Merge remote-tracking branch 'origin/nixos-22-11-racoon' into infra-22.11

flake.lock

@@ -360,19 +360,20 @@
       "inputs": {
         "nixpkgs": [
           "nixos"
-        ]
+        ],
+        "utils": "utils_2"
       },
       "locked": {
-        "lastModified": 1667907331,
+        "lastModified": 1669071065,
-        "narHash": "sha256-bHkAwkYlBjkupPUFcQjimNS8gxWSWjOTevEuwdnp5m0=",
+        "narHash": "sha256-KBpgj3JkvlPsJ3duOZqFJe6tgr+wc75t8sFmgRbBSbw=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "6639e3a837fc5deb6f99554072789724997bc8e5",
+        "rev": "f7641a3ff398ccce952e19a199d775934e518c1d",
         "type": "github"
       },
       "original": {
         "owner": "nix-community",
-        "ref": "release-22.05",
+        "ref": "release-22.11",
         "repo": "home-manager",
         "type": "github"
       }
@@ -418,11 +419,11 @@
     },
     "latest_2": {
       "locked": {
-        "lastModified": 1669411043,
+        "lastModified": 1669542132,
-        "narHash": "sha256-LfPd3+EY+jaIHTRIEOUtHXuanxm59YKgUacmSzaqMLc=",
+        "narHash": "sha256-DRlg++NJAwPh8io3ExBJdNW7Djs3plVI5jgYQ+iXAZQ=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "5dc7114b7b256d217fe7752f1614be2514e61bb8",
+        "rev": "a115bb9bd56831941be3776c8a94005867f316a7",
         "type": "github"
       },
       "original": {
@@ -469,16 +470,16 @@
     },
     "nixos": {
       "locked": {
-        "lastModified": 1669418739,
+        "lastModified": 1669558522,
-        "narHash": "sha256-T86oFvcUIRwHWBWUt7WjaP4BP/3lDGbv5AppQSI1FkI=",
+        "narHash": "sha256-yqxn+wOiPqe6cxzOo4leeJOp1bXE/fjPEi/3F/bBHv8=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "695b3515251873e0a7e2021add4bba643c56cde3",
+        "rev": "ce5fe99df1f15a09a91a86be9738d68fadfbad82",
         "type": "github"
       },
       "original": {
         "owner": "nixos",
-        "ref": "nixos-22.05",
+        "ref": "nixos-22.11",
         "repo": "nixpkgs",
         "type": "github"
       }
@@ -504,11 +505,11 @@
     },
     "nixos-hardware": {
       "locked": {
-        "lastModified": 1669146234,
+        "lastModified": 1669650994,
-        "narHash": "sha256-HEby7EG1yaq1oT2Ze6Cvok9CFju1XHkSvVHmkptLW9U=",
+        "narHash": "sha256-uwASLUfedIQ5q01TtMwZDEV2HCZr5nVPZjzVgCG+D5I=",
         "owner": "nixos",
         "repo": "nixos-hardware",
-        "rev": "0099253ad0b5283f06ffe31cf010af3f9ad7837d",
+        "rev": "7883883d135ce5b7eae5dce4bfa12262b85c1c46",
         "type": "github"
       },
       "original": {
@@ -612,11 +613,11 @@
       },
       "locked": {
         "dir": "vmtools",
-        "lastModified": 1668514320,
+        "lastModified": 1669648111,
-        "narHash": "sha256-P+wzdarT2l+91VPf9hsYtKJad7WHttN5oFFlGQHJ5mQ=",
+        "narHash": "sha256-EKh7iM4fCyZ7L6+HmGn3QkZ1HuG9zMEkziOH3K13SbY=",
         "ref": "main",
-        "rev": "8648709ed952423e82d62eb634918de1b1cfdc82",
+        "rev": "d78c4afe040440437949ce581ae0dcdc5893553c",
-        "revCount": 27,
+        "revCount": 28,
         "type": "git",
         "url": "https://git.b12f.io/pub-solar/infra?dir=vmtools"
       },
@@ -641,6 +642,21 @@
         "repo": "flake-utils",
         "type": "github"
       }
+    },
+    "utils_2": {
+      "locked": {
+        "lastModified": 1667395993,
+        "narHash": "sha256-nuEHfE/LcWyuSWnS8t12N1wc105Qtau+/OdUAjtQ0rA=",
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "rev": "5aed5285a952e0b949eb3ba02c12fa4fcfef535f",
+        "type": "github"
+      },
+      "original": {
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "type": "github"
+      }
     }
   },
   "root": "root",

