BoomMicrophone/nixpkgs-suyu
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
360560 commits 1 branch 0 tags 3.8 GiB
Commit graph

26083 commits

Author SHA1 Message Date
Martin Weinelt
1090fcb7c9
nixos/home-assistant: allow null config value 
While the documentation said to set this to null, in case an imperative
config was supposed to be used, this was not possible with the typing in
place.
 2022-02-22 12:04:04 +01:00
Guillaume Girol
4846d948b4
Merge pull request #156601 from symphorien/miniflux-password 
nixos/miniflux: no cleartext password in the store
 2022-02-21 21:18:36 +00:00
markuskowa
0fca9900b1
Merge pull request #157278 from ck3d/default-systemd-nspawn 
nixos: Switch to default systemd-nspawn behaviour
 2022-02-21 21:56:07 +01:00
Domen Kožar
05afa7d0eb
Merge pull request #159662 from polykernel/nix-fix-substituters-merging-order 
nixos/nix-daemon: Fix merging order for substituters option
 2022-02-21 07:24:32 +01:00
Jan Tojnar
f9e65e44e5
Merge pull request #160891 from jtojnar/gnome-iso-shortcuts 
installation-cd-graphical-gnome: add useful shortcuts to the dash
 2022-02-21 07:00:49 +01:00
Sandro
6335f75903
Merge pull request #156907 from Pamplemousse/taskserver 2022-02-20 21:21:45 +01:00
Sandro
5a57844cf6
Merge pull request #158592 from SuperSandro2000/nginx-nixos 2022-02-20 16:32:09 +01:00
Maximilian Bosch
4fe5771eee
Merge pull request #154694 from winterqt/nixos-test-log-doc 
nixos/doc: fix mention of reading test logs
 2022-02-20 15:21:30 +01:00
Robert Hensing
b550b4b6f8 nixos/nix-daemon: Ensure continued availability of daemon socket 
As `nix-daemon.service` does not make use of `ExecStop`, we prefer
to keep the socket up and available. This is important for machines
that run Nix-based services, such as automated build, test, and deploy
services, that expect the daemon socket to be available at all times.

See committed inline comment for further explanation.
 2022-02-20 13:44:13 +01:00
Vladyslav M
eb0dda98dc nixos/vaultwarden: fix evaluation 2022-02-20 14:37:20 +02:00
Maximilian Bosch
0b118df038
Merge pull request #160936 from Ma27/fix-nixos-run-vms 
nixos-build-vms(8): `$out/bin/nixos-run-vms` should non-interactively start VMs
 2022-02-20 11:55:53 +01:00
Maciej Krüger
7feed2c0be
Merge pull request #160917 from pingiun/patch-12 2022-02-20 09:57:45 +01:00
Rhys Davies
32a44aa069 nixos/xone: init 2022-02-20 18:25:12 +13:00
Rhys Davies
fb69e1763e xow_dongle-firmware: init at 2017-07 2022-02-20 18:25:06 +13:00
Sandro
d8b23eefbc
Merge pull request #159859 from tournemire/dino-update 2022-02-20 00:27:38 +01:00
Alyssa Ross
8388c525c3 vpnc: don't produce non-free binaries by default 
As explained in vpnc's Makefile, a vpnc with OpenSSL support is
non-redistributable.  The option to enable OpenSSL support, which is
disabled by default, is even called OPENSSL_GPL_VIOLATION — something
that was conveniently hidden by the strange way the option was set in
the previous version of this package.
 2022-02-19 22:32:51 +00:00
Alyssa Ross
1176525f87 treewide: remove obsolete kernel version checks 
We don't support Linux kernels older than 4.4 in Nixpkgs.
 2022-02-19 21:09:19 +00:00
Maximilian Bosch
1659bca6b7
nixos-build-vms(8): $out/bin/nixos-run-vms should non-interactively start VMs 
Not entirely sure when it got broken this time, but when creating a VM
network with `nixos-build-vms(8)`, there are should be the following scripts:

* `$out/bin/nixos-test-driver` which drops into an interactive shell to
  interactively perform test steps.
* `$out/bin/nixos-run-vms` which non-interactively starts the VMs from
  the network so that one can manually play around in the VM.

The latter also starts an interactive shell for a while now which means
that it does the exact same thing as `nixos-test-driver` which is not
its purpose.
 2022-02-19 19:43:34 +01:00
K900
e67dd381d3 nixos/pipewire: default to wireplumber 2022-02-19 19:52:55 +03:00
Jelle Besseling
5dd2d74296
eternal-terminal: remove pingiun as maintainer 2022-02-19 17:47:41 +01:00
Aaron Andersen
3ebe6c3491
Merge pull request #160734 from vholer/gh-158802 
nixos/mysqlBackup: set service Type
 2022-02-19 10:58:23 -05:00
Jelle Besseling
29366071a4 nixos/mastodon: add RAILS_ROOT to mastodon-env 2022-02-19 16:42:45 +01:00
Renaud
4ccf58647a
Merge pull request #156224 from B4dM4n/nixos-tests-doh-proxy-rust 
nixos/test/doh-proxy-rust: fix failing check
 2022-02-19 16:31:14 +01:00
Aaron Andersen
63f03d0888
Merge pull request #157259 from bb2020/mbpfan 
nixos/mbpfan: update documentation
 2022-02-19 08:29:57 -05:00
Jan Tojnar
e9cade383c installation-cd-graphical-gnome: add useful shortcuts to the dash 
The live image is primarily used for installation so we should make
link to manual as well as other useful tools front and center,
instead of having them buried in the app drawer.

The default GNOME apps can still be found there when the ISO
is used for demonstration purposes.
 2022-02-19 14:08:32 +01:00
Nikolay Amiantov
6786ceb9af
Merge pull request #159538 from abbradar/ntopng-redis 
ntopng: bump, use a separate user and redis instance
 2022-02-19 15:27:56 +03:00
Nikolay Amiantov
a347d52074 nixos/ntopng: http-port -> httpPort 2022-02-19 14:03:33 +03:00
Nikolay Amiantov
41f4d999ad nixos/ntopng: update user and redis configuration 
New ntopng version supports running as specified user. Create a separate
user for ntopng with a separate Redis instance.

