github-actions[bot]
2c8e6963dc
Merge master into staging-next
2023-03-18 00:02:30 +00:00
K900
38d9db299e
nixos/plasma5: remove supportDDC option
...
The code for this was actually removed in #172078 .
2023-03-17 23:39:08 +03:00
Aidan Gauland
7fb4aae81f
nixos/peroxide: add module for peroxide service
2023-03-18 07:43:59 +13:00
github-actions[bot]
d761f69867
Merge master into staging-next
2023-03-17 17:57:00 +00:00
Izorkin
6263c45580
nixos/roundcube: add tmp directory
2023-03-17 19:40:23 +03:00
Raito Bezarius
6da5fddeb5
netdata: add raitobezarius as a maintainer
2023-03-17 17:27:01 +01:00
Sandro
7ec767ff54
Merge pull request #173697 from jmbaur/avahi-daemon-deny-interfaces
...
nixos/avahi: add denyInterfaces option
2023-03-17 17:11:49 +01:00
Savyasachee Jha
4177ddcfd6
doas: refactor config generation
...
According to Ted Unangst, since doas evaluates rules in a last
matched manner, it is prudent to have the "permit root to do everything
without a password at the end of the file.
Source: https://flak.tedunangst.com/post/doas-mastery
2023-03-17 09:05:08 -07:00
github-actions[bot]
2394986204
Merge master into staging-next
2023-03-17 12:01:17 +00:00
Weijia Wang
32f39395a7
Merge pull request #210101 from helsinki-systems/upd/jitsi
...
Update of all Jitsi Meet components
2023-03-17 12:23:14 +02:00
github-actions[bot]
d96e74c8b8
Merge staging-next into staging
2023-03-17 00:03:06 +00:00
github-actions[bot]
6746017444
Merge master into staging-next
2023-03-17 00:02:33 +00:00
Pascal Bach
7c166f412b
Merge pull request #221096 from awakesecurity/minio-paths
...
nixos/minio: gracefully handle root credentials file
2023-03-16 20:56:37 +01:00
github-actions[bot]
2530eb2c82
Merge staging-next into staging
2023-03-16 18:01:58 +00:00
github-actions[bot]
455127ad5e
Merge master into staging-next
2023-03-16 18:01:20 +00:00
John Soo
740fea3edd
fixup! nixos/minio: activate/restart service on credentials path changes
2023-03-16 09:45:09 -07:00
Jacek Galowicz
10988b1ff0
Merge pull request #221251 from astro/test-driver
...
nixos/test-driver: fix allow_reboot
2023-03-16 17:42:27 +01:00
Bernardo Meurer
79cfdf110a
Merge pull request #219351 from tie/make-bios-bootable
2023-03-16 11:33:03 -03:00
Weijia Wang
c24a8ccc98
solr: drop
2023-03-16 16:17:04 +02:00
Bernardo Meurer
6e55733359
Merge pull request #219747 from Stunkymonkey/deprecate-isNull
2023-03-16 11:10:22 -03:00
github-actions[bot]
4632436394
Merge staging-next into staging
2023-03-16 06:02:13 +00:00
Adam Joseph
3da93fd582
Merge pull request #221365 from amjoseph-nixpkgs/pr/nixos/release/comment
...
nixos/release-small.nix: add instructions for running individual jobs
2023-03-16 02:54:05 +00:00
Astro
64a4ae6f37
nixos/test-driver: remove allow_reboot state from Machine, make it a start() kwarg
2023-03-16 01:50:15 +01:00
Astro
f4331c4983
nixos/tests/login: use machine.reboot() for a proper reboot
2023-03-16 01:42:00 +01:00
Astro
9fc85a85d5
nixos/test-driver: implement Machine.reboot()
2023-03-16 01:41:32 +01:00
Thiago Kenji Okada
62d946fca0
doc: document i3status-rust 0.30.x breaking changes
2023-03-15 23:40:39 +00:00
Adam Joseph
1b0af10902
nixos/release-small.nix: add instructions for running individual jobs
2023-03-15 12:37:15 -07:00
github-actions[bot]
795332a826
Merge staging-next into staging
2023-03-15 18:01:44 +00:00
Martin Weinelt
578fb7fd1f
Merge pull request #220557 from mweinelt/libxcrypt-strong
...
libxcrypt: Build only with strong hashes
2023-03-15 16:43:12 +00:00
Vladimír Čunát
a86610144f
Merge #219444 : staging-next 2023-03-04
2023-03-15 17:35:39 +01:00
Sandro
fbeb9b9a96
Merge pull request #215835 from illustris/hbase
...
nixos/hbase: add thrift and rest servers
2023-03-15 16:55:36 +01:00
Sandro
83dcadaf61
Merge pull request #218482 from illustris/ec2-metadata
...
