Commit graph

91668 commits

Author SHA1 Message Date
José Romildo Malaquias
ffbdc07a0d llvm and clang: define llvm_39 and clang_39 in all-packages.nix (#18599) 2016-09-15 15:54:59 +02:00
José Romildo Malaquias
b527b36d1d xfce4-hardware-monitor-plugin: init at 1.5.0 2016-09-15 10:49:56 -03:00
Joachim Fasting
bf538515b7
nixos/ids: remove static unbound uid 2016-09-15 15:37:20 +02:00
Joachim Fasting
5dc60051fa
unbound service: some pre-chroot isolation
While entering the chroot should provide the same amount of isolation,
the preStart script will run with full root privileges and so would
benefit from some isolation as well (in particular due to
unbound-anchor, which can perform network I/O).
2016-09-15 15:37:20 +02:00
Joachim Fasting
39f5182a30
unbound service: use auto-generated uid
1. The preStart script ensures consistent ownership, even if the unbound
   user's uid has changed
2. The unbound daemon does not generate data that needs to be private to
   it, so it would not matter that a different service would end up
   owning its data (as long as unbound remains enabled, it should reclaim
   ownership soon enough anyway).

Thus, there's no clear benefit to allocate a dedicated uid for the
unbound service.  This releases uid/gid 48.

Also, because the preStart script creates the data directory, there's no
need to specify a homedir or ask for its creation.
2016-09-15 15:37:19 +02:00
Joachim Fasting
0759e77dfd
unbound service: add reference to man:unbound.conf(8) 2016-09-15 15:37:19 +02:00
Joachim Fasting
52432ee63d
unbound service: non-blocking random in chroot
/dev/random is an exhaustible resource. Presumably, unbound will not be
used to generate long-term encryption keys and so allowing it to use
/dev/random only increases the risk of entropy exhaustion for no
benefit.
2016-09-15 15:37:19 +02:00
Joachim Fasting
7980523e00
unbound service: convenient handling of local forward addresses
do-not-query-localhost defaults to yes; with this patch, unbound is
configured to query localhost if any of the forward addresses are local.
2016-09-15 15:37:19 +02:00
Joachim Fasting
4653160057
squashfsTools: optional lz4 support 2016-09-15 15:37:03 +02:00
Joachim Fasting
a9fa582c5b
squashfsTools: use fetchFromGitHub 2016-09-15 15:37:03 +02:00
Joachim Fasting
527b3dc1df
hidepid module: detailed description to external doc 2016-09-15 15:36:03 +02:00
Evgeny Egorochkin
9dd366c385 add Azure bootstrap blob list 2016-09-15 16:27:47 +03:00
Joachim F
fa787da36f Merge pull request #18606 from romildo/upd.greybird
Greybird: 2016-08-16 -> 2016-09-13
2016-09-15 14:53:12 +02:00
Eric Sagnes
db387a6f0d cadvisor: fix test 2016-09-15 21:28:41 +09:00
Eric Sagnes
fe54db9027 cadvisor: 0.10.1 -> 0.23.8 2016-09-15 21:28:12 +09:00
Shea Levy
bca7b782ae Merge branch 'bower2nix-3.1.1' of git://github.com/rvl/nixpkgs 2016-09-15 08:16:07 -04:00
Franz Pletz
a32281639e
php70: 7.0.10 -> 7.0.11 (security)
See https://secure.php.net/ChangeLog-7.php#7.0.11.
2016-09-15 13:57:32 +02:00
Joachim F
fbcb93852c Merge pull request #18047 from Nadrieril/ttrss
tt-rss service: Use nginx virtualhosts; improve config options
2016-09-15 13:37:20 +02:00
Joachim F
c571a7f221 Merge pull request #18500 from tvon/fix/gocd-server-options
gocd-server: add startupOptions, empty extraOptions
2016-09-15 13:24:48 +02:00
Joachim F
09646cc8a5 Merge pull request #18501 from tvon/update/gocd-server-16.9.0-4001
gocd-server: 16.7.0-3819 -> 16.9.0-4001
2016-09-15 13:17:17 +02:00
Joachim F
cbdad9b5e9 Merge pull request #18502 from tvon/update/gocd-agent-16.9.0-4001
gocd-agent: 16.7.0-3819 -> 16.9.0-4001
2016-09-15 13:17:06 +02:00
Sander van der Burg
4cbf2b88c2 Merge pull request #18591 from bendlas/update-androidenv
androidenv: update packages
2016-09-15 11:01:37 +02:00
Daiderd Jordan
fa507771ac Merge pull request #18577 from matthewbauer/mplayer-darwin
mplayer: fix on darwin
2016-09-15 09:32:03 +02:00
Sander van der Burg
36aad71e3c Merge pull request #18610 from siddharthist/emoj/init
emoj: init at 0.3.0
2016-09-15 09:26:21 +02:00
Peter Simons
fabd60a397 hackage-packages.nix: update Haskell package set
This update was generated by hackage2nix v2.0.1-10-gca03454 using the following inputs:

