Commit graph

27591 commits

Author SHA1 Message Date
Daniel Poelzleithner 64878e3a67 automysqlbackp: fix missing permissions for mysqldump
automysqldump passes the --events flag, but without the EVENTS permission a error occures:
> mysqldump: Couldn't execute 'show events': Access denied for user 'automysqlbackup'@'localhost' to database 'mysql' (1044)
2022-05-12 13:17:14 +02:00
Thomas Gerbet 3c90c28124 phpPackages.box: 2.7.5 -> 3.16.0
The source has been moved to the new upstream since Box2 is abandonned.
2022-05-12 11:42:27 +02:00
ners 49945f07cc installation-cd: add more guest tools to graphical installation base 2022-05-12 09:36:49 +02:00
Julien Moutinho c646d375d3 nixos/public-inbox: support enabling confinement
Add support for enabling confinement
but does not enable it by default yet
because so far no module within NixOS uses confinement
hence that would set a precedent.
2022-05-12 01:56:46 +02:00
Julien Moutinho 0e290442ba nixos/public-inbox: add tests 2022-05-12 01:56:16 +02:00
Julien Moutinho 8514800c42 nixos/public-inbox: init 2022-05-12 01:56:15 +02:00
Jan Tojnar 5af93e6908 Merge branch 'staging-next' into staging 2022-05-12 01:24:26 +02:00
Artturi c7b10b6df9
Merge pull request #172131 from euank/ena-2.7.1
ena: 2.5.0 -> 2.7.1 & nixos/amazon-image: default to 5.15 kernel
2022-05-12 01:38:24 +03:00
oxalica 085a5256c1
nixos/btrbk: inherit lib functions to simplify use-sites 2022-05-12 05:55:39 +08:00
oxalica 60e13131b6
nixos/btrbk: allow instances without timers
This allows btrbk instances without a triggering timer by setting
`onCalendar` to `null`.
This is useful for manual-starting only btrbk backup settings.
2022-05-12 05:55:17 +08:00
github-actions[bot] 7dbfbc2e90
Merge staging-next into staging 2022-05-11 18:10:52 +00:00
Thiago Kenji Okada eb6c3e1591
Merge pull request #171101 from NickCao/dendrite-bump
dendrite: 0.8.1 -> 0.8.4
2022-05-11 14:27:50 +01:00
Nick Cao 82f0b53588
dendrite: 0.8.1 -> 0.8.4 2022-05-11 18:40:05 +08:00
github-actions[bot] 2d62d4f8e6
Merge staging-next into staging 2022-05-11 06:02:11 +00:00
Rick van Schijndel 3a7f7c1153 hydra-unstable -> hydra_unstable 2022-05-10 23:32:02 +02:00
Martin Weinelt fa7ce6bc7f
nixos/openssh: Add sntrup761x25519-sha512 kexAlgo
Introduced in OpenSSH 9.0 it became the part of the default kexAlgorithm
selection, visibile in sshd_config(5).

It is also enabled by default in the OpenSSH client, as can be seen from

$ ssh -Q KexAlgorithms

Also clarifies that we use the referenced documents as the lower bound,
given that they haven't been updated for 5-7y.
2022-05-10 23:20:54 +02:00
Maximilian Bosch 6f9099fa62
nixos/{jira,crowd,confluence}: restart service on failure
In case of unexpected failures of the services - such as an OOM - it
shouldn't be necessary for an administrator to restart the service by
hand (which is usually sufficient). Instead, this should happen
automatically.

Also, I decided to increase the interval between restart attempts from
100ms[1] to 10s for a small grace period as suggested by several online
resources[2][3].

[1] See `systemd.service(5)`
[2] https://it.megocollector.com/linux/create-systemd-services-for-atlassian-apps/
[3] https://anteru.net/blog/2017/jira-confluence-with-systemd-on-centos/
2022-05-10 22:31:22 +02:00
Rick van Schijndel f433d91bb3 anbox: drop kernel modules package
All builds are broken:
- 4.14
- 4.19
- 5.4

https://hydra.nixos.org/eval/1761072?filter=anbox&compare=1760998&full=#tabs-still-fail

Let's just drop it.

This leaves the anbox module possibly in a broken-ish state,
but I'm not sure what to do about it.
2022-05-10 21:15:48 +02:00
github-actions[bot] 3a79190750
Merge staging-next into staging 2022-05-10 18:01:50 +00:00
D Anzorge 271905a33f minetest: add aliases and release notes for v4 deprecation 2022-05-10 19:26:25 +02:00
Lara 8f54cca448 nixos/doc: Add Snipe-IT to 22.05 release notes 2022-05-10 16:57:21 +02:00
Lara 9cb388739f nixos/snipe-it: init
Snipe-IT is a free open source IT asset/license management system

https://snipeitapp.com/
2022-05-10 16:57:21 +02:00
bb2020 8bdcffc4fe nixos/mbpfan: minor changes 2022-05-10 15:40:17 +03:00
Justinas Stankevicius 25cf5ebcd0 teleport: 8.1.3 -> 9.1.2 2022-05-09 23:35:46 +03:00
github-actions[bot] 629adb097a
Merge staging-next into staging 2022-05-09 18:01:59 +00:00
Artturi 4ae23f5c7d
Merge pull request #156071 from Madouura/dev/bcachefs-installer
nixos/tests/installer: add bcachefs tests
2022-05-09 19:48:16 +03:00
Robert Hensing ebf0465d09 Merge remote-tracking branch 'upstream/master' into testers 2022-05-09 14:27:13 +02:00
Robert Hensing ae172a2bb4 treewide: nixosTest -> testers.nixosTest 2022-05-09 14:16:06 +02:00
github-actions[bot] 27575e98ee
Merge staging-next into staging 2022-05-09 12:08:45 +00:00
Klemens Nanni 199933efdf nixos/mandoc: Leave shell argument quoting to nix
Manually crafting a quoted string that otherwise lacks any safe-guards
looks odd.

Use `escapeShellArg` instead before prepending the path.
2022-05-09 10:48:54 +02:00
Janne Heß e6fb1e63d1
Merge pull request #171650 from helsinki-systems/feat/config-systemd-package
treewide: pkgs.systemd -> config.systemd.package
2022-05-09 10:23:04 +02:00
Euan Kemp 35cfe2c29c nixos/amazon-image: default to 5.15 kernel
Previously, it was held back due to the ENA driver not building on the
current default (5.15). The previous commit bumps the ENA driver, which
allows 5.15 to work.
2022-05-08 21:13:50 -07:00
github-actions[bot] 31938a3f5c
Merge staging-next into staging 2022-05-09 00:03:28 +00:00
github-actions[bot] f39e774f11
Merge master into staging-next 2022-05-09 00:02:27 +00:00
Sandro 8803756fd3
Merge pull request #172072 from ivan/tinc-unbreak
nixos/tinc: unbreak the service
2022-05-09 01:27:12 +02:00
Sandro b196dea22d
Merge pull request #172080 from wentasah/usbrelay-1.0
usbrelay: 0.9 -> 1.0
2022-05-09 01:02:08 +02:00
Niklaus Giger 1d82f62aef
UHK-agent: Support for Ultimate Hacking Keyboard udev-rules and configuration application (#132420)
* maintainers: add ngiger

* uhk-agent: init at 1.5.17

* Apply suggestions from code review

* Update pkgs/os-specific/linux/uhk-agent/default.nix

* Apply suggestions from code review

* Update pkgs/os-specific/linux/uhk-agent/default.nix

Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2022-05-08 22:40:52 +02:00
Michal Sojka 26ec7081d6 nixos/usbrelayd: set myself as module maintainer
I forgot setting that when creating the module.
2022-05-08 21:44:50 +02:00
Michal Sojka 3effbca0bc usbrelay: 0.9 -> 1.0 2022-05-08 21:16:32 +02:00
ajs124 e4a1b1aacd
Merge pull request #171588 from mweinelt/tools-userpkgs
nixos/tools: move firefox into user packages
2022-05-08 19:02:47 +01:00
github-actions[bot] 6ab1fe48df
Merge staging-next into staging 2022-05-08 18:01:43 +00:00
github-actions[bot] e92815729d
Merge master into staging-next 2022-05-08 18:01:10 +00:00
Ivan Kozik 9db1d1782b nixos/tinc: unbreak the service
The user is actually tinc.${network}, as Mic92 points out in
https://github.com/NixOS/nixpkgs/pull/171703#discussion_r867506032

Sorry, I broke this in https://github.com/NixOS/nixpkgs/pull/171703 earlier.

coreutils 9.1 chown does not complain in this case with a valid dotted user.
2022-05-08 16:04:20 +00:00
Sandro befb337461
Merge pull request #169216 from Shawn8901/fix_prometheus_config_generation
nixos/prometheus: use pkgs.formats.json.generate to write config file
2022-05-08 15:09:09 +02:00
github-actions[bot] c5da241985
Merge staging-next into staging 2022-05-08 12:01:39 +00:00
github-actions[bot] eaaed3f1d2
Merge master into staging-next 2022-05-08 12:01:07 +00:00
Artturi 3c8e6248cb
Merge pull request #172040 from K900/fix-installer-eval
installation-cd-base: fix eval
2022-05-08 13:50:10 +03:00
Robert Schütz 2ddfd7e81b nixos/borgmatic: use pkgs.formats.yaml 2022-05-08 01:08:28 -07:00
K900 e994576b0d installation-cd-base: fix eval 2022-05-08 11:08:10 +03:00
github-actions[bot] d2d66da45b
Merge staging-next into staging 2022-05-07 18:01:36 +00:00
github-actions[bot] 84277e82a5
Merge master into staging-next 2022-05-07 18:01:03 +00:00
Florian Klink dbf2b9152f nixos/tests/systemd-nspawn: add test for machinectl pull-tar
This will package up the closure of pkgs.hello in a tarball, and will
later on verify machinectl pull-tar properly unpacked it, serving as a
regression test for #108158.

