b12f/nixpkgs
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity
390172 commits 2 branches 0 tags 3.3 GiB
Commit graph

27967 commits

Author SHA1 Message Date
Robert Hensing 3624bb535f nixosTests.convos: Fix missing port variable 2022-06-17 12:24:52 +02:00
Robert Hensing 2c8bbf33fd nixos/test-driver: Support mypy through regular mechanisms 2022-06-17 12:22:57 +02:00
Robert Hensing 152736d39e nixosTests.acme: Fix typechecking, avoiding type reassignment 2022-06-17 11:45:19 +02:00
Jörg Thalheim 5d54641d7f
Merge pull request #177790 from superherointj/package-k3s-1.24.1+k3s1 
k3s: 1.23.6+k3s1 -> 1.24.1+k3s1
 2022-06-17 08:38:10 +01:00
talyz 858a0c3fa6
nixos/parsedmarc: Improve secret handling 
Make secret replacement more robust and futureproof:

- Allow any attribute in `services.parsedmarc.settings` to be a
  secret if set to `{ _secret = "/path/to/secret"; }`.

- Hash secret file paths before using them as a placeholders in the
  config file to minimize the risk of conflicting file paths being
  replaced instead.
 2022-06-16 13:58:20 +02:00
Lily Foster b5818b7a30 nixos/pipewire: only add pipewire-pulse.conf conditionally 2022-06-15 15:05:44 -07:00
Lily Foster 1e3747b98b nixos/pipewire: add pkgs.pulseaudio to pipewire-pulse user unit path 2022-06-15 15:05:44 -07:00
superherointj a6a0c44760 k3s: remove docker support 2022-06-15 16:40:29 -03:00
Jörg Thalheim c772b13ee7 nixos/navidrome: fixes missing ssl certficates 2022-06-15 20:40:07 +02:00
talyz 32e057881a
nixos/parsedmarc: Remove kafka support 
It's broken (see https://github.com/domainaware/parsedmarc/issues/243)
and providing settings for it is therefore misleading.
 2022-06-15 20:15:09 +02:00
talyz 6686a3115c
nixos/parsedmarc: Fix compatibility with recent versions of grafana 2022-06-15 20:15:03 +02:00
talyz 4dddca8240
nixos/geoipupdate: Improve secret handling 
Make secret replacement more robust and futureproof:

- Allow any attribute in `services.geoipupdate.settings` to be a
  secret if set to `{ _secret = "/path/to/secret"; }`.

- Hash the license key path before using it as a placeholder in the
  config file to minimize the risk of conflicting file paths being
  replaced instead.
 2022-06-15 20:14:57 +02:00
talyz 23c15323ce
nixos/geoipupdate: Add error handling to scripts 2022-06-15 17:18:50 +02:00
Jonas Chevalier 9c587c51ac
Merge pull request #177743 from zimbatm/grafana-agent-module 
nixos: add grafana-agent module
 2022-06-15 16:22:54 +02:00
Bobby Rong 284ccb5f4d
Merge pull request #177111 from samuela/upkeep-bot/vscodium-1.68.0-1654822313 
vscodium: 1.67.2 -> 1.68.0
 2022-06-15 22:13:41 +08:00
Bobby Rong fe1f4564af
nixos/tests/vscodium: skip type check for now 2022-06-15 22:01:04 +08:00
Silvan Mosberger 8f8db59c0e
Merge pull request #163617 from hercules-ci/lib-types-deferredModule 
lib.types: Add deferredModule
 2022-06-15 13:23:43 +02:00
zimbatm 31b47913f3
nixos: add grafana-agent module 
Easily ship logs and metrics to Grafana Cloud and other similar targets.
 2022-06-15 12:59:06 +02:00
Bobby Rong 6d1779c567
Merge pull request #175620 from bobby285271/nixos-pantheon 
nixos/pantheon: make it possible to remove core packages
 2022-06-15 18:49:37 +08:00
Lassulus a632afba6d
Merge pull request #177536 from yayayayaka/hedgedoc-fix-statedirectory 
nixos/hedgedoc: Do not set StateDirectory to an absolute path
 2022-06-15 11:25:04 +02:00
M. A becff58579 nixos/hedgedoc: Do not set StateDirectory to an absolute path 
Commit 8109d8a set the `StateDirectory=` option of the systemd service
configuration to the value of `cfg.workDir` which is wrong, according
to dasJ [1]. This commit resolves this issue by stripping the
`/var/lib/` prefix from `cfg.workDir`.

[1] https://github.com/NixOS/nixpkgs/pull/172824#issuecomment-1130350412
 2022-06-15 08:58:52 +00:00
Andreas c028f5569b kcheckpass is gone(?) 2022-06-15 14:53:40 +08:00
Jeroen Simonetti 829167bd27
nixos/routedns: init 
Signed-off-by: Jeroen Simonetti <jeroen@simonetti.nl>
 2022-06-15 08:33:46 +02:00
Sandro f7251ca210
Merge pull request #168505 from brhoades/brhoades/ngrok-bump-v3 
ngrok: 2.3.40 -> 3.0.4
 2022-06-15 01:30:17 +02:00
Niklas Hambüchen 0652ef9a64
Merge pull request #176903 from nh2/vaultwarden-service-better-example 
nixos/vaultwarden: Make example more detailed.
 2022-06-15 01:21:40 +02:00
Robert Hensing cee66a8cd5 make-options-doc: Support Nix-provided declaration links 
Previously, the location logic was hardcoded, supporting only
Nixpkgs and NixOps properly, leaving other uses of the module
system without good location support.
 2022-06-15 00:45:05 +02:00
Robert Hensing d9dccae07c nixos/doc: Hold off on NixOps 2 info until released 2022-06-14 23:23:41 +02:00
Robert Hensing dfd98a5da2 lib.deferredModule: Make it properly singular 2022-06-14 23:01:27 +02:00
Robert Hensing 4746f6d03e lib.types: Add deferredModule 2022-06-14 23:01:23 +02:00
Francesco Gazzetta 5e52fdf6f6 vengi-tools: 0.0.18 -> 0.0.20 2022-06-14 22:23:50 +02:00
Azat Bahawi 82497b0e9f
trickster: 0.1.10 -> 1.1.5 2022-06-14 01:51:45 +03:00
Robert Hensing 5f2eb57725
Merge pull request #177461 from leungbk/mypy-terminal-emulator 
tests/terminal-emulators: comply with mypy typecheck
 2022-06-14 00:34:16 +02:00
Billy J Rhoades II 8e97f29c01 ngrok: 2.3.40 -> 3.0.4 
ngrok 3 was released this morning. Changelog from v2 is here:

