Commit graph

27957 commits

Author SHA1 Message Date
talyz
6686a3115c
nixos/parsedmarc: Fix compatibility with recent versions of grafana 2022-06-15 20:15:03 +02:00
talyz
4dddca8240
nixos/geoipupdate: Improve secret handling
Make secret replacement more robust and futureproof:

- Allow any attribute in `services.geoipupdate.settings` to be a
  secret if set to `{ _secret = "/path/to/secret"; }`.

- Hash the license key path before using it as a placeholder in the
  config file to minimize the risk of conflicting file paths being
  replaced instead.
2022-06-15 20:14:57 +02:00
talyz
23c15323ce
nixos/geoipupdate: Add error handling to scripts 2022-06-15 17:18:50 +02:00
Jonas Chevalier
9c587c51ac
Merge pull request #177743 from zimbatm/grafana-agent-module
nixos: add grafana-agent module
2022-06-15 16:22:54 +02:00
Bobby Rong
284ccb5f4d
Merge pull request #177111 from samuela/upkeep-bot/vscodium-1.68.0-1654822313
vscodium: 1.67.2 -> 1.68.0
2022-06-15 22:13:41 +08:00
Bobby Rong
fe1f4564af
nixos/tests/vscodium: skip type check for now 2022-06-15 22:01:04 +08:00
Silvan Mosberger
8f8db59c0e
Merge pull request #163617 from hercules-ci/lib-types-deferredModule
lib.types: Add deferredModule
2022-06-15 13:23:43 +02:00
zimbatm
31b47913f3
nixos: add grafana-agent module
Easily ship logs and metrics to Grafana Cloud and other similar targets.
2022-06-15 12:59:06 +02:00
Bobby Rong
6d1779c567
Merge pull request #175620 from bobby285271/nixos-pantheon
nixos/pantheon: make it possible to remove core packages
2022-06-15 18:49:37 +08:00
Lassulus
a632afba6d
Merge pull request #177536 from yayayayaka/hedgedoc-fix-statedirectory
nixos/hedgedoc: Do not set StateDirectory to an absolute path
2022-06-15 11:25:04 +02:00
M. A
becff58579 nixos/hedgedoc: Do not set StateDirectory to an absolute path
Commit 8109d8a set the `StateDirectory=` option of the systemd service
configuration to the value of `cfg.workDir` which is wrong, according
to dasJ [1]. This commit resolves this issue by stripping the
`/var/lib/` prefix from `cfg.workDir`.

[1] https://github.com/NixOS/nixpkgs/pull/172824#issuecomment-1130350412
2022-06-15 08:58:52 +00:00
Andreas
c028f5569b kcheckpass is gone(?) 2022-06-15 14:53:40 +08:00
Jeroen Simonetti
829167bd27
nixos/routedns: init
Signed-off-by: Jeroen Simonetti <jeroen@simonetti.nl>
2022-06-15 08:33:46 +02:00
Sandro
f7251ca210
Merge pull request #168505 from brhoades/brhoades/ngrok-bump-v3
ngrok: 2.3.40 -> 3.0.4
2022-06-15 01:30:17 +02:00
Niklas Hambüchen
0652ef9a64
Merge pull request #176903 from nh2/vaultwarden-service-better-example
nixos/vaultwarden: Make example more detailed.
2022-06-15 01:21:40 +02:00
Robert Hensing
cee66a8cd5 make-options-doc: Support Nix-provided declaration links
Previously, the location logic was hardcoded, supporting only
Nixpkgs and NixOps properly, leaving other uses of the module
system without good location support.
2022-06-15 00:45:05 +02:00
Robert Hensing
d9dccae07c nixos/doc: Hold off on NixOps 2 info until released 2022-06-14 23:23:41 +02:00
Robert Hensing
dfd98a5da2 lib.deferredModule: Make it properly singular 2022-06-14 23:01:27 +02:00
Robert Hensing
4746f6d03e lib.types: Add deferredModule 2022-06-14 23:01:23 +02:00
Francesco Gazzetta
5e52fdf6f6 vengi-tools: 0.0.18 -> 0.0.20 2022-06-14 22:23:50 +02:00
Azat Bahawi
82497b0e9f
trickster: 0.1.10 -> 1.1.5 2022-06-14 01:51:45 +03:00
Robert Hensing
5f2eb57725
Merge pull request #177461 from leungbk/mypy-terminal-emulator
tests/terminal-emulators: comply with mypy typecheck
2022-06-14 00:34:16 +02:00
Billy J Rhoades II
8e97f29c01 ngrok: 2.3.40 -> 3.0.4
ngrok 3 was released this morning. Changelog from v2 is here:

https://ngrok.com/docs/ngrok-agent/changelog

And a detailed upgrade guide is here:

https://ngrok.com/docs/guides/upgrade-v2-v3

Notably, arguments must now be double hyphens: `--token`. Previously,
single hyphens were accepted but those invocations will now error.
2022-06-13 14:53:58 -07:00
Pascal Bach
0d27868e91
Merge pull request #144082 from jojosch/jellyfin-10.8.0
jellyfin{,-web}: 10.7.7 -> 10.8.0
2022-06-13 23:35:36 +02:00
Johannes Schleifenbaum
b1ff292b1a
nixos/tests/jellyfin: fix type errors in test script
Co-authored-by: Minijackson <minijackson@riseup.net>
2022-06-13 21:58:48 +02:00
Max
664dab9574
nixos/tests/ipfs: Simplify FUSE test
Co-authored-by: Luflosi <Luflosi@users.noreply.github.com>
2022-06-13 21:01:32 +02:00
Brian Leung
b8df14aec0
tests/terminal-emulators: comply with mypy typecheck
Co-authored-by: Robert Hensing <roberth@users.noreply.github.com>
2022-06-13 07:53:43 -07:00
Aaron Jheng
c3c876462b
traefik: 2.6.3 -> 2.7.1 2022-06-13 14:30:08 +00:00
Léo Gaspard
02cd48717d
nixos/openldap: fix systemd rejecting notification (#177084)
On one of the two machines I have running openldap, openldap failed to start due to a "timeout". Increasing the allowed startup delay didn't help.

