Commit graph

22568 commits

Author SHA1 Message Date
Elis Hirwing
699ea65439
Merge pull request #131118 from etu/sanoid-syncoid-improvements
nixos/{syncoid,sanoid}: Improve ZFS permission delegation
2021-07-26 11:40:51 +02:00
Elis Hirwing
764e4acee1
nixos/tests/sanoid: Improve tests by checking that no permissions are left behind 2021-07-26 11:05:52 +02:00
Elis Hirwing
bd263441e2
nixos/rl-notes/21.11: Add note about remaining syncoid permissions 2021-07-26 11:05:48 +02:00
Elis Hirwing
a9d29a1d0d
nixos/syncoid: Drop ~[at]sync from the systemcallfilter to avoid coredumps 2021-07-26 11:05:45 +02:00
Elis Hirwing
ea9d5876a0
nixos/sanoid: Reformat file with nixpkgs-fmt 2021-07-26 11:05:37 +02:00
Elis Hirwing
fa58d89b24
nixos/syncoid: Reformat file with nixpkgs-fmt 2021-07-26 11:04:28 +02:00
Elis Hirwing
b9f98165ab
nixos/sanoid: Use a function to build allow/unallow commands 2021-07-26 11:03:35 +02:00
Elis Hirwing
ecd32b8104
nixos/syncoid: Build unallow commands as a post job to drop permissions 2021-07-26 11:02:13 +02:00
Frederik Rietdijk
62370fb59a Merge remote-tracking branch 'upstream/master' into staging-next 2021-07-26 09:19:44 +02:00
Milo Gertjejansen
b0b71138c8 Merge branch 'master' of https://github.com/NixOS/nixpkgs into tt-rss-2021-06-21 2021-07-25 16:02:48 -04:00
Milo Gertjejansen
70338c53c9 Added release notes and broke date apart 2021-07-25 15:40:33 -04:00
Michael Weiss
4ec2b24603
nixos/tests/chromium: Drop the workaround for Chrome GPU crashes
This regression was fixed by 51d83077ff.
2021-07-25 12:39:45 +02:00
Michael Weiss
7b3c054514
nixos/tests/chromium: Check the version and that it's an official build
This also prints and screenshots the output of chrome://version which
contains useful information.

Outputs (stable, beta, ungoogled, chrome-stable, chrome-beta, chrome-dev):
Chromium	92.0.4515.107 (Official Build) (64-bit)
Chromium        92.0.4515.107 (Official Build) (64-bit)
Chromium        91.0.4472.164 (Official Build, ungoogled-chromium) (64-bit)
Google Chrome   92.0.4515.107 (Official Build) (64-bit)
Google Chrome   92.0.4515.107 (Official Build) beta (64-bit)
Google Chrome   93.0.4577.8 (Official Build) dev (64-bit)
2021-07-25 12:35:21 +02:00
Luke Granger-Brown
a0b7bd69ac
Merge pull request #124431 from hyperfekt/systemd-pstore
nixos/filesystems: mount-pstore.service improvements
2021-07-25 10:33:39 +01:00
Elis Hirwing
bb35e7c404
nixos/sanoid: Extract datasets rather than pools
When making new snapshots we only need to delegate permissions to the
specific dataset rather than the entire pool.
2021-07-25 10:13:17 +02:00
Elis Hirwing
70862830f0
nixos/syncoid: Extract datasets rather than pools
When sending or receiving datasets with the old implementation it
wouldn't matter which dataset we were sending or receiving, we would
always delegate permissions to the entire pool.
2021-07-25 10:12:32 +02:00
github-actions[bot]
6a5e4f2c3d
Merge master into staging-next 2021-07-25 06:01:27 +00:00
Aaron Andersen
8813af6821
Merge pull request #128724 from fortuneteller2k/nixos/iwd
nixos/iwd: add settings option
2021-07-24 23:06:42 -04:00
github-actions[bot]
a37fbac53b
Merge master into staging-next 2021-07-25 00:01:35 +00:00
Elis Hirwing
6984e68c51
Merge pull request #98455 from ju1m/syncoid-split
nixos/syncoid: split in multiple systemd services and harden them
2021-07-24 22:08:42 +02:00
github-actions[bot]
859acbc1bc
Merge master into staging-next 2021-07-24 18:01:04 +00:00
Yuka
7d24d06c71
nixos/postgresql: use postgres 13 for 21.11 (#131018)
Co-authored-by: Kim Lindberger <kim.lindberger@gmail.com>
2021-07-24 19:12:08 +02:00
Julien Moutinho
d05a1ab1e4 nixos/syncoid: split in multiple systemd services 2021-07-24 11:26:28 +02:00
github-actions[bot]
cb1426e30a
Merge staging-next into staging 2021-07-23 18:01:46 +00:00
Bernardo Meurer
f7e77f65ee
Merge pull request #131173 from zhaofengli/klipper-cfg-list
nixos/klipper: Allow lists as values for gcode_macro
2021-07-23 08:57:12 -07:00
Sandro
42c7bd28e3
Merge pull request #131215 from Ma27/bump-grocy
grocy: 3.0.1 -> 3.1.0
2021-07-23 17:53:35 +02:00
fortuneteller2k
6ea6734f71 nixos/iwd: add settings option 2021-07-23 23:06:15 +08:00
Benjamin Asbach
9fd41a9a5b
tuxguitar: 125945 (#131028)
* tuxguitar: Ensure that tuxguitar is launched with java 8 comtabilbe jre and libraries as greate java version is not supported