nixos/ec2: don't populate nonexistent metadata files
2023-03-15 16:53:40 +01:00
Sandro
c817b58614
Merge pull request #220278 from bdd/fix-binfmt-x86_64-windows-extension
...
nixos/binfmt: fix extension for Windows binaries
2023-03-15 16:15:47 +01:00
Mario Rodas
2f0db5eff8
Merge pull request #221311 from adamcstephens/nushell/0.77
...
nushell: 0.76.0 -> 0.77.0
2023-03-15 08:55:48 -05:00
Martin Weinelt
1c52b361a8
Merge remote-tracking branch 'origin/master' into staging-next
2023-03-15 14:36:40 +01:00
Adam Stephens
a26d5fbdef
nushell: 0.76.0 -> 0.77.0
2023-03-15 08:42:32 -04:00
Robert Hensing
816b884b5c
nixosTests.nixops.unstable.legacyNetwork: Use system.includeBuildDependencies
2023-03-15 13:37:59 +01:00
Robert Hensing
c3b245d540
Merge pull request #195511 from DeterminateSystems/include-build-deps
...
nixos/top-level: add includeBuildDependencies option
2023-03-15 13:33:24 +01:00
Charles Hall
65c6ffaae9
don't enable lightdm if greetd is enabled
2023-03-15 13:26:41 +01:00
Astro
95d121e798
nixos/test-driver: fix allow_reboot
2023-03-15 12:48:01 +01:00
Bobby Rong
49ca01bf9d
nixosTests.xfce: silence a deprecation warning
...
trace: warning: Module argument `nodes.machine.config` is deprecated. Use `nodes.machine` instead.
2023-03-15 17:03:35 +08:00
github-actions[bot]
a3b786aa94
Merge staging-next into staging
2023-03-15 00:03:06 +00:00
Martin Weinelt
231c1145f2
Merge remote-tracking branch 'origin/master' into staging-next
...
Conflicts:
- pkgs/development/python-modules/rflink/default.nix
2023-03-14 22:33:40 +01:00
Janik H
a8e4f58d90
rl-2305: Mention woodpecker addition
2023-03-14 20:31:39 +01:00
Janik H
dafedbbba6
nixos/woodpecker: init
2023-03-14 20:31:39 +01:00
github-actions[bot]
9feb9fda3e
Merge staging-next into staging
2023-03-14 18:02:00 +00:00
github-actions[bot]
2df6c043e6
Merge master into staging-next
2023-03-14 18:01:25 +00:00
K900
1fab86929f
nixos/pipewire: spring cleaning
...
- drop media-session (rip 💀 )
- stop trying to let people override default configs, those never got merged correctly
- drop all the complexity arising from having to vendor default config files
- build docs in sandbox as we no longer recurse
2023-03-14 20:31:32 +03:00
K900
b8ac3f9a93
pipewire: 0.3.66 -> 0.3.67
2023-03-14 20:31:03 +03:00
Sandro
66e0910e86
Merge pull request #199729 from peat-psuwit/zoneminder-1.36.31
...
zoneminder, nixos/zoneminder: 1.36.28 -> 1.36.31, fix issues relating to upgrade
2023-03-14 17:02:05 +01:00
Martin Weinelt
9e4d592114
Merge remote-tracking branch 'origin/master' into staging-next
...
Conflicts:
- pkgs/development/python-modules/eve/default.nix
2023-03-14 16:49:37 +01:00
Linus Heckemann
7ca65eeecf
Merge pull request #219354 from Izorkin/update-profiles-base
...
nixos/profiles: optimize base and minimal profiles
2023-03-14 14:45:15 +01:00
Domen Kožar
c08c079893
Merge pull request #216635 from DavHau/patch-4
...
services.cachix-watch-store: fix description of compressionLevel
2023-03-14 13:44:58 +00:00
Thomas Dy
fbb554fa58
nixos/kubernetes: update coredns 1.7.1 -> 1.10.1
2023-03-14 22:15:43 +10:00
github-actions[bot]
60e9cbe0f9
Merge staging-next into staging
2023-03-14 12:02:08 +00:00
Linus Heckemann
eb45cd5108
nixos/top-level: add includeBuildDependencies option
...
This option allows adding the build closure of the system to its
runtime closure, enabling fully-offline rebuilds (as long as no new
packages are added).
2023-03-14 11:55:13 +01:00
Martin Weinelt
6b67186fe9
Merge remote-tracking branch 'origin/master' into staging-next
...