I noticed the following in logs:
```
openldap.service: Got notification message from PID 5224, but reception only permitted for main PID 5223
```

It turns out that on this machine at least, openldap apparently sends the notification from a non-main process, which means that we need this NotifyAccess setting for systemd to record that it successfully started. Without it, after 30 seconds systemd kills the process because it didn't receive the sd_notify call.

Somehow the other machine I have on nixos running ldap works fine even without this, but I could not figure out what changes the behavior.

Given that AFAIU NotifyAccess still restricts to "from the cgroup of the service", I think this change should be safe.
2022-06-13 15:28:12 +02:00
Matthieu Coudron
a1ad235743
vimUtils: deprecate configure.pathogen (#154814)
pathogen does not bring any value compared to vim native packages so
remove it to ease maintainance burden.
2022-06-13 15:25:46 +02:00
Maximilian Bosch
7f9a78e197
Merge pull request #175330 from jtojnar/grafana-uid
nixos/grafana: Allow setting UID for datasource
2022-06-13 07:01:19 +02:00
Maximilian Bosch
5203011e4e
Merge pull request #177430 from Ma27/fix-wireguard-exporter
nixos/prometheus-wireguard-exporter: fix broken options
2022-06-13 06:14:30 +02:00
Aaron Andersen
37b6b161e5
Merge pull request #177321 from rnhmjoj/pr-fix-mpd
mpd: fix socket activation
2022-06-12 22:26:53 -04:00
Dominique Martinet
f878c8994f logrotate: do not add mail if 'mail = false' is specified
Reported-by: Ricardo M. Correia <rcorreia@wizy.org>
2022-06-13 08:57:49 +09:00
Winter
6c53004840 nixos/nginx: allow recommended proxy settings to be enabled per location 2022-06-12 19:52:35 -04:00
Mario Rodas
cc73dc83b3
Revert "nixos/security/wrappers: use an assertion for the existence check" 2022-06-12 15:38:05 -05:00
Maximilian Bosch
e03d41fb6b
nixos/prometheus-wireguard-exporter: fix broken options
This is apparently a breaking change in a patch-level release[1] where
it's now necessary to specify values for each CLI argument.

[1] https://github.com/MindFlavor/prometheus_wireguard_exporter/releases/tag/3.6.1
2022-06-12 20:27:25 +02:00
Maximilian Bosch
6717faa02c
Merge pull request #177216 from amarshall/linux-kernel-updates
Linux kernel updates 2022-06-10
2022-06-12 19:52:57 +02:00
Michele Guerini Rocco
2b6c834377
Merge pull request #177336 from ncfavier/wrappers-source-check
nixos/security/wrappers: use an assertion for the existence check
2022-06-12 18:07:40 +02:00
Maximilian Bosch
fd2a89b983
nixos/wpa_supplicant: don't log that wpa_supplicant.conf is ignored with allowAuxiliaryImperativeNetworks = true
The warning is wrong with `allowAuxiliaryImperativeNetworks`[1] being
set to `true` because both files are included in this case with `-c` and
`-I`.

[1] https://nixos.org/manual/nixos/stable/options.html#opt-networking.wireless.allowAuxiliaryImperativeNetworks
2022-06-12 17:07:36 +02:00
pennae
320aa2a791 treewide: attempt at markdown option docs 2022-06-12 12:44:38 +02:00
Florian Klink
f9b0f5d09c
Merge pull request #177048 from NixOS/packages-systemd
nixos/systemd: use cfg.package in systemPackages to avoid confusion
2022-06-12 10:20:51 +02:00
Florian Klink
2b9be3117e
Merge pull request #177010 from flokli/make-kexec
nixos/modules/installer/kexec/kexec-boot.nix: move into nixos/lib, expose `kexec` nixos/release.nix
2022-06-12 10:07:35 +02:00
Bobby Rong
2375fac93d
nixos/pantheon: treat evince and file-roller as optional app 2022-06-12 13:12:15 +08:00
Bobby Rong
860781d909
nixos/pantheon: allow disabling pantheon-agent-geoclue2 2022-06-12 13:11:58 +08:00
Timothy DeHerrera
ec4e23d4e9
Merge pull request #171155 from cab404/wg-quick-files
nixos/wg-quick: added support for configuration files
2022-06-11 22:00:45 -07:00
Bobby Rong
1097e3e80c
nixos/pantheon: make it possible to remove core packages 2022-06-12 11:39:05 +08:00
Bobby Rong
c1559a07fe
nixos/pantheon: switch to xdg.icons.enable 2022-06-12 11:39:04 +08:00
Bobby Rong
9ca889d0fb
nixos/pantheon: switch to xdg.mime.enable 2022-06-12 11:39:01 +08:00
ckie
4af74fa1fb
Merge pull request #173937 from KFearsoff/openvpn3-master
openvpn3: refactor the build
2022-06-12 02:46:08 +03:00
Sandro Jäckel
515b36c093
nixos/i18n: don't build all supportedLocales by default 2022-06-11 23:29:29 +02:00
Naïm Favier
39a56c7696
nixos/security/wrappers: use an assertion for the existence check
A simpler implementation of 7d8b303e3f
that uses an assertion instead of a derivation.

`pathHasContext` seems a bit better than `hasPrefix storeDir` because it
avoids a string comparison, and catches nonsense like
`"foo${pkgs.hello}bar"`.
2022-06-11 23:22:03 +02:00
Robert Hensing
89690dcb46
Merge pull request #177278 from rnhmjoj/pr-fix-wait-port
nixos/tests: fix type mismatch in wait_for_open_port
2022-06-11 22:56:52 +02:00
KFears
49834aef6c nixos/openvpn3: add enable option 2022-06-12 01:19:51 +05:00
Jan Tojnar
c397df20d1
Merge pull request #151005 from rhoriguchi/gnome
nixos/gnome: make it possible to remove core packages
2022-06-11 21:40:35 +02:00
rnhmjoj
7149c5cb60
mpd: fix socket activation
Apparently since systemd v250 a `ListenStream` in an override file won't
override the unit, but will be appended to a list of socket addresses.
The socket unit fails if two or more addresses have the same port,
probably because two systemd processes try to listen to it at once.
The solution is to add an empty `ListenStream=` to reset all previous
definitions.