* tuxguitar: Added test to verify application starts without problems

* tuxguitar: 1.5.2 -> 1.5.4
2021-07-23 10:02:20 -04:00
github-actions[bot]
3bc17773a5
Merge staging-next into staging 2021-07-23 12:02:01 +00:00
Maximilian Bosch
ccd348f846
Merge pull request #129732 from nivadis/patch-2
nextcloud: remove expires header
2021-07-23 12:29:52 +02:00
Jörg Thalheim
e2561ba61f
Merge pull request #129408 from kurnevsky/swap-luks-discards
nixos/swap: allow luks discards if swap discards are enabled
2021-07-23 11:11:04 +01:00
Maximilian Bosch
07b51f58df
grocy: 3.0.1 -> 3.1.0
ChangeLog: https://github.com/grocy/grocy/releases/tag/v3.1.0
2021-07-23 11:45:31 +02:00
Michael Weiss
70d1af74df
Merge pull request #131190 from primeos/nixos-tests-chromium
chromium: Check the text rendering
2021-07-23 10:59:28 +02:00
Robert Hensing
98352288bd
Merge pull request #128032 from Artturin/add-swap-options
nixos/swap: add options option
2021-07-23 10:45:53 +02:00
Michael Weiss
11400dcd65
chromium: Check the text rendering
This should catch regressions like #131074 in the future. In that case a
glibc update caused a regression that caused most of the text to become
invisible (just not the "Web Store" we've already been checking for).
2021-07-23 10:15:25 +02:00
Michele Guerini Rocco
75c433e911
Merge pull request #125704 from zanculmarktum/fix/kbd-search-paths
kbd: update search-paths.patch
2021-07-23 08:14:53 +02:00
github-actions[bot]
efbc139f5d
Merge staging-next into staging 2021-07-23 06:01:46 +00:00
Zhaofeng Li
34d2b83291 nixos/klipper: Allow lists as values for gcode_macro 2021-07-22 22:01:44 -07:00
Samuel Dionne-Riel
3af210329f
Merge pull request #131151 from tomfitzhenry/patch-1
nixos/iio: mention iio-sensor-proxy in option description
2021-07-23 00:27:37 -04:00
Tom
5409235160 nixos/iio: mention iio-sensor-proxy in option description
In https://github.com/NixOS/nixpkgs/pull/131094 I mistakenly created a new NixOS module for iio-sensor-proxy because I did not know about `hardware.sensor.iio`.

To help people find `hardware.sensor.iio`, include the string "iio-sensor-proxy" in the description.

