lassulus
fc035da4a4
xserver.displayManager: change default
...
Switch from slim to lightdm as the display-manager.
If plasma5 is used as desktop-manager use sdddm.
If gnome3 is used as desktop-manager use gdm.
Based on #12516
2018-08-31 17:57:39 +02:00
Ricardo M. Correia
6376c5df87
nixos/transmission: fix AppArmor profile to include keyutils
2018-08-31 17:19:29 +02:00
Tobias Happ
8f0bafcaff
nixos/gitea: fix pre start script ( #44979 )
...
The gitea path is hardcoded in hooks directory in files of paths like:
repositories/<user>/<repo>.git/hooks/update.d/gitea
2018-08-31 16:39:58 +02:00
John Ericson
2c4a75e9ef
Merge pull request #45820 from obsidiansystems/dont-use-obsolete-platform-aliases
...
treewide: Dont use obsolete platform aliases
2018-08-31 09:56:10 -04:00
xeji
4db15ba7b8
Merge pull request #45748 from xeji/p/nfs-232
...
nfs-utils: 2.1.1 -> 2.3.2, integrate libnfsidmap
2018-08-31 14:23:56 +02:00
チルノ
17564e0ed9
nixos/zeronet: init ( #44842 )
2018-08-31 11:40:23 +01:00
Sarah Brofeldt
bb321a2624
Merge pull request #45811 from Nadrieril/fix-usbguard-auditfile
...
nixos/usbguard: ensure the audit log file can be created
nixos/usbguard: disable debug output
2018-08-31 11:40:13 +02:00
Franz Pletz
1cc916b5b2
Merge pull request #45810 from vincentbernat/fix/nginx-stapling
...
nixos/nginx: ensure TLS OCSP stapling works out of the box with LE
2018-08-31 07:18:40 +00:00
Jan Tojnar
f0136e4bc8
Merge pull request #45638 from aanderse/incron
...
incron: init at 0.5.12
2018-08-31 06:54:58 +01:00
Aaron Andersen
9b12db6928
changed from forking to simple as recommended by @aszlig
2018-08-31 03:03:04 +00:00
Aaron Andersen
d7d7533c18
changes as per requested by @aszlig
2018-08-31 02:52:49 +00:00
Aaron Andersen
7bc2a0dd64
removed quotes when not needed as suggested by @aszlig
2018-08-31 02:17:38 +00:00
John Ericson
2c2f1e37d4
reewide: Purge all uses stdenv.system
and top-level system
...
It is deprecated and will be removed after 18.09.
2018-08-30 17:20:32 -04:00
Nadrieril
9b9ba8405b
nixos/usbguard: ensure the audit log file can be created
...
Since version 0.7.3, usbguard-daemon won't start if the file cannot be opened.
2018-08-30 21:54:22 +01:00
Nadrieril
08148a746a
nixos/usbguard: disable debug output
2018-08-30 21:54:22 +01:00
Vincent Bernat
1251b34b5b
nixos/nginx: ensure TLS OCSP stapling works out of the box with LE
...
The recommended TLS configuration comes with `ssl_stapling on` and
`ssl_stapling_verify on`. However, this last directive also requires
the use of `ssl_trusted_certificate` to verify the received answer.
When using `enableACME` or similar, we can help the user by providing
the correct value for the directive.
The result can be tested with:
openssl s_client -connect web.example.com:443 -status 2> /dev/null
Without OCSP stapling, we get:
OCSP response: no response sent
After this change, we get:
OCSP Response Data:
OCSP Response Status: successful (0x0)
Response Type: Basic OCSP Response
Version: 1 (0x0)
Responder Id: C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3
Produced At: Aug 30 20:46:00 2018 GMT
2018-08-30 22:47:41 +02:00
Uli Baum
e0ca51c367
nixos/tests/nfs: fix nfs4 client mount path
...
nfs4 exports from a virtual filesystem root,
so the client mount path differs from nfs3
2018-08-30 19:57:39 +02:00
Samuel Dionne-Riel
aa0556415b
Merge pull request #45779 from grahamc/bump-nix-version
...