Fix #175478.
2022-06-11 20:56:19 +02:00
Rick van Schijndel
5bc0350e7c
Merge pull request #177256 from rnhmjoj/pr-picom
nixos/picom: remove deprecated refreshRate option
2022-06-11 20:09:28 +02:00
Sandro
d06755d422
Merge pull request #165780 from OPNA2608/init/haguichi
haguichi: init at 1.4.5
2022-06-11 19:02:06 +02:00
Guillaume Girol
419e07c382
Merge pull request #174218 from NickCao/fcitx5-qt6
fcitx5-qt: add support for qt6 applications
2022-06-11 16:20:20 +00:00
rnhmjoj
5803706662
nixos/tests: fix type mismatch in wait_for_open_port
Fix some fallout from de3e423 (PR #171280).
2022-06-11 14:22:53 +02:00
Soham Sen
feff6ddbe7 expressvpn: init at 3.25.0.13 2022-06-11 17:10:33 +05:30
rnhmjoj
26526f02ad
nixos/picom: remove deprecated refreshRate option
Fix #175765
2022-06-11 08:59:20 +02:00
Andrew Marshall
a2c6e4372a linux/hardened/patches/5.18: init at 5.18.3-hardened1 2022-06-10 17:22:33 -04:00
Robert Hensing
9970c0b874
Merge pull request #174470 from hercules-ci/module-docs-visibility-override
make-options-doc: Allow transformOptions to override visibility
2022-06-10 14:27:58 +02:00
piegames
4ebc288038
Merge #172819: nixos: move matrix services into their category 2022-06-10 10:54:18 +02:00
Elis Hirwing
7afff45088
Merge pull request #174555 from etu/php-drop-php74
php: Drop PHP 7.4
2022-06-10 10:43:31 +02:00
Martin Weinelt
7b3e907a6f
Merge pull request #176561 from K900/pipewire-create-home 2022-06-10 09:25:41 +02:00
zowoq
f063970e50 nixos/podman: add user socket/service 2022-06-10 07:21:56 +10:00
Sandro Jäckel
3df045e6d5
nixos/systemd: use cfg.package in systemPackages to avoid confusion 2022-06-09 22:44:28 +02:00
lassulus
a12e525410 nixos/bitlbee: allow writing to configDir 2022-06-09 21:05:16 +02:00
Florian Klink
06aa64684c nixos/doc: document how to use kexecTree
This documents how to build kexec artifacts.
2022-06-09 20:08:34 +02:00
Florian Klink
cdaaf95e20 nixos/release.nix: expose a kexec.$system attribute 2022-06-09 20:00:26 +02:00
Florian Klink
50648f568d nixos/…/kexec-boot.nix: move into netboot.nix, rename to kexecTree
`nixos/modules/installer/kexec/kexec-boot.nix` doesn't contain any
custom NixOS config, other than importing `netboot-minimal.nix` (which
imports `netboot-base.nix`, which imports `netboot.nix`.

`netboot.nix` really is just describing a self-contained system config,
running entirely off kernel and initrd, so we might as well move the
kexec script generation there as well.

`netboot.nix` already contains some `system.build` attributes.
Provide a `system.build.kexecTree` attribute (and `kexecScript` for
composability).
2022-06-09 19:59:03 +02:00
Domen Kožar
f38fd46992 cachix-agent: set USER to please cachix 2022-06-09 17:07:28 +01:00
Jan Tojnar
c60d526995
Merge pull request #176881 from jian-lin/fix-nixos/ibus-gnome-autostart
nixos/ibus: don't use xdg autostart for Gnome
2022-06-09 14:59:05 +02:00
Ryan Horiguchi
42ceb20d29 nixos/gnome: make it possible to remove core packages
Co-Authored-By: Jan Tojnar <jtojnar@gmail.com>
2022-06-09 13:09:55 +02:00
Jan Tojnar
ca23e42105 nixos/gnome: Move sessionPath to core-shell group
This will allow people to disable these packages.
2022-06-09 13:04:20 +02:00
Jan Tojnar
016b99dce6 nixos/gnome: drop hicolor-icon-theme
It is already installed by xdg.icons.enable.

Let’s also enable that option explicitly to prevent users from accidentally
disabling it since GNOME will be severely broken without it.
2022-06-09 13:04:20 +02:00
Jan Tojnar
7f0ce26bbd nixos/xdg/icons: Install hicolor-icon-theme
While the package contains no icons, it includes an `index.theme` file
describing directories where toolkits should look for icons installed by apps.
2022-06-09 13:04:20 +02:00
Jan Tojnar
aad39fe41a nixos/gnome: drop shared-mime-info
It is already installed by xdg.mime.enable.

