nixpkgs-suyu/nixos/tests
Guillaume Girol 0e4b8a05b2 nixos/wrappers: allow setuid and setgid wrappers to run in user namespaces
In user namespaces where an unprivileged user is mapped as root and root
is unmapped, setuid bits have no effect. However setuid root
executables like mount are still usable *in the namespace* as the user
already has the required privileges. This commit detects the situation
where the wrapper gained no privileges that the parent process did not
already have and in this case does less sanity checking. In short there
is no need to be picky since the parent already can execute the foo.real
executable themselves.

Details:
man 7 user_namespaces:
   Set-user-ID and set-group-ID programs
       When a process inside a user namespace executes a set-user-ID
       (set-group-ID) program, the process's effective user (group) ID
       inside the namespace is changed to whatever value is mapped for
       the user (group) ID of the file.  However, if either the user or
       the group ID of the file has no mapping inside the namespace, the
       set-user-ID (set-group-ID) bit is silently ignored: the new
       program is executed, but the process's effective user (group) ID
       is left unchanged.  (This mirrors the semantics of executing a
       set-user-ID or set-group-ID program that resides on a filesystem
       that was mounted with the MS_NOSUID flag, as described in
       mount(2).)

The effect of the setuid bit is that the real user id is preserved and
the effective and set user ids are changed to the owner of the wrapper.
We detect that no privilege was gained by checking that euid == suid
== ruid. In this case we stop checking that euid == owner of the
wrapper file.

As a reminder here are the values of euid, ruid, suid, stat.st_uid and
stat.st_mode & S_ISUID in various cases when running a setuid 42 executable as user 1000:

Normal case:
ruid=1000 euid=42 suid=42
setuid=2048, st_uid=42

nosuid mount:
ruid=1000 euid=1000 suid=1000
setuid=2048, st_uid=42

inside unshare -rm:
ruid=0 euid=0 suid=0
setuid=2048, st_uid=65534

inside unshare -rm, on a suid mount:
ruid=0 euid=0 suid=0
setuid=2048, st_uid=65534
2023-08-09 12:00:00 +00:00
..
common nixos/qemu-vm: use persistent block device names 2023-06-16 19:36:03 +02:00
dnscrypt-wrapper
fcitx5 nixosTests.fcitx5: unbreak, add rest of CJK 2023-05-20 05:21:02 +09:00
garage garage: 0.8.0 -> 0.8.1 2023-03-13 13:55:36 +01:00
git
google-oslogin
grafana
hadoop nixos/tests/hadoop/hdfs.nix: get rid of with lib 2023-05-12 22:29:27 -03:00
hitch
hocker-fetchdocker
hydra
initrd-network-openvpn systemd-initrd: OpenVPN 2023-04-17 16:41:35 -04:00
initrd-network-ssh systemd-initrd: Support secrets when boot loader doesn't 2023-04-11 15:20:47 -04:00
installed-tests nixos/tests/pipewire: don't enable pipewire in test VM 2023-04-20 18:02:38 +03:00
k3s
kerberos
krb5
kubernetes
lorri
lvm2 nixos/tests/lvm2/thinpool: fix xfs creation on older kernels 2023-06-09 13:44:48 +02:00
maddy nixos/maddy: Add tls option 2023-05-01 19:12:26 +02:00
matrix nixosTests.mjolnir: unbreak 2023-05-15 22:36:26 +08:00