Closes #108158
2022-05-07 18:14:46 +02:00
Rick van Schijndel 17c252aab1
Merge pull request #153940 from tomfitzhenry/phosh-service
nixos/phosh: add Phosh, the Phone Shell
2022-05-07 17:56:44 +02:00
Artturi 1d09b16b0c
Merge pull request #171709 from avdv/fix-illum-segfault-and-restart
illum: Prevent segfault when unplugging keyboards
2022-05-07 17:40:52 +03:00
github-actions[bot] 00e5877c2f
Merge staging-next into staging 2022-05-07 00:02:47 +00:00
github-actions[bot] fa99b3742a
Merge master into staging-next 2022-05-07 00:02:09 +00:00
Sandro 72565373a4
Merge pull request #170912 from Baughn/master 2022-05-07 01:14:08 +02:00
Maximilian Bosch f0bb39d4b7
Merge pull request #167327 from lheckemann/networkd-usedhcp
nixos/networkd: reimplement useDHCP in a sensible way
2022-05-07 00:05:44 +02:00
Sandro 398cf5bf2d
Merge pull request #164698 from illustris/proxmox-lxc 2022-05-06 23:35:13 +02:00
Sandro d21ebc62bf
Merge pull request #170851 from danderson/danderson/ts-warn-rpf
nixos/tailscale: warn if strict reverse path filtering is in use.
2022-05-06 23:21:50 +02:00
github-actions[bot] 730d96c6bd
Merge staging-next into staging 2022-05-06 18:01:53 +00:00
github-actions[bot] 6c361fbbd8
Merge master into staging-next 2022-05-06 18:01:18 +00:00
Svein Ove Aas dcade93a25 factorio: Add loadLatestSave 2022-05-06 17:50:35 +01:00
Félix Baylac-Jacqué 7f76009e10 nixosTests.pleroma: fix test, remove toot patch
Initially applied via e7f6370701, then
reverted by 96aaf29234.

Re-applying this patch: the pleroma NixOS test is broken without it.

It was originally impossible to login in toot without having an
interactive shell. I opened https://github.com/ihabunek/toot/pull/180
upstream to fix that and fetch this patch for this test.

The author decided to fix the issue using a slightly different
approach at a3eb5dca24

Because of this upstream fix, our custom patch does not apply anymore.
Using that stdin-based login upstream feature.

Pointing pleroma_ctl to the right RELEASE_COOKIE as well.
2022-05-06 17:45:42 +02:00
Maximilian Bosch f4e5bd8064
nixos/nixos-generate-config: update comment for useDHCP 2022-05-06 16:56:47 +02:00
Vladimír Čunát 8ad52489e9
Merge branch 'master' into staging-next 2022-05-06 16:07:25 +02:00
Maximilian Bosch 7dbfd6b997
Merge pull request #171783 from Ma27/linux-kernel-updates
Linux kernels 2022-05-06
2022-05-06 14:05:28 +02:00
github-actions[bot] ad713fb84e
Merge staging-next into staging 2022-05-06 12:02:39 +00:00
github-actions[bot] 6e0aca3c43
Merge master into staging-next 2022-05-06 12:02:02 +00:00
Janne Heß 764d77f4c3
Merge pull request #124261 from helsinki-systems/feat/state-version-default-warn
nixos/version: Warn about using the default of system.stateVersion
2022-05-06 13:20:43 +02:00
Yureka 96aaf29234
Revert "Merge pull request #164398 from NinjaTrappeur/nin/pleroma-wrappers"
This reverts commit 05417a66e7, reversing
changes made to 53e4f8d237.
2022-05-06 12:38:28 +02:00
Maximilian Bosch b79d9a846b
linux/hardened/patches/5.17: init at 5.17.5-hardened1 2022-05-06 10:17:59 +02:00
github-actions[bot] 4c4d0d6bc3
Merge staging-next into staging 2022-05-06 06:02:20 +00:00
github-actions[bot] ff5c4d3404
Merge master into staging-next 2022-05-06 06:01:36 +00:00
Rick van Schijndel 32bebf42ea
Merge pull request #171703 from ivan/chown-colon
treewide: chown user:group instead of user.group to fix warnings from coreutils 9.1
2022-05-06 07:20:40 +02:00
David Anderson 3fdac0f981 nixos/tailscale: warn if strict reverse path filtering is in use.
Tailscale uses policy routing to enable certain traffic to bypass
routes that lead into the Tailscale mesh. NixOS's reverse path
filtering setup doesn't understand the policy routing at play,
and so incorrectly interprets some of this traffic as spoofed.

Since this only breaks some features of Tailscale, merely warn
users about it, rather than make it a hard error.

Updates tailscale/tailscale#4432

Signed-off-by: David Anderson <dave@natulte.net>
2022-05-05 18:28:48 -07:00
Sandro b9e7f61c72
Merge pull request #171747 from danderson/danderson/tailscale-getent
nixos/tailscale: add glibc to PATH.
2022-05-06 03:10:00 +02:00
Sandro e5e30371bc
Merge pull request #170210 from danderson/danderson/restart-tailscaled
nixos/tailscale: use systemctl restart during activation.
2022-05-06 03:09:01 +02:00
Colin Arnott ecd8d42397
nextcloud24: init at 24.0.0
Added Nextcloud 23 and set it as the default Nextcloud version for the
NixOS module. Added PHP 8.1 as an option for phpPackage and default for
Nextcloud ≥ 24.
2022-05-06 00:37:39 +00:00
David Anderson 67b1fac192 nixos/tailscale: add glibc to PATH.
For some features, tailscaled uses getent(1) to get the shell
of OS users. getent(1) is in the glibc derivation. Without this
derivation in the path, tailscale falls back to /bin/sh for all
users.