Separate instance is only used for new `system.stateVersion`s to avoid
breaking existing setups. To configure that we add two new options,
`redis.address` and `redis.createInstance`. They can also be used to
specify your own Redis address.
 2022-02-19 14:03:33 +03:00
Christian Kögler
57fc08cfdb nixos: Switch to default systemd-nspawn behaviour 2022-02-19 09:52:37 +01:00
Aaron Andersen
85f873466e
Merge pull request #160611 from jeeger/mediatomb-group-fix 
nixos/mediatomb: make service use group
 2022-02-18 19:49:13 -05:00
Renaud
a632c843a7
Merge pull request #158259 from Yarny0/hylafax 
hylafaxplus: 7.0.4 -> 7.0.5
 2022-02-18 22:17:08 +01:00
Martin Weinelt
88a2ad9746
Merge pull request #157720 from jojosch/mjolnir-update 2022-02-18 21:31:08 +01:00
deltadelta
312f5ca1ce dino: mention update in release notes 2022-02-18 20:36:39 +01:00
Vlastimil Holer
09a6ce91d8
nixos/mysqlBackup: set service Type 
fixes #158802

Sets the mysql backup systemd service type to "oneshot" to ensure the
service is marked as started after the backup script fully proceeds. This
allows to reliably depend on completing of this service by other services.
 2022-02-18 18:35:55 +01:00
Jacek Galowicz
a8b2c90f9f
Merge pull request #160542 from danielfullmer/aarch64-boot-test 
nixos/test-driver: fix regression when using legacy start command
 2022-02-18 17:52:22 +01:00
Aaron Andersen
b3c0344c9d
Merge pull request #156763 from ratsclub/blocky 
nixos/blocky: init
 2022-02-18 11:27:25 -05:00
Jonathan Strickland
2158ae39db
airsonic: fix services.airsonic.listenAddress doc 
(#158421)
* airsonic: fix services.airsonic.listenAddress doc

Co-authored-by: Ted Reed <ted.reed@gmail.com>

* airsonic: new docs for airsonic.listenAddress

Co-authored-by: Ted Reed <ted.reed@gmail.com>

Co-authored-by: Ted Reed <ted.reed@gmail.com>
 2022-02-18 17:16:13 +01:00
Jan Seeger
f1fe11906d nixos/mediatomb: make service use group 
The systemd service for mediatomb did not use the group configuration setting in the service configuration, I added in the group specification.
 2022-02-18 13:19:00 +01:00
Daniel Fullmer
24fb872079 nixos/test-driver: fix regression when using legacy start command 
The aarch64-linux versions of the boot.uefiUsb and boot.uefiCdrom tests
were broken by b0fc9da879.
That commit was a refactor which omitted the qemuBinary option, which was
previously available in the legacy start command. This restores that
option and fixes the tests previously mentioned.
 2022-02-17 18:12:24 -08:00
Janne Heß
dcbacb0f62
Merge pull request #160458 from helsinki-systems/fix/stc-backslashes 
nixos/switch-to-configuration: Fix backslashes in unit names
 2022-02-17 19:08:02 +01:00
Jan Solanti
394c6f7949 nixos/pipewire: use standalone config when no session manger enabled 2022-02-17 17:39:53 +02:00
Jan Solanti
afbb3ca9ef pipewire: 0.3.45 -> 0.3.46 2022-02-17 17:39:31 +02:00
Vladimír Čunát
9d09daa0a9
Merge #157512: nixos/tmp: Fix format of /tmp mount options 2022-02-17 16:26:28 +01:00
Vladimír Čunát
fe78cacdff
Merge #159173: libbpf: 0.6.1 -> 0.7.0, bcc 0.23.0 -> 0.24.0 2022-02-17 13:36:46 +01:00
Janne Heß
3617ecb67f
nixos/switch-to-configuration: Fix backslashes in unit names 
systemd needs this so special characters (like the ones in wireguard
units that appear because they are part of base64) can be escaped using
the \x syntax.

Root of the issue is that `glob()` handles the backslash internally
which is obviously not what we want here.

Also add a test case and fix some perlcritic issues in the subroutine.
 2022-02-17 12:49:45 +01:00
Martin Weinelt
047429df52
nixos/home-assistant: fix package override 
The attributes can be missing on the package, since they're optional, so
catch that by adding empty defaults.
 2022-02-17 00:50:44 +01:00
Nikolay Amiantov
29fd78747a nixos/manual: use system nixpkgs to build pxe image 
The command in example is expected to be run from nixpkgs checkout, but
there's no explanation of this. Let's just use system nixpkgs: most
users will have it just working and those who use git checkouts will
figure it out.
 2022-02-16 22:22:32 +03:00
Olivier Marty
7852ea1596 nixos/matomo: point path.geoip2 outside of the nix store. 
path.geoip2 pointed to the nix store which is read-only. Matomo was
failing to download a geoip2 database. See #64759.
 2022-02-16 22:21:44 +03:00
Pascal Bach
4c999b91a5
Merge pull request #156685 from schnusch/squid 
nixos/squid: add services.squid.proxyAddress
 2022-02-16 19:42:47 +01:00
Sandro
a682f4f6b4
Merge pull request #160233 from truh/jmusicbot_add-package-option 2022-02-16 11:22:05 +01:00
James Landrein
6da3328129 nixos/containerd: fix zfs setting config override 2022-02-16 18:54:59 +10:00
ajs124
31462e501e nixos/virtuoso: drop 2022-02-16 01:01:13 +01:00
Sandro
a6d259faf3
Merge pull request #141650 from 06kellyjac/agate 2022-02-16 00:56:27 +01:00
Jakob Klepp
f28d9be832 nixos/jmusicbot: add option services.jmusicbot.package 2022-02-16 00:43:57 +01:00
Martin Weinelt
32bd0aafab
nixos/tests/home-assistant: test package and components passing 
There are now multiple combinations of how one can pass either
extraPackages or extraComponents. We now test those passed directly to
the package via an override, and those passed indirectly via the module,
that ultimately results in a second override to the package.
 2022-02-15 23:41:52 +01:00
piegames
c1d2042219
home-assistant: clean up preStart 
Co-Authored-By: Martin Weinelt <hexa@darmstadt.ccc.de>
 2022-02-15 23:41:51 +01:00
Martin Weinelt
2f644fd3e6
nixos/home-assistant: add rpi_power component by default on arm 
The rpi_power integration is part of the onboarding flow on Raspberry Pi
SBCs.
 2022-02-15 23:41:51 +01:00
Martin Weinelt
191fb818e6
nixos/tests/home-assistant: test module-based package loading 
Passing psycopg2 for PostgreSQL support in the recorder component is one
of the more popular use cases to pass an extra package.
 2022-02-15 23:41:50 +01:00
Martin Weinelt
918100f48f
nixos/home-assistant: Wait for {mysql,postgresql}.service 
Database provisioning was shown to be racy since adding a recorder test
using PostgreSQL. There is no harm in waiting for these services,
because if they're not available they will be ignored.
 2022-02-15 23:41:50 +01:00
Martin Weinelt
13faa004b6
nixos/home-assistant: add extraPackages option 2022-02-15 23:41:49 +01:00
Martin Weinelt
4b47eaee4d
nixos/tests/home-assistant: test module-based component loading 2022-02-15 23:41:49 +01:00
Martin Weinelt
4a0b964b34
nixos/home-assistant: add extraComponents option 
It simply should not be required to override the package for such a
common use case, especially since the module usually adds another
override on top to inherit extraComponents.
 2022-02-15 23:41:48 +01:00
Martin Weinelt
59a367bcab
nixos/home-assistant: convert to rfc42 style settings 
After this change users with non-declarative configs need to set
`services.home-assistant.config` to an `null`, or their
`configuration.yaml` will be overwritten.