Conflicts:
- pkgs/development/python-modules/crownstone-cloud/default.nix
- pkgs/development/python-modules/exrex/default.nix
- pkgs/development/python-modules/mkdocs-minify/default.nix
- pkgs/development/python-modules/myjwt/default.nix
- pkgs/development/tools/analysis/checkov/default.nix
2023-03-14 08:14:26 +01:00
Franz Pletz
bc0a1dd982
Merge pull request #220461 from SuperSandro2000/prometheus
...
prometheus: 2.41.0 -> 2.42.0, split outputs, other cleanups
2023-03-14 05:28:59 +01:00
John Soo
29523c05e4
nixosTests/minio: format with nixpkgs-fmt
2023-03-13 18:01:16 -07:00
John Soo
4400f7d72f
nixosTests/minio: make sure editing root credentials restarts minio
2023-03-13 18:00:43 -07:00
John Soo
e30469a37b
nixos/minio: activate/restart service on credentials path changes
...
Otherwise the `minio.service` service will fail either:
* with a message that the EnvironmentFile does not exist
* or silently with potentially stale credentials
2023-03-13 17:43:19 -07:00
John Soo
7f85002ec0
nixos/minio: format with nixpkgs-fmt
2023-03-13 17:36:52 -07:00
Artturi
b978bf0f0f
Merge pull request #220570 from Artturin/fixlints1
2023-03-14 02:15:55 +02:00
Sandro
5e25ffd594
Merge pull request #218843 from teutat3s/garage-0.8.1
2023-03-13 22:23:53 +01:00
Artturi
9d18216aa3
Merge pull request #221050 from Luflosi/nixos-generate-config-microcode-condition
...
nixos-generate-config: update microcode only on bare metal
2023-03-13 22:56:28 +02:00
7c6f434c
f7eeb48523
Merge pull request #213301 from bcc32/atop-dont-leave-new-log-files
...
nixos/atop: Remove upgraded logfiles if not replaced
2023-03-13 20:20:40 +00:00
Luflosi
1d65c7279c
nixos-generate-config: update microcode only on bare metal
...
Guest operating systems inside VMs or containers can't update the host CPU's microcode for obvious security reasons, so setting the `hardware.cpu.*.updateMicrocode` options is pointless.
2023-03-13 20:15:13 +01:00
github-actions[bot]
59ffe854f9
Merge staging-next into staging
2023-03-13 18:01:48 +00:00
Martin Weinelt
bb14c4255b
Merge remote-tracking branch 'origin/master' into staging-next
2023-03-13 17:14:19 +00:00
Florian Klink
504d66bae9
Merge pull request #216826 from gdamjan/systemd-253
...
systemd: 252.5 -> 253
2023-03-13 17:37:39 +01:00
Marcus Ramberg
f834dfad8f
nimdow: Add nixos windowmanager option
2023-03-13 11:37:32 -05:00
teutat3s
78286a06b0
garage: 0.8.0 -> 0.8.1
...
https://git.deuxfleurs.fr/Deuxfleurs/garage/compare/v0.8.0...v0.8.1
Fix tests by adding cacert
Use garage version 0_8 by default for nixos tests
Use same rust feature set as upstream for release binary and tests:
https://git.deuxfleurs.fr/Deuxfleurs/garage/src/tag/v0.8.1/nix/compile.nix#L181-L192
https://git.deuxfleurs.fr/Deuxfleurs/garage/src/tag/v0.8.1/default.nix#L40-L52
2023-03-13 13:55:36 +01:00
sternenseemann
4fa82b9ecd
Merge remote-tracking branch 'origin/master' into haskell-updates
2023-03-13 11:25:02 +01:00
Vladimír Čunát
2d51a0e8ad
Merge branch 'master' into staging-next
2023-03-13 08:25:10 +01:00
Martin Weinelt
4472cf44eb
treewide: Make yescrypt the default algorithm for pam_unix.so
...
This ensures `passwd` will default to yescrypt for newly generated
passwords.
2023-03-13 07:54:27 +01:00
Martin Weinelt
0d7cd66652
nixos/users-groups: Update password scheme validation
...
Updates the warnings message for statefully set up passwords, now that
weak algorithms have been removed from our libxcrypt package.
Additionall we now add proper validation for hashing schemes used in
`hashedPassword`.
Neither will prevent a rebuiild, but instead issue a warning, that this
requires immediate remediation, or else users will be unable to login.
Reuses the crypt scheme ids as provided by the libxcrypt package.
2023-03-13 07:54:27 +01:00
Martin Weinelt
4e300e071b
libxcrypt: Build only with strong hashes
...
Effectively removes support for the following hashing algorithms
as announced in the NixOS 22.11 release notes:
- bcrypt_x ($2x$)
- sha256crypt ($5$)
- sha1crypt ($sha1$)
- sunmd5 ($md5$)
- md5crypt ($1$)
- nt ($3$)
- bdiscrypt (_)
- bigcrypt (:)
- descrypt (:)
And exposes the crypt scheme ids for enabled algorithms, so they can be
reused for validation in the users-groups module.