Signed-off-by: David Anderson <dave@natulte.net>
2022-05-05 17:09:27 -07:00
github-actions[bot] 4cab9aed76
Merge staging-next into staging 2022-05-06 00:02:53 +00:00
github-actions[bot] b962dee3e7
Merge master into staging-next 2022-05-06 00:02:16 +00:00
Bernardo Meurer 323fb482fb
Merge pull request #171634 from luochen1990/patch-2
Fix wg-quick:  always generate postUp issue.
2022-05-05 15:05:19 -07:00
Ivan Kozik 59a76614f3 treewide: chown user:group instead of user.group to fix warnings from coreutils 9.1 2022-05-05 22:05:18 +00:00
Ivan Kozik f18cc2cf02 nixos/security/wrappers: chown user:group instead of user.group to fix warnings from coreutils 9.1
activating the configuration...
setting up /etc...
chown: warning: '.' should be ':': ‘root.root’
chown: warning: '.' should be ':': ‘root.messagebus’
chown: warning: '.' should be ':': ‘root.root’
chown: warning: '.' should be ':': ‘root.root’
chown: warning: '.' should be ':': ‘root.root’
chown: warning: '.' should be ':': ‘root.root’
chown: warning: '.' should be ':': ‘root.root’
chown: warning: '.' should be ':': ‘root.root’
chown: warning: '.' should be ':': ‘root.root’
chown: warning: '.' should be ':': ‘root.root’
chown: warning: '.' should be ':': ‘root.root’
chown: warning: '.' should be ':': ‘root.root’
chown: warning: '.' should be ':': ‘root.root’
chown: warning: '.' should be ':': ‘root.root’
chown: warning: '.' should be ':': ‘root.root’
chown: warning: '.' should be ':': ‘root.root’
reloading user units for root...
2022-05-05 22:05:18 +00:00
Robert Schütz ccf42c7987 nixos/home-assistant: fix openFirewall 2022-05-05 15:04:46 -07:00
Bernardo Meurer c4ad7519ef
Merge pull request #170136 from helsinki-systems/feat/systemd-stage-1-plymouth
nixos/plymouth: Add systemd stage 1 support
2022-05-05 14:49:26 -07:00
Martin Weinelt e237f3e459
Merge pull request #171716 from piegamesde/heisenbridge-module 2022-05-05 23:30:09 +02:00
piegames 6b1dcbb1db nixos/heisenbridge: Fix stupid typo 2022-05-05 23:26:01 +02:00
Sandro 836c52e625
Merge pull request #167208 from devplayer0/fix/missing-systemd-nspawn-options
nixos/systemd/nspawn: Add missing nspawn unit options
2022-05-05 22:58:59 +02:00
Artturi 0a07034866
Merge pull request #171688 from erictapen/kanidm 2022-05-05 23:45:27 +03:00
Claudio Bley fd3d1a834b illum: Restart service on failure
If there is a fatal error and illum exits, it should be safe to restart it.
2022-05-05 22:31:56 +02:00
github-actions[bot] aba90d9366
Merge master into staging-next 2022-05-05 18:05:32 +00:00
Janne Heß 57cd07f3a9
treewide: pkgs.systemd -> config.systemd.package
This ensures there is only one systemd package when e.g. testing the
next systemd version.
2022-05-05 20:00:31 +02:00
Jan Tojnar a1439bc965
Merge pull request #171071 from jtojnar/fdo-updates
Update some low-key fdo packages
2022-05-05 19:55:24 +02:00
Kerstin Humm 881a8cbe80
nixos/kanidm: fix release notes 2022-05-05 19:18:41 +02:00
Kerstin Humm c126babb28 nixos/kanidm: init
Co-Authored-By:  Martin Weinelt <mweinelt@users.noreply.github.com>
Co-Authored-By:  Flakebi <flakebi@t-online.de>
2022-05-05 19:06:13 +02:00
Will Fancher b0431d9d91
Merge pull request #168269 from ElvishJerricco/systemd-stage-1-zfs
nixos/stage-1-systemd: ZFS support
2022-05-05 13:00:36 -04:00
Tom Fitzhenry e0daeb01a7 programs/phosh: merge into services/x11/desktop-managers/phosh 2022-05-06 00:04:48 +10:00
Tom Fitzhenry 1d7cd163ce nixos/phosh: add Phosh, the Phone Shell 2022-05-06 00:04:48 +10:00
github-actions[bot] 5b965b95d5
Merge master into staging-next 2022-05-05 12:04:22 +00:00
Robert Hensing 28f99aad31 nixos/testing-python.nix: Set meta.mainProgram 2022-05-05 12:33:57 +02:00
Janne Heß 4c5e7bde3e
nixos/matrix-synapse: Add a defaultText 2022-05-05 12:22:37 +02:00
Janne Heß e2703d2697
nixos/version: Warn about using the default of system.stateVersion 2022-05-05 12:22:31 +02:00
Arnout Engelen 3275c08534
Merge pull request #171382 from Patryk27/nixos/improve-lxd-tests
nixos/lxd: improve tests
2022-05-05 11:18:52 +02:00
LuoChen e4b942eccf wg-quick: fix postUp always generated issue 2022-05-05 16:08:46 +08:00
github-actions[bot] 375b571b04
Merge master into staging-next 2022-05-05 06:01:10 +00:00
Artturi 0b64a2d69a
Merge pull request #167108 from aaronjheng/oath-toolkit
oath-toolkit: Rename from oathToolkit to oath-toolkit
2022-05-05 03:58:39 +03:00
Madoura 39b9cf311b
nixos/tests/installer: add bcachefs tests 2022-05-04 19:26:43 -05:00
github-actions[bot] ae265ec922
Merge master into staging-next 2022-05-05 00:02:31 +00:00
Martin Weinelt 6051f8028d
nixos/tools: move firefox into user packages
Installing Firefox is a good example for a package that could be
installed as a user, since it is a graphical one.

Also use thunderbird as a second example.
2022-05-05 00:41:55 +02:00
Will Fancher f989e13983 zfs: Support zfs_force=y on the command line as well. 2022-05-04 18:32:27 -04:00
Jan Tojnar ec0ae174f8 Revert "networkmanager-applet: rename from networkmanagerapplet"
network-manager-applet uses differrent naming scheme from the VPN plug-ins.
Let’s revert to the previous state, for now, to fix eval. We can do the rename later.

This reverts commit cecb014d5d.
2022-05-04 23:29:42 +02:00
illustris 64a204d1a7 nixos/proxmox-lxc: use hostname provided by proxmox 2022-05-05 01:05:04 +05:30
Vladimír Čunát 453f19bb85
Merge branch 'master' into staging-next 2022-05-04 21:02:39 +02:00
Sandro 7e4329608c
Merge pull request #170952 from SuperSandro2000/firewalld
firewalld: init at 1.1.1
2022-05-04 20:51:27 +02:00
Kim Lindberger ad5e4dacb4
Merge pull request #171066 from felixsinger/pkgs/keycloak/update
keycloak: 17.0.1 -> 18.0.0
2022-05-04 20:51:11 +02:00
Rick van Schijndel 14ad619e32
Merge pull request #171488 from K900/openssh-test-timeouts
nixos/tests/openssh: add timeouts to all ssh invocations
2022-05-04 20:05:46 +02:00
github-actions[bot] 747719f235
Merge master into staging-next 2022-05-04 18:01:28 +00:00
Bernardo Meurer 9a41fab23f
Merge pull request #171021 from helsinki-systems/feat/systemd-stage-1-udev-improvements 2022-05-04 09:09:09 -07:00
Sandro 451e27e302
Merge pull request #169370 from gador/pgadmin-update-6.8
Pgadmin update 6.8, fix build breakage on master
2022-05-04 18:03:32 +02:00
Sandro b59d447a16
Merge pull request #171490 from danielfullmer/fix-ssh-hostkey 2022-05-04 14:29:29 +02:00
Sandro aacb7ef4a6
Merge pull request #169966 from deinferno/vmware-host 2022-05-04 14:13:12 +02:00
github-actions[bot] 16684f8bd3
Merge master into staging-next 2022-05-04 12:01:10 +00:00
Artturi f0e48dd98b
Merge pull request #119942 from hercules-ci/mkDerivation-overridable-recursive-attributes 2022-05-04 14:31:50 +03:00
Martin Weinelt 1d2a0b801a
nixos/tests/matrix-appservice-irc: disable registration verification
The test would previously error out like this:

> synapse_homeserver[1155]: synapse.config._base.ConfigError: You have
> enabled open registration without any verification. This is a known
> vector for spam and abuse. If you would like to allow public
> registration, please consider adding email, captcha, or token-based
> verification. Otherwise this check can be removed by setting the
> `enable_registration_without_verification` config option to `true`.
2022-05-04 10:25:20 +02:00
Pascal Bach bf905c190c
Merge pull request #171390 from DarkKirb/matrix-1.58
matrix-synapse: 1.57.0 -> 1.58.0
2022-05-04 09:22:45 +02:00
github-actions[bot] 23791ce6d0
Merge staging-next into staging 2022-05-04 06:02:12 +00:00
Daniel Fullmer ad38a2a646 nixos/ssh: remove empty host key files before generating new ones
In a previous PR [1], the conditional to generate a new host key file
was changed to also include the case when the file exists, but has zero
size. This could occur when the system is uncleanly powered off shortly
after first boot.

However, ssh-keygen prompts the user before overwriting a file. For
example:

$ touch hi
$ ssh-keygen -f hi
Generating public/private rsa key pair.
hi already exists.
Overwrite (y/n)?

So, lets just try to remove the empty file (if it exists) before running
ssh-keygen.