The reason for this is that with rfc42 style defaults the config
attribute set will never be empty by default.
 2022-02-15 23:41:48 +01:00
Martin Weinelt
05640ec19d
nixos/tests/home-assistant: add comments & reformat 2022-02-15 23:15:17 +01:00
Martin Weinelt
9896247fb6
nixos/home-assistant: Wait for network-online.target 
If people take the time to setup network-online.target correctly we
should wait for it. If they don't it's basically the same as
network.target anyway, so no harm done.

Over time I've seen multiple integrations that have dealt badly with
missing network connectivity at startup, this should alleviate further
pains.
 2022-02-15 23:15:17 +01:00
Martin Weinelt
5aabba490e
nixos/home-assistant: update default package example 
The given example is now closer to a sane default people will want to
start with. It also displays the existance of extraComponents, a feature
that will receive more usage with home-assistant warning about
components that have completely migrated away from YAML configuration.
 2022-02-15 23:15:16 +01:00
Martin Weinelt
42c0909848
nixos/home-assistant: move module into home-automation category 
Putting so many things into misc is not great, so let's open up a new
category called home-automation here and now.
 2022-02-15 23:15:09 +01:00
Janne Heß
05e1f8a2c7
Merge pull request #160176 from stigtsp/fix/switch-to-configuration-array-compare 
nixos/switch-to-configuration: avoid Array::Compare dependency
 2022-02-15 20:06:07 +01:00
illustris
19f7856b39 nixos/proxmox-lxc: init 2022-02-15 23:55:03 +05:30
Stig Palmquist
3d713efe41 nixos/switch-to-configuration: avoid Array::Compare dependency 
Replace Array::Compare with a simple function, since Array::Compare
pulls down Module::Build which breaks cross compilation.
 2022-02-15 15:37:37 +01:00
Kevin Cox
9ec2ae338b
Merge pull request #155290 from LunNova/input-remapper 
input-remapper: init at unstable-2022-02-09 (and add nixos module)
 2022-02-15 08:24:54 -05:00
Sarah Brofeldt
87ed82d86c
Merge pull request #159448 from r-ryantm/auto-update/kubernetes 
kubernetes: 1.22.6 -> 1.23.3
 2022-02-15 08:59:44 +01:00
Sarah Brofeldt
152dd4c81d nixos/kubernetes: Update deprecated scheduler opts 
--port and --address have both been deprecated and are nonfunctional
starting with kubernetes 1.23. Use --secure-port and --bind-address
instead. This means that users can no longer rely on the insecure port
for anything, so update the release notes accordingly.
 2022-02-15 08:31:49 +01:00
Victor Freire
6532d3417e nixos/blocky: init 2022-02-14 22:48:32 -03:00
Martin Weinelt
b3d39e3c59
Merge pull request #160037 from lourkeur/cleanup/firewall 2022-02-14 23:39:23 +01:00
Martin Weinelt
4387ecec59
Merge pull request #159696 from r-ryantm/auto-update/prometheus-nextcloud-exporter 2022-02-14 23:22:55 +01:00
Robert Hensing
81302f1518
Merge pull request #159692 from mohe2015/patch-1 
nixos/step-ca: Remove unnecessary passthru.tests
 2022-02-14 22:23:49 +01:00
R. Ryantm
9d798e5103 prometheus-nextcloud-exporter: 0.4.0 -> 0.5.0 2022-02-14 21:49:16 +01:00
Louis Bettens
625412d2bc nixos/firewall: remove dead code 2022-02-14 20:55:25 +01:00
Connor Baker
737e30d3fe hadoop: add aarch64 support 
This commit also changes the names of the tests for Hadoop so they use dashes instead of dots,
and makes the default `hadoop` test what would have been `hadoop-all` after the rename.

This change should mean that we're able to run

`nix build github:nixos/nixpkgs/master#nixosTests.hadoop`

which I was unable to do prior to this change.
 2022-02-14 08:20:37 -05:00
Martin Weinelt
30b7f827cb
Merge pull request #151812 from alarsyo/paperless-redis-fix 2022-02-14 14:05:49 +01:00
Martin Weinelt
375ec7465f
Merge pull request #158945 from yu-re-ka/feature-gitlab-redis-warning 2022-02-13 23:47:24 +01:00
Moritz Hedtke
9d5aba4ac9
nixos/step-ca: Remove unnecessary passthru.tests 2022-02-13 17:26:48 +01:00
Dominique Martinet
a05f1c9f93 nixos tests: add logrotate test 
make sure the service is enabled by default and works.
 2022-02-13 07:29:40 +09:00
polykernel
34636a8525 nixos/nix-daemon: Fix merging order for substituters option 
The `substituters` option in `nix.settings` uses the order
of the substituters listed to define priority. Prior to https://github.com/NixOS/nixpkgs/pull/139075,
the corresponding option `binaryCaches` is declared in the `nix` namespace,
which is guaranteed to be merged last. However, the order of merging isn't
guaranteed in submodules. This cause definitions to be appended to the default
value instead of prepended, breaking backwards compatibility as reported in https://github.com/NixOS/nixpkgs/issues/158356.

The way this is addressed in the module system is with order priorities via
`mkOrder` and sorting definitions before merging. This PR restores the previous
behavior by setting a higher priority to the substituters option defined internally,
thus all definitions with default priority will be merged before it. This was chosen because
the `mkRenamedOption` function does not preserve order priority so users using legacy options do not have
precise control on placement.

This change should suffice for simple configuration, but further revision to the module system
is needed for to make various `mk*` functions  aware of order priorities.
 2022-02-12 17:15:31 -05:00
tomberek
97ba711edb
Merge pull request #159438 from ju1m/sourcehut 
sourcehut: fix and update
 2022-02-12 16:35:28 -05:00
Janne Heß
828aab5608
Merge pull request #159014 from jian-lin/fix-nix.buildMachines.mandatoryFeatures 2022-02-12 22:20:22 +01:00
Mario Rodas
bdaf97830d
Merge pull request #159025 from jian-lin/undervolt 
nixos/undervolt: respect services.undervolt.package
 2022-02-12 15:07:27 -05:00
Zhaofeng Li
1781d283f3 sd-image-aarch64: Enable arm_boost for Pi 4 
This is effective on the Pi 400 and on newer board revisions of the
Pi 4B. From the official documentation:

> New Raspberry Pi OS images from Bullseye onwards come with
> this setting by default.