mysql nixosTests.mysql-replication: fix deprecation warning 2023-05-10 18:22:41 +02:00
nextcloud nixos/tests/nextcloud: fix more issues related to redis tests 2023-06-17 14:04:44 +02:00
nfs Merge pull request #229030 from atorres1985-contrib/with-lib-is-bad 2023-05-17 20:24:46 -03:00
nginx-proxyprotocol nixos/nginx: first-class PROXY protocol support 2023-05-26 19:48:26 +02:00
nixops nixosTests.nixops.unstable.legacyNetwork: Use system.includeBuildDependencies 2023-03-15 13:37:59 +01:00
nixos-test-driver nixosTest: provide a test for lib.extend in nixosTests & runNixOSTest 2023-06-29 09:14:58 -07:00
pam nixos/pam: add test for ZFS home dataset unlocking 2023-05-15 09:22:42 +02:00
parsedmarc elasticsearch-oss: remove 2023-04-04 10:32:26 +02:00
php
podman
shadowsocks nixos/shadowsocks: wait for nginx to prevent race condition 2023-05-26 11:24:21 +02:00
spark
stratis
tinc
web-apps nixos/gotosocial: init 2023-06-05 09:07:34 +03:00
web-servers nixos/static-web-server: create module which uses upstream systemd units 2023-07-01 12:51:13 -04:00
wireguard
xmpp
3proxy.nix nixos/tests/3proxy.nix: get rid of with lib 2023-05-12 22:29:26 -03:00
aaaaxy.nix aaaaxy: 1.3.538 -> 1.4.2 2023-06-01 20:14:33 +02:00
acme-dns.nix nixosTests.acme-dns: init 2023-05-31 15:08:39 +02:00
acme.nix nixos/tests: fix typos 2023-05-19 22:31:04 -04:00
adguardhome.nix nixos/adguardhome: Add allowDHCP option 2023-06-15 12:27:35 +02:00
aesmd.nix
agda.nix
airsonic.nix
akkoma.nix
alice-lg.nix nixos/alice-lg: init 2023-05-15 02:52:06 +02:00
all-terminfo.nix
all-tests.nix firefox-esr-115-unwrapped: init at 115.0esr 2023-07-04 16:07:25 +02:00
alps.nix
amazon-init-shell.nix
anuko-time-tracker.nix nixos/anuko-time-tracker: init 2023-06-27 12:30:33 +02:00
apache_datasketches.nix apache_datasketches: init at 1.6.0 2023-06-02 21:03:19 +02:00
apcupsd.nix
apfs.nix nixos/tests/apfs: clean up code 2023-06-05 16:39:09 +02:00
apparmor.nix nixosTests.apparmor: fix expected.rules 2023-05-24 19:17:29 +02:00
atd.nix
atop.nix nixos/tests: fix typos 2023-05-19 22:31:04 -04:00
atuin.nix nixos/tests/atuin.nix: get rid of with lib 2023-05-12 22:29:27 -03:00
auth-mysql.nix
authelia.nix authelia: move module under security and minor fixes 2023-03-27 12:00:07 +01:00
avahi.nix
babeld.nix
bazarr.nix nixos/tests/bazarr.nix: get rid of with lib 2023-05-12 22:29:27 -03:00
bcachefs.nix nixos/test/bcachefs: fix password input 2023-07-01 17:10:11 +02:00
beanstalkd.nix
bees.nix
binary-cache.nix
bind.nix
bird.nix
birdwatcher.nix nixos/birdwatcher: init 2023-05-15 02:52:06 +02:00
bitcoind.nix
bittorrent.nix
blockbook-frontend.nix
blocky.nix
boot-stage1.nix nixos/tests: fix typos 2023-05-19 22:31:04 -04:00
boot.nix
bootspec.nix nixos/bootspec: adopt the merged RFC-0125 2023-04-28 18:26:11 -07:00
borgbackup.nix
botamusique.nix
bpf.nix nixosTests.bpf: disable kfunc test on aarch64 2023-05-06 06:40:30 +09:00
breitbandmessung.nix
brscan5.nix
btrbk-doas.nix
btrbk-no-timer.nix
btrbk-section-order.nix
btrbk.nix
budgie.nix Merge pull request #229030 from atorres1985-contrib/with-lib-is-bad 2023-05-17 20:24:46 -03:00
buildbot.nix buildbot: move out of python3.pkgs 2023-04-11 12:38:58 +02:00
