Commit graph

5678 commits

Author SHA1 Message Date
Maximilian Bosch
48665a4150
linux_6_0: drop
EOLed by upstream, doesn't receive any patches anymore, so let's drop
it.

Currently depends on #211886 which bumps the latest compatible ZFS
version to 6.1.

Also, clean up some old aliases.
2023-01-23 10:59:20 +01:00
Nick Cao
b9576dd927
Merge pull request #211723 from tpwrules/fix-systemd-boot-more
nixos/systemd-boot: fix tests and upgrade issues
2023-01-23 15:55:57 +08:00
Bobby Rong
9d801f40e6
Merge pull request #211953 from bobby285271/upd/nixosTests.pantheon
nixosTests.pantheon: ensure switchboard starts + various changes
2023-01-23 10:05:46 +08:00
Ryan Lahfa
04bf8215a9
Merge pull request #209075 from symphorien/nginx-validate-config-revert
nixos/nginx: revert config validation
2023-01-22 17:57:46 +01:00
Bobby Rong
30d5a2216f
nixosTests.pantheon: nodes.machine.config -> nodes.machine
Silence a warning:
warning: Module argument `nodes.machine.config` is deprecated. Use `nodes.machine` instead.
2023-01-22 20:45:30 +08:00
Bobby Rong
009cdb01c7
nixosTests.pantheon: ensure switchboard starts
I noticed this is something that can be easily broken during libsoup3 migration.
2023-01-22 20:45:30 +08:00
Bobby Rong
5461c2c4b7
nixosTests.pantheon: remove a TODO
Pantheon is moving away from Bamf.
2023-01-22 20:45:29 +08:00
Nick Cao
99f9998309
Merge pull request #204386 from robryk/resticassert
nixos/restic: small enhancements
2023-01-22 16:23:04 +08:00
Martin Weinelt
890226f9ba
Merge pull request #210705 from dermetfan/ceph-dashboard
ceph: add missing python library
2023-01-21 00:03:58 +00:00
Robin Stumm
093e3eb20d ceph: enable dashboard in nixos test 2023-01-20 23:59:26 +01:00
Guillaume Girol
cb73862665 Revert "nixos/nginx: validate syntax of config file at build time"
This reverts commit a768871934.

This is too fragile, it breaks at least on:
* ssl dh params
* hostnames in proxypass and upstreams are resolved in the sandbox
2023-01-20 20:10:19 +01:00
Michele Guerini Rocco
10222e1e37
Merge pull request #211295 from rnhmjoj/pr-nixos-install
nixos-install: remove root requirement for bind mount
2023-01-20 18:34:38 +01:00
Thomas Watson
ddc5d34f61 nixos/tests/systemd-boot: only patch systemd-boot during update test
The update test patches the systemd-boot binary to report a known
version then tests that this is the version updated from. The previous
patch would also search the kernel and initrd binaries, which would
cause sed to write out a temporary file that might cause the disk
to run out of space and the test to fail.

Only attempt to patch binaries which contain systemd-boot (usually
`BOOT<arch>.EFI` and `systemd-boot<arch>.efi` to avoid this problem.
As a bonus, this reduces test time by 20-30%.
2023-01-19 23:52:35 -06:00
Thomas Watson
d12040e858 nixos/tests/systemd-boot: fix update test
At some point many months ago, the systemd-boot update script stopped
outputting parentheses around the version being upgraded from, causing
the test to fail. Remove the parentheses from the expected message to
fix the test.
2023-01-19 22:45:41 -06:00
Artturi
257f9de9b6
Merge pull request #211574 from Artturin/remacreintol
treewide: remove accidentally introduced -l
2023-01-20 01:52:14 +02:00
rnhmjoj
b139c467e9
Revert "Revert "nixos/tests/installer: test relative paths in initrd secrets""
This reverts commit 8d45d82c71.