To search for an iio-sensor-proxy module, I tried in vain:
* `find -iname '*iio-sensor-proxy*'`
* https://search.nixos.org/options?channel=unstable&from=0&size=50&sort=relevance&query=iio-sensor-proxy
    * This PR will ensure this search query finds `hardware.sensor.iio`
2021-07-23 11:10:30 +10:00
Florian Klink
013e089000
Merge pull request #130503 from flokli/nss-fix-ordering
nixos/systemd: fix NSS database ordering
2021-07-23 02:28:32 +02:00
github-actions[bot]
dda98f3673
Merge staging-next into staging 2021-07-23 00:01:58 +00:00
Martin Weinelt
b09661d41f
Merge pull request #129644 from NixOS/home-assistant 2021-07-23 01:16:55 +02:00
Martin Weinelt
a284c01d2a nixos/home-assistant: allow serial access for the zwave component 2021-07-23 00:27:16 +02:00
github-actions[bot]
0b0a8c7c9a
Merge staging-next into staging 2021-07-22 18:01:39 +00:00
Martin Weinelt
70774da509
Merge pull request #130853 from mweinelt/pppd 2021-07-22 20:00:00 +02:00
Sandro
ead8cf4fc9
Merge pull request #128841 from Artturin/udevil 2021-07-22 15:55:21 +02:00
Maximilian Bosch
15dab3835f
Merge pull request #128649 from nrdxp/fix-unstable-nix-zsh-completions
zsh: fix nixUnstable completions
2021-07-22 14:58:20 +02:00
github-actions[bot]
9f3ace4591
Merge staging-next into staging 2021-07-22 00:02:07 +00:00
Maximilian Bosch
65d60ae78b
Merge pull request #130062 from nh2/plausible-fix-shell-scripting-errors
nixos/plausible: Fix shell scripting errors, runtime fixes
2021-07-22 00:27:56 +02:00
Timothy DeHerrera
6dbf8c0409
zsh: include completions for nix-* commands 2021-07-21 15:55:25 -06:00
Timothy DeHerrera
9ad645dce8
zsh: format module with nixpkgs-fmt 2021-07-21 15:55:25 -06:00
Timothy DeHerrera
d687fe88fd
zsh: remove conflicting nixUnstable completions 2021-07-21 15:55:22 -06:00
Pavol Rusnak
f4860dc785
Merge pull request #130945 from mdlayher/mdl-corerad-docs
nixos/corerad: update link to reference configuration file
2021-07-21 23:12:47 +02:00
Andreas Rammhold
ef9be9288b
Merge pull request #124799 from rissson/nixos-unbound-fix-124780
nixos/unbound: fix define-tag option
2021-07-21 22:08:44 +02:00
Martin Weinelt
78b21f405c
Merge pull request #127461 from maxeaubrey/NetworkManager-1.32.0 2021-07-21 20:03:32 +02:00
Maxine Aubrey
ea125a5fd9
nixos/nftables: set nm's firewallBackend when on
when enabled, switch networkmanager's firewallBackend option to nftables
2021-07-21 19:27:30 +02:00
Martin Weinelt
ee26807e35
nixos/pppd: allow AF_NETLINK
The pppd daemon starting with version 2.4.9 uses rtnetlink to configure
the ipv6 peer address on the ppp interface. It therefore requires
allowing AF_NETLINK sockets.
2021-07-21 16:38:51 +02:00
Matt Layher
5c17e35a31
nixos/corerad: update link to reference configuration file
Signed-off-by: Matt Layher <mdlayher@gmail.com>
2021-07-21 10:35:48 -04:00
Ben Siraphob
1308c47b1f
Merge pull request #130864 from pstn/mingw-64
mingw-64: 6.0.0 -> 9.0.0
2021-07-21 21:22:34 +07:00
Martin Weinelt
8abcc6ba09
nixos/pppd: replace CAP_SYS_ADMIN with CAP_BPF
The kernel before version 5.7 required CAP_SYS_ADMIN to conduct BPF
operations. After that a separate capability CAP_BPF was created, which
should be sufficient in this scenario and will further tighten the
sandbox around our pppd service.