flake.nix

@@ -8,7 +8,7 @@
   inputs =
     {
       # Track channels with commits tested and built by hydra
-      nixos.url = "github:nixos/nixpkgs/nixos-22.05";
+      nixos.url = "github:nixos/nixpkgs/nixos-22.11";
       latest.url = "github:nixos/nixpkgs/nixos-unstable";
       fork.url = "github:teutat3s/nixpkgs/fix/gitea-needs-gpg-in-path";
 
@@ -21,7 +21,7 @@
       digga.inputs.home-manager.follows = "home";
       digga.inputs.deploy.follows = "deploy";
 
-      home.url = "github:nix-community/home-manager/release-22.05";
+      home.url = "github:nix-community/home-manager/release-22.11";
       home.inputs.nixpkgs.follows = "nixos";
 
       darwin.url = "github:LnL7/nix-darwin";

modules/compat/default.nix

@@ -2,5 +2,5 @@
   # Both things below are for
   # https://github.com/NixOS/nixpkgs/issues/124215
   documentation.info.enable = lib.mkForce false;
-  nix.sandboxPaths = [ "/bin/sh=${pkgs.bash}/bin/sh" ];
+  nix.settings.extra-sandbox-paths = [ "/bin/sh=${pkgs.bash}/bin/sh" ];
 }

modules/core/networking.nix

@@ -1,8 +1,10 @@
-{ config, pkgs, lib, ... }:
+{ config
-
+, pkgs
-with lib;
+, lib
-
+, ...
-let cfg = config.pub-solar.core;
+}:
+with lib; let
+  cfg = config.pub-solar.core;
 in
 {
   options.pub-solar.core = {
@@ -39,12 +41,13 @@ in
     networking.firewall.enable = true;
 
     # Customized binary caches list (with fallback to official binary cache)
-    nix.binaryCaches = cfg.binaryCaches;
+    nix.settings.substituters = cfg.binaryCaches;
-    nix.binaryCachePublicKeys = cfg.publicKeys;
+    nix.settings.trusted-public-keys = cfg.publicKeys;
 
     # These entries get added to /etc/hosts
     networking.hosts = {
-      "127.0.0.1" = [ ]
+      "127.0.0.1" =
+        [ ]
         ++ lib.optionals cfg.enableCaddy [ "caddy.local" ]
         ++ lib.optionals config.pub-solar.printing.enable [ "cups.local" ]
         ++ lib.optionals cfg.enableHelp [ "help.local" ];

modules/core/nix.nix

@@ -1,19 +1,24 @@
-{ config, pkgs, lib, inputs, ... }:
+{ config
-
+, pkgs
-{
+, lib
+, inputs
+, ...
+}: {
   nix = {
     # Use default version alias for nix package
     package = pkgs.nix;
-    # Improve nix store disk usage
-    autoOptimiseStore = true;
     gc.automatic = true;
     optimise.automatic = true;
+    settings = {
+      # Improve nix store disk usage
+      auto-optimise-store = true;
       # Prevents impurities in builds
-    useSandbox = true;
+      sandbox = true;
       # give root and @wheel special privileges with nix
-    trustedUsers = [ "root" "@wheel" ];
+      trusted-users = [ "root" "@wheel" ];
       # This is just a representation of the nix default
-    systemFeatures = [ "nixos-test" "benchmark" "big-parallel" "kvm" ];
+      system-features = [ "nixos-test" "benchmark" "big-parallel" "kvm" ];
+    };
     # Generally useful nix option defaults
     extraOptions = ''
       min-free = 536870912

modules/devops/default.nix

@@ -19,7 +19,7 @@ in
         ansible-lint
         restic
         shellcheck
-        terraform_0_15
+        terraform
       ];
     };
   };