<https://www.raspberrypi.com/documentation/computers/config_txt.html>
 2022-02-12 00:04:48 -08:00
Zhaofeng Li
963f011f16 sd-image-aarch64.nix: Add config for Pi Zero 2 W 2022-02-12 00:04:48 -08:00
Julien Moutinho
8f78d31ac1 nixos/sourcehut: test gitsrht 2022-02-12 02:11:34 +01:00
Janne Heß
fa3c756621
Merge pull request #157329 from helsinki-systems/feat/nixos-reload-triggers 
nixos/systemd: Implement reload triggers
 2022-02-11 23:59:26 +01:00
ajs124
3a5835bb68
Merge pull request #159095 from helsinki-systems/drop/nixos-gogoclient 
nixos/gogoclient: drop
 2022-02-11 13:31:45 +01:00
Dominique Martinet
c132bfaa19 logrotate: prepend extraConfig instead of postpending it 
logrotate global options only affect rules following them - as such,
services.logrotate.extraConfig being added last makes the option only
useful for adding new paths but not for setting global options (e.g.
'dateext' so all logs are rotate with a date suffix).

Moving this first solves this problem, and we can then use this instead
of default paths config to append missingok/notifempty.
 2022-02-11 21:07:37 +09:00
Dominique Martinet
c7618fbd9b nginx: add logrotate rule for nginx logs 2022-02-11 21:07:37 +09:00
Dominique Martinet
61c70dbc97 logrotate: default to enable if any rule is active 2022-02-11 21:07:37 +09:00
Dominique Martinet
9917af7fe0 logrotate: move wtmp/btmp rules to systemd 
wtmp and btmp are created by systemd, so the rules are more appropriate there.

They can be disabled explicitly with something like
  services.ogrotate.paths = {
    "/var/log/btmp".enable = false;
    "/var/log/wtmp".enable = false;
  };
if required.
 2022-02-11 20:52:40 +09:00
Dominique Martinet
824d26d395 bcc: 0.23.0 -> 0.24.0 
Also add an extra test in nixos/tests/bpf.nix for BTF usage in bpftrace

Co-authored-by: Jörg Thalheim <joerg@thalheim.io>
 2022-02-11 20:37:39 +09:00
pacien
4a198fea2c nixos/rmfakecloud: init module 
Co-authored-by: Roosemberth Palacios
 2022-02-11 11:36:23 +01:00
ajs124
0742020639 nixos/gogoclient: drop 2022-02-11 01:31:09 +01:00
linj
c9013da695 nixos/undervolt: respect services.undervolt.package 
This patch also removes useless systemd.services.undervolt.path.

Fixes #156668
 2022-02-11 03:57:02 +08:00
linj
0bac44db62 nixos/nix-daemon: readd mandatoryFeatures to final supportedFeatures 
In #139075, mandatoryFeatures was removed from the generated
supportedFeatures, which breaks backward compatibility and is
different from what the description of supportedFeatures says.
 2022-02-11 02:55:17 +08:00
Jonathan Ringer
12fd8a77e1
Merge remote-tracking branch 'origin/master' into staging-next 
Conflicts:
	pkgs/top-level/aliases.nix
 2022-02-10 09:21:09 -08:00
Luna Nova
91c7b73707
nixos/input-remapper: add release note 2022-02-10 08:55:23 -08:00
Luna Nova
93d8783ad6
nixos/input-remapper: init 2022-02-10 08:55:03 -08:00
Artturi
d1ced017c0
Merge pull request #146642 from Artturin/nixosgenerateconfig2 2022-02-10 17:12:16 +02:00
Artturi
e35d057ea5
Merge pull request #151123 from Artturin/havegedupdate 2022-02-10 17:10:20 +02:00
Yureka
51285d4c11
nixos/gitlab: fix redis deprecation warning 2022-02-10 12:19:48 +01:00
Johannes Schleifenbaum
ff9aa77c1f
matrix-synapse-plugins.matrix-synapse-mjolnir-antispam: 1.2.1 -> 1.3.1 2022-02-10 10:50:41 +01:00
Bobby Rong
4118c7ad03
Merge pull request #158787: Pantheon: enable packagekit and drop appcenter patch 2022-02-10 12:56:27 +08:00
Jonathan Ringer
39669ea2b6
Merge remote-tracking branch 'origin/master' into staging-next 
Conflicts:
	pkgs/top-level/aliases.nix
 2022-02-09 19:58:40 -08:00
Sandro
6a4dea5ffc
Merge pull request #158178 from j0hax/retroarch-wm 2022-02-10 01:23:37 +01:00
Martin Weinelt
607285bc0e
Merge pull request #156873 from mweinelt/wine 2022-02-09 23:55:33 +01:00
Michael Reilly
787219edaf nixos/modules/misc/wordlist: init 
Addresses #16545.  Allows for user defined environment variables that
hold paths to wordlists.  This is to allow for easy access to wordlists
for users and scripts, (in other distributions a convenient wordlist is
typically found in /usr/share/dict/words or similar).  The default
wordlist is the one found in scowl, for no other reason than that's the
one that was mentioned in the linked issue.

It is possible to specify multiple environment variables as well.  This
is for users who need multiple wordlists (such as multilingual users).
 2022-02-09 14:52:12 -05:00
Janne Heß
8d925cc8db
nixos/doc: Document the activation script 
This may be helpful to new module developers, curious users, and people
who just need a reference without having to look at the implementation
 2022-02-09 20:44:28 +01:00
Artturin
b4adac9ba9 nixos/nixos-generate-config: move dhcpConfig from configuration.nix to hardware-configuration.nix 2022-02-09 19:35:19 +02:00
Artturin
aaf13bb3bd nixos/nixos-generate-config: fix proram path replacements 
btrfs-progs was made optional in 2019 c01ea27ce3
because it didn't cross-compile. it now does
 2022-02-09 18:38:17 +02:00
Artturin
b2eacd1595 nixos/tools: add more keymap options to configuration template 2022-02-09 18:38:17 +02:00
Artturin
801dca549f nixos/tools: add networkmanager to configuration template 2022-02-09 18:38:17 +02:00
Janne Heß
08cd8ab8b6
nixos/switch-to-configuration: Don't stop swaps in dry-activate 2022-02-09 15:14:38 +01:00
Janne Heß
1c1f8c59e1
nixos/switch-test: Test the unit file parser and reloads 2022-02-09 15:14:38 +01:00
Janne Heß
b5b3ee4f78
nixos/systemd: Add reloadTriggers to services 2022-02-09 15:14:37 +01:00
Bobby Rong
ea611d2e17
nixos/pantheon: mention latest appcenter and packagekit changes in manual 2022-02-09 22:11:10 +08:00
Janne Heß
b9bb1de341
nixos/switch-to-configuration: Implement reload support 
This is accomplished by comparing the hashes that the unit files
contain. By filtering for a special key `X-Reload-Triggers` in the
`[Unit]` section, we can differentiate between reloads and restarts.