[1] https://github.com/NixOS/nixpkgs/pull/141258
2022-05-03 22:09:43 -07:00
K900 79265fba34 nixos/tests/openssh: add timeouts to all ssh invocations
It might still lock up, but at least it won't lock up for 10 hours.
2022-05-04 07:58:52 +03:00
Artturi c8bbc62a64
Merge pull request #171152 from Luflosi/thefuck-improvements
nixos/thefuck: fix programs.thefuck.alias for fish
2022-05-04 05:32:40 +03:00
github-actions[bot] ee7e3f30f3
Merge staging-next into staging 2022-05-04 00:02:57 +00:00
Ivan Kozik 96a8c0ac23 nixos/postgresql: use postgres 14 for 22.05
postgresql: alias to postgresql_14
2022-05-03 22:23:08 +00:00
fleaz 8b250ec5af
nixos/r53-ddns: init 2022-05-04 00:16:18 +02:00
deinferno 3e8e52bb91 nixos/vmware-host: init at 16.2.3 2022-05-04 01:58:32 +05:00
davidak 01143883ff
Merge pull request #161788 from vlinkz/calamares-nixos
calamares: fix calamares modules, add nixos modules, and add new iso
2022-05-03 22:55:24 +02:00
Jan Tojnar b8b17d9b8e power-profiles-daemon: 0.10.1 → 0.11.1
https://gitlab.freedesktop.org/hadess/power-profiles-daemon/-/releases/0.11
https://gitlab.freedesktop.org/hadess/power-profiles-daemon/-/releases/0.11.1
2022-05-03 22:51:48 +02:00
Will Fancher e0b5ba5479 nixos: Don't use grep to request ZFS credentials, and consider keystatus 2022-05-03 14:56:50 -04:00
Will Fancher 3a71b11329 nixos: Include zfsroot in installer-systemd-stage-1 tests 2022-05-03 14:56:44 -04:00
github-actions[bot] 51a899bdc1
Merge staging-next into staging 2022-05-03 18:10:46 +00:00
Rick van Schijndel ec4686ee14
Merge pull request #171247 from K900/systemd-boot-coreutils-mktemp
systemd-boot: use mktemp from coreutils in installer
2022-05-03 19:15:55 +02:00
Will Fancher 0a16158078 zfs: Update comment for https://github.com/zfsonlinux/zfs/pull/4943 2022-05-03 12:55:01 -04:00
Will Fancher 8555a7fdbf zfs: Allow three tries to decrypt datasets 2022-05-03 12:55:01 -04:00
Will Fancher 44a6882f55 nixos/stage-1-systemd: ZFS support 2022-05-03 12:55:00 -04:00
Victor Fuentes bcb4456920
nixos/release-notes: add calamares installer to highlights 2022-05-03 12:19:21 -04:00
Victor Fuentes c21720a46e
nixos/release: add calamares installer 2022-05-03 12:19:20 -04:00
Victor Fuentes 89096bcce0
installation-cd: add calamares-plasma5 cd 2022-05-03 12:19:20 -04:00
Victor Fuentes 67b5b4cabf
installation-cd: add calamares-gnome cd 2022-05-03 12:19:20 -04:00
Luflosi deed4a3d6c
nixos/stage-1: remove dead code
This special case for Btrfs was added in 51bc82960a. One year later beddd36c95 added code to skip the fsck entirely if the filesystem is Btrfs. This made the `if` statement unnecessary.
2022-05-03 16:15:51 +02:00
Felix Singer 9765ee6bbf keycloak: 17.0.1 -> 18.0.0
Release notes available at https://www.keycloak.org/docs/latest/release_notes/index.html#keycloak-18-0-0.

The way the database port is configured changed in Keycloak 18 and the
old way of including it in the `db-url-host` setting no longer
works. Use the new `db-url-port` setting instead.

Signed-off-by: Felix Singer <felixsinger@posteo.net>
Signed-off-by: Kim Lindberger <kim.lindberger@gmail.com>
2022-05-03 16:12:55 +02:00
adisbladis 7beebb590d
Merge pull request #171381 from qowoz/podman-oci
nixos/release: add podman, oci-containers.podman to tested
2022-05-03 20:35:29 +07:00
Artturi e982910064
Merge pull request #171248 from Artturin/addtoconfig1 2022-05-03 15:44:22 +03:00
github-actions[bot] 00dc0eecc7
Merge staging-next into staging 2022-05-03 12:01:45 +00:00
Charlotte 🦝 Delenk 7f1ddd2da5
matrix-synapse: 1.57.0 -> 1.58.0
Closes #169534
2022-05-03 12:57:24 +01:00
Patryk Wychowaniec 56ab4f61bc
nixos/lxd: improve tests
- Make tests/lxd.nix use NixOS's lxdMeta & lxdImage to avoid relying on
  3rd party containers such as Alpine Linux for testing purposes.
- Merge tests/lxd-image.nix into tests/lxd.nix, since now both have a
  similar structure.
- Extract duplicated inline LXD configuration into a separate file,
- Add passthru.lxd-nftables & passthru.lxd-image-server.
2022-05-03 12:24:13 +02:00
zowoq bbf483c46e nixos/release: add podman, oci-containers.podman to tested 2022-05-03 19:42:33 +10:00
Matthieu Coudron 5114d91cd8
Merge pull request #169802 from NinjaTrappeur/nin/prosody012 2022-05-03 11:04:17 +02:00
Florian Klink f0df550602
Merge pull request #170650 from adisbladis/oci-containers-default-backend
nixos/virtualisation.oci-containers: Use podman as the default backend
2022-05-03 10:09:22 +02:00
Janne Heß 2edce50847
Merge pull request #171134 from helsinki-systems/feat/make-initrd-ng-strip
makeInitrdNG: Strip more and remove output
2022-05-03 09:41:22 +02:00
Sandro e76dd5230f
Merge pull request #167032 from Vonfry/feature/fcitx5/rime/with-custom-data-dirs
fcitx5-rime: support custom data dir from environment variable for nixos and nix specially
2022-05-03 09:35:04 +02:00
github-actions[bot] c1ff998022
Merge staging-next into staging 2022-05-03 06:02:00 +00:00
adisbladis 46241e156c nixos/virtualisation.oci-containers: Use podman as the default backend
This has a number of benefits such as that applying service limits will
actually work since there isn't a layer of indirection (the Docker daemon)
between the systemd service and the container runtime.
2022-05-03 14:50:43 +12:00
adisbladis dda33d2b2b nixos/doc/manual: Remove trailing white space from 22.05 release notes
This was an annoyance for me as I have editor hooks cleaning up
trailing white space which lead to regenerating parts of the release notes unnecessarily.
2022-05-03 14:45:54 +12:00
github-actions[bot] c4bf3689ee
Merge staging-next into staging 2022-05-02 18:10:52 +00:00
Janne Heß d12e29cd94
Merge pull request #171246 from K900/systemd-stage-1-include-firmware
nixos/systemd-in-stage1: include firmware in initrd
2022-05-02 17:20:19 +02:00
Niklas Hambüchen 73135fb85d
nixos/nebula: Always restart
Without this, if the network goes down for a while, systemd will give up after 5 restarts:

    Scheduled restart job, restart counter is at 5.
    Stopped Nebula VPN service for myvpn.
    nebula@myvpn.service: Start request repeated too quickly.
    Failed with result 'exit-code'.
    Failed to start Nebula VPN service for myvpn.

Most network services need this, but for VPNs it's extra important.
2022-05-02 16:45:44 +02:00
Artturin 1c49b81263 config.allowUnfree: define as option 2022-05-02 17:20:25 +03:00
Arnout Engelen c5d69a3004
Merge pull request #170507 from raboof/nixos-tests-lxd-aarch64
lxd: fix nixos tests on aarch64
2022-05-02 15:43:40 +02:00
Yaya c77dd2c4f1
nixos/tests/gitlab: Add additional test cases (#167223)
This commit implements the following additional test cases for gitlab:
- Creating regular users
- git clone over http and ssh
- git push over ssh
- Forking projects
- Creating and merging Merge Requests
- Opening and closing issues.
2022-05-02 15:21:18 +02:00
K900 5a2f238b9a systemd-boot: use mktemp from coreutils in installer
People running nixos-install in non-NixOS environments
occasionally run into the mktemp builtin not being loaded
into bash (yes, even NixOS' bash). Rather than try and
figure out why exactly that is happening, just use a known
good mktemp from coreutils.
2022-05-02 15:44:55 +03:00
K900 5d02b86888 systemd-in-stage1: include firmware in initrd
duh.
2022-05-02 15:41:14 +03:00
github-actions[bot] c01e301153
Merge staging-next into staging 2022-05-02 12:06:41 +00:00
Félix Baylac-Jacqué 788ac72c78
nixosTests.prosody: remove explicit timeout_callback error path
Slixmpp is yielding a IqTimeout error when timeout is reached. This
exception should be catched by the catchall exept clause. Removing the
useless timeout_callback function.

Kudos to
https://lab.louiz.org/poezio/slixmpp/-/merge_requests/198#note_16939
for that one.
2022-05-02 12:43:19 +02:00
Félix Baylac-Jacqué 20693a1e73
prosody: 0.11.13 -> 0.12.0
See https://blog.prosody.im/prosody-0.12.0-released for more
informations.

We remove the various lua wrappers introduced by
6799a91843 and
16d0b4a69f. It seems like we don't need
them anymore. I'm not brave enough to dig into the Lua machinery to
see what resolved that. Sorry, you'll have to trust me on that one.