The tests shold pass now that systemd-boot handles failures in initrd
for older boot entries.
2023-01-19 20:50:59 +01:00
Artturin
e59b23d062 treewide: remove accidentally introduced -l
they were all removed in
c2b898da76
but these changes were made before that and merged after it
2023-01-19 15:07:45 +02:00
Vladimír Čunát
8d45d82c71
Revert "nixos/tests/installer: test relative paths in initrd secrets"
This reverts commit 9bb888c9f8 from PR #210812.
We first need to fix nixosTests.installer.simpleUefiSystemdBoot
2023-01-19 10:25:22 +01:00
Vladimír Čunát
2b988c76fd
Revert "nixosTests.installer: bump memorySize"
This reverts commit 309ed272be.
The bump caused nixosTests.installer.luksroot hang, e.g. see
https://hydra.nixos.org/build/205951019
(I don't know why.)

The OOM issues were avoided by 6dccdc4585 (newer but merged earlier)
2023-01-18 11:45:48 +01:00
Ryan Lahfa
eb6d457115
Merge pull request #209246 from e1mo/dokuwiki/package-overriding
dokuwiki: Combine mechanism for plugins and templates
2023-01-18 00:51:18 +01:00
Florian Klink
24b4189619
Merge pull request #207468 from schnusch/systemd-user-tmpfiles-rules
nixos: systemd: add systemd.user.tmpfiles.rules, systemd.user.tmpfiles.users.<name>.rules
2023-01-17 14:39:44 +01:00
schnusch
34ad8447c3 nixos: systemd: add systemd.user.tmpfiles 2023-01-17 12:19:40 +01:00
Nick Cao
2b3c8ae88a
Merge pull request #209767 from 0x4A6F/master-coturn-tests
test/coturn: add some sanity-checks
2023-01-17 10:34:51 +08:00
Nick Cao
8f34f01185
Merge pull request #194343 from oxalica/fix/swap-btrfs
nixos/swap: fix creation on BTRFS and refactor assertions
2023-01-17 08:35:15 +08:00
Michele Guerini Rocco
594b94b4c3
Merge pull request #210812 from rnhmjoj/pr-initrd-secrets
boot.initrd.secrets fixes
2023-01-17 00:48:58 +01:00
oxalica
eecb6c2bd8 nixos/tests/swap-file-btrfs: init 2023-01-17 06:56:55 +08:00
Nick Cao
a90e324332
Merge pull request #210785 from fgaz/mindustry/nixos-test
nixosTests.mindustry: init; mindustry: use SRI hashes
2023-01-16 16:21:06 +08:00
rnhmjoj
9bb888c9f8
nixos/tests/installer: test relative paths in initrd secrets 2023-01-16 02:31:02 +01:00
rnhmjoj
928181b5f3
nixos/tests/installer: add full disk encryption test
This tests a common full disk encryption setup:
https://gist.github.com/ladinu/bfebdd90a5afd45dec811296016b2a3f
2023-01-16 02:31:01 +01:00
Artturi
ee5e15cf2d
Merge pull request #208614 from LeSuisse/grub2-CVE-2022-2601-CVE-2022-3775 2023-01-15 23:23:33 +02:00
Maximilian Bosch
8528a0b512
Merge pull request #210897 from K900/kernels-20230115
Kernels for 2023-01-15
2023-01-15 20:58:06 +01:00
Ryan Lahfa
e2ac17f781
Merge pull request #207466 from Patryk27/fix/174065
nixos: add --specialisation to nixos-rebuild
2023-01-15 18:52:09 +01:00
Ryan Lahfa
503c288f4e
Merge pull request #207567 from Stunkymonkey/photoprism-module-init
nixos/photoprism: init module
2023-01-15 18:36:13 +01:00
Patryk Wychowaniec
2c55eba8f4
nixos: add --specialisation to nixos-rebuild
This commit fixes a papercut in nixos-rebuild where people wanting to
switch to a specialisation (or test one) were forced to manually figure
out the specialisation's path and run its activation script - since now,
there's a dedicated option to do just that.

This is a backwards-compatible change which doesn't affect the existing
behavior, which - to be fair - might still be considered sus by some
people, the painful scenario here being:

- you boot into specialisation `foo`,
- you run `nixos-rebuild switch`,
- whoops, you're no longer at specialisation `foo`, but you're rather
  brought back to the base system.