Since activation scripts can request reloads of units as well, more
checking of this behaviour is implemented. If a unit is to be restarted,
it's never reloaded as well which would make no sense.

Also removes a useless subroutine and perl dependencies that are
nowadays handled by the propagated build inputs feature of
`perl.withPackages`.
 2022-02-09 14:31:45 +01:00
Janne Heß
78db7b6529
nixos/switch-to-configuration: Allow passing parsed unit contents 2022-02-09 14:31:44 +01:00
Janne Heß
d729cc8a53
nixos/switch-to-configuration: Skip [Install] section 2022-02-09 14:31:44 +01:00
Bobby Rong
bb357d8203
nixos/pantheon: install appcenter if flatpak is enabled 
This is how nixos/gnome handle gnome-software.
 2022-02-09 21:22:05 +08:00
Bobby Rong
e717c594ab
nixos/pantheon: enable packagekit by default 
Needed for pantheon.appcenter.
 2022-02-09 21:08:19 +08:00
Jörg Thalheim
30d7dbc2be
nixos/rsyncd: fix module eval 2022-02-09 08:21:00 +01:00
Jonathan Ringer
5df08e00cd
Merge remote-tracking branch 'origin/master' into staging-next 
Conflicts:
	pkgs/development/python-modules/opensimplex/default.nix
	pkgs/development/python-modules/pygame-gui/default.nix
	pkgs/top-level/aliases.nix
	pkgs/top-level/python-aliases.nix
 2022-02-08 21:19:24 -08:00
Matthew Bauer
7ca33e5fcf
Merge pull request #94055 from matthewbauer/flakes-packagekit 
packagekit: update to flakes branch
 2022-02-08 20:13:22 -06:00
Matthew Bauer
92a6ad8626 packagekit: use Nix backend 
Fixes https://github.com/NixOS/nixpkgs/issues/21230

Use Nix backend for packagekit. Updates to version with my Nix backend
for PackageKit.
 2022-02-08 19:24:04 -06:00
ajs124
3ecddf791d nixos/shellinabox: drop 2022-02-08 18:59:47 -05:00
Bernardo Meurer
363ef08971
Merge pull request #155162 from ZenithalHourlyRate/command-not-found-interactive 
command-not-found: add interactive option for auto run
 2022-02-08 15:30:05 -08:00
Bernardo Meurer
ab98adb9a6
Merge pull request #155158 from ZenithalHourlyRate/command-not-found-multiple-choice-interactive 
command-not-found: make NIX_AUTO_RUN work when multiple choices
 2022-02-08 15:29:49 -08:00
Johannes Arnold
d282f448ff nixos/retroarch: add RetroArch as a desktop session 2022-02-08 20:52:02 +01:00
pennae
c4a6784457
Merge pull request #158611 from Xe/patch-4 
nixos/cloud-init: fix trivial error that prevents deploy
 2022-02-08 13:41:36 +00:00
Xe Iaso
1a417bc1dd nixos/cloud-init: fix trivial error that prevents deploy 2022-02-08 08:15:27 -05:00
sternenseemann
8c27f7a2bd haskellPackages.ghcWithPackages: throw on old override interface 
Adding a fake override function via passthru will at least give users of
the old override interface a more helpful error message. Additionally we
also document the changes in the changelog.
 2022-02-08 13:28:30 +01:00
Luke Granger-Brown
1d36731a2a
Merge pull request #158578 from delroth/iptables-docs 
nixos/firewall: make 'networking.firewall.package' example less confusing
 2022-02-08 12:11:59 +00:00
Jörg Thalheim
82f2d81b22
Merge pull request #157839 from abbradar/stage-1-modprobe 
Modprobe options in stage-1
 2022-02-08 11:43:31 +00:00
Sandro Jäckel
ae66e2d5ec
treewide: use configured nginx package 2022-02-08 12:13:30 +01:00
Pierre Bourdon
833bcbc844
nixos/firewall: make 'networking.firewall.package' example less confusing 
pkgs.iptables-nftables-compat == pkgs.iptables (default) since cf9ac2b5.
 2022-02-08 10:31:09 +01:00
zowoq
5e7ec2c9ad nixos/doc/2205: add note for go_1_17 vendorSha256 2022-02-07 18:59:53 -08:00
David Lewis
26ca9776aa nixos/autorandr: added new KillMode 
Prevents Udev Rule from killing processes started by autorandr
 2022-02-07 18:53:22 -08:00
github-actions[bot]
335510eb84
Merge master into staging-next 2022-02-08 00:01:49 +00:00
Tom Fitzhenry
2211a7cf74 programs/calls: enable dconf 
GNOME Calls relies on dconf. Evidence supporting this claim:
https://packages.debian.org/sid/gnome-calls depends on
dconf-gsettings-backend.