modules/docker/default.nix

@@ -1,6 +1,9 @@
-{ lib, config, pkgs, ... }:
+{ lib
-with lib;
+, config
-let
+, pkgs
+, ...
+}:
+with lib; let
   psCfg = config.pub-solar;
   cfg = config.pub-solar.docker;
 in
@@ -11,7 +14,8 @@ in
 
   config = mkIf cfg.enable {
     virtualisation.docker.enable = true;
-    users.users = with pkgs; pkgs.lib.setAttrByPath [ psCfg.user.name ] {
+    users.users = with pkgs;
+      pkgs.lib.setAttrByPath [ psCfg.user.name ] {
         extraGroups = [ "docker" ];
       };
 

modules/graphical/alacritty.nix

@@ -66,29 +66,97 @@
       x = 0;
       y = 0;
     };
-
-    use_thin_strokes = true;
   };
 
   key_bindings = [
-    { key = "V"; mods = "Control|Alt"; action = "Paste"; }
+    {
-    { key = "C"; mods = "Control|Alt"; action = "Copy"; }
+      key = "V";
-    { key = "Paste"; action = "Paste"; }
+      mods = "Control|Alt";
-    { key = "Copy"; action = "Copy"; }
+      action = "Paste";
-    { key = "Q"; mods = "Command"; action = "Quit"; }
+    }
-    { key = "W"; mods = "Command"; action = "Quit"; }
+    {
-    { key = "Insert"; mods = "Shift"; action = "PasteSelection"; }
+      key = "C";
-    { key = "Key0"; mods = "Control"; action = "ResetFontSize"; }
+      mods = "Control|Alt";
-    { key = "Equals"; mods = "Control"; action = "IncreaseFontSize"; }
+      action = "Copy";
-    { key = "PageUp"; mods = "Shift"; action = "ScrollPageUp"; }
+    }
-    { key = "PageDown"; mods = "Shift"; action = "ScrollPageDown"; }
+    {
-    { key = "Minus"; mods = "Control"; action = "DecreaseFontSize"; }
+      key = "Paste";
-    { key = "H"; mode = "Vi|~Search"; action = "ScrollToBottom"; }
+      action = "Paste";
-    { key = "H"; mode = "Vi|~Search"; action = "ToggleViMode"; }
+    }
-    { key = "I"; mode = "Vi|~Search"; action = "Up"; }
+    {
-    { key = "K"; mode = "Vi|~Search"; action = "Down"; }
+      key = "Copy";
-    { key = "J"; mode = "Vi|~Search"; action = "Left"; }
+      action = "Copy";
-    { key = "L"; mode = "Vi|~Search"; action = "Right"; }
+    }
+    {
+      key = "Q";
+      mods = "Command";
+      action = "Quit";
+    }
+    {
+      key = "W";
+      mods = "Command";
+      action = "Quit";
+    }
+    {
+      key = "Insert";
+      mods = "Shift";
+      action = "PasteSelection";
+    }
+    {
+      key = "Key0";
+      mods = "Control";
+      action = "ResetFontSize";
+    }
+    {
+      key = "Equals";
+      mods = "Control";
+      action = "IncreaseFontSize";
+    }
+    {
+      key = "PageUp";
+      mods = "Shift";
+      action = "ScrollPageUp";
+    }
+    {
+      key = "PageDown";
+      mods = "Shift";
+      action = "ScrollPageDown";
+    }
+    {
+      key = "Minus";
+      mods = "Control";
+      action = "DecreaseFontSize";
+    }
+    {
+      key = "H";
+      mode = "Vi|~Search";
+      action = "ScrollToBottom";
+    }
+    {
+      key = "H";
+      mode = "Vi|~Search";
+      action = "ToggleViMode";
+    }
+    {
+      key = "I";
+      mode = "Vi|~Search";
+      action = "Up";
+    }
+    {
+      key = "K";
+      mode = "Vi|~Search";
+      action = "Down";
+    }
+    {
+      key = "J";
+      mode = "Vi|~Search";
+      action = "Left";
+    }
+    {
+      key = "L";
+      mode = "Vi|~Search";
+      action = "Right";
+    }
   ];
 