  - Hackage: 0aa5f8d505
  - LTS Haskell: b5ee848475
2016-09-15 09:12:08 +02:00
Peter Simons
9123a0452d haskell: drop obsolete LTS package set
The default 'haskellPackages' set now corresponds to the latest
available version of LTS 7.x.
2016-09-15 09:12:04 +02:00
Peter Simons
055a3e52c5 Switch the 'haskellPackages' attribute set to the latest version of LTS-7.x. 2016-09-15 09:12:04 +02:00
Peter Simons
f7133e4de6 haskell: define top-level attributes for LTS 6.x and 7.x
These attributes exist only for backwards compatibility with old
versions of Stack and will be removed altogether soon.
2016-09-15 09:12:04 +02:00
Peter Simons
6607b99168 haskell: port existing hardening overrides to use the new combinator 2016-09-15 09:12:03 +02:00
Peter Simons
97fd905823 haskell: add support for 'hardeningDisable' to the generic builder
We also have a new helper function 'disableHardening' to use in
overrides. Fixes https://github.com/NixOS/nixpkgs/issues/14820.
2016-09-15 09:12:03 +02:00
Peter Simons
aa1d424421 hackage-packages.nix: update Haskell package set
This update was generated by hackage2nix v2.0.1-9-g9d0fb31 using the following inputs:

  - Hackage: d68983aeb2
  - LTS Haskell: 36c0f4fa5e
  - Stackage Nightly: 8b258a761d
2016-09-15 09:12:02 +02:00
Peter Simons
af1d6e503e configuration-hackage2nix.yaml: make sure some old (but required) packages remain available
The switch to LTS 7.x has made many older versions obsolete and so they
are no longer included in our package set by default:

 - aeson-pretty 0.7.x
 - hoogle 4.x
 - persistent 2.2
 - persistent-sqlite 2.2
 - persistent-template 2.1
2016-09-15 09:11:04 +02:00
Benjamin Staffin
7bcbdb7885 Merge pull request #18620 from benley/openssh-gssapi-patch-once-again
openssh: update gssapi patch, fix the build
2016-09-15 01:03:54 -04:00
Etienne Laurin
ff9208c37a swiProlog: 6.6.6 -> 7.2.3 2016-09-15 00:31:23 -04:00
Benjamin Staffin
43dcb662e7 openssh: update gssapi patch, fix the build 2016-09-14 23:35:26 -04:00
Rodney Lorrimar
131b8d4edb nodePackages.bower2nix: 3.0.1 -> 3.1.1 2016-09-15 01:28:37 +01:00
Rodney Lorrimar
952c477f90 nodePackages.bower2nix: Add back PATH wrapping
bower2nix and fetch-bower need git in the PATH to operate. This wrapping
got lost with the nodePackages updates.

(Fixes #18454)
2016-09-15 01:28:36 +01:00
Chris Martin
56904d7c42 Update libtiff URLs (#18611)
* libtiff: remove dead source url

* libgeotiff: update url
2016-09-15 00:31:32 +01:00
Profpatsch
bd44207786 lib/default.nix: reorder imports for clarity
Group imports according to the kind of functions they contain, in a more
descriptive manner.
2016-09-15 01:21:42 +02:00
Langston Barrett
a1b7d21318 emoj: init at 0.3.0 2016-09-14 23:19:17 +00:00
José Romildo Malaquias
cb948d5b5c Greybird: 2016-08-16 -> 2016-09-13 2016-09-14 18:31:56 -03:00
Thomas Tuegel
7b65daaab4 Merge pull request #18602 from bendlas/update-emacs-packages
emacs-modes: add upstream tramp
2016-09-14 16:10:59 -05:00
Herwig Hochleitner
a4cbd69ef0 emacs-modes: add upstream tramp
this fixes http://emacs.stackexchange.com/questions/21026/tramp-recreates-dev-null-as-a-regular-file
2016-09-14 21:39:02 +02:00
Daiderd Jordan
5ea6d5fa72 Merge pull request #18546 from LnL7/darwin-go-1.7
go: fix darwin build
2016-09-14 21:07:58 +02:00
Daiderd Jordan
db7adbf69c
go: fix darwin build 2016-09-14 21:00:13 +02:00
Daiderd Jordan
4d25b23d26 Merge pull request #18516 from offlinehacker/pkgs/go/1.7.1
go_1_7: 1.7 -> 1.7.1
2016-09-14 20:54:40 +02:00
Ram Kromberg
652e3488f9 julia: pcre2 -> pcre2.dev + pcre2 output fix 2016-09-14 21:35:44 +03:00
Ram Kromberg
46046850e6 pcre2: 10.21 -> 10.22 2016-09-14 21:35:37 +03:00
Matthew Bauer
85f2c3ebc9
mplayer: fix on darwin 2016-09-14 12:51:47 -05:00
Rushmore Mushambi
3ed019123e Merge pull request #18595 from rushmorem/lizardfs-update
lizardfs: 3.10.0 -> 3.10.2
2016-09-14 19:48:08 +02:00