buildkite-agents.nix
caddy.nix nixos/caddy: add support for reload 2023-07-04 11:25:05 +02:00
cadvisor.nix nixos/tests/cadvisor.nix: get rid of with lib 2023-05-12 22:29:27 -03:00
cage.nix nixosTests.cage: fix OCR properly 2023-04-14 22:32:26 +00:00
cagebreak.nix
calibre-server.nix services/calibre-server: Add new http & auth options (#216497) 2023-06-28 14:06:47 +02:00
calibre-web.nix nixos/tests/calibre-web.nix: get rid of with lib 2023-05-12 22:29:25 -03:00
cassandra.nix
ceph-multi-node.nix
ceph-single-node-bluestore.nix
ceph-single-node.nix
certmgr.nix
cfssl.nix
cgit.nix
charliecloud.nix
chromium.nix
chrony-ptp.nix
cinnamon.nix nixos/tests/cinnamon: silence a warning and remove unused args 2023-06-02 19:51:12 +08:00
cjdns.nix
clickhouse.nix
cloud-init-hostname.nix
cloud-init.nix
cloudlog.nix
cntr.nix
cockpit.nix nixos/tests: fix typos 2023-05-19 22:31:04 -04:00
cockroachdb.nix
code-server.nix nixos/code-server: init tests 2023-05-26 09:51:33 +02:00
coder.nix
collectd.nix
connman.nix
consul-template.nix nixosTests.consul-template: init 2023-04-25 16:54:08 +02:00
consul.nix nixos/tests/consul: stop consul cleanly 2023-03-22 19:18:34 +01:00
containers-bridge.nix
containers-custom-pkgs.nix
containers-ephemeral.nix
containers-extra_veth.nix
containers-hosts.nix
containers-imperative.nix treewide: pass system argument to eval-config.nix 2023-05-12 14:56:23 +02:00
containers-ip.nix
containers-macvlans.nix
containers-names.nix
containers-nested.nix
containers-physical_interfaces.nix
containers-portforward.nix
containers-reloadable.nix
containers-restart_networking.nix
containers-tmpfs.nix
containers-unified-hierarchy.nix
convos.nix nixos/tests/convos.nix: get rid of with lib 2023-05-12 22:29:25 -03:00
corerad.nix
coturn.nix nixosTests.coturn: wait_for_open_port 2023-06-13 23:21:37 +02:00
couchdb.nix nixos/tests/couchdb.nix: get rid of with lib 2023-05-12 22:29:27 -03:00
cri-o.nix
croc.nix
cups-pdf.nix
custom-ca.nix
darling.nix llvmPackages_latest: move to aliases.nix 2023-05-08 13:05:33 +00:00
deepin.nix nixosTests.deepin: raise virtualisation.memorySize to 2048 2023-06-30 10:58:03 +08:00
deluge.nix
dex-oidc.nix
dhparams.nix
disable-installer-tools.nix
discourse.nix
dnscrypt-proxy2.nix
dnsdist.nix
doas.nix nixos/tests/doas.nix: get rid of with lib 2023-05-12 22:29:27 -03:00
docker-registry.nix
docker-rootless.nix
docker-tools-cross.nix
docker-tools-overlay.nix
docker-tools.nix
docker.nix
documize.nix
doh-proxy-rust.nix nixos/tests/doh-proxy-rust.nix: get rid of with lib 2023-05-12 22:29:27 -03:00
dokuwiki.nix nixos/tests: fix typos 2023-05-19 22:31:04 -04:00
dolibarr.nix
domination.nix
dovecot.nix
drbd.nix
early-mount-options.nix nixosTests.early-mount-options: init 2023-04-25 13:07:08 +02:00
earlyoom.nix
ec2.nix
ecryptfs.nix
elk.nix nixos/tests: fix typos 2023-05-19 22:31:04 -04:00
emacs-daemon.nix
empty-file
endlessh-go.nix
endlessh.nix
engelsystem.nix
enlightenment.nix nixos/tests: fix typos 2023-05-19 22:31:04 -04:00
env.nix
envfs.nix
envoy.nix
ergo.nix
ergochat.nix
esphome.nix nixos/tests/esphome.nix: get rid of with lib 2023-05-12 22:29:27 -03:00