   # Base16 Burn 256 - alacritty color config
@@ -164,12 +232,30 @@
     };
 
     indexed_colors = [
-      { index = 16; color = "0xdf5923"; }
+      {
-      { index = 17; color = "0xd70000"; }
+        index = 16;
-      { index = 18; color = "0x2d2a2e"; }
+        color = "0xdf5923";
-      { index = 19; color = "0x303030"; }
+      }
-      { index = 20; color = "0xd3d1d4"; }
+      {
-      { index = 21; color = "0x303030"; }
+        index = 17;
+        color = "0xd70000";
+      }
+      {
+        index = 18;
+        color = "0x2d2a2e";
+      }
+      {
+        index = 19;
+        color = "0x303030";
+      }
+      {
+        index = 20;
+        color = "0xd3d1d4";
+      }
+      {
+        index = 21;
+        color = "0x303030";
+      }
     ];
   };
 }

modules/sway/default.nix

@@ -1,6 +1,9 @@
-{ lib, config, pkgs, ... }:
+{ lib
-with lib;
+, config
-let
+, pkgs
+, ...
+}:
+with lib; let
   psCfg = config.pub-solar;
 in
 {
@@ -29,7 +32,7 @@ in
       '';
     })
 
-    ({
+    {
       environment.systemPackages = with pkgs; [
         linuxPackages.v4l2loopback
       ];
@@ -49,12 +52,12 @@ in
           };
         };
         extraPortals = with pkgs; [ xdg-desktop-portal-gtk ];
-        gtkUsePortal = true;
       };
 
       services.pipewire.enable = true;
 
-      home-manager = with pkgs; pkgs.lib.setAttrByPath [ "users" psCfg.user.name ] {
+      home-manager = with pkgs;
+        pkgs.lib.setAttrByPath [ "users" psCfg.user.name ] {
           home.packages = with pkgs; [
             sway
             grim
@@ -102,6 +105,6 @@ in
           xdg.configFile."sway/config.d/applications.conf".source = ./config/config.d/applications.conf;
           xdg.configFile."sway/config.d/systemd.conf".source = ./config/config.d/systemd.conf;
         };
-    })
+    }
   ]);
 }

modules/terminal-life/nvim/init.vim

@@ -13,6 +13,7 @@ set expandtab
 set shiftwidth=2
 set number
 set relativenumber
+set mouse=
 
 set undolevels=1000
 set undoreload=10000

modules/terminal-life/nvim/lsp.vim

@@ -73,8 +73,7 @@ lua <<EOF
   end
 
   -- Add additional capabilities supported by nvim-cmp
-  local capabilities = vim.lsp.protocol.make_client_capabilities()
+  local capabilities = require('cmp_nvim_lsp').default_capabilities()
-  capabilities = require('cmp_nvim_lsp').update_capabilities(capabilities)
 
   -- vscode HTML lsp needs this https://github.com/neovim/nvim-lspconfig/blob/master/doc/server_configurations.md#html
   capabilities.textDocument.completion.completionItem.snippetSupport = true

profiles/cachix/default.nix

@@ -1,4 +1,7 @@
-{ pkgs, lib, ... }:
+{ pkgs
+, lib
+, ...
+}:
 let
   folder = ./.;
   toImport = name: value: folder + ("/" + name);
@@ -7,5 +10,5 @@ let
 in
 {
   inherit imports;
-  nix.binaryCaches = [ "https://cache.nixos.org/" ];
+  nix.settings.substituters = [ "https://cache.nixos.org/" ];
 }

profiles/cachix/nix-community.nix

@@ -1,9 +1,9 @@
 {
-  nix = {
+  nix.settings = {
-    binaryCaches = [
+    substituters = [
       "https://nix-community.cachix.org"
     ];
-    binaryCachePublicKeys = [
+    trusted-public-keys = [
       "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
     ];
   };

profiles/cachix/nrdxp.nix

@@ -1,9 +1,9 @@
 {
-  nix = {
+  nix.settings = {
-    binaryCaches = [
+    substituters = [
       "https://nrdxp.cachix.org"
     ];
-    binaryCachePublicKeys = [
+    trusted-public-keys = [
       "nrdxp.cachix.org-1:Fc5PSqY2Jm1TrWfm88l6cvGWwz3s93c6IOifQWnhNW4="
     ];
   };