Let’s also enable that option explicitly to prevent users from accidentally
disabling it since GNOME will be severely broken without it.
2022-06-09 13:04:19 +02:00
Rick van Schijndel
05eb6570c0
Merge pull request #176801 from K900/upd8n
n8n: update, fix tests
2022-06-09 07:49:37 +02:00
K900
c54c71b4ec n8n: fix test 2022-06-09 08:19:42 +03:00
Julien Moutinho
9d69ea4b7f nixos/sourcehut: improve testing 2022-06-08 19:46:04 -04:00
Julien Moutinho
17c6f62503 nixos/sourcehut: some settings became mandatory upstream 2022-06-08 19:46:04 -04:00
Julien Moutinho
f34d654860 nixos/sourcehut: increase RestartSec to better avoid degraded states 2022-06-08 19:46:04 -04:00
Julien Moutinho
cd6808ba9f sourcehut: fix Unix socket support for Redis 2022-06-08 19:46:04 -04:00
Julien Moutinho
43b5dcd60c nixos/sourcehut: remove forgotten unused files 2022-06-08 19:46:04 -04:00
Julien Moutinho
876f3a8bf0 sourcehut.todosrht: 0.67.2 -> 0.71.0 2022-06-08 19:46:04 -04:00
Julien Moutinho
bcb91bbeb7 sourcehut.metasrht: 0.57.5 -> 0.58.8 2022-06-08 19:46:04 -04:00
Julien Moutinho
59d8439966 sourcehut.listssrht: 0.51.7 -> 0.51.9 2022-06-08 19:46:04 -04:00
Julien Moutinho
658d8f1240 sourcehut.hgsrht: 0.29.4 -> 0.31.2 2022-06-08 19:46:04 -04:00
Julien Moutinho
b57ed0fa1d sourcehut.gitsrht: 0.77.3 -> 0.78.18 2022-06-08 19:46:04 -04:00
Julien Moutinho
43f856ab2c sourcehut.buildsrht: 0.75.2 -> 0.79.1 2022-06-08 19:46:04 -04:00
Eelco Dolstra
0e51dce778 nix-fallback-paths.nix: Update to 2.9.1 2022-06-09 09:00:27 +10:00
Sandro
acbfbd0d86 nixos/kdeconnect: remove alias from default package 2022-06-08 23:11:44 +02:00
linj
cdfd2b9f57 nixos/ibus: don't use xdg autostart for Gnome
Gnome uses systemd to start ibus.
2022-06-08 18:37:42 +02:00
Elis Hirwing
e91811bbe1
php74: Drop PHP 7.4 and add aliases throwing an error 2022-06-08 18:11:55 +02:00
Elis Hirwing
da19e4ae97
nixos/snipe-it: Upgrade to PHP 8.1
They state that they support PHP 8.1:
https://snipe-it.readme.io/docs/requirements
2022-06-08 18:09:15 +02:00
Elis Hirwing
d7f000b98b
nixos/moodle: Upgrade to PHP 8.1 2022-06-08 18:09:11 +02:00
Elis Hirwing
d0862b0ed9
nixos/nextcloud: Upgrade to PHP 8.0 2022-06-08 18:09:07 +02:00
Elis Hirwing
a69ba21a29
nixos/invoiceplan: Upgrade to PHP 8.1
They seem to be working to get PHP 8.1 support:
https://github.com/InvoicePlane/InvoicePlane/issues/798
2022-06-08 18:09:03 +02:00
Elis Hirwing
f822b894c5
nixos/dokuwiki: Upgrade to PHP 8.1
They seem to run tests against 8.1 since this commit:
7aee97ee81
2022-06-08 18:08:59 +02:00
Elis Hirwing
c53c34ee72
nixos/postfixadmin: Upgrade to PHP 8.1 2022-06-08 18:08:56 +02:00
Elis Hirwing
4580a63bc4
nixos/grocy: Upgrade to PHP 8.0 2022-06-08 18:08:52 +02:00
Bernardo Meurer
1430c4b0ed
Merge pull request #176904 from alyssais/localtime
nixos/localtime: add missing mkRenamedOptionModule
2022-06-08 11:53:50 -04:00
Janne Heß
4a77546116
Merge pull request #175655 from AmineChikhaoui/ec2-amis-22.05
ec2-amis: add release 22.05
2022-06-08 17:39:36 +02:00
Niklas Hambüchen
5683c6e03b nixos/vaultwarden: Make example more detailed.
It took me a while to figure out how to correctly setup
vaultwarden on NixOS.
I hope that this more detailed example will help others.
2022-06-08 17:03:53 +02:00
Alyssa Ross
c0b05f106f
nixos/localtime: add missing mkRenamedOptionModule
Fixes: ffae8569b0 ("nixos/localtimed: hopefully fix geoclue")
2022-06-08 13:46:26 +00:00
Mr Hedgehog
276699cdac
xplr: 0.18.0 -> 0.19.0 2022-06-08 08:48:29 -04:00
linj
34b85dfb85 nixos/ibus: fix services.dbus.package 2022-06-08 14:37:59 +02:00
Martin Weinelt
e0169d7a9d
Merge pull request #176558 from Artturin/bumpnofileinfinity 2022-06-08 12:03:01 +02:00
Sandro
be96e24124
Merge pull request #163226 from lodi/persistent-evdev
persistent-evdev: init at unstable-2022-01-14
2022-06-07 23:46:13 +02:00
Ben Siraphob
033da0465f
Merge pull request #176418 from Yureien/init/dragonflydb
dragonflydb: init at 0.1.0
2022-06-07 14:02:26 -07:00
Erik Arvstedt
64589bcefa
nixos/netboot: use makeInitrdNG to shrink ramdisk size
Previously, `makeInitrd` added the whole closure of the squashfs
derivation to initrd.
This closure contains the squashfs.img and some store paths which are
still referenced by the compressed squashfs.img.
These extra store paths are unused in stage 1.

With `makeInitrdNG` only the squashfs.img is added to the initrd.
(`makeInitrdNG` only resolves shared library references instead of the
whole closure).