https://ngrok.com/docs/ngrok-agent/changelog

And a detailed upgrade guide is here:

https://ngrok.com/docs/guides/upgrade-v2-v3

Notably, arguments must now be double hyphens: `--token`. Previously,
single hyphens were accepted but those invocations will now error.
 2022-06-13 14:53:58 -07:00
Pascal Bach 0d27868e91
Merge pull request #144082 from jojosch/jellyfin-10.8.0 
jellyfin{,-web}: 10.7.7 -> 10.8.0
 2022-06-13 23:35:36 +02:00
Johannes Schleifenbaum b1ff292b1a
nixos/tests/jellyfin: fix type errors in test script 
Co-authored-by: Minijackson <minijackson@riseup.net>
 2022-06-13 21:58:48 +02:00
Max 664dab9574
nixos/tests/ipfs: Simplify FUSE test 
Co-authored-by: Luflosi <Luflosi@users.noreply.github.com>
 2022-06-13 21:01:32 +02:00
Brian Leung b8df14aec0
tests/terminal-emulators: comply with mypy typecheck 
Co-authored-by: Robert Hensing <roberth@users.noreply.github.com>
 2022-06-13 07:53:43 -07:00
Aaron Jheng c3c876462b
traefik: 2.6.3 -> 2.7.1 2022-06-13 14:30:08 +00:00
Léo Gaspard 02cd48717d
nixos/openldap: fix systemd rejecting notification (#177084) 
On one of the two machines I have running openldap, openldap failed to start due to a "timeout". Increasing the allowed startup delay didn't help.

I noticed the following in logs:
```
openldap.service: Got notification message from PID 5224, but reception only permitted for main PID 5223
```

It turns out that on this machine at least, openldap apparently sends the notification from a non-main process, which means that we need this NotifyAccess setting for systemd to record that it successfully started. Without it, after 30 seconds systemd kills the process because it didn't receive the sd_notify call.

Somehow the other machine I have on nixos running ldap works fine even without this, but I could not figure out what changes the behavior.

Given that AFAIU NotifyAccess still restricts to "from the cgroup of the service", I think this change should be safe.
 2022-06-13 15:28:12 +02:00
Matthieu Coudron a1ad235743
vimUtils: deprecate configure.pathogen (#154814) 
pathogen does not bring any value compared to vim native packages so
remove it to ease maintainance burden.
 2022-06-13 15:25:46 +02:00
Maximilian Bosch 7f9a78e197
Merge pull request #175330 from jtojnar/grafana-uid 
nixos/grafana: Allow setting UID for datasource
 2022-06-13 07:01:19 +02:00
Maximilian Bosch 5203011e4e
Merge pull request #177430 from Ma27/fix-wireguard-exporter 
nixos/prometheus-wireguard-exporter: fix broken options
 2022-06-13 06:14:30 +02:00
Aaron Andersen 37b6b161e5
Merge pull request #177321 from rnhmjoj/pr-fix-mpd 
mpd: fix socket activation
 2022-06-12 22:26:53 -04:00
Dominique Martinet f878c8994f logrotate: do not add mail if 'mail = false' is specified 
Reported-by: Ricardo M. Correia <rcorreia@wizy.org>
 2022-06-13 08:57:49 +09:00
Winter 6c53004840 nixos/nginx: allow recommended proxy settings to be enabled per location 2022-06-12 19:52:35 -04:00
Mario Rodas cc73dc83b3
Revert "nixos/security/wrappers: use an assertion for the existence check" 2022-06-12 15:38:05 -05:00
Maximilian Bosch e03d41fb6b
nixos/prometheus-wireguard-exporter: fix broken options 
This is apparently a breaking change in a patch-level release[1] where
it's now necessary to specify values for each CLI argument.

[1] https://github.com/MindFlavor/prometheus_wireguard_exporter/releases/tag/3.6.1
 2022-06-12 20:27:25 +02:00
Maximilian Bosch 6717faa02c
Merge pull request #177216 from amarshall/linux-kernel-updates 
Linux kernel updates 2022-06-10
 2022-06-12 19:52:57 +02:00
Michele Guerini Rocco 2b6c834377
Merge pull request #177336 from ncfavier/wrappers-source-check 
nixos/security/wrappers: use an assertion for the existence check
 2022-06-12 18:07:40 +02:00
Maximilian Bosch fd2a89b983
nixos/wpa_supplicant: don't log that wpa_supplicant.conf is ignored with allowAuxiliaryImperativeNetworks = true 
The warning is wrong with `allowAuxiliaryImperativeNetworks`[1] being
set to `true` because both files are included in this case with `-c` and
`-I`.