We should probably think about the migration from http_upload to
http_file_share for the NixOS module. It's not trivial, we need to
make sure we don't break the already uploaded URLs.
2022-05-02 12:43:19 +02:00
Lara 917be9fa32 asterisk: Create symlinks for each config individually
This commit refactors the way how configuration files are deployed to
the `/etc/asterisk` directory.

The current solution builds a Nix derivation containing all config files
and symlinks it to `/etc/asterisk`. The problem with that approach is
that it is not possible to provide additional configuration that should
not be written to the Nix store, i.e. files containing credentials.

The proposed solution changes the creation of configuration files so
that each configuration file gets symlinked to `/etc/asterisk`
individually so that it becomes possible to provide additional config
files to `/etc/asterisk` as well.
2022-05-02 10:32:34 +00:00
Robert Hensing e4054fe0a9
Merge pull request #169310 from Xiami2012/zookeeper-jre
nixos/zookeeper: Take the same JRE we build zookeeper with by default
2022-05-02 10:51:42 +02:00
Robert Hensing 757278a53c
Merge pull request #170412 from jtojnar/nscd-warning
nixos/nscd: Fix lib.literalExample deprecation
2022-05-02 10:46:11 +02:00
Vladimír Čunát 9478ec747c
Merge branch 'staging-next-2022-04-23'
Close #169965: the PR and real 'staging-next' branch contained
extra systemd rebuild that I wanted to avoid in this iteration.
(to save Hydra's work)
2022-05-02 09:12:51 +02:00
Robert Hensing 0e00acafe9 stdenv.mkDerivation: public -> finalPackage 2022-05-02 08:49:33 +02:00
Robert Hensing 2e0bd52762 rl-2205: Add entry for overlay-style mkDerivation overriding 2022-05-02 08:49:32 +02:00
github-actions[bot] cd9d1feb58
Merge staging-next into staging 2022-05-02 06:01:51 +00:00
github-actions[bot] ca92a3c2d0
Merge master into staging-next 2022-05-02 06:01:11 +00:00
Bernardo Meurer ecfb5500f7
nixos/cloudflare-dyndns: init 2022-05-01 16:50:31 -07:00
Robert Hensing bb2c5a3684 nixosOptionsDoc: Make appendix tag optional 2022-05-01 21:51:19 +02:00
github-actions[bot] 677697c12f
Merge staging-next into staging 2022-05-01 18:01:35 +00:00
github-actions[bot] da9b549e31
Merge master into staging-next 2022-05-01 18:01:03 +00:00
Luflosi 536a78ecc9
nixos/thefuck: rename variable and move fishInitScript into its own variable
Renaming the variable from `initScript` to `bashAndZshInitScript` makes it clearer, what it is actually used for.
Moving the fish init script right below the other call to `thefuck --alias` makes it more obvious, when one of them is different in some important way.
2022-05-01 18:08:36 +02:00
Luflosi 9add6bdfc8
nixos/thefuck: fix programs.thefuck.alias for fish
This option was previously ignored when using fish as the shell.
2022-05-01 18:08:36 +02:00
José Romildo 417b1c12b2 lxqt: add maintainers team 2022-05-01 13:03:21 -03:00
Janne Heß 31b23a1725
nixos/systemd-initrd-simple: Fix test warnings 2022-05-01 17:06:15 +02:00
Janne Heß bc53ac7753
nixos/systemd-shutdown: Remove unneeded binaries 2022-05-01 17:06:15 +02:00
davidak c60375c5db
Merge pull request #168640 from romildo/upd.enlightenment-team
enlightenment: add maintainers team
2022-05-01 16:32:36 +02:00
José Romildo Malaquias 60a652400b
Merge pull request #170508 from romildo/fix.lxqt
nixos/lxqt: enable libinput
2022-05-01 11:31:51 -03:00
davidak 84bf8a57c1
Merge pull request #168633 from romildo/upd.lumina-team
lumina: add maintainers team
2022-05-01 16:27:40 +02:00
Vladimír Čunát cec6e7362c
Merge branch 'master' into staging-next-2022-04-23 2022-05-01 14:26:52 +02:00
José Romildo 0885172cec nixos/lxqt: enable libinput 2022-05-01 08:55:38 -03:00
github-actions[bot] 676b5fba35
Merge staging-next into staging 2022-05-01 06:01:47 +00:00
github-actions[bot] dc0ace8d6e
Merge master into staging-next 2022-05-01 06:01:14 +00:00
davidak ba3762b8be
Merge pull request #170504 from romildo/upd.mate
nixos/mate: enable libinput
2022-05-01 06:10:54 +02:00
github-actions[bot] 7bd3b9eff1
Merge staging-next into staging 2022-05-01 00:03:16 +00:00
github-actions[bot] ca346384ce
Merge master into staging-next 2022-05-01 00:02:36 +00:00
Bernardo Meurer b29e3bb892
nixos/console: inird -> initrd 2022-04-30 14:43:09 -07:00
Vladimír Čunát c480cc2895
Merge branch 'master' into staging-next-2022-04-23 2022-04-30 23:02:28 +02:00
Bernardo Meurer 78f6f77962
Merge pull request #169113 from ElvishJerricco/systemd-stage-1-installer-tests
nixos: Installer tests for systemd stage 1
2022-04-30 13:18:57 -07:00
Bernardo Meurer 405ce5693d
Merge pull request #171045 from helsinki-systems/feat/systemd-stage-1-qemu
nixos/*qemu*: Add systemd initrd support
2022-04-30 13:17:09 -07:00
Janne Heß 007108f04d
nixos/*qemu*: Add systemd initrd support 2022-04-30 20:47:42 +02:00
Bernardo Meurer e1aa795705
Merge pull request #171024 from helsinki-systems/feat/systemd-stage-1-less-binaries
nixos/systemd-stage-1: Remove unnecessary binaries
2022-04-30 11:30:43 -07:00
Bernardo Meurer cd7596dff4
Merge pull request #170131 from helsinki-systems/feat/systemd-stage-1-only-keymap
nixos/console: Allow setting keymap without font
2022-04-30 11:29:25 -07:00
github-actions[bot] 5db8cea3c9
Merge staging-next into staging 2022-04-30 18:01:49 +00:00
github-actions[bot] afb1522e95
Merge master into staging-next 2022-04-30 18:01:16 +00:00
Rick van Schijndel 536528ede8
Merge pull request #170695 from matshch/fix/nvidia-device-minor
nixos/nvidia: fix /dev/nvidia* devices minors
2022-04-30 15:34:16 +02:00
Aaron Andersen 213febe39a
Merge pull request #163883 from ngiger/k3b
nixos/k3b: init
2022-04-30 09:17:27 -04:00
Janne Heß 0411b51a00
nixos/systemd-stage-1: Remove unnecessary binaries
We can make the growfs and makefs binaries conditional because we know
if we'll need them. Also move the cryptsetup generator to the luksroot
so it's not included when not needed.

We drop some generators altogether: systemd-getty-generator because we
don't have getty anyway in stage 1, systemd-system-update-generator
because we don't use that logic in NixOS and
systemd-veritysetup-generator because stage 1 has no veritysetup support
(yet) and if it had, we still wouldn't want to include the generator
unconditionally.
2022-04-30 14:50:02 +02:00
Janne Heß 89ace3967e
nixos/udev: systemd initrd improvements
First, add the builtin udev rules to /etc/udev/rules.d so they are used.
Then, add all networkd .link units to the initrd. This is done in the
old stage 1 as well so I assume this is needed even when networkd is not
used. I assume this is for things like changing the MAC address.

Also limit the number of udev/lib binaries that is put into the initrd
because the old initrd doesn't use all units either.
2022-04-30 14:17:29 +02:00
Niklaus Giger 87b4440a60 nixos/k3b: init. Fixes #19154 missing permissions for k3b 2022-04-30 13:18:40 +02:00
Maximilian Bosch 196c877c85
nixos/network-interfaces: remove outdated deprecation information 2022-04-30 12:40:10 +02:00
Janne Heß fa2c9b41d4
nixos/systemd-stage-1: Add initrd secrets support 2022-04-30 11:41:27 +02:00
Janne Heß 18363cad97
nixos/console: Allow setting keymap without font 2022-04-30 11:22:08 +02:00
Sandro Jäckel cecb014d5d
networkmanager-applet: rename from networkmanagerapplet 2022-04-30 02:26:11 +02:00
github-actions[bot] 5f05f984a6
Merge staging-next into staging 2022-04-30 00:02:41 +00:00
github-actions[bot] 142bf917b0
Merge master into staging-next 2022-04-30 00:02:08 +00:00
Maximilian Bosch 8e42949a24
nixos/nixos-generate-config: use networking.useDHCP by default
Currently we're still using scripted networking by default. A problem
with scripted networking is that having `useDHCP` on potentially
non-existing interfaces (e.g. an ethernet interface for USB tethering)
can cause the boot to hang.