etcd-cluster.nix etcd: switch to etcd_3_5 2023-05-28 08:04:43 +10:00
etcd.nix etcd: switch to etcd_3_5 2023-05-28 08:04:43 +10:00
etebase-server.nix
etesync-dav.nix
evcc.nix evcc: 0.117.4 -> 0.118.0 2023-06-11 12:41:53 +02:00
fail2ban.nix nixos/fail2ban: use attrsets for settings instead of strings 2023-06-30 22:27:40 +02:00
fakeroute.nix nixos/tests/fakeroute: init 2023-06-20 01:12:04 +00:00
fancontrol.nix
fenics.nix
ferm.nix
firefox.nix
firejail.nix
firewall.nix
fish.nix
flannel.nix
fluentd.nix
fluidd.nix nixos/tests/fluidd.nix: get rid of with lib 2023-05-12 22:29:26 -03:00
fontconfig-default-fonts.nix
freenet.nix
freeswitch.nix
freshrss-pgsql.nix
freshrss-sqlite.nix
frigate.nix nixos/tests/frigate: init 2023-05-22 16:29:55 +02:00
frr.nix
fsck.nix nixos/qemu-vm: use persistent block device names 2023-06-16 19:36:03 +02:00
fscrypt.nix
ft2-clone.nix nixosTests.ft2-clone: make OCR more robust 2023-04-21 15:35:20 +02:00
gemstash.nix nixos/gemstash: init module 2023-03-07 15:56:56 +11:00
gerrit.nix
geth.nix nixos/geth: fix failing test 2023-05-09 20:35:28 +02:00
ghostunnel.nix
gitdaemon.nix
gitea.nix maintainers: rename indeednotjames to emilylange 2023-05-21 16:01:35 +02:00
github-runner.nix
gitlab.nix nixosTests.gitlab: fix project ids 2023-05-31 22:14:25 +02:00
gitolite-fcgiwrap.nix
gitolite.nix
glusterfs.nix
gnome-flashback.nix nixos/tests/gnome-flashback.nix: get rid of with lib 2023-05-12 22:29:26 -03:00
gnome-xorg.nix nixos/tests/gnome-xorg.nix: get rid of with lib 2023-05-12 22:29:26 -03:00
gnome.nix nixos/tests: fix typos 2023-05-19 22:31:04 -04:00
gnupg.nix
go-neb.nix
gobgpd.nix
gocd-agent.nix
gocd-server.nix
gollum.nix nixos/gollum: fix deprecation warning 2023-03-20 18:26:48 +01:00
gonic.nix nixos/gonic: init 2023-05-07 22:43:23 +02:00
gotify-server.nix nixos/tests: fix typos 2023-05-19 22:31:04 -04:00
grafana-agent.nix
graphite.nix
graylog.nix elasticsearch-oss: remove 2023-04-04 10:32:26 +02:00
grocy.nix
grub.nix
guacamole-server.nix nixos/guacamole-server: init 2023-06-21 22:11:44 +02:00
gvisor.nix
haka.nix
haproxy.nix
hardened.nix nixos/tests/hardened.nix: get rid of with lib 2023-05-12 22:29:25 -03:00
harmonia.nix nixos/tests/harmonia: check if settings work 2023-05-11 18:03:14 +03:00
haste-server.nix
hbase.nix
headscale.nix nixos/tests/headscale: test improvements 2023-05-21 01:37:06 -03:00
hedgedoc.nix
herbstluftwm.nix
hibernate.nix nixos/qemu-vm: use persistent block device names 2023-06-16 19:36:03 +02:00
hledger-web.nix
hockeypuck.nix nixos/tests: fix typos 2023-05-19 22:31:04 -04:00
home-assistant.nix nixos/tests/home-assistant: Drop esphome, fix post-restart expectation 2023-06-07 23:55:51 +02:00
hostname.nix nixosTests.hostname: stop using deprecated nodes.machine.config 2023-03-07 13:29:19 +01:00
hound.nix
i3wm.nix
icingaweb2.nix
iftop.nix nixos/tests/iftop.nix: get rid of with lib 2023-05-12 22:29:28 -03:00
image-contents.nix nixos/make-disk-image: fix contents dir paths 2023-04-16 09:54:45 -07:00
incron.nix
influxdb.nix
initrd-luks-empty-passphrase.nix nixos/qemu-vm: use persistent block device names 2023-06-16 19:36:03 +02:00