[1] https://nixos.org/manual/nixos/stable/options.html#opt-networking.wireless.allowAuxiliaryImperativeNetworks
 2022-06-12 17:07:36 +02:00
pennae 320aa2a791 treewide: attempt at markdown option docs 2022-06-12 12:44:38 +02:00
Florian Klink f9b0f5d09c
Merge pull request #177048 from NixOS/packages-systemd 
nixos/systemd: use cfg.package in systemPackages to avoid confusion
 2022-06-12 10:20:51 +02:00
Florian Klink 2b9be3117e
Merge pull request #177010 from flokli/make-kexec 
nixos/modules/installer/kexec/kexec-boot.nix: move into nixos/lib, expose `kexec` nixos/release.nix
 2022-06-12 10:07:35 +02:00
Bobby Rong 2375fac93d
nixos/pantheon: treat evince and file-roller as optional app 2022-06-12 13:12:15 +08:00
Bobby Rong 860781d909
nixos/pantheon: allow disabling pantheon-agent-geoclue2 2022-06-12 13:11:58 +08:00
Timothy DeHerrera ec4e23d4e9
Merge pull request #171155 from cab404/wg-quick-files 
nixos/wg-quick: added support for configuration files
 2022-06-11 22:00:45 -07:00
Bobby Rong 1097e3e80c
nixos/pantheon: make it possible to remove core packages 2022-06-12 11:39:05 +08:00
Bobby Rong c1559a07fe
nixos/pantheon: switch to xdg.icons.enable 2022-06-12 11:39:04 +08:00
Bobby Rong 9ca889d0fb
nixos/pantheon: switch to xdg.mime.enable 2022-06-12 11:39:01 +08:00
ckie 4af74fa1fb
Merge pull request #173937 from KFearsoff/openvpn3-master 
openvpn3: refactor the build
 2022-06-12 02:46:08 +03:00
Sandro Jäckel 515b36c093
nixos/i18n: don't build all supportedLocales by default 2022-06-11 23:29:29 +02:00
Naïm Favier 39a56c7696
nixos/security/wrappers: use an assertion for the existence check 
A simpler implementation of 7d8b303e3f
that uses an assertion instead of a derivation.

`pathHasContext` seems a bit better than `hasPrefix storeDir` because it
avoids a string comparison, and catches nonsense like
`"foo${pkgs.hello}bar"`.
 2022-06-11 23:22:03 +02:00
Robert Hensing 89690dcb46
Merge pull request #177278 from rnhmjoj/pr-fix-wait-port 
nixos/tests: fix type mismatch in wait_for_open_port
 2022-06-11 22:56:52 +02:00
KFears 49834aef6c nixos/openvpn3: add enable option 2022-06-12 01:19:51 +05:00
Jan Tojnar c397df20d1
Merge pull request #151005 from rhoriguchi/gnome 
nixos/gnome: make it possible to remove core packages
 2022-06-11 21:40:35 +02:00
rnhmjoj 7149c5cb60
mpd: fix socket activation 
Apparently since systemd v250 a `ListenStream` in an override file won't
override the unit, but will be appended to a list of socket addresses.
The socket unit fails if two or more addresses have the same port,
probably because two systemd processes try to listen to it at once.
The solution is to add an empty `ListenStream=` to reset all previous
definitions.

Fix #175478.
 2022-06-11 20:56:19 +02:00
Rick van Schijndel 5bc0350e7c
Merge pull request #177256 from rnhmjoj/pr-picom 
nixos/picom: remove deprecated refreshRate option
 2022-06-11 20:09:28 +02:00
Sandro d06755d422
Merge pull request #165780 from OPNA2608/init/haguichi 
haguichi: init at 1.4.5
 2022-06-11 19:02:06 +02:00
Guillaume Girol 419e07c382
Merge pull request #174218 from NickCao/fcitx5-qt6 
fcitx5-qt: add support for qt6 applications
 2022-06-11 16:20:20 +00:00
rnhmjoj 5803706662
nixos/tests: fix type mismatch in wait_for_open_port 
Fix some fallout from de3e423 (PR #171280).
 2022-06-11 14:22:53 +02:00
Soham Sen feff6ddbe7 expressvpn: init at 3.25.0.13 2022-06-11 17:10:33 +05:30
rnhmjoj 26526f02ad
nixos/picom: remove deprecated refreshRate option 
Fix #175765
 2022-06-11 08:59:20 +02:00
Andrew Marshall a2c6e4372a linux/hardened/patches/5.18: init at 5.18.3-hardened1 2022-06-10 17:22:33 -04:00
Robert Hensing 9970c0b874
Merge pull request #174470 from hercules-ci/module-docs-visibility-override 
make-options-doc: Allow transformOptions to override visibility
 2022-06-10 14:27:58 +02:00
piegames 4ebc288038
Merge #172819: nixos: move matrix services into their category 2022-06-10 10:54:18 +02:00
Elis Hirwing 7afff45088
Merge pull request #174555 from etu/php-drop-php74 
php: Drop PHP 7.4
 2022-06-10 10:43:31 +02:00
Martin Weinelt 7b3e907a6f
Merge pull request #176561 from K900/pipewire-create-home 2022-06-10 09:25:41 +02:00
zowoq f063970e50 nixos/podman: add user socket/service 2022-06-10 07:21:56 +10:00
Sandro Jäckel 3df045e6d5
nixos/systemd: use cfg.package in systemPackages to avoid confusion 2022-06-09 22:44:28 +02:00
lassulus a12e525410 nixos/bitlbee: allow writing to configDir 2022-06-09 21:05:16 +02:00
Florian Klink 06aa64684c nixos/doc: document how to use kexecTree 
This documents how to build kexec artifacts.
 2022-06-09 20:08:34 +02:00
Florian Klink cdaaf95e20 nixos/release.nix: expose a kexec.$system attribute 2022-06-09 20:00:26 +02:00
Florian Klink 50648f568d nixos/…/kexec-boot.nix: move into netboot.nix, rename to kexecTree 
`nixos/modules/installer/kexec/kexec-boot.nix` doesn't contain any
custom NixOS config, other than importing `netboot-minimal.nix` (which
imports `netboot-base.nix`, which imports `netboot.nix`.

`netboot.nix` really is just describing a self-contained system config,
running entirely off kernel and initrd, so we might as well move the
kexec script generation there as well.

`netboot.nix` already contains some `system.build` attributes.
Provide a `system.build.kexecTree` attribute (and `kexecScript` for
composability).
 2022-06-09 19:59:03 +02:00
Domen Kožar f38fd46992 cachix-agent: set USER to please cachix 2022-06-09 17:07:28 +01:00
Jan Tojnar c60d526995
Merge pull request #176881 from jian-lin/fix-nixos/ibus-gnome-autostart 
nixos/ibus: don't use xdg autostart for Gnome
 2022-06-09 14:59:05 +02:00
Ryan Horiguchi 42ceb20d29 nixos/gnome: make it possible to remove core packages 
Co-Authored-By: Jan Tojnar <jtojnar@gmail.com>
 2022-06-09 13:09:55 +02:00
Jan Tojnar ca23e42105 nixos/gnome: Move sessionPath to core-shell group 
This will allow people to disable these packages.
 2022-06-09 13:04:20 +02:00
Jan Tojnar 016b99dce6 nixos/gnome: drop hicolor-icon-theme 
It is already installed by xdg.icons.enable.