Closes #107908
2022-04-30 00:30:47 +02:00
Maximilian Bosch cff16bc625
nixos/doc: add release-note entry for networking.useDHCP change 2022-04-30 00:30:45 +02:00
Maximilian Bosch 9c18662612
nixos/networkd: allow RouteMetric for IPv6AcceptRA
According to `systemd.network(5)` of systemd v249 this is a valid
option.

Fixes evaluation of the wildcard network definitions.
2022-04-30 00:30:04 +02:00
Maximilian Bosch b08a06859c
nixos/tests/networking/dhcpDefault: actually use networkd for client 2022-04-30 00:30:04 +02:00
Maximilian Bosch aa849e1478
nixos/network-interfaces-systemd: actually set catchall-iface if useDHCP = true;
Previously this wasn't done in the `forEach`-expression for
`cfg.interfaces` and thus `networking.useDHCP` didn't have any effect if
no further interface was statically configured.
2022-04-30 00:30:03 +02:00
Maximilian Bosch 161dd27ee1
nixos/tests/networking: test connectivity from both client & router 2022-04-30 00:30:02 +02:00
Linus Heckemann ba4a615da9
nixos/tests/networking: add test for global useDHCP 2022-04-30 00:30:02 +02:00
Linus Heckemann d30dbf38b9
nixos/networkd: reimplement useDHCP in a sensible way 2022-04-30 00:30:01 +02:00
Graham Christensen f00109472a
Merge pull request #164185 from alexshpilkin/calibration
facetimehd: support sensor calibration files
2022-04-29 15:53:30 -04:00
Guillaume Girol 3ff4432670
Merge pull request #170393 from lostnet/couch322
couchdb3: 3.2.1 -> 3.2.2
2022-04-29 19:40:40 +00:00
Sandro fdc0d007bd
Merge pull request #168804 from jansol/pipewire
pipewire: 0.3.49 -> 0.3.51
2022-04-29 17:08:13 +02:00
github-actions[bot] 8fcc2694d6
Merge master into staging-next 2022-04-29 12:01:18 +00:00
happysalada a4707b645f grafana-mimir: add initial module 2022-04-29 07:23:03 -04:00
Michele Guerini Rocco 1ad6cada37
Merge pull request #170746 from rnhmjoj/pr-custom-ca
nixos/tests/custom-ca: split
2022-04-29 11:30:41 +02:00
github-actions[bot] 2254d18031
Merge master into staging-next 2022-04-29 06:01:11 +00:00
Jan Solanti 2b71de4a3d pipewire: 0.3.49 -> 0.3.50 2022-04-29 04:29:12 +03:00
Will Fancher 2e96b64e02
Merge pull request #170123 from ElvishJerricco/systemd-shutdown-ramfs-fixup
Systemd shutdown ramfs fixup
2022-04-28 20:17:23 -04:00
Will Fancher 50925651bb zfs: Sync pools on shutdown. 2022-04-28 14:12:16 -04:00
Will Fancher 69d8047516 nixos: Fix up systemd shutdown ramfs 2022-04-28 14:12:14 -04:00
Vladimír Čunát 8caa1418f6
Merge branch 'master' into staging-next-2022-04-23 2022-04-28 18:04:16 +02:00
Florian Brandes 709cc7066b
pgadmin4: pass pythonEnv as variable
Signed-off-by: Florian Brandes <florian.brandes@posteo.de>
2022-04-28 15:03:31 +02:00
github-actions[bot] 5891152d70
Merge master into staging-next 2022-04-28 12:05:39 +00:00
Artem Leshchev 4d7bc6ccc0 nixos/nvidia: fix /dev/nvidia-uvm-tools device minor 2022-04-28 13:55:53 +03:00
Artem Leshchev 73261bdc59 nixos/nvidia: make nvidia-frontend device major constant
It is assigned by https://www.kernel.org/doc/Documentation/admin-guide/devices.txt
and never changes, so we can skip grep.
2022-04-28 13:55:53 +03:00
Robert Hensing 527457cadc
Merge pull request #156163 from erdnaxe/galene_hardening
nixos/galene: systemd unit hardening
2022-04-28 10:52:00 +02:00
Julien Mourer 55f1c83f5b
hardware: set enableRedistributableFirmware if enableAllFirmware is set (#163014)
If it works with enableRedistributableFirmware, which is a subset of enableAllFirmware, it should also work with enableAllFirmware.
2022-04-28 10:30:04 +02:00
github-actions[bot] 2d5d5db400
Merge master into staging-next 2022-04-28 06:01:45 +00:00
Bobby Rong f4f969a484
Merge pull request #170360 from bobby285271/pantheon
Pantheon 7 updates 2022-04-25
2022-04-28 12:44:12 +08:00
Artem Leshchev b01be47c87 nixos/nvidia: fix /dev/nvidia* devices minors
We can't assume that DRI card minor is the same as NVidia GPU device minor,
because some DRI minors could be taken by GPUs of other vendors.

Fixes #87788, #98942.
2022-04-28 01:18:58 +03:00
Vladimír Čunát 51554cbbdb
Merge branch 'master' into staging-next-2022-04-23 2022-04-27 22:50:17 +02:00
rnhmjoj 3d4b962c67
nixos/tests/custom-ca: make more reliable
Midori sometime fails to display the page, even if it's
supposedly fully loaded. Reloading with ctrl-r fixes it.
2022-04-27 20:50:53 +02:00
Scott Worley 3f676b9804
nixos/tests/custom-ca: Split
Run each browser check as a separate NixOS test.

This fixes a problem in which one browser starts up before the previous
browser is finished exiting, exhausting a resource and causing a
spurious test failure.

As a bonus, splitting the test
  * Gives more signal about exactly what's broken in the pass/fail status,
  * Makes it easier to quickly diagnose test failures,
  * Makes development iteration faster,
  * Allows concurrent test execution, which makes the test finish sooner
    when parallel builds are enabled.
  * Would allow each browser's test to be included in its nixpkgs
    passthru.tests, if desired (not done in this commit).

Reviewed-by: rnhmjoj <rnhmjoj@inventati.org>
2022-04-27 20:50:53 +02:00
github-actions[bot] 565df1946d
Merge master into staging-next 2022-04-27 18:01:19 +00:00
Pascal Bach ee385d8364
Merge pull request #170396 from teto/gitlab-description
services.gitlab-runner: support runner description
2022-04-27 19:30:26 +02:00
Florian Brandes eef222b8c2 pgadmin4: fix tests
this commit passes the build dependencies to the
pgadmin nixos test for package and regression testing.

Also added changelog and some clarifying comments.

Signed-off-by: Florian Brandes <florian.brandes@posteo.de>
2022-04-27 19:15:08 +02:00
Florian Brandes eff62ac196 pgadmin4: make regression test use the same packages
Signed-off-by: Florian Brandes <florian.brandes@posteo.de>
2022-04-27 19:15:08 +02:00
Sandro 54b1753b2a
Merge pull request #170505 from romildo/upd.enlightenment
nixos/enlightenment: enable libinput
2022-04-27 18:06:40 +02:00
Florian Klink 9b71167ac0
Merge pull request #87268 from adisbladis/nixos-containers-state-directories
nixos-container: Use new configuration & state directories
2022-04-27 15:35:58 +02:00
Artturi fce438aa02
Merge pull request #170462 from Artturin/hpssali 2022-04-27 16:24:16 +03:00
Sandro bf0457694b
Merge pull request #169144 from romildo/upd.lxqt
lxqt: 1.0.0 -> 1.1.0
2022-04-27 14:54:54 +02:00
github-actions[bot] 6013ebcc30
Merge master into staging-next 2022-04-27 12:02:07 +00:00
Arnout Engelen 2b85441bb0
Merge pull request #146241 from rgrunbla/wpa_supplicant-fix-writable
wpa_supplicant: prevent writing non-writable configuration
2022-04-27 11:35:49 +02:00
adisbladis 3c49151f15 nixos/nixos-containers: Add warning on unsupported state version combo 2022-04-27 18:35:46 +12:00
adisbladis 01e35db278 release-notes: Add release note about nixos containers directory moves 2022-04-27 18:35:18 +12:00
adisbladis f535d6f45e nixos-container: Use new configuration & state directories
We need to move NixOS containers somewhere else so these don't clash
with Podman, Skopeo & other container software in the libpod &
cri-o/cri-u/libcontainer ecosystems.