initrd-network.nix
initrd-secrets-changing.nix nixos/virtualisation/qemu-vm: remove persistBootDevice option 2023-04-21 13:00:19 +02:00
initrd-secrets.nix
input-remapper.nix
inspircd.nix
installer-systemd-stage-1.nix add installer test for stratis root fs 2023-05-07 18:48:28 +02:00
installer.nix nixos/test/bcachefs: fix password input 2023-07-01 17:10:11 +02:00
invidious.nix
invoiceplane.nix
iodine.nix
ipv6.nix
iscsi-multipath-root.nix
iscsi-root.nix
isso.nix
jackett.nix nixos/tests/jackett.nix: get rid of with lib 2023-05-12 22:29:28 -03:00
jellyfin.nix
jenkins-cli.nix
jenkins.nix
jibri.nix
jirafeau.nix nixos/tests/jirafeau.nix: get rid of with lib 2023-05-12 22:29:28 -03:00
jitsi-meet.nix
kafka.nix apacheKafka: 3.5.0, 3.4.1, 3.3.1 -> 3.3.2 2023-06-30 17:59:40 +02:00
kanidm.nix nixos/tests/kanidm: test posix user creation and login 2023-06-11 17:17:43 +02:00
karma.nix
kavita.nix nixos/tests/kavita: init 2023-05-06 13:57:53 -03:00
kbd-setfont-decompress.nix
kbd-update-search-paths-patch.nix
kea.nix nixos/tests/kea: Test dhcp-ddns against knot 2023-03-11 22:23:09 +01:00
keepalived.nix
keepassxc.nix
kernel-generic.nix linux_6_3_hardened: expose package 2023-06-28 21:23:00 +02:00
kernel-latest-ath-user-regd.nix
keter.nix nixos/keter: 2.0 -> 2.1 2023-06-14 11:54:03 -04:00
kexec.nix nixosTests.kexec: do not use module argument config 2023-06-16 19:43:40 +02:00
keycloak.nix
keyd.nix keyd: add keyd service and test 2023-03-22 15:12:29 +01:00
keymap.nix
knot.nix nixos/tests/knot: Use more appropriate terminology 2023-03-11 22:23:10 +01:00
komga.nix nixos/tests/komga.nix: get rid of with lib 2023-05-12 22:29:28 -03:00
ksm.nix
kthxbye.nix
kubo.nix nixos/kubo: restrict access to the API to users in a group by default 2023-04-15 15:25:20 +02:00
ladybird.nix
languagetool.nix
leaps.nix
legit.nix nixos/tests/legit: init 2023-05-27 16:20:05 +00:00
lemmy.nix lemmy: Support secret options 2023-07-03 09:12:40 +08:00
libinput.nix
libreddit.nix nixos/tests/libreddit.nix: get rid of with lib 2023-05-12 22:29:28 -03:00
libresprite.nix
libreswan.nix
libuiohook.nix
libvirtd.nix
lidarr.nix nixos/tests/lidarr.nix: get rid of with lib 2023-05-12 22:29:28 -03:00
lightdm.nix
lighttpd.nix
limesurvey.nix
listmonk.nix
litestream.nix
lldap.nix nixosTests.lldap: init 2023-04-29 21:14:25 +02:00
locate.nix
login.nix nixos/test-driver: remove allow_reboot state from Machine, make it a start() kwarg 2023-03-16 01:50:15 +01:00
logrotate.nix nixos/tests: fix typos 2023-05-19 22:31:04 -04:00
loki.nix
luks.nix nixos/qemu-vm: use persistent block device names 2023-06-16 19:36:03 +02:00
lxd-image-server.nix
lxd-nftables.nix
lxd.nix
maestral.nix
magic-wormhole-mailbox-server.nix
magnetico.nix
mailcatcher.nix
mailhog.nix
mailman.nix nixosTests.mailman: init 2023-05-19 12:03:41 +02:00
make-test-python.nix
man.nix
mate.nix
matomo.nix matomo: 4.10.1 -> 4.14.2 2023-06-13 07:36:07 -04:00
mattermost.nix mattermost: add environmentFile option to allow declarative secrets 2023-03-27 20:46:01 +02:00
mediatomb.nix
mediawiki.nix nixos/mediawiki: also test fcgi socket 2023-05-01 20:51:11 +02:00
meilisearch.nix