2023-03-13 07:54:27 +01:00
Elis Hirwing
ce76a6838c
Merge pull request #203487 from jocelynthode/init-readarr
...
readarr: init at 0.1.4.1596
2023-03-13 06:56:35 +01:00
Lassulus
47233b27c9
Merge pull request #167319 from schnusch/cgit
2023-03-13 09:51:08 +07:00
github-actions[bot]
b68d8e3f47
Merge master into haskell-updates
2023-03-13 00:13:22 +00:00
Ben Wolsieffer
b92dae961c
nixos/chrony: allow @chown syscall set
...
The module was allowing specific chown syscalls, which is brittle because
there are several and different ones are used by glibc on different
architectures. For example, fchownat was already added to the allowlist for
aarch64, while on armv6l chrony crashes because chown32 is not in the
allowlist.
systemd provides the @chown syscall set, which includes all the chown
syscalls and avoids this brittleness. I believe the syscalls would all be
equivalent from an attacker's perspective, so there is unlikely to be any
security impact.
2023-03-12 18:10:56 -05:00
Martin Weinelt
d03d74aa67
Merge remote-tracking branch 'origin/master' into staging-next
...
Conflicts:
- pkgs/development/python-modules/aiopulse/default.nix
- pkgs/development/python-modules/identify/default.nix
- pkgs/development/python-modules/spur/default.nix
2023-03-12 23:28:23 +01:00
nicoo
df4faec23b
nixos/hidpi: Explicitely refer to fontconfig.nix for the choice of defaults
2023-03-12 21:33:38 +00:00
nicoo
5e118ba9ed
nixos/hidpi: Add release notes entry for 23.05
2023-03-12 21:03:53 +00:00
Jocelyn Thode
e7f54823b1
readarr: init at 0.1.4.1596
2023-03-12 20:54:23 +01:00
Guillaume Girol
db901673ea
Merge pull request #209156 from pwaller/issue-114594
...
nixos/grub: Name initrd-secrets by system, not by initrd
2023-03-12 18:50:33 +00:00
Vladimír Čunát
1dd94ad62f
Merge branch 'master' into staging-next
2023-03-12 09:06:28 +01:00
github-actions[bot]
f2032fa12b
Merge master into haskell-updates
2023-03-12 00:13:51 +00:00
Martin Weinelt
2dbef07f09
Merge pull request #218126 from mweinelt/kea-dhcp-ddns-test
...
nixos/tests/kea: Test dhcp-ddns against knot
2023-03-11 22:58:53 +00:00
Martin Weinelt
487b6a38f3
nixos/tests/knot: Use more appropriate terminology
2023-03-11 22:23:10 +01:00
Martin Weinelt
1fc6f2c412
nixos/tests/knot: Use automatic-acl and drop explicit acls
...
This is more in line with expected production usage and if people use
this tests as a reference it should reflect that.
2023-03-11 22:23:10 +01:00
Martin Weinelt
2dc78b7a6d
nixos/tests/kea: Test dhcp-ddns against knot
...
Tests the propagation of DHCP hostnames into a DNS zone.
2023-03-11 22:23:09 +01:00
Ryan Lahfa
ac93edb3ac
Merge pull request #209829 from notgne2/fix/systemd-boot-always-profile-path
...
nixos/systemd-boot: always use profile_path() for system closure paths
2023-03-11 22:08:18 +01:00
Janne Heß
6798068e84
Merge pull request #220555 from lilyinstarlight/feature/fwupd-uefi-capsule
...
nixos/fwupd: add settings option for uefi_capsule.conf
2023-03-11 20:04:32 +01:00
github-actions[bot]
feb117e32c
Merge master into staging-next
2023-03-11 18:01:19 +00:00
Jonas Heinrich
161a1ca129
Merge pull request #191974 from tu-maurice/btrbk-doas
...
btrbk: Use sudo or doas based on configuration
2023-03-11 16:10:50 +01:00
Lily Foster
9c1d627508
Merge pull request #208414 from RossComputerGuy/feat/java-binfmt
...
nixos/java: add binfmt option
2023-03-11 10:04:43 -05:00
nachoslover813260
4b0bc9ea72
nixos/plasma5: add ark as an optional package instead
2023-03-11 21:29:24 +08:00
nachoslover813260
9e8f51fc6c
Adding Ark as a file archiver
...
Since the default plasma desktop already got dolphin-plugins adding ark for archiving would make plasma desktop more complete as well
2023-03-11 21:29:24 +08:00
github-actions[bot]
140a35879a
Merge master into staging-next
2023-03-11 12:01:11 +00:00