This shrinks the netboot ramdisk by ~6% for a minimal system and
significantly decreases the size of the uncompressed root filesystem
in stage 1.
2022-06-07 22:34:30 +02:00
lodi
3f1ec25f90 persistent-evdev: init at unstable-2022-01-14 2022-06-07 13:20:52 -04:00
Sandro
2d399082aa
Merge pull request #176723 from SuperSandro2000/runCommandNoCC
treewide: remove usage of runCommandNoCC aliases
2022-06-07 19:03:22 +02:00
Sandro Jäckel
43d4ddf28e
treewide: remove usage of runCommandNoCC aliases 2022-06-07 16:57:06 +02:00
Daniel Poelzleithner
e78c2d05da hedgedoc: ensure upload directory exists
Upload directory is not created when uploading, but will fail silently.
Ensure the upload directory is created.
2022-06-07 09:06:56 -05:00
Jörg Thalheim
70b31373b4
tt-rss: downgrade to php 8.0 2022-06-07 14:24:07 +02:00
happysalada
f5ef819e24 mimir: switch pname to mimir 2022-06-07 06:53:15 -04:00
cab
8de1e9e2f8
nixos/wg-quick: added support for configuration files 2022-06-07 01:28:50 +04:00
Martin Weinelt
b981c4217f
Merge pull request #176626 from winterqt/bump-radarr
radarr: 4.0.5.5981 -> 4.1.0.6175
2022-06-06 23:12:26 +02:00
Winter
c08942e1ad nixos/tests/radarr: fix type of argument in test script 2022-06-06 16:39:55 -04:00
Leona Maroni
0eaa72390b maintainers: rename to leona 2022-06-06 22:20:31 +02:00
Rick van Schijndel
3037752d1d
Merge pull request #175961 from helsinki-systems/rem/broken
remove some packages marked broken for over 1.5 years
2022-06-06 20:44:39 +02:00
Sebastien Bourdeauducq
6cecab9cd8 hydra: create runcommand-logs directory 2022-06-06 11:36:58 -07:00
Artturin
c8f5b17a98 nixos/nix-daemon: set LimitNOFILE to 1048576
fixes 'too many open files'
2022-06-06 21:16:47 +03:00
Robert Hensing
03bcd6fd64 nixos/release.nix: Add nixos.tests.allDrivers 2022-06-06 19:25:04 +02:00
Robert Hensing
51224f522f nixosTests.allDrivers: Move logic to all-packages.nix
Bring it in line with release.nix
2022-06-06 19:24:30 +02:00
K900
955d1a6dde pipewire: create home directory for the pipewire user when running systemwide
wireplumber wants to store state there
2022-06-06 18:06:38 +03:00
Martin Weinelt
6edccf1278
Merge pull request #176541 from mweinelt/firefox-test-typing 2022-06-06 14:50:53 +02:00
Sandro
d8fad83d2c
Merge pull request #176133 from SuperSandro2000/asf-2 2022-06-06 14:34:44 +02:00
Sandro
2cdcb50406
Merge pull request #176049 from LunNova/lunnova/memtest-update
memtest86+: 5.01-coreboot-002 -> 6.00-beta2
2022-06-06 14:29:51 +02:00
Guillaume Girol
fd3fc309f4 nixos/doc: explain how to run appimages 2022-06-06 12:00:00 +00:00
Martin Weinelt
0be108df2e
nixos/tests/firefox: fix return type typing 2022-06-06 13:29:09 +02:00
Nguyễn Gia Phong
22f3d4e4db
nixos: move matrix services into their category 2022-06-06 13:50:58 +09:00
zowoq
e9f4412eb4 docker-edge: remove 2022-06-06 14:06:39 +10:00
Soham Sen
109e13db24 dragonflydb: init at 0.1.0 2022-06-06 04:05:48 +05:30
Victor Fuentes
54fcba5b3b
installation-cd: prevent gnome from sleeping 2022-06-05 14:10:37 -07:00
Luna Nova
8487b21ffb
memtest86+: 5.01-coreboot-002 -> 6.00-beta2
The previous version from review.coreboot.org is no longer available at
that address. This reverts to using the upstream, which is also a
rewrite and currently in beta. The full release is expected before
22.11.
2022-06-05 13:24:15 -07:00
Emery Hemingway
2d012163f2 nixos/uhub: fix plugins, set CAP_NET_BIND_SERVICE
Fix generation of the plugins configuration and allow binding to
"privileged" ports.
2022-06-05 13:58:26 -05:00
Robert Hensing
bad676c7ed
Merge pull request #174441 from tljuniper/172325-nixostest-override-python-pkgs-additional-param
nixos/test-driver: additional Python packages in test driver
2022-06-05 20:46:01 +02:00
Guillaume Girol
7548b71138
Merge pull request #171778 from zhaofengli/infnoise-0.3.2
infnoise: unstable-2019-08-12 -> 0.3.2, nixos/infnoise: init
2022-06-05 17:30:34 +00:00
Anderson Torres
9648de3055
Merge pull request #176341 from erdnaxe/nitter_test_fix
nixos/nitter: fix wait_for_open_port
2022-06-05 09:03:06 -03:00
Sandro Jäckel
ec00b4bb11
nixos/network-interfaces-scripted: remove network-setup unit if unused 2022-06-05 13:35:55 +02:00
Anders Kaseorg
b362ef4eff pipewire: Never set an empty LD_LIBRARY_PATH
An empty LD_LIBRARY_PATH may confuse some applications into appending
:, creating an empty segment that insecurely refers to the current
directory, not the absence of directories.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>
2022-06-05 13:34:35 +02:00
Wout Mertens
949e1e5277
Merge pull request #176075 from NixOS/netdata-poststart
netdata: started when service can be pinged
2022-06-05 13:10:37 +02:00
Robert Hensing
fddafcc062
Merge pull request #176099 from hercules-ci/nixosTests.allDrivers
`nixosTests`: Add `allDrivers` for development purposes
2022-06-05 12:13:40 +02:00
Alexandre Iooss
053e10dfbc nixos/nitter: fix wait_for_open_port 2022-06-05 09:35:48 +02:00
pennae
4a9708930d
Merge pull request #176116 from pennae/unifi-remove-deprecated
nixos/unifi: change deprecated default for openFirewall
2022-06-04 20:52:34 +00:00
lom
0df7cba1b0 nixos/asf: ipcPasswordFile use nullOr 2022-06-04 12:00:45 -06:00
pennae
18cce1008e
Merge pull request #175743 from scvalex/add-route-type-option
nixos/network-interfaces: add networking.interfaces.<name>.ipv[46].routes.type
2022-06-04 15:41:03 +00:00
Guillaume Girol
ed883bbfd9
Merge pull request #173881 from symphorien/ihm-fix-test
nixos/tests/ihatemoney: fix test
2022-06-04 12:04:02 +00:00
Robert Hensing
81128707bf
Merge pull request #176182 from bobby285271/test-driver
nixos/test-driver: fix type hint for send_chars
2022-06-04 13:32:11 +02:00
sternenseemann
1dc61f76fb Merge remote-tracking branch 'origin/master' into haskell-updates 2022-06-04 10:57:30 +02:00
Bobby Rong
41cd411c03
nixos/tests/sway: skip type check for now 2022-06-04 13:55:01 +08:00
Bobby Rong
906b0b2e87
nixos/tests: fix all tests that uses wait_until_tty_matches 2022-06-04 12:22:03 +08:00
Bobby Rong
9d2a8e3190
nixos/test-driver: fix type hint for send_chars 2022-06-04 12:05:47 +08:00
Martin Weinelt
417419a5c9 nixos/tests/home-assistant: assert regex match
Fixes type checking done against the test driver.
2022-06-03 18:56:11 -07:00
github-actions[bot]
9ebf890b3f
Merge master into haskell-updates 2022-06-04 00:13:01 +00:00
Sandro
4c7a9aae7b
Merge pull request #176052 from LunNova/lunnova/rl-2211.section.md
manual: Fix 22.11 Other Notable Changes bullet point style
2022-06-04 00:23:46 +02:00
Sandro Jäckel
032f15e566
nixos/asf: add me as maintainer 2022-06-03 18:52:48 +02:00
Sandro Jäckel
d8cd684b62
nixos/asf: restart when self restarting 2022-06-03 18:52:47 +02:00
Sandro Jäckel
4de6a81193
nixos/asf: fix state directory permissions, for real 2022-06-03 18:52:47 +02:00
Sandro Jäckel
28379c3a51
Revert "nixos/asf: set restrictive home permissions"
This reverts commit 16f28933e7.
2022-06-03 18:52:46 +02:00
Thiago Kenji Okada
44b5c8b6a7
Merge pull request #175965 from otavio/topic/nixos-restic
Add new restic options for NixOS module
2022-06-03 16:19:55 +01:00
Otavio Salvador
d9e3b1fafe nixos/restic: add backup{Prepare,Cleanup}Command options
The backupPrepareCommand and backupCleanupCommand options offer a way to
run a script to prepare for backup and then cleanup it once finish.

Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
2022-06-03 11:22:22 -03:00
Otavio Salvador
deae887c5a nixos/restic: add new repositoryFile option
Allow providing the repository as a file, useful when we don't want it
being stored in the Git repository as plain text.

Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
2022-06-03 11:21:37 -03:00
pennae
e21c4d67d5 nixos/unifi: change deprecated default for openFirewall
this was deprecated 6 months ago in unstable for removal in 22.11,
so now seems like a good point to change the default.
2022-06-03 15:59:41 +02:00
Robert Hensing
481ef8ddd6 nixosTests: Add allDrivers for development purposes 2022-06-03 14:34:29 +02:00
Robert Hensing
793180cf55
Merge branch 'master' into 172325-nixostest-override-python-pkgs-additional-param 2022-06-03 14:22:13 +02:00
Robert Hensing
de3e423178
Merge pull request #171280 from m1-s/fix_mypy2
nixos/test-driver: Typecheck TestScript
2022-06-03 14:19:21 +02:00
Michael Schneider
fd4ebd8990 add opt out flag for type checking 2022-06-03 13:37:04 +02:00
Sandro
c09782950f
Merge pull request #176030 from SuperSandro2000/asf 2022-06-03 12:12:23 +02:00
Sandro Jäckel
e438fad5e9
nixos/asf: format 2022-06-03 11:41:40 +02:00
Sandro Jäckel
17ec7e4401
nixos/asf: remove subdirectories from bot config 2022-06-03 11:41:38 +02:00
Sandro Jäckel
16f28933e7
nixos/asf: set restrictive home permissions 2022-06-03 11:41:37 +02:00
Sandro Jäckel
48b21f661c
nixos/asf: add ipcPasswordFile option, only delete bot configs when managed by nixos, make preStart clearer 2022-06-03 11:41:36 +02:00
Wout Mertens
7f025e2b34
netdata: started when service can be pinged 2022-06-03 10:45:27 +02:00
Luna Nova
9e95ee79d4
manual: Fix 22.11 Other Notable Changes bullet point style
Every other release uses "-" instead of "*", which results in
spacing=compact being added to the xml unexpectedly.
2022-06-02 20:58:54 -07:00
Nick Cao
e84828b973
nixos/nvidia: add option hardware.nvidia.open for selecting the opensource kernel driver 2022-06-03 10:50:33 +08:00
Nick Cao
94f5bd2051
nvidia_x11: init opensource kernel driver 2022-06-03 10:50:33 +08:00
github-actions[bot]
1a2bb9918a
Merge master into haskell-updates 2022-06-03 00:11:59 +00:00
Otavio Salvador
082a4184ec nixos/restic: reformat
Apply nixpkgs-fmt on file prior doing changes.

Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
2022-06-02 16:48:43 -03:00
Rick van Schijndel
ef895f6b43
Merge pull request #173239 from jojosch/mjolnir-update
mjolnir: 1.4.1 -> 1.4.2
2022-06-02 21:40:53 +02:00
Rick van Schijndel
d93d4a5820
Merge pull request #175872 from uninsane/colinsane/phosh-phoc-scale
phosh: allow fractional scaling
2022-06-02 20:54:41 +02:00
Sandro
b450c76786
Merge pull request #175607 from robintown/matrix-synapse
matrix-synapse: 1.59.1 -> 1.60.0
2022-06-02 20:32:04 +02:00
Lassulus
8cea5e2fa1
Merge pull request #173664 from Izorkin/peertube-redis-server
nixos/peertube: use redis.servers
2022-06-02 20:26:29 +02:00
Alexandru Scvortov
3a09010b9d nixos/network-interfaces: add networking.interfaces.<name>.ipv[46].routes.type 2022-06-02 19:16:25 +01:00
Thiago Kenji Okada
679197e9ff
Merge pull request #174058 from jian-lin/fix-nvidia.powerManagement.finegrained-only-apply-workarounds-when-needed
nixos/nvidia: only apply workarounds for finegrained when needed
2022-06-02 17:55:23 +01:00
Thiago Kenji Okada
64870a0c57
Merge pull request #174259 from schuelermine/add-nixos-option/hardware.nvidia.forceFullCompositionPipeline
nixos/nvidia: add hardware.nvidia.forceFullCompositionPipeline
2022-06-02 17:50:50 +01:00
Thiago Kenji Okada
3ead2b58f5
Merge pull request #174057 from jian-lin/fix-nvidia.powerManagement.finegrained-remove-useless-setting
nixos/nvidia: remove a useless option
2022-06-02 17:32:24 +01:00
ajs124
5bb61d6a25 syslogng_incubator: remove after being marked broken for over 18 months
It was marked in commit 6d797c8462 by Jörg Thalheim on 2018-08-27 (commited on 2018-08-27)
2022-06-02 18:03:52 +02:00
sternenseemann
0d9edbcdd0 Merge remote-tracking branch 'origin/master' into haskell-updates 2022-06-02 10:48:49 +02:00
colin
1d0649f929 phosh: restrict the scale config value to strictly positive values or null 2022-06-02 01:46:08 -07:00
Michael Schneider
814027378b nixos/test-driver: Typecheck TestScript 2022-06-02 10:05:45 +02:00
MatthiasBenaets
9a5c77c581 nixos/new-lg4ff: fix kernel selection 2022-06-02 08:27:42 +02:00
github-actions[bot]
a52fa8397a
Merge master into haskell-updates 2022-06-02 00:16:40 +00:00
colin
cabf369f83 phosh: allow fractional scaling 2022-06-01 15:44:12 -07:00
Bernardo Meurer
f4d4b16d71
Merge pull request #175831 from lovesegfault/fix-localtime
nixos/localtimed: hopefully fix geoclue
2022-06-01 14:38:29 -07:00
lom
ec9204d732 nixos/new-lg4ff: respect enable option 2022-06-01 15:09:24 -06:00
Bernardo Meurer
ffae8569b0 nixos/localtimed: hopefully fix geoclue 2022-06-01 13:20:16 -07:00
sternenseemann
38c31bdbe5 Merge remote-tracking branch 'origin/master' into haskell-updates 2022-06-01 19:08:57 +02:00
Martin Weinelt
5a188dfbca
Merge pull request #175729 from DeterminateSystems/jellyfin-fix 2022-06-01 17:19:49 +02:00
Sandro
ba4c03124f
Merge pull request #174956 from MatthiasBenaets/new-lg4ff
new-lg4ff: init at 0.3.3
2022-06-01 16:42:55 +02:00
MatthiasBenaets
8dcba104aa new-lg4ff: init at 0.3.3 2022-06-01 14:31:52 +02:00
Linus Heckemann
7eab23d517 jellyfin: fix permissions on state directory
Previously, all configuration and state data was accessible to all
users on the system running jellyfin. This included user passwords in
the Jellyfin database, as well as credentials for LDAP if configured.
The exact set of accessible data depends on system configuration.

Thanks to Sofie Finnes Øvrelid for reporting this issue.

Fixes: CVE-2022-32198

Co-Authored-By: Martin Weinelt <hexa@darmstadt.ccc.de>
2022-06-01 12:31:23 +02:00
Martin Weinelt
5b8a2ab169
Merge pull request #175611 from waldheinz/systemd-boot-builder-does-not-update
nixos/systemd-boot: fix systemd-boot-builder refusing to update
2022-06-01 12:22:11 +02:00
Matthias Treydte
ff24f484af nixos/systemd-boot: fix systemd-boot-builder refusing to update
Handling of the string length condition in should_update
was broken, as evident with the log message

> leaving systemd-boot 246 in place (250.4 is not newer)

Discussion with @mweinelt came to the conclusion
that Python's "<" operator already does what we need,
so the should_update function can be dropped.

Fixes a30de3b849
2022-06-01 11:49:07 +02:00
Aaron Andersen
18a07645e5
Merge pull request #174959 from MoritzBoehme/openconnect-auto-start
nixos/openconnect: add autoStart option
2022-05-31 23:05:25 -04:00
github-actions[bot]
68b515131f
Merge master into haskell-updates 2022-06-01 00:15:07 +00:00
Martin Weinelt
02e44ee3be
Merge pull request #174804 from dotlambda/prometheus-dmarc-exporter-no-poetry2nix 2022-06-01 01:46:30 +02:00
Robert Schütz
aff15c41fc dmarc-metrics-exporter: rename from prometheus-dmarc-exporter
Also stop using poetry2nix.
2022-05-31 23:25:18 +00:00
AmineChikhaoui
3909226544
ec2-amis: add release 22.05 2022-05-31 18:43:58 -04:00
7c6f434c
39e6b1a240
Merge pull request #175558 from klemensn/atop-convert-logs-fix-startup
nixos/atop: Convert log format to fix service start
2022-05-31 20:37:23 +00:00
Sandro
8d8e031d25
Merge pull request #133771 from erdnaxe/libreddit_fix
nixos/libreddit: service hardening and test
2022-05-31 21:53:51 +02:00
Robin Townsend
d0eda68f5b matrix-synapse: Warn about state_group_edges changes in release notes 2022-05-31 13:54:58 -04:00
Maximilian Bosch
185ee01e80
Merge pull request #173273 from kfollesdal/grafana-azuread
nixos/grafana: add new options to grafana module
2022-05-31 19:24:33 +02:00
Robert Hensing
c5d82eb1ab
Merge pull request #174939 from FliegendeWurst/nixos-tests
nixos/tests: various fixes
2022-05-31 16:31:06 +02:00
Robert Hensing
53326189ba
Merge pull request #174829 from blaggacao/fix/cleanup-nixpkgs-initial-system
nixos: remove effect-less nixpgks.initialSystem
2022-05-31 16:26:25 +02:00
Markus S. Wamser
32e26d2627 release-notes: fix typo 2022-05-31 08:53:58 +02:00
Klemens Nanni
09350ff7d4 nixos/atop: Convert log format to fix service start
Raw logs are stored in a versioned binary format and must be update with
atopconvert(1) upon atop version updates.

Failure to do so results in atop.service startup failure as I found out
the hard way after the "atop: 2.6.0 -> 2.7.1"[0] bump:
```
May 31 01:49:25 <hostname> sh[2269709]: existing file /var/log/atop/atop_20220531 has incompatible header
May 31 01:49:25 <hostname> sh[2269709]: (created by version 2.6 - current version 2.7)
May 31 01:49:25 <hostname> systemd[1]: atop.service: Main process exited, code=exited, status=7/NOTRUNNING
```

Convert logs in `ExecStartPre` and replace them iff updated.
This is to avoid changing original modification times upon every service
start and thus work against atop's log rotation (see existing
`ExecStartPre`).