memcached.nix
merecat.nix
metabase.nix
mimir.nix
mindustry.nix
minecraft-server.nix
minecraft.nix
minidlna.nix
miniflux.nix nixos/tests/miniflux.nix: get rid of with lib 2023-05-12 22:29:28 -03:00
minio.nix nixosTests/minio: format with nixpkgs-fmt 2023-03-13 18:01:16 -07:00
miriway.nix mir: Pull patch to fix evdev device misses 2023-05-15 22:40:29 +02:00
misc.nix nixos/tests/misc.nix: get rid of with lib 2023-05-12 22:29:28 -03:00
mod_perl.nix
molly-brown.nix
mongodb.nix mongodb-4_2: drop 2023-06-06 14:26:11 +03:00
moodle.nix
moonraker.nix
moosefs.nix
morty.nix
mosquitto.nix nixos/mosquitto: use networkd for tests 2023-05-09 11:41:17 +02:00
mpd.nix
mpich-example.c
mpv.nix nixos/tests/mpv.nix: get rid of with lib 2023-05-12 22:29:28 -03:00
mtp.nix
multipass.nix
mumble.nix
munin.nix
musescore.nix
mutable-users.nix
mxisd.nix
n8n.nix nixos/tests/n8n.nix: get rid of with lib 2023-05-12 22:29:28 -03:00
nagios.nix
nar-serve.nix nixos/tests/nar-serve: Fix 2023-05-25 19:10:22 -07:00
nat.nix
nats.nix
navidrome.nix
nbd.nix
ncdns.nix
ndppd.nix
nebula.nix
neo4j.nix
netbird.nix
netdata.nix netdata: add raitobezarius as a maintainer 2023-03-17 17:27:01 +01:00
networking-proxy.nix
networking.nix nixos/test/networking: test unusual interface names 2023-05-27 19:19:37 +02:00
nexus.nix
nghttpx.nix
nginx-auth.nix
nginx-etag.nix
nginx-globalredirect.nix
nginx-http3.nix nixos/tests: update nginx-http3 test 2023-05-28 19:55:00 +03:00
nginx-modsecurity.nix
nginx-njs.nix
nginx-pubhtml.nix
nginx-sandbox.nix
nginx-sso.nix
nginx-variants.nix
nginx.nix nixos/tests/nginx: fix etag test flakiness 2023-05-10 05:01:50 +02:00
nitter.nix
nix-ld.nix nix-ld: 1.2.1 -> 1.2.2 (#237962) 2023-06-20 20:23:27 +00:00
nix-serve-ssh.nix
nix-serve.nix
nixos-generate-config.nix
nixos-rebuild-specialisations.nix nixosTests.nixos-rebuild-specialisations: Fix 2023-06-10 18:25:04 +02:00
node-red.nix
nomad.nix
non-default-filesystems.nix nixos/stage-1: support bind mounts of files 2023-05-26 13:26:48 +00:00
noto-fonts-cjk-qt-default-weight.nix nixosTests.noto-fonts-cjk-qt-default-weight: init 2023-03-22 16:26:30 +08:00
noto-fonts.nix gedit: Move out of GNOME 2023-07-05 14:56:27 +02:00
novacomd.nix
nscd.nix
nsd.nix
ntfy-sh.nix nixos/ntfy-sh: use dynamic user and add defaults 2023-06-02 15:22:14 -04:00
nzbget.nix nixosTests.nzbget: fix deprecation warning 2023-05-13 20:05:06 -04:00
nzbhydra2.nix nixos/tests/nzbhydra2.nix: get rid of with lib 2023-05-12 22:29:29 -03:00
oci-containers.nix nixos/tests/oci-containers.nix: get rid of with lib 2023-05-12 22:29:29 -03:00
octoprint.nix
odoo.nix nixos/tests/odoo.nix: get rid of with lib 2023-05-12 22:29:29 -03:00
oh-my-zsh.nix
ombi.nix nixos/tests/ombi.nix: get rid of with lib 2023-05-12 22:29:29 -03:00
openarena.nix
openldap.nix
openresty-lua.nix
opensearch.nix
opensmtpd-rspamd.nix
opensmtpd.nix
openssh.nix
openstack-image.nix
opentabletdriver.nix
opentelemetry-collector.nix nixos/opentelemetry-collector: add nixosTest 2023-06-21 13:07:16 +01:00
openvscode-server.nix nixosTests.openvscode-server: init 2023-05-15 21:48:08 +02:00
orangefs.nix nixos/tests: fix typos 2023-05-19 22:31:04 -04:00
