Profpatsch
|
91d0260feb
|
modules/filesystems: disallow non-empty fstab fields (#22803)
It was possible to pass empty strings / strings with only separator characters;
this lead to broken fstab formatting.
|
2017-02-15 13:22:48 +01:00 |
|
Franz Pletz
|
188526da3d
|
prometheus.blackboxExporter service: add CAP_NET_RAW
The blackbox-exporter for prometheus needs CAP_NET_RAW for sending icmp
probes.
|
2017-02-15 09:35:27 +01:00 |
|
Bjørn Forsman
|
f9cb2b5640
|
nixos/security.wrappers: use literalExample in documentation
It's much more readable when the example attrset is pretty printed
instead of written as one line.
|
2017-02-15 09:08:41 +01:00 |
|
Bjørn Forsman
|
a45821e7a8
|
nixos/cron: unbreak since new security.wrapper
|
2017-02-15 08:30:58 +01:00 |
|
Bjørn Forsman
|
aaac02f6c4
|
nixos/atd: unbreak after new security.wrappers
* convert list -> attrset
* 'atd' doesn't exist, 'at' does
|
2017-02-15 08:25:59 +01:00 |
|
Bjørn Forsman
|
b1bfe9d3db
|
nixos: hint about security.setuidOwners/Programs -> security.wrappers
Let users know about the option rename / change during nixos-rebuild
with a useful message instead of an error (with no way forward).
|
2017-02-15 07:25:33 +01:00 |
|
Bjørn Forsman
|
34c1b74421
|
nixos/virtualbox: unbreak wrt. new security.wrappers
The new option takes an attrset, not a list.
|
2017-02-15 07:25:33 +01:00 |
|
Bjørn Forsman
|
448acd8e5e
|
nixos: remove remaining reference to setuidPrograms
The option doesn't exist anymore.
|
2017-02-15 07:25:33 +01:00 |
|
Ian-Woo Kim
|
b7a24e0a2b
|
nixos-container: added test for port forwarding ( nixos/tests/containers-portforward.nix )
|
2017-02-15 05:12:46 +01:00 |
|
Ian-Woo Kim
|
5ca0f72472
|
nixos-container: break lines in description of forwardPorts.
|
2017-02-15 05:12:46 +01:00 |
|
Ian-Woo Kim
|
4f0b663c2e
|
nixos-container: hostPort -> forwardPort and forwardPort is now a list of (protocol,hostPort,containerPort).
|
2017-02-15 05:12:46 +01:00 |
|
Ian-Woo Kim
|
0bfc631de2
|
nixos-container: support multiple port forwarding. change type of hostPort from 'string' to 'listOf str'
|
2017-02-15 05:12:46 +01:00 |
|
Ian-Woo Kim
|
8684285251
|
nixos-container: introduce hostPort in declarative container options.
|
2017-02-15 05:12:46 +01:00 |
|
Ian-Woo Kim
|
a238c8a575
|
nixos-container: add --port option for nixos-container (forward network ports to systemd-nspawn container)
|
2017-02-15 05:12:46 +01:00 |
|
Parnell Springmeyer
|
1f83f1c878
|
security-wrapper: Wrap <para> tags in a <note> tag
|
2017-02-14 21:30:04 -06:00 |
|
Graham Christensen
|
7483ba0932
|
Revert "nix-daemon: default useSandbox to true"
This reverts commit d0a086770a.