0: https://github.com/NixOS/nixpkgs/pull/175180#issuecomment-1141546487
2022-05-31 07:21:01 +02:00
github-actions[bot]
5250c9bcbc
Merge master into haskell-updates 2022-05-31 00:12:58 +00:00
markuskowa
412168b4ae
Merge pull request #175316 from markuskowa/upd-slurm
slurm: 21.08.8.2 -> 22.05.0.1
2022-05-30 21:18:28 +02:00
Janne Heß
cbaacfb8df
Release 22.05 2022-05-30 20:50:07 +02:00
Robert Hensing
116832edbf dockerTools: Add example of using NixOS' etc
(cherry picked from commit 9b2af8673be82d48ce76c8c152de85ad921d26ba)
2022-05-30 14:26:52 +02:00
ajs124
872d0ba943
Merge pull request #174448 from helsinki-systems/upd/nginx
nginxStable: 1.20.2 -> 1.22.0
2022-05-30 13:35:01 +02:00
Janne Heß
563e5c46f5
Merge pull request #175445 from helsinki-systems/fix/vmware-mkoverride
nixos/vmware-guest: Remove the video driver
2022-05-30 12:30:46 +02:00
ajs124
30186896ee nixos/nginx: fix SystemCallFilter for openresty 2022-05-30 11:58:28 +02:00
Janne Heß
5157246aa4
nixos/vmware-guest: Remove the video driver
This breaks isos since https://github.com/NixOS/nixpkgs/pull/172668
because vmware is enabled there. @K900 tested this and confirmed that
the GPU acceleration still works.
2022-05-30 11:56:21 +02:00
Florian Klink
f12a263b69
Merge pull request #172707 from klemensn/init-zfs-mount-options
nixos/stage-1: Fix library path in libraries, fix ZFS mount options
2022-05-30 10:51:17 +02:00
github-actions[bot]
b39ef64425
Merge master into haskell-updates 2022-05-30 00:15:31 +00:00
Guillaume Girol
f2493e87d8
Merge pull request #173110 from symphorien/ovmf-cross
nixos/libvirtd: make it possible to boot a UEFI aarch64 vm on x86_64
2022-05-29 21:46:45 +00:00
linj
37792e5766 nixos/dendrite: add an option loadCredential
systemd-247 provides a mechanism called LoadCredential for secrets and
it is better than environment file. See the section of Environment=
in the manual of systemd.exec for more information.

Some options in config.yaml need values to be strings, which currently
can be used with environmentFile but not loadCredential. But it's
possible to use loadCredential for those options, e.g. we can
substitute their values in ExecStart, but not in ExecStartPre due to
[1].

[1]: https://github.com/systemd/systemd/issues/19604
2022-05-29 13:34:14 -07:00
Janne Heß
d732671af2
Merge pull request #175138 from Mic92/docs
release-notes: link to all nix versions
2022-05-29 21:30:47 +02:00
ajs124
757046a257
Merge pull request #175095 from mweinelt/slapd-argon2-changelog
nixos/doc/rl-2205: add slapd argon2 module rename hint
2022-05-29 20:49:21 +02:00
sternenseemann
4cec59e09c
Merge pull request #175170 from sternenseemann/ghc-9.2.3
haskell.compiler: ghc922 -> ghc923
2022-05-29 20:00:57 +02:00
Jan Tojnar
81291cc793 nixos/grafana: Allow setting UID for datasource 2022-05-29 19:22:02 +02:00
Markus Kowalewski
b6020f42a5
nixos/slurm: update systemd service for slurmd
Adjust according to upstream recommendation
2022-05-29 17:17:01 +02:00
tljuniper
2a750c3026 nixos/manual: Add docs on extra python packages in tests 2022-05-29 11:22:50 +02:00
tljuniper
8858bf009e nixos/test-driver: add test for extraPythonPackages 2022-05-29 11:22:42 +02:00
tljuniper
a99736e399 nixos/test-driver: add option to add extra python packages to test code 2022-05-29 11:22:23 +02:00
Jörg Thalheim
d32a2bf207 nixos/mimir: also expose mimirtool to users 2022-05-29 03:49:17 -04:00
Jörg Thalheim
a6cdcce08b nixos/mimir: add test 2022-05-29 03:49:17 -04:00
Jörg Thalheim
6497902407 nixos/mimir: set workingdirectory
Mimir writes files relatative to its working directory.
With this option less files have to be configured.
2022-05-29 03:49:17 -04:00
Alyssa Ross
c3c0dd00d8 treewide: fix loss of precision in NixOS systems
Prior to this patch:

	$ nix-instantiate --eval -E '
	>   with import ./. {
	>     localSystem.config = "aarch64-unknown-linux-musl";
	>   };
	>   (nixos {}).config.nixpkgs.localSystem.config
	> '
	"aarch64-unknown-linux-gnu"

Because only the system triple was being passed through, the Musl part
of the system specification was lost.  This patch fixes various
occurrences of NixOS evaluation when a Nixpkgs evaluation is already
available, to pass through the full elaborated system attribute set,
to avoid this loss of precision.
2022-05-28 20:01:55 +00:00
sternenseemann
90099ac5fa haskell.compiler: ghc922 -> ghc923
https://www.haskell.org/ghc/download_ghc_9_2_3.html

Since the tarball is generated by Hadrian, neither autoreconf nor ./boot
is executed so ./configure and ghc.mk is missing.
2022-05-28 21:11:07 +02:00
Guillaume Girol
9b73ceb7c2
Merge pull request #173919 from symphorien/os-prober-hang
nixos/tests/os-prober: fix
2022-05-28 19:10:37 +00:00
Aleksandar Topuzović
fd86efb8c2 nixos/nextcloud: Fix broken config file 2022-05-28 19:14:12 +01:00
Jörg Thalheim
b8f31e9e3b
release-notes: link to all nix versions 2022-05-28 16:42:48 +02:00