(it's especially painful for cases where specialisation is used to load
extra drivers, e.g. Nvidia, since then launching `nixos-rebuild switch`,
while forgetting that you're inside a specialisation, can cause some
parts of your system to get accidentally unloaded.)

I've tried to mitigate that by improving specialisations so that they
create a dedicated file somewhere in `/run/current-system` containing
the specialisation's name (which `nixos-rebuild` could then use as the
default value for `--specialisation`), but I haven't been able to come
up with anything working (plus it would be a breaking change then).

Closes https://github.com/NixOS/nixpkgs/issues/174065
2023-01-15 18:16:49 +01:00
Felix Buehler
0214f02419 nixos/photoprism: add test 2023-01-15 18:02:46 +01:00
Ryan Lahfa
df1262baae
Merge pull request #210927 from JulienMalka/Ntfy-test-fix
nixos/ntfy-sh: Fixed nixos test
2023-01-15 17:06:50 +01:00
Matthieu Coudron
cf10d7aef8
services.openssh: support freeform settings (#193757)
* services.openssh: support freeform settings

Keep "extraConfig" but introduces "settings".

Also renames several options

(mkRenamedOptionModule [ "services" "openssh" "kbdInteractiveAuthentication" ] [  "services" "openssh" "settings" "KbdInteractiveAuthentication" ])
(mkRenamedOptionModule [ "services" "openssh" "passwordAuthentication" ] [  "services" "openssh" "settings" "PasswordAuthentication" ])
(mkRenamedOptionModule [ "services" "openssh" "useDns" ] [  "services" "openssh" "settings" "UseDns" ])
(mkRenamedOptionModule [ "services" "openssh" "permitRootLogin" ] [  "services" "openssh" "settings" "PermitRootLogin" ])

* updated doc
* regen doc
2023-01-15 16:32:46 +01:00
K900
6dccdc4585
Merge pull request #210930 from pennae/installer-test-no-docs
nixosTests.installer.*: disable documentation
2023-01-15 18:25:41 +03:00
pennae
a88a515653 nixosTests.installer.*: disable documentation
building the manual takes a pretty long time and sufficient memory to
cause hydra failures: https://hydra.nixos.org/build/205689097#tabs-buildsteps
2023-01-15 16:06:07 +01:00
Julien Malka
d40d0ce7e6
nixos/ntfy-sh: Fixed nixos test 2023-01-15 15:59:30 +01:00
K900
33b60cca17 linux/hardened/patches/6.1: init at 6.1.6-hardened1 2023-01-15 15:23:24 +03:00
Francesco Gazzetta
cbe58afca0 nixosTests.mindustry: init 2023-01-15 13:11:37 +01:00
github-actions[bot]
4712ed9439
Merge master into staging-next 2023-01-14 00:02:26 +00:00
Robert Hensing
e973da60cd
Merge pull request #200225 from pacien/nixos-qemu-vm-restrictnetwork
nixos/qemu-vm: add option "restrictNetwork"
2023-01-13 21:47:21 +01:00
github-actions[bot]
49722fd14a
Merge master into staging-next 2023-01-13 18:01:34 +00:00
Sandro
ba33f29792
Merge pull request #210434 from Stunkymonkey/test-acme-server-phases 2023-01-13 17:59:06 +01:00
Robert Schütz
0a9df042f2
Merge pull request #207595 from wahjava/update-vaultwarden
vaultwarden: 1.26.0 -> 1.27.0
2023-01-13 05:24:14 -08:00
Felix Buehler
fec6e19fd1 nixos/tests/acme/generate-certs: deprecate phases 2023-01-12 22:56:46 +01:00
pacien
b25e0e8ebc nixos/tests: add qemu-vm-restrictnetwork test 2023-01-12 19:50:27 +01:00
Rhys Davies
eb4891d2d3 nixos/vaultwarden: fix test 2023-01-12 01:48:12 -08:00