Discussed in
https://github.com/NixOS/nixpkgs/pull/136537#issuecomment-1009903194 :
 2022-02-07 22:50:36 +01:00
Luke Granger-Brown
a17a7f73cb
Merge pull request #158384 from afreakk/plex-remove-unused-option 
plex: remove unused option `managePlugins`
 2022-02-07 19:52:39 +00:00
github-actions[bot]
9cdb39f965
Merge master into staging-next 2022-02-07 18:01:27 +00:00
06kellyjac
354b240782 nixos/agate: add nixos test 2022-02-07 16:03:58 +00:00
06kellyjac
0a6d22c6c3 nixos/agate: init 2022-02-07 16:03:44 +00:00
gin66
cb648f080d
wg-netmanager: init at 0.3.6 (#155149) 
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
 2022-02-07 16:46:51 +01:00
Aaron Andersen
e85182268d
Merge pull request #158167 from aanderse/nixos/cfssl 
nixos/cfssl: use systemd StateDirectory to provision the data directory
 2022-02-07 08:02:52 -05:00
github-actions[bot]
4e2cf99754
Merge master into staging-next 2022-02-07 12:01:12 +00:00
afreakk
ff85de6ce8 plex: remove unused option managePlugins 2022-02-07 10:57:40 +01:00
markuskowa
768dd74738
Merge pull request #140891 from markuskowa/os-moosefs 
nixos: init moosefs module and test
 2022-02-07 10:48:33 +01:00
Jonathan Ringer
46fd0afcb3
Merge remote-tracking branch 'origin/master' into staging-next 
Conflicts:
	pkgs/development/python-modules/pysdl2/default.nix
	pkgs/top-level/aliases.nix
 2022-02-06 18:36:59 -08:00
Sandro
5560c824c7
Merge pull request #157761 from tp-la/amazon-ec2-utils 2022-02-07 01:53:35 +01:00
Sandro
7090608b3f
Merge pull request #136521 from pacien/nixos-upower-config-time-unit 2022-02-07 01:29:46 +01:00
Sandro
255417b8f4
Merge pull request #157146 from illustris/cloudinit 2022-02-07 01:27:21 +01:00
Kevin Cox
c2038731e4
Merge pull request #158348 from schnusch/ipfs 
nixos/ipfs: use ipfs config replace
 2022-02-06 18:11:36 -05:00
Robert Hensing
8403e02a5d
Merge pull request #126769 from ncfavier/nixosSystem-lib 
nixos: move default module location logic to `eval-config.nix`
 2022-02-06 22:49:17 +01:00
schnusch
97f809dc87 nixos/ipfs: use ipfs config replace 2022-02-06 21:42:56 +01:00
Jonathan Ringer
e680c83323
Merge remote-tracking branch 'origin/master' into staging-next 
Conflicts:
	pkgs/tools/graphics/scrot/default.nix
 2022-02-06 10:36:30 -08:00
github-actions[bot]
45efe10574
Merge master into staging-next 2022-02-06 18:01:09 +00:00
afreakk
f4cadcfcae plex: extraPlugins example 2022-02-06 18:35:58 +01:00
Vladimír Čunát
f0f251d90a
Merge #157109: github-runner: 2.286.0 -> 2.287.1 2022-02-06 17:19:59 +01:00
Robert Hensing
189f73465b
Merge pull request #158327 from babbaj/virtio-keyboard-option 
nixos/qemu-vm: Create option for virtio-keyboard device
 2022-02-06 16:37:00 +01:00
Robert Hensing
6be11a84aa
Merge pull request #155892 from hercules-ci/nixos-etc-unit-test 
nixos: Refactor to allow `etc` unit test
 2022-02-06 16:12:25 +01:00
github-actions[bot]
9b66f3684b
Merge master into staging-next 2022-02-06 12:01:21 +00:00
Florian Klink
def482e28d
Merge pull request #150837 from abbradar/google-guest-agent 
Move GCE config to google-guest-agent
 2022-02-06 11:27:27 +01:00
Vladimír Čunát
3dfddd89c6
Merge branch 'master' into staging-next 
Trivial conflict in pkgs/top-level/aliases.nix
 2022-02-06 10:29:49 +01:00
Babbaj
56109be38b
nixos/qemu-vm: Create option for virtio-keyboard device 2022-02-06 01:55:49 -05:00
Aaron Andersen
2d055bb37a nixos/cfssl: minor updates/cleanup 2022-02-05 18:53:35 -05:00
Aaron Andersen
67abfde611 nixos/cfssl: use systemd StateDirectory to provision the data directory 2022-02-05 18:53:28 -05:00
Emery Hemingway
e0fa89109b nixos/yggdrasil: fix radvd example in manual 
The Radvd "AdvDefaultLifetime" option should never be set to 0.
 2022-02-05 23:20:08 +01:00
Robert Hensing
e3cfad0b9e nixos/users: Fix type error 
Fixes what seems to be a programming error that went undetected by
me and @pasqui23

See https://github.com/NixOS/nixpkgs/issues/158279
 2022-02-05 22:38:56 +01:00
davidak
a57a774cfa
Merge pull request #157314 from onny/passwordsafe 
gnome-passwordsafe: rename to gnome-secrets, 5.1 -> 6.1
 2022-02-05 21:55:38 +01:00
Nikolay Amiantov
524aecf61e google-compute-config: update config 2022-02-05 23:33:10 +03:00
github-actions[bot]
c86cbc2a8a
Merge master into staging-next 2022-02-05 18:01:08 +00:00
Robert Hensing
94f84acd92
Merge pull request #73106 from pasqui23/loginless2 
nixos/users:added users.allowLoginless
 2022-02-05 18:50:13 +01:00
Benjamin Hipple
1e45c20eca
Merge pull request #158238 from rnhmjoj/pr-fix-connman 
nixos/connman: fix evaluation
 2022-02-05 11:37:41 -05:00
Pasquale
07abf6942f
nixos/users:added users.allowLoginless 
Correct the assertion logic

Fixed indentation

Better wording od allowLoginless' description

Co-authored-by: Eelco Dolstra <edolstra@gmail.com>

Better formatting

Co-authored-by: Eelco Dolstra <edolstra@gmail.com>

allowLoginless -> allowNoPasswordLogin

Clarified users.allowNoPasswordLogin's  description

Clarified assertion expression

Co-authored-by: Robert Hensing <roberth@users.noreply.github.com>

Reworded assertion message to gude to safer alternative
 2022-02-05 16:00:55 +01:00
rnhmjoj
6afcc5afc6
nixos/connman: fix evaluation 
This was caused by 2a37dd8 that introduced strict checking of
the units names.
 2022-02-05 13:51:52 +01:00
Bobby Rong
b1c093bf66
Merge pull request #158153 from witchof0x20/typo 
nixos/networking: Typo fix
 2022-02-05 20:18:19 +08:00
github-actions[bot]
9c2957b47d
Merge master into staging-next 2022-02-05 12:01:13 +00:00
Nikolay Amiantov
cb18e6cd01 nixos/docker-rootless: disable for root 2022-02-05 14:59:28 +03:00
Yarny0
21d6960e99 nixos/hylafax: use new type nonEmptyStr 
The module option type `nonEmptyStr` was introduced in commit