Let’s also enable that option explicitly to prevent users from accidentally
disabling it since GNOME will be severely broken without it.
 2022-06-09 13:04:20 +02:00
Jan Tojnar 7f0ce26bbd nixos/xdg/icons: Install hicolor-icon-theme 
While the package contains no icons, it includes an `index.theme` file
describing directories where toolkits should look for icons installed by apps.
 2022-06-09 13:04:20 +02:00
Jan Tojnar aad39fe41a nixos/gnome: drop shared-mime-info 
It is already installed by xdg.mime.enable.

Let’s also enable that option explicitly to prevent users from accidentally
disabling it since GNOME will be severely broken without it.
 2022-06-09 13:04:19 +02:00
Rick van Schijndel 05eb6570c0
Merge pull request #176801 from K900/upd8n 
n8n: update, fix tests
 2022-06-09 07:49:37 +02:00
K900 c54c71b4ec n8n: fix test 2022-06-09 08:19:42 +03:00
Julien Moutinho 9d69ea4b7f nixos/sourcehut: improve testing 2022-06-08 19:46:04 -04:00
Julien Moutinho 17c6f62503 nixos/sourcehut: some settings became mandatory upstream 2022-06-08 19:46:04 -04:00
Julien Moutinho f34d654860 nixos/sourcehut: increase RestartSec to better avoid degraded states 2022-06-08 19:46:04 -04:00
Julien Moutinho cd6808ba9f sourcehut: fix Unix socket support for Redis 2022-06-08 19:46:04 -04:00
Julien Moutinho 43b5dcd60c nixos/sourcehut: remove forgotten unused files 2022-06-08 19:46:04 -04:00
Julien Moutinho 876f3a8bf0 sourcehut.todosrht: 0.67.2 -> 0.71.0 2022-06-08 19:46:04 -04:00
Julien Moutinho bcb91bbeb7 sourcehut.metasrht: 0.57.5 -> 0.58.8 2022-06-08 19:46:04 -04:00
Julien Moutinho 59d8439966 sourcehut.listssrht: 0.51.7 -> 0.51.9 2022-06-08 19:46:04 -04:00
Julien Moutinho 658d8f1240 sourcehut.hgsrht: 0.29.4 -> 0.31.2 2022-06-08 19:46:04 -04:00
Julien Moutinho b57ed0fa1d sourcehut.gitsrht: 0.77.3 -> 0.78.18 2022-06-08 19:46:04 -04:00
Julien Moutinho 43f856ab2c sourcehut.buildsrht: 0.75.2 -> 0.79.1 2022-06-08 19:46:04 -04:00
Eelco Dolstra 0e51dce778 nix-fallback-paths.nix: Update to 2.9.1 2022-06-09 09:00:27 +10:00
Sandro acbfbd0d86 nixos/kdeconnect: remove alias from default package 2022-06-08 23:11:44 +02:00
linj cdfd2b9f57 nixos/ibus: don't use xdg autostart for Gnome 
Gnome uses systemd to start ibus.
 2022-06-08 18:37:42 +02:00
Elis Hirwing e91811bbe1
php74: Drop PHP 7.4 and add aliases throwing an error 2022-06-08 18:11:55 +02:00
Elis Hirwing da19e4ae97
nixos/snipe-it: Upgrade to PHP 8.1 
They state that they support PHP 8.1:
https://snipe-it.readme.io/docs/requirements
 2022-06-08 18:09:15 +02:00
Elis Hirwing d7f000b98b
nixos/moodle: Upgrade to PHP 8.1 2022-06-08 18:09:11 +02:00
Elis Hirwing d0862b0ed9
nixos/nextcloud: Upgrade to PHP 8.0 2022-06-08 18:09:07 +02:00
Elis Hirwing a69ba21a29
nixos/invoiceplan: Upgrade to PHP 8.1 
They seem to be working to get PHP 8.1 support:
https://github.com/InvoicePlane/InvoicePlane/issues/798
 2022-06-08 18:09:03 +02:00
Elis Hirwing f822b894c5
nixos/dokuwiki: Upgrade to PHP 8.1 
They seem to run tests against 8.1 since this commit:
7aee97ee81
 2022-06-08 18:08:59 +02:00
Elis Hirwing c53c34ee72
nixos/postfixadmin: Upgrade to PHP 8.1 2022-06-08 18:08:56 +02:00
Elis Hirwing 4580a63bc4
nixos/grocy: Upgrade to PHP 8.0 2022-06-08 18:08:52 +02:00
Bernardo Meurer 1430c4b0ed
Merge pull request #176904 from alyssais/localtime 
nixos/localtime: add missing mkRenamedOptionModule
 2022-06-08 11:53:50 -04:00
Janne Heß 4a77546116
Merge pull request #175655 from AmineChikhaoui/ec2-amis-22.05 
ec2-amis: add release 22.05
 2022-06-08 17:39:36 +02:00
Niklas Hambüchen 5683c6e03b nixos/vaultwarden: Make example more detailed. 
It took me a while to figure out how to correctly setup
vaultwarden on NixOS.
I hope that this more detailed example will help others.
 2022-06-08 17:03:53 +02:00
Alyssa Ross c0b05f106f
nixos/localtime: add missing mkRenamedOptionModule 
Fixes: ffae8569b0 ("nixos/localtimed: hopefully fix geoclue")
 2022-06-08 13:46:26 +00:00
Mr Hedgehog 276699cdac
xplr: 0.18.0 -> 0.19.0 2022-06-08 08:48:29 -04:00
linj 34b85dfb85 nixos/ibus: fix services.dbus.package 2022-06-08 14:37:59 +02:00
Martin Weinelt e0169d7a9d
Merge pull request #176558 from Artturin/bumpnofileinfinity 2022-06-08 12:03:01 +02:00
Sandro be96e24124
Merge pull request #163226 from lodi/persistent-evdev 
persistent-evdev: init at unstable-2022-01-14
 2022-06-07 23:46:13 +02:00
Ben Siraphob 033da0465f
Merge pull request #176418 from Yureien/init/dragonflydb 
dragonflydb: init at 0.1.0
 2022-06-07 14:02:26 -07:00
Erik Arvstedt 64589bcefa
nixos/netboot: use makeInitrdNG to shrink ramdisk size 
Previously, `makeInitrd` added the whole closure of the squashfs
derivation to initrd.
This closure contains the squashfs.img and some store paths which are
still referenced by the compressed squashfs.img.
These extra store paths are unused in stage 1.