The state directory move is not strictly a requirement but is good for
consistency.
2022-04-27 18:35:08 +12:00
github-actions[bot] 2ac5c4af82
Merge master into staging-next 2022-04-27 06:01:04 +00:00
Bernardo Meurer 80d4480778
sd-image-aarch64: deduplicate cm4 section 2022-04-26 20:23:50 -07:00
Bobby Rong 782683d551
nixos/pantheon: fix outdated wording in docs 2022-04-27 10:18:16 +08:00
Bernardo Meurer 11c1152e0f
sd-image-aarch64: add dtbs for rpi-400 and cm4s 2022-04-26 19:05:24 -07:00
Bernardo Meurer b30105b7c2
ubootRaspberryCM4_64bit: merge with ubootRaspberryPi4_64bit 2022-04-26 19:05:23 -07:00
github-actions[bot] 8261a7aaba
Merge master into staging-next 2022-04-27 00:02:17 +00:00
Bernardo Meurer dcfaae6679
nixos/modules/profiles/all-hardware: add nvme to initrd modules 2022-04-26 15:22:37 -07:00
Bernardo Meurer faf42ffbd0
ubootRaspberryCM4_64bit: init 2022-04-26 15:22:25 -07:00
Bernardo Meurer d1fef1e7c3
sd-image-aarch64: add support for the RaspberryPi CM4 2022-04-26 15:22:24 -07:00
Arnout Engelen b779b46dd2
lxd: fix nixos tests on aarch64
Tested on a RPi3 B+ with a 2g swapfile. On that system the test
still sometimes fails, but I suspect this is because it is really
just not powerful enough for this task.

Fixes #170395
2022-04-26 23:20:10 +02:00
José Romildo 0679095c10 nixos/enlightenment: enable libinput 2022-04-26 18:17:46 -03:00
José Romildo 22b2c47866 nixos/mate: enable libinput 2022-04-26 18:08:47 -03:00
Janne Heß 69d1acda00
nixos/xfs: Fix evaluation (#170471) 2022-04-26 21:43:01 +02:00
Artturin 99b1b47f39 nixos/hpsa: add alternative url for hpssacli 2022-04-26 21:39:04 +03:00
Jan Tojnar 6b738bce80 nixos/nscd: Fix lib.literalExample deprecation
The NixOS evaluation would complain:

trace: warning: literalExample is deprecated, use literalExpression instead, or use literalDocBook for a non-Nix description.
2022-04-26 14:06:52 +02:00
Xiami b43999bea0
nixos/zookeeper: Remove .passthru as suggested 2022-04-26 18:44:37 +08:00
Xiami 3e5e584c1f
nixos/zookeeper: Update doc with suggested description 2022-04-26 18:32:32 +08:00
Matthieu Coudron c1e318d0c5 services.gitlab-runner: support runner description
The description for the runner in the UI is by default sthg like
"npm_nixos_d0544ed48909" i.e., the name of the attribute.

I wanted to have a more user-friendly description and added a
description to the service.
Seems like gitlab-runner doesn't like having both fields set:
"Cannot use two forms of the same flag: description name"
so I used one or the other.
2022-04-26 11:43:46 +02:00
Will 14fca0ca6f couchdb3: 3.2.1 -> 3.2.2 2022-04-26 09:02:36 +00:00
github-actions[bot] f8c265f433
Merge master into staging-next 2022-04-26 06:01:08 +00:00
Rick van Schijndel 4586388f85
Merge pull request #170320 from andersk/negated-version
treewide: Simplify negated uses of versionAtLeast, versionOlder
2022-04-26 07:50:15 +02:00
github-actions[bot] 4a997ba4a6
Merge master into staging-next 2022-04-26 00:02:23 +00:00
Bernardo Meurer e8e87beee7
Merge pull request #169047 from helsinki-systems/feat/systemd-stage-1-filesystems
nixos/systemd-stage-1: Fixup most filesystem tasks
2022-04-25 15:02:29 -07:00
Bernardo Meurer 59aa6e4988
Merge pull request #170099 from helsinki-systems/feat/systemd-stage-1-no-random-seed
nixos/systemd-stage-1: Get rid of random-seed
2022-04-25 14:56:45 -07:00
Bernardo Meurer 9f26ab61e5
Merge pull request #170134 from helsinki-systems/feat/systemd-stage-1-also-storepaths
nixos/stage-1-systemd: Also accept packages as store paths
2022-04-25 14:53:24 -07:00
Anders Kaseorg 6920d8ca42 treewide: Simplify negated uses of versionAtLeast, versionOlder
Signed-off-by: Anders Kaseorg <andersk@mit.edu>
2022-04-25 13:35:24 -07:00
github-actions[bot] 1fe6b64349
Merge master into staging-next 2022-04-25 18:01:12 +00:00
Robert Hensing ecc66a886e
Merge pull request #168945 from Lassulus/kexec-tests
nixosTests.kexec: better test if we are in a new system
2022-04-25 17:17:32 +02:00
David Anderson c9a1647ade nixos/tailscale: use systemctl restart during activation.
This avoids the scenario where you activate a new config over Tailscale,
and a long delay between the "stop services" and "start services" phases
of the activation script lead to your terminal freezing for tens of
seconds, until tailscaled finally gets started again and the session
recovers.

Per the documentation of stopIfChanged, this is only safe to do if the
service definition is robust to stopping the old process using the new
service definition. As the maintainer of the upstream systemd unit, I
can confirm that Tailscale is robust to this scenario: it has to be
in order to work right on several other distros that just do
unpack-then-restart, rather than the more complex stop-unpack-start
dance.

Signed-off-by: David Anderson <dave@natulte.net>
2022-04-24 23:31:35 -07:00
github-actions[bot] b258091866
Merge master into staging-next 2022-04-25 06:01:18 +00:00
Vonfry 2474c8c89a
nixos/fcitx5: add the setting of RIME_DATA_DIR and options for rime-data 2022-04-25 13:39:19 +08:00
Sandro 93da45162d
Merge pull request #166321 from wentasah/usbrelay 2022-04-25 02:23:19 +02:00
github-actions[bot] 6a14b5834e
Merge master into staging-next 2022-04-25 00:02:35 +00:00
Janne Heß 45494fab68
nixos/systemd-stage-1: Get rid of random-seed
This is not used at all since the unit has
ConditionPathExists=!/etc/initrd-release
2022-04-24 21:59:59 +01:00
Linus Heckemann fc1248c589
Merge pull request #169932 from Ma27/nextcloud-profile-setting
nixos/nextcloud: make `profile.enabled` configurable
2022-04-24 22:50:05 +02:00
Janne Heß acca3f4b81
nixos/plymouth: Add systemd stage 1 support 2022-04-24 21:47:49 +01:00
Janne Heß dc4b2812e4
nixos/stage-1-systemd: Also accept packages as store paths 2022-04-24 21:47:34 +01:00
Jack O'Sullivan 568cb2d6ab nixos/systemd/nspawn: Add missing nspawn unit options
A few options have been added to the `systemd.nspawn` unit type are
missing from `systemd.nspawn.*.*Config`. See systemd.nspawn(5).
2022-04-24 21:20:59 +01:00
github-actions[bot] 6f66eac9d1
Merge master into staging-next 2022-04-24 18:01:04 +00:00
Janne Heß acca69992c
nixos/btrfs: Add systemd stage 1 support 2022-04-24 16:32:54 +02:00
Janne Heß 160fb93fdc
nixos/filesystems: Make most simple filesystems compatible with systemd
This includes disabling some features in the initrd by default, this is
only done when the new initrd is used. Namely, ext and bcache are
disabled by default. bcache gets an own enable option while ext is
detected like any other filesystem.
2022-04-24 16:32:34 +02:00
Robin Gloster 0d8c3cf64b
Merge pull request #164650 from mayflower/jira-home
nixos/jira: set home for jira user
2022-04-24 14:27:33 +02:00
github-actions[bot] b9e4b22843
Merge master into staging-next 2022-04-24 12:01:14 +00:00
Lassulus 007f9d8103
Merge pull request #164209 from jonringer/fix-step-ca-warnings
tests/step-ca: give name, fix acme usage
2022-04-24 11:22:59 +01:00
Lassulus 33dc00eaaf
Merge pull request #164208 from jonringer/fix-peertube-warnings
tests/peertube: update redis usage
2022-04-24 11:19:58 +01:00
Jacek Galowicz 2656cb99bd
Merge pull request #167838 from tljuniper/test-driver-pipefail-fix
nixos/test-driver: shellopts with execute + timeout
2022-04-24 11:50:13 +02:00
github-actions[bot] 696025ae9c
Merge master into staging-next 2022-04-24 00:02:26 +00:00
Linus Heckemann c85bc19cdf
Merge pull request #169303 from emccorson/fix/add-copy-system-config
nixos/tools: add copySystemConfiguration to configuration file template
2022-04-24 00:01:00 +02:00
Vladimír Čunát 82ec893b68
Merge branch 'staging' into staging-next 2022-04-23 18:10:57 +02:00
Maximilian Bosch 9931c4a407
nixos/nextcloud: make profile.enabled configurable
I recently learned that Nextcloud 23's new profile feature — basically a
way for users to share personal contact details — has a problematic
default setting, profile data is shared with **everyone** by default.