a3c5f0cba8

The hylafax module previously simply used
`addCheck str (s: s!="")` to prevent empty option strings,
but the new type is more thorough as
it also catches space-only strings.
 2022-02-05 11:32:22 +01:00
github-actions[bot]
63e54d6343
Merge master into staging-next 2022-02-05 06:01:20 +00:00
Ellie Hermaszewska
58e445a1b5
Merge pull request #158078 from ashkitten/patch-2 
nixos/syncplay: fix systemd service
 2022-02-05 08:42:19 +08:00
github-actions[bot]
c69fbb8dc5
Merge master into staging-next 2022-02-05 00:01:49 +00:00
Michael Weiss
1c4d0f130b
Merge pull request #158027 from Synthetica9/test-sway-swaylock 
nixosTests.sway: add swaylock test
 2022-02-04 22:13:44 +01:00
piegames
5f88ffb05f
Merge pull request #158151: matrix-conduit: 0.2.0 -> 0.3.0 2022-02-04 21:07:36 +01:00
Julius de Bruijn
57db7bcdd6 nixos/matrix-conduit: add database_backend option 2022-02-04 21:04:46 +01:00
Tom Prince
653a3e4ed0 amazon-ec2-utils: 1.2 -> 2.0 
This also replaces the ec2-utils package, which is an older version.
 2022-02-04 12:53:58 -07:00
Maximilian Bosch
6dfcf377a4
Merge pull request #157393 from LeSuisse/haproxy-2.5.1 
haproxy: 2.3.14 -> 2.5.1
 2022-02-04 20:31:08 +01:00
Jade
fe636b4805
nixos/networking: Typo fix 2022-02-04 13:55:56 -05:00
Jan Tojnar
bfd44c17cd Merge branch 'master' into staging-next 
; Conflicts:
;	pkgs/top-level/aliases.nix
 2022-02-04 19:54:59 +01:00
Maximilian Bosch
90a27b5771
Merge pull request #157247 from r-ryantm/auto-update/sudo 
sudo: 1.9.8p2 -> 1.9.9
 2022-02-04 16:05:30 +01:00
Nikolay Amiantov
2b3f77b716 nixos/udev: set firmware path in a separate modprobe.d file 
This way we don't bloat ramdisk with the whole Linux firmware packages.
 2022-02-04 17:47:32 +03:00
Jonas Heinrich
61b6ed869a gnome-passwordsafe: rename to gnome-secrets, 5.0->6.1 2022-02-04 15:14:19 +01:00
Michele Guerini Rocco
819ee16945
Merge pull request #158085 from rnhmjoj/pr-fix-wpa3-only 
nixos/wireless: don't attempt fallback on WPA3 only networks
 2022-02-04 14:15:20 +01:00
William Carroll
e8ff81edb7 nixos/self-deploy: make systemd dependency conditional 
As recommended in the discussion at #157883
 2022-02-04 10:59:24 +01:00
rnhmjoj
3b8fa47f58
nixos/wireless: don't attempt fallback on WPA3 only networks 2022-02-04 08:46:32 +01:00
Jonathan Ringer
c6c7162876
Merge remote-tracking branch 'origin/staging-next' into staging 2022-02-03 21:34:17 -08:00
Jonathan Ringer
9a16965c75
Merge remote-tracking branch 'origin/staging-next' into staging 
Conflicts:
	pkgs/development/python-modules/awesomeversion/default.nix
	pkgs/development/python-modules/md2gemini/default.nix
	pkgs/development/python-modules/mill-local/default.nix
	pkgs/development/python-modules/pyatv/default.nix
	pkgs/development/python-modules/pyezviz/default.nix
	pkgs/development/python-modules/pyinsteon/default.nix
	pkgs/development/python-modules/pylitterbot/default.nix
	pkgs/development/python-modules/pynuki/default.nix
	pkgs/development/python-modules/pypck/default.nix
	pkgs/development/python-modules/types-requests/default.nix
	pkgs/top-level/aliases.nix
 2022-02-03 21:29:24 -08:00
ash lea
959317df95 nixos/syncplay: fix systemd service 2022-02-03 22:59:34 -05:00
Kim Lindberger
415b9c3b5a
Merge pull request #157519 from talyz/gitlab-error-handling 
nixos/gitlab: Implement better script error handling
 2022-02-03 22:19:03 +01:00
Patrick Hilhorst
abcf236f36
nixosTests.sway: add swaylock test 2022-02-03 20:37:27 +01:00
Patrick Hilhorst
c39cc2e840
nixosTests.sway: factor out swaymsg 2022-02-03 20:37:21 +01:00
Patrick Hilhorst
aca22fb124
nixosTests.sway: format with nixpkgs-fmt 2022-02-03 20:25:05 +01:00
Pascal Bach
19763fd18e
Merge pull request #156245 from kamadorueda/nixos/virtualisation.virtualbox.guest 
nixos/virtualisation.virtualbox.guest: remove override
 2022-02-03 19:05:46 +01:00
Bobby Rong
95dab32edc
Merge pull request #157716 from bobby285271/pantheon 
Pantheon updates 2022-02-01
 2022-02-03 20:37:27 +08:00
Martin Weinelt
4a6f352305
Merge pull request #157900 from mweinelt/home-assistant 2022-02-03 13:16:36 +01:00
Markus Kowalewski
d86fef1a57
nixos/doc: add moosefs module to release notes 2022-02-03 12:33:44 +01:00
Markus Kowalewski
b74dc1a230
nixos/tests: add moosefs test 2022-02-03 12:31:36 +01:00
Markus Kowalewski
b302bda010
nixos: init moosefs module 2022-02-03 12:31:31 +01:00
William Carroll
b830507425 nixos/self-deploy: consume self-deploy's startAt attribute 
As #157879 points-out, this attribute appears unused.

Fixes #157879
 2022-02-03 12:19:47 +01:00
Jan Tojnar
7240c085d0
Merge pull request #148095 from rvl/update-ddccontrol 
ddccontrol: 0.5.2 -> 0.6.0
 2022-02-03 11:07:56 +01:00
Euan Kemp
dc5859ef7a nixos/tests/k3s: remove stale test reference 
https://github.com/NixOS/nixpkgs/pull/142706 renamed this test, but the
old 'k3s' one wasn't removed from all-tests.

Fix that.
 2022-02-03 15:38:12 +10:00
Martin Weinelt
6267a995ec
nixos/home-assistant: drop --runner flag 
Home Assistant now always emits exit code 100 when a restart is
requested, making this option redundant.
 2022-02-03 02:17:17 +01:00
Bobby Rong
830cceb05a
Merge pull request #157892 from Patryk27/kvmgt 
nixos/kvmgt: add myself to maintainers
 2022-02-03 08:58:48 +08:00
pennae
a0a804b17d
Merge pull request #157890 from Patryk27/unifi7 
unifi7: add package
 2022-02-02 23:07:13 +00:00
ajs124
c7c159af4d
Merge pull request #153451 from Mic92/spidermonkey 
spidermonkey_68: drop
 2022-02-02 21:20:23 +01:00
Patryk Wychowaniec
30c8f7c42d
nixos/kvmgt: add myself to maintainers 
I've got a use case and compatible hardware, so why not :-)
 2022-02-02 20:48:35 +01:00
Patryk Wychowaniec
62ce6f2c9d
unifi7: add package 
https://community.ui.com/releases/UniFi-Network-Application-7-0-20/3e4a4099-c063-42f6-8e21-5fb2c99fcea9