With `makeInitrdNG` only the squashfs.img is added to the initrd.
(`makeInitrdNG` only resolves shared library references instead of the
whole closure).

This shrinks the netboot ramdisk by ~6% for a minimal system and
significantly decreases the size of the uncompressed root filesystem
in stage 1.
 2022-06-07 22:34:30 +02:00
lodi 3f1ec25f90 persistent-evdev: init at unstable-2022-01-14 2022-06-07 13:20:52 -04:00
Sandro 2d399082aa
Merge pull request #176723 from SuperSandro2000/runCommandNoCC 
treewide: remove usage of runCommandNoCC aliases
 2022-06-07 19:03:22 +02:00
Sandro Jäckel 43d4ddf28e
treewide: remove usage of runCommandNoCC aliases 2022-06-07 16:57:06 +02:00
Daniel Poelzleithner e78c2d05da hedgedoc: ensure upload directory exists 
Upload directory is not created when uploading, but will fail silently.
Ensure the upload directory is created.
 2022-06-07 09:06:56 -05:00
Jörg Thalheim 70b31373b4
tt-rss: downgrade to php 8.0 2022-06-07 14:24:07 +02:00
happysalada f5ef819e24 mimir: switch pname to mimir 2022-06-07 06:53:15 -04:00
cab 8de1e9e2f8
nixos/wg-quick: added support for configuration files 2022-06-07 01:28:50 +04:00
Martin Weinelt b981c4217f
Merge pull request #176626 from winterqt/bump-radarr 
radarr: 4.0.5.5981 -> 4.1.0.6175
 2022-06-06 23:12:26 +02:00
Winter c08942e1ad nixos/tests/radarr: fix type of argument in test script 2022-06-06 16:39:55 -04:00
Leona Maroni 0eaa72390b maintainers: rename to leona 2022-06-06 22:20:31 +02:00
Rick van Schijndel 3037752d1d
Merge pull request #175961 from helsinki-systems/rem/broken 
remove some packages marked broken for over 1.5 years
 2022-06-06 20:44:39 +02:00
Sebastien Bourdeauducq 6cecab9cd8 hydra: create runcommand-logs directory 2022-06-06 11:36:58 -07:00
Artturin c8f5b17a98 nixos/nix-daemon: set LimitNOFILE to 1048576 
fixes 'too many open files'
 2022-06-06 21:16:47 +03:00
Robert Hensing 03bcd6fd64 nixos/release.nix: Add nixos.tests.allDrivers 2022-06-06 19:25:04 +02:00
Robert Hensing 51224f522f nixosTests.allDrivers: Move logic to all-packages.nix 
Bring it in line with release.nix
 2022-06-06 19:24:30 +02:00
K900 955d1a6dde pipewire: create home directory for the pipewire user when running systemwide 
wireplumber wants to store state there
 2022-06-06 18:06:38 +03:00
Martin Weinelt 6edccf1278
Merge pull request #176541 from mweinelt/firefox-test-typing 2022-06-06 14:50:53 +02:00
Sandro d8fad83d2c
Merge pull request #176133 from SuperSandro2000/asf-2 2022-06-06 14:34:44 +02:00
Sandro 2cdcb50406
Merge pull request #176049 from LunNova/lunnova/memtest-update 
memtest86+: 5.01-coreboot-002 -> 6.00-beta2
 2022-06-06 14:29:51 +02:00
Guillaume Girol fd3fc309f4 nixos/doc: explain how to run appimages 2022-06-06 12:00:00 +00:00
Martin Weinelt 0be108df2e
nixos/tests/firefox: fix return type typing 2022-06-06 13:29:09 +02:00
Nguyễn Gia Phong 22f3d4e4db
nixos: move matrix services into their category 2022-06-06 13:50:58 +09:00
zowoq e9f4412eb4 docker-edge: remove 2022-06-06 14:06:39 +10:00
Soham Sen 109e13db24 dragonflydb: init at 0.1.0 2022-06-06 04:05:48 +05:30
Victor Fuentes 54fcba5b3b
installation-cd: prevent gnome from sleeping 2022-06-05 14:10:37 -07:00
Luna Nova 8487b21ffb
memtest86+: 5.01-coreboot-002 -> 6.00-beta2 
The previous version from review.coreboot.org is no longer available at
that address. This reverts to using the upstream, which is also a
rewrite and currently in beta. The full release is expected before
22.11.
 2022-06-05 13:24:15 -07:00
Emery Hemingway 2d012163f2 nixos/uhub: fix plugins, set CAP_NET_BIND_SERVICE 
Fix generation of the plugins configuration and allow binding to
"privileged" ports.
 2022-06-05 13:58:26 -05:00
Robert Hensing bad676c7ed
Merge pull request #174441 from tljuniper/172325-nixostest-override-python-pkgs-additional-param 
nixos/test-driver: additional Python packages in test driver
 2022-06-05 20:46:01 +02:00
Guillaume Girol 7548b71138
Merge pull request #171778 from zhaofengli/infnoise-0.3.2 
infnoise: unstable-2019-08-12 -> 0.3.2, nixos/infnoise: init
 2022-06-05 17:30:34 +00:00
Anderson Torres 9648de3055
Merge pull request #176341 from erdnaxe/nitter_test_fix 
nixos/nitter: fix wait_for_open_port
 2022-06-05 09:03:06 -03:00
Sandro Jäckel ec00b4bb11
nixos/network-interfaces-scripted: remove network-setup unit if unused 2022-06-05 13:35:55 +02:00
Anders Kaseorg b362ef4eff pipewire: Never set an empty LD_LIBRARY_PATH 
An empty LD_LIBRARY_PATH may confuse some applications into appending
:, creating an empty segment that insecurely refers to the current
directory, not the absence of directories.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>
 2022-06-05 13:34:35 +02:00
Wout Mertens 949e1e5277
Merge pull request #176075 from NixOS/netdata-poststart 
netdata: started when service can be pinged
 2022-06-05 13:10:37 +02:00
Robert Hensing fddafcc062
Merge pull request #176099 from hercules-ci/nixosTests.allDrivers 
`nixosTests`: Add `allDrivers` for development purposes
 2022-06-05 12:13:40 +02:00
Alexandre Iooss 053e10dfbc nixos/nitter: fix wait_for_open_port 2022-06-05 09:35:48 +02:00
pennae 4a9708930d
Merge pull request #176116 from pennae/unifi-remove-deprecated 
nixos/unifi: change deprecated default for openFirewall
 2022-06-04 20:52:34 +00:00
lom 0df7cba1b0 nixos/asf: ipcPasswordFile use nullOr 2022-06-04 12:00:45 -06:00
pennae 18cce1008e
Merge pull request #175743 from scvalex/add-route-type-option 
nixos/network-interfaces: add networking.interfaces.<name>.ipv[46].routes.type
 2022-06-04 15:41:03 +00:00
Guillaume Girol ed883bbfd9
Merge pull request #173881 from symphorien/ihm-fix-test 
nixos/tests/ihatemoney: fix test
 2022-06-04 12:04:02 +00:00
Robert Hensing 81128707bf
Merge pull request #176182 from bobby285271/test-driver 
nixos/test-driver: fix type hint for send_chars
 2022-06-04 13:32:11 +02:00
sternenseemann 1dc61f76fb Merge remote-tracking branch 'origin/master' into haskell-updates 2022-06-04 10:57:30 +02:00
Bobby Rong 41cd411c03
nixos/tests/sway: skip type check for now 2022-06-04 13:55:01 +08:00
Bobby Rong 906b0b2e87
nixos/tests: fix all tests that uses wait_until_tty_matches 2022-06-04 12:22:03 +08:00
Bobby Rong 9d2a8e3190
nixos/test-driver: fix type hint for send_chars 2022-06-04 12:05:47 +08:00
Martin Weinelt 417419a5c9 nixos/tests/home-assistant: assert regex match 
Fixes type checking done against the test driver.
 2022-06-03 18:56:11 -07:00
github-actions[bot] 9ebf890b3f
Merge master into haskell-updates 2022-06-04 00:13:01 +00:00
Sandro 4c7a9aae7b
Merge pull request #176052 from LunNova/lunnova/rl-2211.section.md 
manual: Fix 22.11 Other Notable Changes bullet point style
 2022-06-04 00:23:46 +02:00
Sandro Jäckel 032f15e566
nixos/asf: add me as maintainer 2022-06-03 18:52:48 +02:00
Sandro Jäckel d8cd684b62
nixos/asf: restart when self restarting 2022-06-03 18:52:47 +02:00
Sandro Jäckel 4de6a81193
nixos/asf: fix state directory permissions, for real 2022-06-03 18:52:47 +02:00
Sandro Jäckel 28379c3a51
Revert "nixos/asf: set restrictive home permissions" 
This reverts commit 16f28933e7.
 2022-06-03 18:52:46 +02:00
Thiago Kenji Okada 44b5c8b6a7
Merge pull request #175965 from otavio/topic/nixos-restic 
Add new restic options for NixOS module
 2022-06-03 16:19:55 +01:00
Otavio Salvador d9e3b1fafe nixos/restic: add backup{Prepare,Cleanup}Command options 
The backupPrepareCommand and backupCleanupCommand options offer a way to
run a script to prepare for backup and then cleanup it once finish.

Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
 2022-06-03 11:22:22 -03:00
Otavio Salvador deae887c5a nixos/restic: add new repositoryFile option 
Allow providing the repository as a file, useful when we don't want it
being stored in the Git repository as plain text.

Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
 2022-06-03 11:21:37 -03:00
pennae e21c4d67d5 nixos/unifi: change deprecated default for openFirewall 
this was deprecated 6 months ago in unstable for removal in 22.11,
so now seems like a good point to change the default.
 2022-06-03 15:59:41 +02:00
Robert Hensing 481ef8ddd6 nixosTests: Add allDrivers for development purposes 2022-06-03 14:34:29 +02:00
Robert Hensing 793180cf55
Merge branch 'master' into 172325-nixostest-override-python-pkgs-additional-param 2022-06-03 14:22:13 +02:00
Robert Hensing de3e423178
Merge pull request #171280 from m1-s/fix_mypy2 
nixos/test-driver: Typecheck TestScript
 2022-06-03 14:19:21 +02:00
Michael Schneider fd4ebd8990 add opt out flag for type checking 2022-06-03 13:37:04 +02:00
Sandro c09782950f
Merge pull request #176030 from SuperSandro2000/asf 2022-06-03 12:12:23 +02:00
Sandro Jäckel e438fad5e9
nixos/asf: format 2022-06-03 11:41:40 +02:00
Sandro Jäckel 17ec7e4401
nixos/asf: remove subdirectories from bot config 2022-06-03 11:41:38 +02:00
Sandro Jäckel 16f28933e7
nixos/asf: set restrictive home permissions 2022-06-03 11:41:37 +02:00
Sandro Jäckel 48b21f661c
nixos/asf: add ipcPasswordFile option, only delete bot configs when managed by nixos, make preStart clearer 2022-06-03 11:41:36 +02:00
Wout Mertens 7f025e2b34
netdata: started when service can be pinged 2022-06-03 10:45:27 +02:00
Luna Nova 9e95ee79d4
manual: Fix 22.11 Other Notable Changes bullet point style 
Every other release uses "-" instead of "*", which results in
spacing=compact being added to the xml unexpectedly.
 2022-06-02 20:58:54 -07:00
Nick Cao e84828b973
nixos/nvidia: add option hardware.nvidia.open for selecting the opensource kernel driver 2022-06-03 10:50:33 +08:00
Nick Cao 94f5bd2051
nvidia_x11: init opensource kernel driver 2022-06-03 10:50:33 +08:00
github-actions[bot] 1a2bb9918a
Merge master into haskell-updates 2022-06-03 00:11:59 +00:00
Otavio Salvador 082a4184ec nixos/restic: reformat 
Apply nixpkgs-fmt on file prior doing changes.

Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
 2022-06-02 16:48:43 -03:00
Rick van Schijndel ef895f6b43
Merge pull request #173239 from jojosch/mjolnir-update 
mjolnir: 1.4.1 -> 1.4.2
 2022-06-02 21:40:53 +02:00
Rick van Schijndel d93d4a5820
Merge pull request #175872 from uninsane/colinsane/phosh-phoc-scale 
phosh: allow fractional scaling
 2022-06-02 20:54:41 +02:00
Sandro b450c76786
Merge pull request #175607 from robintown/matrix-synapse 
matrix-synapse: 1.59.1 -> 1.60.0
 2022-06-02 20:32:04 +02:00
Lassulus 8cea5e2fa1
Merge pull request #173664 from Izorkin/peertube-redis-server 
nixos/peertube: use redis.servers
 2022-06-02 20:26:29 +02:00
Alexandru Scvortov 3a09010b9d nixos/network-interfaces: add networking.interfaces.<name>.ipv[46].routes.type 2022-06-02 19:16:25 +01:00
Thiago Kenji Okada 679197e9ff
Merge pull request #174058 from jian-lin/fix-nvidia.powerManagement.finegrained-only-apply-workarounds-when-needed 
nixos/nvidia: only apply workarounds for finegrained when needed
 2022-06-02 17:55:23 +01:00
Thiago Kenji Okada 64870a0c57
Merge pull request #174259 from schuelermine/add-nixos-option/hardware.nvidia.forceFullCompositionPipeline 
nixos/nvidia: add hardware.nvidia.forceFullCompositionPipeline
 2022-06-02 17:50:50 +01:00
Thiago Kenji Okada 3ead2b58f5
Merge pull request #174057 from jian-lin/fix-nvidia.powerManagement.finegrained-remove-useless-setting 
nixos/nvidia: remove a useless option
 2022-06-02 17:32:24 +01:00
ajs124 5bb61d6a25 syslogng_incubator: remove after being marked broken for over 18 months 
It was marked in commit 6d797c8462 by Jörg Thalheim on 2018-08-27 (commited on 2018-08-27)
 2022-06-02 18:03:52 +02:00
sternenseemann 0d9edbcdd0 Merge remote-tracking branch 'origin/master' into haskell-updates 2022-06-02 10:48:49 +02:00
colin 1d0649f929 phosh: restrict the scale config value to strictly positive values or null 2022-06-02 01:46:08 -07:00
Michael Schneider 814027378b nixos/test-driver: Typecheck TestScript 2022-06-02 10:05:45 +02:00
MatthiasBenaets 9a5c77c581 nixos/new-lg4ff: fix kernel selection 2022-06-02 08:27:42 +02:00
github-actions[bot] a52fa8397a
Merge master into haskell-updates 2022-06-02 00:16:40 +00:00
colin cabf369f83 phosh: allow fractional scaling 2022-06-01 15:44:12 -07:00
Bernardo Meurer f4d4b16d71
Merge pull request #175831 from lovesegfault/fix-localtime 
nixos/localtimed: hopefully fix geoclue
 2022-06-01 14:38:29 -07:00
lom ec9204d732 nixos/new-lg4ff: respect enable option 2022-06-01 15:09:24 -06:00
Bernardo Meurer ffae8569b0 nixos/localtimed: hopefully fix geoclue 2022-06-01 13:20:16 -07:00
sternenseemann 38c31bdbe5 Merge remote-tracking branch 'origin/master' into haskell-updates 2022-06-01 19:08:57 +02:00
Martin Weinelt 5a188dfbca
Merge pull request #175729 from DeterminateSystems/jellyfin-fix 2022-06-01 17:19:49 +02:00
Sandro ba4c03124f
Merge pull request #174956 from MatthiasBenaets/new-lg4ff 
new-lg4ff: init at 0.3.3
 2022-06-01 16:42:55 +02:00
MatthiasBenaets 8dcba104aa new-lg4ff: init at 0.3.3 2022-06-01 14:31:52 +02:00
Linus Heckemann 7eab23d517 jellyfin: fix permissions on state directory 
Previously, all configuration and state data was accessible to all
users on the system running jellyfin. This included user passwords in
the Jellyfin database, as well as credentials for LDAP if configured.
The exact set of accessible data depends on system configuration.

Thanks to Sofie Finnes Øvrelid for reporting this issue.

Fixes: CVE-2022-32198

Co-Authored-By: Martin Weinelt <hexa@darmstadt.ccc.de>
 2022-06-01 12:31:23 +02:00
Martin Weinelt 5b8a2ab169
Merge pull request #175611 from waldheinz/systemd-boot-builder-does-not-update 
nixos/systemd-boot: fix systemd-boot-builder refusing to update
 2022-06-01 12:22:11 +02:00
Matthias Treydte ff24f484af nixos/systemd-boot: fix systemd-boot-builder refusing to update 
Handling of the string length condition in should_update
was broken, as evident with the log message

> leaving systemd-boot 246 in place (250.4 is not newer)

Discussion with @mweinelt came to the conclusion
that Python's "<" operator already does what we need,
so the should_update function can be dropped.