Tested on my personal DSL line.
2021-07-21 15:20:47 +02:00
Michael Weiss
12e7ee0f31
Merge pull request #130877 from primeos/chromium
chromium: 91.0.4472.164 -> 92.0.4515.107
2021-07-21 11:38:02 +02:00
Michael Weiss
97570d30c7
chromium: 91.0.4472.164 -> 92.0.4515.107
https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html

This update includes 35 security fixes.

CVEs:
CVE-2021-30565 CVE-2021-30566 CVE-2021-30567 CVE-2021-30568
CVE-2021-30569 CVE-2021-30571 CVE-2021-30572 CVE-2021-30573
CVE-2021-30574 CVE-2021-30575 CVE-2021-30576 CVE-2021-30577
CVE-2021-30578 CVE-2021-30579 CVE-2021-30580 CVE-2021-30581
CVE-2021-30582 CVE-2021-30583 CVE-2021-30584 CVE-2021-30585
CVE-2021-30586 CVE-2021-30587 CVE-2021-30588 CVE-2021-30589

Note: This won't be the smoothest update. Chromium seems to be fine but
requires gtk3 in $LD_LIBRARY_PATH to find libgtk-3.so.0 (otherwise it
crashes during startup) but Google Chrome fails to initialize
("GPU process exited unexpectedly: exit_code=132") and requires
"--use-gl=angle --use-angle=swiftshader" for hardware(?) acceleration
(which seems to work work fine and performant but SwiftShader should
actually use the CPU instead of the GPU).
2021-07-21 11:20:38 +02:00
Ryan Mulligan
b8d3210113
Merge pull request #130852 from seqizz/g_clipcat
nixos/clipcat: add user service module
2021-07-20 18:56:21 -07:00
Maxine Aubrey
aa7608d7de
nixos/networkmanager: add firewallBackend option 2021-07-21 00:16:34 +02:00
Philipp
c60a0b0447
mingw-64: 6.0.0 -> 9.0.0 2021-07-20 22:34:50 +02:00
Gürkan Gür
d3c568e16a nixos/clipcat: add user service module 2021-07-20 21:40:58 +02:00
github-actions[bot]
61eb7e2e9e
Merge master into staging-next 2021-07-20 18:01:04 +00:00
Artturin
c971de97c4 nixos/swap: add options option 2021-07-20 20:51:27 +03:00
Graham Christensen
da9f3c0598
Merge pull request #130291 from DeterminateSystems/buildkite-agent-metrics
buildkite-agent-metrics: init at 5.2.1, nixos/prometheus-buildkite-agent-exporter: init
2021-07-20 12:22:45 -04:00
Domen Kožar
314f595ab1
Merge pull request #130538 from Ma27/bump-nixstable
nixStable: 2.3.12 -> 2.3.14
2021-07-20 17:09:20 +02:00
Maximilian Bosch
e66237af15
nixStable: 2.3.12 -> 2.3.14
Changes: https://github.com/NixOS/nix/compare/2.3.12...2.3.14

Since this is a bugfix release that wasn't pushed to `nixpkgs`, I
decided to take care of it.

As it's usually done in `upload-release.pl`[1], I updated the
fallback-paths accordingly and used eval `1687468`[2] for this with Nix
2.3.14.

Also added a fallback-path for `aarch64-darwin` as Nix 2.3.14 seems to
support this now[3].

