coredump: guard static gid for systemd-coredump behind state version"
...
This reverts commits f5483464d5
and
6b9583e5e1
.
Ideally, we shouldn't cause friction for users that bump `stateVersion`,
and I'd consider having to switch and/or manually hardcode a UID/GID
to supress the warning friction. I think it'd be more beneficial to, in
this rare case of an ID being missed, just let it be until more
discussion happens surrounding this overall issue.
See https://github.com/NixOS/nixpkgs/pull/217785 for more context.
2023-02-25 22:31:56 -05:00
Lily Foster
5210ddc701
nixos/systemd-initrd: allow overriding initrdBin with extraBin
...
Being able to override `boot.initrd.systemd.initrdBin` with `boot.initrd.systemd.extraBin` is a desirable behavior, so this PR changes the `ln -s` command to `ln -sf` to force link even if the file already exists.
2023-02-23 13:23:15 -05:00
Nick Cao
f5483464d5
nixos/systemd-coredump: guard static gid for systemd-coredump behind state version
2023-02-23 17:07:50 +08:00
pennae
3794c04d79
nixos/manual: fix manpage links
...
{manpage} already exapnds to a link but akkoma wants to link to
a specific setting. split the mention for clarity.
networkd just straight up duplicated what {manpage} generates anyway, so
that link can go away completely.
2023-02-21 18:26:39 +01:00
github-actions[bot]
fc3641aa1e
Merge staging-next into staging
2023-02-21 00:03:04 +00:00
Will Fancher
bb7cd63150
Merge pull request #215381 from lilyinstarlight/fix/make-initrd-ng-wrapped-executables
...
make-initrd-ng: support wrapped executables
2023-02-20 14:11:48 -05:00
Lily Foster
1fa1b58c25
nixos/console,nixos/systemd-initrd: remove now-unnecessary wrapped bin inclusions
2023-02-20 07:02:55 -05:00
github-actions[bot]
0e856cc7de
Merge staging-next into staging
2023-02-18 18:01:58 +00:00
Florian Klink
4bfb6411e3
Merge pull request #215188 from ElvishJerricco/binfmt-bad-setting-fix
...
binfmt: Don't create invalid service with no registrations
2023-02-18 15:39:46 +01:00
github-actions[bot]
3b5c06282d
Merge staging-next into staging
2023-02-17 12:01:58 +00:00
Arian van Putten
98042fc6d3
Merge pull request #216357 from nikstur/systemd-repart-after-activation
...
nixos/systemd-repart: enable running after initrd
2023-02-17 12:56:24 +01:00
Florian Klink
ab566b8656
Merge pull request #208269 from ElvishJerricco/systemd-stage-1-fsck
...
Systemd stage 1 fsck
2023-02-17 10:06:39 +02:00
nikstur
b1ff1e1658
nixos/systemd-repart: enable running after initrd
2023-02-14 19:42:32 +01:00
K900
2bbd450b8b
Merge pull request #210505 from notgne2/fix/systemd-initrd-allow-symlink
...
nixos/systemd-initrd: allow symlink into when checking for `/prepare-root`
2023-02-14 21:10:31 +03:00
Arian van Putten
5b23d0e51c
Merge pull request #214396 from nikstur/systemd-repart
...
systemd-repart
2023-02-10 20:03:09 +01:00
nikstur
4700198654
nixos/systemd-repart: init
2023-02-10 14:05:44 +01:00
Izorkin
6b9583e5e1
nixos/systemd-coredump: fix group id
2023-02-08 20:48:13 +03:00
pennae
bf4c0c1900
nixos/*: remove trailing period in mkEnableOptions
...
those are added by mkEnableOption, and .. is replaced to … by markdown
processing.
2023-02-08 15:23:34 +01:00
Will Fancher
14b77582da
systemd-stage-1: fsck
2023-02-08 00:43:10 -05:00
Winter
b2d04c1155
nixos/luksroot: build pbkdf2-sha512 binary in its own derivation
...
Since this feature's inception, we've compiled a binary that uses OpenSSL
to perform PBKDF-SHA512 during the extra-utils build. In addition to this
being inefficient, it broke as of 6ea1a2a1be
,
which switched the extra-utils derivation to use stdenvNoCC.
For now, I think the path of least resistence is to move the pbkdf-sha512
build to its own derivation, to fix the breakage, as well as improving
the efficiency of the extra-utils build.
(I do believe that at some point, we should revisit this binary -- perhaps
rewriting it -- as Clang even just on its default settings emits more
warnings than you'd want to see in a security-related codebase when
compiling it.)
2023-02-07 23:06:11 -05:00
Will Fancher
1b39491326
systemd-stage-1: Use x-initrd.mount
for better unit dependencies
2023-02-07 22:22:39 -05:00
Will Fancher
988184ca82
systemd-stage-1: managerEnvironment option
2023-02-07 22:22:39 -05:00
Will Fancher
b3a27afb7c
binfmt: Don't create invalid service with no registrations
...
We shouldn't be creating a systemd.services.systemd-binfmt value when
the upstream unit isn't being pulled in, because it results in a
service unit file with no ExecStart line
2023-02-07 17:02:26 -05:00
Will Fancher
eec740325c
initrd-ssh: New sshd settings names
2023-02-07 13:56:02 -05:00
Nick Cao
96339d786a
Merge pull request #213782 from SuperSandro2000/stage1-extraUtils
...
nixos/stage-1: build extraUtils without compiler
2023-02-03 08:59:08 +08:00
Sandro
c3b1fd8ba1
Merge pull request #199784 from Majiir/fix-plymouth-start
...
nixos/plymouth: don't start Plymouth on config switch
2023-01-31 15:47:45 +01:00
Sandro Jäckel
6ea1a2a1be
nixos/stage-1: build extraUtils without compiler
2023-01-31 14:45:39 +01:00
Florian Klink
cd47b8e423
Merge pull request #213445 from Majiir/fix-systemd-coredump-truncation
...
nixos/systemd/coredump: fix kernel.core_pattern truncation
2023-01-30 21:26:21 +01:00
Majiir Paktu
7f35c8b2ac
nixos/systemd/coredump: fix kernel.core_pattern truncation
...
Fixes #213408
2023-01-29 15:49:16 -05:00