Fixes a30de3b849
 2022-06-01 11:49:07 +02:00
Aaron Andersen 18a07645e5
Merge pull request #174959 from MoritzBoehme/openconnect-auto-start 
nixos/openconnect: add autoStart option
 2022-05-31 23:05:25 -04:00
github-actions[bot] 68b515131f
Merge master into haskell-updates 2022-06-01 00:15:07 +00:00
Martin Weinelt 02e44ee3be
Merge pull request #174804 from dotlambda/prometheus-dmarc-exporter-no-poetry2nix 2022-06-01 01:46:30 +02:00
Robert Schütz aff15c41fc dmarc-metrics-exporter: rename from prometheus-dmarc-exporter 
Also stop using poetry2nix.
 2022-05-31 23:25:18 +00:00
AmineChikhaoui 3909226544
ec2-amis: add release 22.05 2022-05-31 18:43:58 -04:00
7c6f434c 39e6b1a240
Merge pull request #175558 from klemensn/atop-convert-logs-fix-startup 
nixos/atop: Convert log format to fix service start
 2022-05-31 20:37:23 +00:00
Sandro 8d8e031d25
Merge pull request #133771 from erdnaxe/libreddit_fix 
nixos/libreddit: service hardening and test
 2022-05-31 21:53:51 +02:00
Robin Townsend d0eda68f5b matrix-synapse: Warn about state_group_edges changes in release notes 2022-05-31 13:54:58 -04:00
Maximilian Bosch 185ee01e80
Merge pull request #173273 from kfollesdal/grafana-azuread 
nixos/grafana: add new options to grafana module
 2022-05-31 19:24:33 +02:00
Robert Hensing c5d82eb1ab
Merge pull request #174939 from FliegendeWurst/nixos-tests 
nixos/tests: various fixes
 2022-05-31 16:31:06 +02:00
Robert Hensing 53326189ba
Merge pull request #174829 from blaggacao/fix/cleanup-nixpkgs-initial-system 
nixos: remove effect-less nixpgks.initialSystem
 2022-05-31 16:26:25 +02:00
Markus S. Wamser 32e26d2627 release-notes: fix typo 2022-05-31 08:53:58 +02:00
Klemens Nanni 09350ff7d4 nixos/atop: Convert log format to fix service start 
Raw logs are stored in a versioned binary format and must be update with
atopconvert(1) upon atop version updates.

Failure to do so results in atop.service startup failure as I found out
the hard way after the "atop: 2.6.0 -> 2.7.1"[0] bump:
```
May 31 01:49:25 <hostname> sh[2269709]: existing file /var/log/atop/atop_20220531 has incompatible header
May 31 01:49:25 <hostname> sh[2269709]: (created by version 2.6 - current version 2.7)
May 31 01:49:25 <hostname> systemd[1]: atop.service: Main process exited, code=exited, status=7/NOTRUNNING
```

Convert logs in `ExecStartPre` and replace them iff updated.
This is to avoid changing original modification times upon every service
start and thus work against atop's log rotation (see existing
`ExecStartPre`).

0: https://github.com/NixOS/nixpkgs/pull/175180#issuecomment-1141546487
 2022-05-31 07:21:01 +02:00
github-actions[bot] 5250c9bcbc
Merge master into haskell-updates 2022-05-31 00:12:58 +00:00
markuskowa 412168b4ae
Merge pull request #175316 from markuskowa/upd-slurm 
slurm: 21.08.8.2 -> 22.05.0.1
 2022-05-30 21:18:28 +02:00
Janne Heß cbaacfb8df
Release 22.05 2022-05-30 20:50:07 +02:00
Robert Hensing 116832edbf dockerTools: Add example of using NixOS' etc 
(cherry picked from commit 9b2af8673be82d48ce76c8c152de85ad921d26ba)
 2022-05-30 14:26:52 +02:00
ajs124 872d0ba943
Merge pull request #174448 from helsinki-systems/upd/nginx 
nginxStable: 1.20.2 -> 1.22.0
 2022-05-30 13:35:01 +02:00
Janne Heß 563e5c46f5
Merge pull request #175445 from helsinki-systems/fix/vmware-mkoverride 
nixos/vmware-guest: Remove the video driver
 2022-05-30 12:30:46 +02:00
ajs124 30186896ee nixos/nginx: fix SystemCallFilter for openresty 2022-05-30 11:58:28 +02:00
Janne Heß 5157246aa4
nixos/vmware-guest: Remove the video driver 
This breaks isos since https://github.com/NixOS/nixpkgs/pull/172668
because vmware is enabled there. @K900 tested this and confirmed that
the GPU acceleration still works.
 2022-05-30 11:56:21 +02:00
Florian Klink f12a263b69
Merge pull request #172707 from klemensn/init-zfs-mount-options 
nixos/stage-1: Fix library path in libraries, fix ZFS mount options
 2022-05-30 10:51:17 +02:00
github-actions[bot] b39ef64425
Merge master into haskell-updates 2022-05-30 00:15:31 +00:00
Guillaume Girol f2493e87d8
Merge pull request #173110 from symphorien/ovmf-cross 
nixos/libvirtd: make it possible to boot a UEFI aarch64 vm on x86_64
 2022-05-29 21:46:45 +00:00
linj 37792e5766 nixos/dendrite: add an option loadCredential 
systemd-247 provides a mechanism called LoadCredential for secrets and
it is better than environment file. See the section of Environment=
in the manual of systemd.exec for more information.

Some options in config.yaml need values to be strings, which currently
can be used with environmentFile but not loadCredential. But it's
possible to use loadCredential for those options, e.g. we can
substitute their values in ExecStart, but not in ExecStartPre due to
[1].

[1]: https://github.com/systemd/systemd/issues/19604
 2022-05-29 13:34:14 -07:00
Janne Heß d732671af2
Merge pull request #175138 from Mic92/docs 
release-notes: link to all nix versions
 2022-05-29 21:30:47 +02:00
ajs124 757046a257
Merge pull request #175095 from mweinelt/slapd-argon2-changelog 
nixos/doc/rl-2205: add slapd argon2 module rename hint
 2022-05-29 20:49:21 +02:00
sternenseemann 4cec59e09c
Merge pull request #175170 from sternenseemann/ghc-9.2.3 
haskell.compiler: ghc922 -> ghc923
 2022-05-29 20:00:57 +02:00
Jan Tojnar 81291cc793 nixos/grafana: Allow setting UID for datasource 2022-05-29 19:22:02 +02:00
Markus Kowalewski b6020f42a5
nixos/slurm: update systemd service for slurmd 
Adjust according to upstream recommendation
 2022-05-29 17:17:01 +02:00
tljuniper 2a750c3026 nixos/manual: Add docs on extra python packages in tests 2022-05-29 11:22:50 +02:00