Nix minimal version: 1.11 -> 2.0
2018-08-30 11:39:18 -04:00
Jan Tojnar
8a8056c302
Merge pull request #45058 from michaelpj/imp/freedesktop-modules
...
freedesktop modules: init
2018-08-30 16:14:35 +01:00
Graham Christensen
18f9539655
nixos docs: add release notes for nix 2.0 requiremnt bump
2018-08-30 08:52:43 -04:00
Bjørn Forsman
ee56a2cc19
treewide: fix typo: asumed -> assumed
2018-08-30 10:19:20 +02:00
Johannes Lötzsch
bb08d1c13f
nixos/zabbix: fix initial database creation ( #45750 )
...
without this fix the database setup fails with „could not connect to database postgres: FATAL: role "root" does not exist“
2018-08-30 08:25:13 +01:00
Graham Christensen
a141b3aad8
Merge pull request #33686 from samueldr/artwork/iso
...
(Installation media) Bootloader artwork refresh
2018-08-29 15:31:13 -04:00
Nikolay Amiantov
69407cb013
firewall service: respect marks in rpfilter ( #39054 )
...
This allows one to add rules which change a packet's routing table:
iptables -t raw -I PREROUTING 1 -m set --match-set myset src -j MARK --set-mark 2
ip rule add fwmark 2 table 1 priority 1000
ip route add default dev wg0 table 1
to the beginning of raw table PREROUTING chain, and still have rpfilter.
2018-08-29 20:50:53 +02:00
xeji
70b3ac8378
nixos/tests/i3wm: prevent non-deterministic failure ( #45759 )
...
Test failed sporadically on Hydra, probably due to timing issues.
These changes should make that less likely to occur.
2018-08-29 19:38:35 +02:00
xeji
ff6a61ad1b
nixos/tests/mesos: fix test ( #45758 )
...
fallout from 39e678e24e
:
dockerTools.buildImage no longer applies default tag "latest"
2018-08-29 19:38:00 +02:00
Brian Olsen
9540b1c535
nixos/tests: Set DefaultTimeoutStartSec very high ( #44916 )
...
DefaultTimeoutStartSec is normally set to 90 seconds and works fine. But
when running NixOS tests on a very slow machine (like a VM without
nested virtualisation support) this default is to low and causes
systemd units to fail spuriously. One symptom of this issue are tests
at times failing with "timed out waiting for the VM to connect".
Since the VM connect timeout is 300 seconds I also set
DefaultTimeoutStartSec to this which is ridiculously high.
2018-08-29 12:12:12 +02:00
Samuel Dionne-Riel
01259ef98f
nixos/grub: Uses the new artwork as the default option.
...
This also includes a set of defaults *for this option*, where when not
used, other saner defaults are used.
2018-08-29 00:04:58 -04:00
Samuel Dionne-Riel
e8406f937e
nixos/grub: Adds background color and mode options
...
The background color option is self-explanatory.
The mode is either `normal` or `stretch`, they are as defined by GRUB,
where normal will put the image in the top-left corner of the menu, and
stretch is the default, where it stretches the image without
consideration for the aspect ratio.
* https://www.gnu.org/software/grub/manual/grub/grub.html#background_005fimage
2018-08-29 00:04:58 -04:00
Samuel Dionne-Riel
bc5b26b4ab
Reviews use of old nixos wallpaper to use one with the new logo.
...
The wallpaper used is *structurally compatible* with the other one,
meaning that the logo is at the same location, and not bigger.
It has one drawback: the logo is brighter, which clashes with the grub
usage. This is to be fixed with new options in grub.
2018-08-29 00:04:58 -04:00
Aaron Andersen
d9943e6bba
added option to specify which packages are available to the system incrontab
...
recommendation by @jtojnar and @maurer
2018-08-29 00:43:28 +00:00
Aaron Andersen
3d1091eb5b
added a check to make sure a situation where a defined configuration wouldn't be unused as per recommended by @maurer
2018-08-28 23:50:55 +00:00
Ben Wolsieffer
442681cc2a
nixos/networkd: fix range assertions on 32 bit Nix
2018-08-28 19:31:10 -04:00
Dennis Gosnell
7d23ffb736
virtualbox: Change the virtualbox tests to not build the unfree tests by default. ( #45415 )
2018-08-28 22:28:47 +02:00
Matt McHenry
94a906b59a
systemd: ensure fsck Requires/After links are created in mount units
...
systemd-fsck-generator only produces these lines if it can find the
necessary fsck executable in its PATH.
fixes #29139 .