[1] https://github.com/NixOS/nix/blob/2.3-maintenance/maintainers/upload-release.pl
[2] https://hydra.nixos.org/eval/1687468
[3] 14262b86cc
2021-07-20 17:06:51 +02:00
Maximilian Bosch
72d1d4cb20
Merge pull request #130778 from mayflower/tigervnc-tests-and-no-proprietary-fonts
Tigervnc tests and no proprietary fonts
2021-07-20 17:00:09 +02:00
Ingo Blechschmidt
5143ab9f74 tigervnc, tightvnc: add basic tests
Co-Authored-By: Ingo Blechschmidt <iblech@web.de>
2021-07-20 15:22:31 +02:00
github-actions[bot]
3202dd166c
Merge master into staging-next 2021-07-20 12:02:05 +00:00
Sandro
bf93d660cc
Merge pull request #130288 from ju1m/sanoid
nixos/sanoid: fix submodule aliases
2021-07-20 10:21:51 +02:00
github-actions[bot]
680d6a235f
Merge master into staging-next 2021-07-20 06:01:02 +00:00
embr
8e6c4f9a2e nixos/cri-o: Remove unnecessary lib. qualifiers
We're already using `with lib` here, so we can just say `mkOption`, etc.
2021-07-20 15:35:45 +10:00
embr
1cf78b53af nixos/cri-o: Add RFC42 'settings' option 2021-07-20 15:35:45 +10:00
github-actions[bot]
fcf9b87af0
Merge master into staging-next 2021-07-20 00:01:47 +00:00
Pierre Bourdon
cbe99c7fac nixos/agetty: allow overriding the login program 2021-07-19 16:02:46 -07:00
Bernardo Meurer
eb5076a68e
Merge pull request #130616 from zhaofengli/klipper-tweaks
nixos/klipper: Tweaks
2021-07-19 14:46:30 -07:00
Azure Zanculmarktum
88fbddc149 nixos/tests: add kbd-update-search-paths-patch 2021-07-20 03:30:59 +07:00
github-actions[bot]
c0cb54f9ee
Merge master into staging-next 2021-07-19 18:01:10 +00:00
Cole Helbling
88fb6d25d8 nixos/prometheus-buildkite-agent-exporter: init 2021-07-19 08:35:58 -07:00
Jörg Thalheim
58128d690d
Merge pull request #130633 from zimbatm/k3s-configPath
nixos/k3s: add configPath option
2021-07-19 15:22:50 +01:00
Ben Siraphob
d53846e29e
Merge pull request #130583 from jvanbruegge/isabelle2021
Isabelle: 2020 -> 2021
2021-07-19 20:56:48 +07:00
zimbatm
efbd199ffb
nixos/k3s: add configPath option
This is useful when the whole k3s config is generated on boot. The
server address or token might be dynamically injected using user-data.
2021-07-19 13:40:58 +02:00
Zhaofeng Li
0c83078825 nixos/klipper: Allow configuring --input-tty and --api-server
This also makes it easy for other modules to get the correct
path to the virtual printer.
2021-07-19 02:30:25 -07:00
Zhaofeng Li
11313bc65d nixos/klipper: Allow overriding the Klipper package 2021-07-19 02:30:25 -07:00
Zhaofeng Li
94536fd6e3 nixos/klipper: Allow specifying arbitrary user/group
This paves the way for alternative integrations such as
Moonraker.
2021-07-19 02:30:25 -07:00
github-actions[bot]
9c688591fc
Merge master into staging-next 2021-07-19 06:01:30 +00:00
Elis Hirwing
bfef28861d
Merge pull request #130528 from etu/init-hockeypuck
hockeypuck: init at 2.1.0
2021-07-19 07:54:11 +02:00
Elis Hirwing
f8b6ba005e
nixos/tests: Init hockeypuck tests 2021-07-19 07:33:03 +02:00
Elis Hirwing
09a49354b6
nixos/hockeypuck: Add service for hockeypuck 2021-07-19 07:33:01 +02:00
github-actions[bot]
dc802b2e19
Merge master into staging-next 2021-07-19 00:01:36 +00:00
Jan van Brügge
9111bd40b2
isabelle: 2020 -> 2021 2021-07-18 23:51:36 +02:00
Sandro
d5bd34ebf2
treewide: convert phases that contain ":" to dont* = true (#130500) 2021-07-18 23:42:48 +02:00
Maxine Aubrey
1bc6f38000
nixos/doc: update EOL of 21.11 2021-07-18 16:04:13 +02:00
github-actions[bot]
829200bc5a
Merge master into staging-next 2021-07-18 12:01:18 +00:00