This means that an unauthenticated user can access personal information
by accessing `nextcloud.tld/u/user.name`.

The announcement of v23 states[1]:

> We go a step further and introduce a profile page. Here you can put a
> description of yourself, show links to, for example, social media, what
> department you are in and information on how to contact you. All these
> are of course entirely optional and you can choose what is visible to who!
> The profile and user status are accessible also from our mobile and desktop clients.

It's not mentioned that by default you share personal information[3] with
everyone and personally I think that's somewhat problematic.

To work around that, I decided to add an option for the recently added[2]
and even set it to `false` by default to make an explicit opt-in for
that feature.

[1] https://nextcloud.com/blog/nextcloud-hub-2-brings-major-overhaul-introducing-nextcloud-office-p2p-backup-and-more/
[2] https://github.com/nextcloud/server/pull/31624/files
[3] By default, this affects the following properties:
    * About
    * Full name
    * Headline
    * Organisation
    * Profile picture
    * Role
    * Twitter
    * Website
    Phone, Address and Email are not affected and only shown to
    authenticated users by default.
2022-04-23 13:31:50 +02:00
Jonas Heinrich 24b53785cc nixos/create_ap: add module 2022-04-23 07:17:44 -04:00
github-actions[bot] 90d2d8da85
Merge staging-next into staging 2022-04-23 00:02:52 +00:00
Bernardo Meurer 900a440492
Merge pull request #169842 from K900/unbreak-tests
nixos/tests/installer: unbreak, optimize
2022-04-22 13:16:33 -07:00
Bernardo Meurer b23ec41f14
Merge pull request #168554 from helsinki-systems/feat/systemd-stage-1-luks
nixos/systemd-stage-1: Add basic LUKS support
2022-04-22 12:37:25 -07:00
K900 adf3fe6811 nixos/tests/installer: disable vlans for initial VM
This saves 10-15 minutes of waiting for things to time out later.
2022-04-22 22:27:03 +03:00
K900 ed3cc9672a nixos/tests/installer: add missing dependency to image
Unbreaks nixosTests.installer.simple.
2022-04-22 21:03:46 +03:00
ajs124 1f9af33e1f
Merge pull request #166117 from chkno/fix-nar-serve
nixos/tests/nar-serve: Fix after nix version bump
2022-04-22 19:02:54 +01:00
github-actions[bot] 46f11e0147
Merge staging-next into staging 2022-04-22 00:02:43 +00:00
Jan Tojnar be9e3fdf7d
Merge pull request #169553 from jtojnar/gnome-default-dark-background
nixos/gnome: Add the NixOS background metadata
2022-04-21 21:36:19 +02:00
Bernardo Meurer b57126a16e
Merge pull request #169477 from drupol/nix/add-2.8.0
nixVersions.stable: 2.7.0 -> 2.8.0
2022-04-21 11:18:25 -07:00
Jan Tojnar cd2a6cd9cb nixos/gnome: Add the NixOS background metadata
This is needed to have it listed in the Control Center.
2022-04-21 20:16:41 +02:00
github-actions[bot] cbc56d5cc3
Merge staging-next into staging 2022-04-21 18:02:06 +00:00
Jan Tojnar 818ac0c9ae Revert "nixos/gnome3: install nixos wallpapers"
There is no need to install them when they will not be picked up
by the Appearance panel of GNOME Control Center without
a XML metadata file anyway.

They will be pulled into the closure via overrides
so that is not a concern either.

This reverts commit 7f3bc5b8fa.
This reverts commit fa607bc939.
2022-04-21 20:00:29 +02:00
Artturi 98ff3e401c
Merge pull request #165892 from tpwrules/fix-initrd-dirlinks
make-initrd: fix reproducibility problems
2022-04-21 20:51:35 +03:00
Pol Dellaiera b555b64346
nixVersions.stable: 2.7.0 -> 2.8.0 2022-04-21 19:43:40 +02:00
Pascal Bach d9309f43b3
Merge pull request #155424 from tobim/nixos/snapserver-firewall
nixos/snapserver: don't open ports by default
2022-04-21 19:40:20 +02:00
github-actions[bot] 91a1bc431e
Merge staging-next into staging 2022-04-21 12:01:54 +00:00
Sandro 7a89f668fa
Merge pull request #168012 from schmittlauch/pulseaudio-advanced-bluetooth-codecs 2022-04-21 13:12:46 +02:00
Anna Gillert dbc95f15b8 nixos/test-driver: Avoid shell injection in machine.execute() 2022-04-21 10:54:00 +02:00
tljuniper ed945aeb6e nixos/manual: Clarify execute exit status
Co-authored-by: Robert Hensing <roberth@users.noreply.github.com>
2022-04-21 10:54:00 +02:00
Anna Gillert f7e89a59da nixos/test-driver: fix missing shellopts in execute
Without this fix, setting the shellopts in `machine.execute` is
inconsitent.  When no timeout is used, shellopts `set -euo pipefail` are
applied to the command as expected. When a timeout is specified, the
shellopts are not applied to the command itself (which is called inside
a `sh -c` that doesn't inherit the shellopts) but rather to the
`timeout` command, leading to the following full command:

```bash
(set -euo pipefail; timeout 900 sh -c 'cmd') | (base64 --wrap 0; echo)\n
```

With this fix, this is the command we get:

```bash
timeout 900 sh -c 'set -euo pipefail; false | true') | (base64 --wrap 0; echo)\n
```
2022-04-21 10:54:00 +02:00
Anna Gillert 7586158ac9 nixos/manual: Refine doc for execute et al
- Clarify that shellopts are set in every `execute` call (rather than
  only `succeed`).
- Add documentation for the `timeout` parameter and its default values.
2022-04-21 10:54:00 +02:00
Jörg Thalheim aa446f8d3c
Merge pull request #169437 from Mic92/consul
nixos/consul: allow ipv6-only
2022-04-21 07:22:02 +01:00
Sandro 786f0c486b
Merge pull request #159103 from pacien/nixos-taskserver-firewall-no-port-open
nixos/taskserver: do not open firewall port implicitly, port helper to Python 3
2022-04-21 01:56:36 +02:00
Randy Eckenrode 272876edae
ionide.ionide-fsharp: 5.11.0 -> 6.0.1 (#168874)
* ionide.ionide-fsharp: 5.11.0 -> 6.0.0

* doc/release-notes: document .NET 6 requirement for Ionide

* ionide: 6.0.0 -> 6.0.1
2022-04-21 01:54:39 +02:00
Trolli Schmittlauch 3bf08a7731 doc/release-notes: highlight pulseaudio upgrade with new bluetooth codecs 2022-04-21 00:10:29 +02:00
Tobias Mayer 0d49836dec
nixos/snapserver: don't open ports by default 2022-04-20 23:25:28 +02:00
Lassulus b424ce3fd2
Merge pull request #161587 from helsinki-systems/feat/bird2-reload-trigger
nixos/bird: reloadIfChanged -> reloadTriggers
2022-04-20 18:24:05 +01:00
Jörg Thalheim 325a525467
nixos/consul: allow ipv6-only 2022-04-20 17:32:06 +02:00
Lassulus c29e523824
Merge pull request #163030 from newAM/github-runner-harden
nixos/github-runner: systemd service hardening
2022-04-20 16:30:23 +01:00
Linus Heckemann 5e513b4b24
Merge pull request #167324 from alyssais/mailman-postfix
nixos/{postfix,mailman}: fix ordering between services
2022-04-20 16:34:43 +02:00
Alyssa Ross 572131c6a9
nixos/mailman: ensure Postfix is started after Mailman
On first run, Postfix will refuse to start if it's started before
Mailman is up, because it'll try to read the map files generated
Mailman the first time it's started, and they won't exist yet.  To fix
this, make sure Postfix isn't started until after Mailman is up if
they're both activated at the same time.
2022-04-20 13:17:28 +00:00
Janne Heß 4f3a868e59
Merge pull request #169049 from helsinki-systems/feat/systemd-stage-1-amdgpu-pro
nixos/amdgpu-pro: Add support for systemd stage 1
2022-04-20 11:36:53 +02:00
Martin Weinelt 0a0cf3d283
Merge pull request #169323 from n0emis/netbox-v3.2.1 2022-04-20 00:42:43 +02:00