2018-08-28 17:12:49 +02:00
Tuomas Tynkkynen
69b4f427b6
nixos/zabbix-agent: Make the Zabbix package user-configurable
2018-08-28 17:43:12 +03:00
Eelco Dolstra
c251ec691a
virtualization.growPartition -> virtualisation.growPartition
...
There never was a 'virtualization.growPartition'. This got messed up
in eddf30cc93
.
Issue #36590 .
2018-08-28 14:24:39 +02:00
Jörg Thalheim
6a0a12a921
Merge pull request #45659 from vincentbernat/fix/nginx-gzip
...
Small nginx tweaks
2018-08-28 09:35:58 +01:00
Aaron Andersen
b77f38c3cd
added a comment about the PATH variable under which incrontab commands will run
2018-08-27 21:31:55 +00:00
Aaron Andersen
7840d00532
clarified the descriptions of the allow and deny options
2018-08-27 21:15:03 +00:00
Aaron Andersen
fc1f33bc2c
fixed issue with system jobs
2018-08-27 15:23:19 +00:00
Jörg Thalheim
a6ced42c60
Merge pull request #44990 from Ma27/reload-user-units-during-activation
...
nixos/switch-to-configuration: reload user units
2018-08-27 11:12:42 +01:00
Jörg Thalheim
831ecca60f
Merge pull request #45281 from Gerschtli/zsh-completion
...
nixos/zsh: Adds enableGlobalCompInit option
2018-08-27 10:45:29 +01:00
Jörg Thalheim
4e365aa453
nixos/zsh: make enableGlobalCompInit description less ambiguous
2018-08-27 10:43:31 +01:00
Vincent Bernat
bd075eb914
nginx: add more gzipped MIME types
...
The additions are:
- image/svg+xml for SVG images
- application/atom+xml for Atom feeds
These types are also present in mime.types. For better readability,
the list is sorted and formatted with one type per line.
2018-08-26 21:48:55 +02:00
Vincent Bernat
06a5fb2ada
nginx: use a compression level of 5 in recommended configuration
...
While there is little gain of space to use a compression level of 9,
the CPU usage is significant. Many experiments point to use something
between 4 and 6. For example:
- https://mjanja.ch/2015/03/finding-the-nginx-gzip_comp_level-sweet-spot/
- 3bda5b93ed/nginx.conf (L93)
2018-08-26 21:43:34 +02:00
Jörg Thalheim
a78b364ed4
Merge pull request #44890 from dywedir/iwd
...
iwd: 0.4 -> 0.7
2018-08-26 17:25:42 +01:00
Jörg Thalheim
b7d7e20b3d
Merge pull request #45647 from xeji/p/netdata-test
...
nixos/tests/netdata: fix non-deterministic failure
2018-08-26 13:50:10 +01:00
Jörg Thalheim
b1aa9cbdbf
Merge pull request #45649 from xeji/p/networking-tests
...
nixos/tests/networking: fix routes and virtual tests
2018-08-26 13:45:55 +01:00
Uli Baum
3f8756ce10
nixos/tests/networking: fix "virtual" tests
...
`ip route` now displays extended tun attributes, so the expected
output of this test changed.
Upstream change: https://git.kernel.org/pub/scm/network/iproute2/iproute2.git/commit/?id=118eda77d6602616bc523a17ee45171e879d1818
2018-08-26 14:24:07 +02:00
Uli Baum
f021702d21
nixos/tests/networking: fix routes tests
...
The output format of `ip route` changed, it now explicitly
shows "proto static" for static routes.
2018-08-26 14:15:15 +02:00
Uli Baum
a44469d7b6
nixos/tests/netdata: fix non-deterministic failure
...
The test sporadically failed on hydra when a request was made
before the service was actually listening on its port.
Explicitly wait for the port to open.
2018-08-26 13:38:58 +02:00
Augustin Borsu
4d3ce5ca36
nixos/jupyter: init service
2018-08-26 12:00:54 +02:00
xeji
3050406388
nixos/tests/matrix-synapse: fix test ( #45596 )
...