Since that's a release candidate, unifiLTS remains unchanged.
 2022-02-02 20:42:06 +01:00
Jan Tojnar
16658b7fe9
Merge pull request #151105 from ncfavier/gio-extra-modules 
nixos: make GIO_EXTRA_MODULES a session variable, take two
 2022-02-02 19:35:58 +01:00
Jörg Thalheim
b41beef827 mediatomb: remove package 2022-02-02 18:57:09 +01:00
Lassulus
b80607af67
Merge pull request #154804 from Mic92/tests-prompt 
nixos/tests: add prompt to shell_interact()
 2022-02-02 18:50:46 +01:00
Kim Lindberger
b43e0ae859
Merge pull request #157719 from talyz/bookstack-secret-paths 
nixos/bookstack: Make secret replacement strings more unique
 2022-02-02 16:27:22 +01:00
Nikolay Amiantov
3dc6fab5c9 nixos/stage-1: add nixos modprobe options 2022-02-02 15:18:09 +03:00
talyz
be97b3b44d
nixos/bookstack: Make secret replacement strings more unique 
If a secret path is a subset of a second secret path, there's a risk
that its secret is substituted for the matching part of the second
path. To prevent this, use the sha256 of the paths as placeholder
string instead.
 2022-02-02 12:27:18 +01:00
github-actions[bot]
900bded560
Merge staging-next into staging 2022-02-02 06:01:57 +00:00
github-actions[bot]
930984c1de
Merge master into staging-next 2022-02-02 06:01:23 +00:00
Bobby Rong
4fcca9b41f
nixos/pantheon/files: remove 
This shouldn't appear in search.nixos.org.
 2022-02-02 13:48:22 +08:00
Bobby Rong
ede5fff929
nixos/pantheon: stop setting GTK_CSD=1 
See https://github.com/elementary/gala/issues/244
 2022-02-02 13:47:43 +08:00
Aaron Andersen
7da6bb8266
Merge pull request #157598 from markuskowa/fix-slurmd 
nixos/slurm: fix startup of slurmd
 2022-02-01 22:49:46 -05:00
Dmitry Kalinkin
3087088c41
Merge branch 'staging-next' into staging 
Conflicts:
	pkgs/top-level/aliases.nix
	pkgs/top-level/python-aliases.nix
 2022-02-01 21:37:39 -05:00
Rodney Lorrimar
d9b8919e34
nixos/ddccontrol: Ensure that i2c_dev module is loaded 2022-02-02 11:52:57 +10:00
github-actions[bot]
70961d54d6
Merge master into staging-next 2022-02-02 00:01:49 +00:00
Martin Weinelt
778d148959
Merge pull request #155061 from piegamesde/gnome 2022-02-01 20:53:10 +01:00
Jan Tojnar
e00317be13 nixos/nvidia: remove obsolete GDM on Wayland assertion 
GDM enables Wayland on supported platforms automatically (see ${gnome.gdm}/lib/udev/rules.d/61-gdm.rules), so we removed the `gdm.nvidiaWayland` option.

You will still need `hardware.nvidia.modesetting.enable = true;` with `nvidia` driver, though.
 2022-02-01 19:22:04 +01:00
github-actions[bot]
e977885cba
Merge staging-next into staging 2022-02-01 18:05:39 +00:00
github-actions[bot]
f5bdd2b8f8
Merge master into staging-next 2022-02-01 18:01:02 +00:00
Bernardo Meurer
02420e0ca6
Merge pull request #157618 from lovesegfault/nix-default-2.6 
nixVersions.stable: point to nix_2_6
 2022-02-01 09:23:18 -08:00
Maciej Krüger
8bb7bec755
Merge pull request #141122 from Luflosi/add-apfs-nixos-module 2022-02-01 17:29:10 +01:00
Sandro
330c63f740
Merge pull request #156342 from midchildan/fix/noto-cjk-src 2022-02-01 16:01:37 +01:00
github-actions[bot]
f636a27dac
Merge staging-next into staging 2022-02-01 12:01:45 +00:00
github-actions[bot]
809093c51c
Merge master into staging-next 2022-02-01 12:01:09 +00:00
Maximilian Bosch
f5b67f3b27
nixos/sudo: fix test for 1.9.9 
The test failed with

> Test "test5 user should not be able to run commands under root" failed with
> error: "invalid literal for int() with base 10: ''"

since 2492da88ea.

The reason for this is that `sudo(8)` writes the lecture to the
tty[1] and only as a fallback to stdout[2]. This means that the
`base64 --wrap 0` executed by `machine.execute()` doesn't affect the
text written to the terminal, however the lecture is part of the string
that's read from the VM via `shell.recv()`.

I confirmed the problem in an interactive test session[3]:

    >>> command = "sudo -u test5 sudo -n -u root true"
    >>> out_command = f"( set -euo pipefail; {command} ) | (base64 --wrap 0; echo)\n"
    >>> machine.shell.send(out_command.encode())
    84

    >>> machine # [   99.015512] sudo[877]:     root : TTY=hvc0 ; PWD=/tmp ; USER=test5 ; COMMAND=/run/wrappers/bin/sudo -n -u root true
    machine # [   99.019373] sudo[877]: pam_unix(sudo:session): session opened for user test5(uid=1005) by (uid=0)
    machine # [   99.038692] sudo[879]: pam_unix(sudo:auth): conversation failed
    machine # sudo: a password is required
    machine # [   99.041860] sudo[879]: pam_unix(sudo:auth): auth could not identify password for [test5]
    machine # [   99.046901] sudo[877]: pam_unix(sudo:session): session closed for user test5
    >>>
    >>> x=machine._next_newline_closed_block_from_shell()
    >>> print(x)
    <newline>
    We trust you have received the usual lecture from the local System
    Administrator. It usually boils down to these three things:
    <newline>
        #1) Respect the privacy of others.
        #2) Think before you type.
        #3) With great power comes great responsibility.
    <newline>
    <newline>
    <newline>
    >>>

Since the lecture isn't strictly necessary to confirm that
`security.sudo` works as expected, I decided to disable lecturing
inside the test, however we may want to fix the underlying problem in
the test-driver at some point.

[1] https://github.com/sudo-project/sudo/blob/SUDO_1_9_9/plugins/sudoers/check.c#L275-L283
[2] https://github.com/sudo-project/sudo/blob/SUDO_1_9_9/src/conversation.c#L95-L120
[3] I replaced each empty line with `<newline>` to make sure these
    aren't swallowed by git.
 2022-02-01 12:55:29 +01:00