|
2017-02-14 14:13:39 -05:00 |
|
Graham Christensen
|
3be1388963
|
Merge pull request #22767 from grahamc/sandbox-by-default
nix-daemon: default useSandbox to true
|
2017-02-14 13:57:44 -05:00 |
|
Eelco Dolstra
|
14c47bd546
|
Merge pull request #22758 from dezgeg/pr-nixos-rebuild
nixos-rebuild: Don't rebuild nixos-rebuild when --fast is used
|
2017-02-14 16:35:43 +01:00 |
|
Parnell Springmeyer
|
69794e333a
|
Using para tags for manual formatting
|
2017-02-14 08:53:30 -06:00 |
|
Parnell Springmeyer
|
794b3721bc
|
Syntax wibble
|
2017-02-14 08:42:08 -06:00 |
|
Parnell Springmeyer
|
e856d6efe8
|
Default should be to set owner and group to root on setcap wrappers too
|
2017-02-14 08:40:12 -06:00 |
|
Parnell Springmeyer
|
c01689f8da
|
Fixing ref to old-wrappersDir
|
2017-02-14 08:33:07 -06:00 |
|
Parnell Springmeyer
|
f8b8c353ff
|
Simplifying the wrapper program derivation
|
2017-02-14 08:27:40 -06:00 |
|
Parnell Springmeyer
|
fb6d13c01a
|
Addressing feedback and fixing a bug
|
2017-02-14 07:38:45 -06:00 |
|
Parnell Springmeyer
|
467bb3f674
|
/run/wrapper is not a filesystem, no need to skip it
|
2017-02-14 07:32:24 -06:00 |
|
Parnell Springmeyer
|
ba499e3aa0
|
Removing unused module option old-wrapperDir
|
2017-02-14 07:30:21 -06:00 |
|
Parnell Springmeyer
|
a27f35993d
|
Derp, correctly write the source program's path
|
2017-02-13 18:28:13 -06:00 |
|
Parnell Springmeyer
|
cca2e11556
|
Resurrecting the single-wrapper read from sibling .real file behavior
|
2017-02-13 18:03:06 -06:00 |
|
Parnell Springmeyer
|
9e36a58649
|
Merging against upstream master
|
2017-02-13 17:16:28 -06:00 |
|
Graham Christensen
|
d0a086770a
|
nix-daemon: default useSandbox to true
|
2017-02-13 18:06:01 -05:00 |
|
Rickard Nilsson
|
cda4a4dcfc
|
nixos/grafana: Don't print password warning if no password has been set
|
2017-02-13 23:11:40 +01:00 |
|
Robin Gloster
|
7e5424ac09
|
php: default to php71
|
2017-02-13 22:48:45 +01:00 |
|
Tuomas Tynkkynen
|
2000f0941e
|
nixos-rebuild: Don't build nixos-rebuild with --fast
|
2017-02-13 21:52:32 +02:00 |
|
Tuomas Tynkkynen
|
23fee8bfbd
|
nixos-rebuild: Support passing e.g. '-j8'
Where there is no space between '-j' and the number.
|
2017-02-13 21:52:30 +02:00 |
|
Graham Christensen
|
1d2548772e
|
Merge pull request #22724 from grahamc/pam-oath-fixup
pam_oath: require OATH and pam_unix credentials to be valid
|
2017-02-13 09:36:35 -05:00 |
|
Robin Gloster
|
af9f44dd57
|
grub: fix capitalisation
Missed this occurence while renaming the option
|
2017-02-13 14:55:36 +01:00 |
|
symphorien
|
0b87efacb1
|
grub: add grub.useOSProber option (#22558)
|
2017-02-13 14:53:15 +01:00 |
|
Linus Heckemann
|
b4cd251c54
|
Manual: document users.users.<name>.hashedPassword
|
2017-02-13 13:54:40 +01:00 |
|
Eelco Dolstra
|
a4ec1841da
|
VM tests: veryloose -> cache=loose
|
2017-02-13 12:18:10 +01:00 |
|
Rob Vermaas
|
af3732b6c6
|
Azure: switch back to qemu 2.2.0 for generating image. Seems to work best.
(cherry picked from commit 2da8a5dac8674501ba9ed10e44650088b466688a)
|
2017-02-13 09:55:03 +00:00 |
|
Rob Vermaas
|
eff0752dbc
|
Use default qemu for azure image generation, and use option to enforce sizing of image to be compliant with Azure/HyperV.
(cherry picked from commit e16db5666af987f8a76be82ff219e138e92af442)
|
2017-02-13 08:54:41 +00:00 |
|
Dan Peebles
|
e63d15f173
|
ecs-agent NixOS module: enable docker
|
2017-02-13 04:06:31 +00:00 |
|
Dan Peebles
|
e928cb1c63
|
ssm-agent NixOS module: init
|
2017-02-13 04:01:38 +00:00 |
|
Graham Christensen
|
84d4e4277c
|
Merge pull request #22723 from benley/fix-sessions-with-sddm
Fix sessions with sddm.
|
2017-02-12 19:01:15 -05:00 |
|
Franz Pletz
|
f5a82e4714
|
gitlab service: fix database creation
Providing custom a username and database name was broken. They were
hardcoded to "gitlab".
|
2017-02-13 00:57:22 +01:00 |
|
Graham Christensen
|
96d767de62
|
pam_oath: require OATH and pam_unix credentials to be valid
|
2017-02-12 18:27:11 -05:00 |
|
Graham Christensen
|
59e77daf5b
|
nixos tests: make getTTYText smart about tty size
|
2017-02-12 18:27:06 -05:00 |
|
Karn Kallio
|
8a1fcaf5bd
|
Fix sessions with sddm.
|
2017-02-12 18:19:20 -05:00 |
|
Vladimír Čunát
|
31eba21d1d
|
virtualbox: force xorg-server-1.18 for now
This is getting a little hacky, but hopefully it won't break anything.
|
2017-02-12 21:07:49 +01:00 |
|
georgewhewell
|
94b28a8072
|
fix systemd.services.kube-proxy to use correct extraOpts
|
2017-02-12 15:06:59 +00:00 |
|