Since matrix-synapse 0.33.0 underscores in server names are rejected
by server name validation, causing the test to fail:
valueError: Server name 'server_sqlite' contains invalid characters
Relevant upstream change:
546bc9e28b
2018-08-26 10:38:52 +02:00
Bas van Dijk
a144c798e5
Merge pull request #44340 from shmish111/es-curator
...
nixos/curator: init elasticsearch curator
2018-08-26 01:33:34 +02:00
xeji
b2dc75cd03
Merge pull request #43736 from volth/patch-208
...
qemu: 2.12.1 -> 3.0.0
2018-08-26 01:28:12 +02:00
Aaron Andersen
fc03a9f5b7
initial work on incron service
2018-08-25 18:08:24 -04:00
Bas van Dijk
228705fc33
elasticsearch-curator: add note to the NixOS release notes
2018-08-25 18:59:32 +02:00
Bas van Dijk
241377ee76
nixos/tests/elk.nix: make sure the test doesn't wait for too long on elasticsearch-curator
2018-08-25 18:53:10 +02:00
Bas van Dijk
32200033a6
elasticsearch-curator: include the module in the module-list & fix bug
2018-08-25 18:53:10 +02:00
David Smith
842000566b
elasticsearch-curator: add test
2018-08-25 18:53:10 +02:00
David Smith
2ec33f527b
elasticsearch-curator: don't need to add enable to elasticsearch-curator service
2018-08-25 18:53:10 +02:00
David Smith
3744467589
nixos/curator: init elasticsearch curator
...
https://www.elastic.co/guide/en/elasticsearch/client/curator/5.5/index.html
2018-08-25 18:53:10 +02:00
Bas van Dijk
7d04961c95
Merge pull request #44389 from Mic92/es6
...
elasticsearch: use 6.x as default version, remove unsupported releases
2018-08-25 17:04:07 +02:00
Uli Baum
268bb4ea3c
nixos/tests/munin: fix non-deterministic failure
...
- wait for node to listen before starting munin-cron
- increase timeout for munin-cron startup
- disable a failing plugin to remove irrelevant error message
2018-08-25 14:27:41 +02:00
Vladyslav Mykhailichenko
d73fd69952
iwd: 0.4 -> 0.7
2018-08-25 15:26:52 +03:00
adisbladis
dff43f10f6
Merge pull request #45608 from etu/fix-gitea-locale-updates
...
nixos/gitea: Symlink gitea locales to match running gitea version
2018-08-25 15:25:27 +08:00
Elis Hirwing
a098cc98d9
nixos/gitea: Symlink gitea locales to match running gitea version
...
This prevents issues when gitea adds new locales etc. And if they
change locale values in future versions. Or if you rollback to a
previous version of gitea it might be a good idea to use the previous
locale files.
2018-08-25 09:19:53 +02:00
Eric Wolf
7f8b1dd32f
systemd: added groups kvm, render
...
they need to exist according to the README of systemd
2018-08-25 05:18:53 +03:00
Sarah Brofeldt
8f61e96c1e
nixos/datadog-agent: Fix type of use_dogstatsd ( #45587 )
2018-08-25 00:18:59 +02:00
Samuel Dionne-Riel
41e7de42de
Use a themed grub for the installer image
...
This replaces systemd-boot with grub, it is at feature parity, as in it
can do everything systemd-boot did in the previous commit.
2018-08-24 13:04:56 -04:00
Samuel Dionne-Riel
2f7d9c9f78
Adds refind to the installer image.
...
This is a 277K (as of right now) addition that can greatly help in some
last recourse scenarios. The specific rEFInd setup will not be able to
boot the installer image, but this is not why it has been added. It has
been added to make use of its volumes scanning capabilities to boot
existing EFI images on the target computer, which is sometimes necessary
with buggy EFI. While is isn't NixOS's job to fix buggy EFI, shipping
this small bit with the installer will help the unlucky few.
Example scenario: two wildly different EFI implementation I have
encountered have fatal flaws in which they sometimes will lose all the
settings, this includes boot configuration. This is compounded by the
fact that the two specific and distinct implementation do not allow
manually adding ESP paths from their interface. The only recourse is to
let the EFI boot the default paths, EFI/boot/boot{platform}.efi, which
is not a default location used by the NixOS bootloaders. rEFInd is able
to scan the volumes and detect the existing efi bootloaders, and boot
them successfully.
2018-08-24 13:04:56 -04:00
Samuel Dionne-Riel
853475fed7
Fixes isolinux configuration for new artwork.
2018-08-24 13:04:56 -04:00
Uli Baum
672a0ebd80
nixos/tests/wordpress: fix test
...
- explicitly add dbHost to fix test
- remove unnecessary options that are set by default anyway
2018-08-24 15:48:39 +02:00
Bas van Dijk
551fec4467
Merge branch 'master' into es6
2018-08-23 23:41:27 +02:00
Ryan Mulligan
5c5baaf17d
treewide: remove mailing list references
2018-08-23 09:24:44 -07:00
volth
d4ef7c6772
usb-storage -> uas
...
Following up https://github.com/NixOS/nixpkgs/pull/23665
Bootable USB-drives are not limited to ISO-images, there can be "normal" MBR/GPT-partitioned disk connected via USB-rack.
Also, "uas" implies "usb-storage", so there is no need to mention both.
2018-08-23 01:42:34 +00:00
Samuel Dionne-Riel
05310e3172
Merge pull request #44919 from Vodurden/init-undervolt
...
undervolt: init at 0.2.8
2018-08-22 10:13:55 -04:00
Sarah Brofeldt
4c6171c173
nixos/dhcpcd: Wait for devices to settle
2018-08-22 00:20:28 +02:00
Ben Wolsieffer
6897945879
nixos/networkd: replace range with assertRange
2018-08-22 00:11:14 +02:00
xeji
d9e5447e7f
Merge pull request #45405 from NixOS/nixos-netboot-dedup
...
nixos/netboot: Remove redundant setting
2018-08-21 23:24:27 +02:00
Sarah Brofeldt
f8306941b7
Merge pull request #45441 from lopsided98/cfssl-user-fix
...
nixos/cfssl: don't create user/group unless service is enabled
2018-08-21 22:42:29 +02:00
Ben Wolsieffer
c6191c8abf
nixos/cfssl: don't create user/group unless service is enabled
2018-08-21 16:24:31 -04:00
Robert Schütz
33be3c4630
home-assistant: 0.75.2 -> 0.76.1
...
Also simplify the way overrides are defined for better readability
and use the opportunity to introduce a packageOverrides option.
2018-08-21 19:26:54 +02:00
Samuel Dionne-Riel
73d348c8eb
Merge pull request #45215 from srhb/no-password-install
...
nixos/doc: New installer note on unattended installs
2018-08-21 10:25:08 -04:00
Michael Raskin
980cbff93c
Merge pull request #45353 from aanderse/redmine
...
redmine: 2.5.2 -> 3.4.6
2018-08-21 14:04:02 +00:00
Will Fancher
f0957b9477
sd-image: Fix cross compiling
2018-08-21 14:05:23 +03:00
Will Fancher
47d2f92a05
make-ext4-fs: Fix cross compiling
2018-08-21 14:05:23 +03:00
volth
341250fa10
qemu: 2.12.1 -> 3.0.0
2018-08-20 22:02:02 +00:00
John Ericson
85cbf2e6e7
nixos/netboot: Remove redundant setting
...
@volth tells me that is the default for `system.boot.loader.kernelFile` anyways.
2018-08-20 16:52:24 -04:00
Joachim F
69d3bdfa16
Merge pull request #44631 from dasJ/terraria
...
nixos/terraria: Wait for daemon to stop
2018-08-20 20:23:34 +00:00
Janne Heß
943786eccf
nixos/terraria: Wait for daemon to stop
2018-08-20 21:41:29 +02:00
John Ericson
7d85ade0cc
treewide: Purge stdenv.platform
and top-level platform
...
Progress towards #27069
2018-08-20 15:22:46 -04:00
John Ericson
f0d6e22b7f
Merge pull request #45397 from volth/patch-233
...
$toplevel/system: buildPlatform.system -> hostPlatform.system
2018-08-20 14:36:13 -04:00
volth
72f5078beb
top-level.nix: stdenv.platform -> stdenv.hostPlatform.platform
...
because stdenv.platform is stdenv.buildPlatform.platform
2018-08-20 18:20:57 +00:00
volth
6efaa88fcc
$toplevel/system: buildPlatform.system -> hostPlatform.system
2018-08-20 18:12:13 +00:00
Jake Woods
4142020e45
nixos/undervolt: adding undervolt module
...
We want to be able to configure persistent undervolting
in the NixOS configuration
2018-08-20 21:01:19 +10:00
Michael Peyton Jones
854ebed789
system-path: fix default option value
2018-08-20 09:23:11 +01:00
Aaron Andersen
c93c0f3ae4
removed some local development stuff
2018-08-19 16:41:49 -04:00
Aaron Andersen
bb7568daf7
reworked the redmine service
...
added some security features like database.passwordFile
2018-08-19 16:29:44 -04:00