os-prober.nix nixosTests.os-prober: add missing kbd extra dep 2023-06-20 10:20:37 +00:00
osrm-backend.nix
outline.nix outline: add nixos test 2023-05-23 12:03:39 +02:00
overlayfs.nix
owncast.nix
pacemaker.nix
packagekit.nix
pantheon.nix nixos/tests/pantheon.nix: get rid of with lib 2023-05-12 22:29:26 -03:00
paperless.nix
pass-secret-service.nix
patroni.nix
pdns-recursor.nix
peerflix.nix
peroxide.nix nixos/peroxide: add module for peroxide service 2023-03-18 07:43:59 +13:00
pgadmin4.nix nixosTests.pgadmin4: increase test coverage (#229632) 2023-05-15 17:04:22 +02:00
pgjwt.nix
pgmanage.nix
phosh.nix
photoprism.nix
pict-rs.nix
pinnwand.nix
plasma-bigscreen.nix
plasma5-systemd-start.nix
plasma5.nix
plausible.nix
please.nix nixos/tests/please.nix: get rid of with lib 2023-05-12 22:29:29 -03:00
pleroma.nix
plikd.nix
plotinus.nix
podgrab.nix
polaris.nix nixos/tests/polaris.nix: get rid of with lib 2023-05-12 22:29:29 -03:00
pomerium.nix pomerium: add test for UI 2023-03-18 06:49:22 -05:00
portunus.nix nixos/tests: init portunus 2023-05-21 23:56:02 +02:00
postfix-raise-smtpd-tls-security-level.nix
postfix.nix
postfixadmin.nix
postgis.nix
postgresql-jit.nix nixos/postgresql: fix enableJIT 2023-03-29 08:39:47 +02:00
postgresql-wal-receiver.nix postgresql: implement opt-in JIT support 2023-03-29 08:39:46 +02:00
postgresql.nix nixos/tests/postgresql: fix deprecation warning 2023-03-29 08:39:46 +02:00
power-profiles-daemon.nix nixosTests.power-profiles-daemon: enable polkit 2023-04-19 14:21:15 +00:00
powerdns-admin.nix powerdns-admin: 0.3.0 -> 0.4.1 2023-05-22 00:39:58 +02:00
powerdns.nix nixos/tests/powerdns: Stop manually configuring config path 2023-07-01 18:55:50 +08:00
pppd.nix nixos/tests/pppd: fix with ppp 2.5.0 2023-04-25 18:00:12 +02:00
predictable-interface-names.nix systemd-initrd: networkd 2023-04-17 16:41:34 -04:00
printing.nix
privacyidea.nix
privoxy.nix
prometheus-exporters.nix nixos/prometheus-exporters: add php-fpm 2023-06-28 22:11:36 +02:00
prometheus.nix
promscale.nix nixosTests.promscale: add tests for promscale_extension 2023-04-22 21:29:50 +04:00
prowlarr.nix nixos/tests/prowlarr.nix: get rid of with lib 2023-05-12 22:29:29 -03:00
proxy.nix
pt2-clone.nix
public-inbox.nix public-inbox: add xapian to PATH 2023-06-20 16:58:47 +00:00
pufferpanel.nix nixos/pufferpanel: init 2023-04-16 15:41:24 +03:00
pulseaudio.nix
pykms.nix
qboot.nix
qemu-vm-restrictnetwork.nix
qemu-vm-volatile-root.nix nixos/tests/qemu-vm-volatile-root: init 2023-06-21 01:38:27 +02:00
qownnotes.nix qownnotes: add tests 2023-06-16 08:20:32 +02:00
quake3.nix nixos/tests/quake3.nix: get rid of with lib 2023-05-12 22:29:25 -03:00
quorum.nix
rabbitmq.nix
radarr.nix nixos/tests/radarr.nix: get rid of with lib 2023-05-12 22:29:29 -03:00
radicale.nix
rasdaemon.nix
readarr.nix nixos/tests/readarr.nix: get rid of with lib 2023-05-12 22:29:29 -03:00
redis.nix nixos/tests/redis.nix: get rid of with lib 2023-05-12 22:29:26 -03:00
redmine.nix
restart-by-activation-script.nix
restic.nix nixos/restic: use private tmp for service unit 2023-04-30 10:39:29 +02:00
retroarch.nix
robustirc-bridge.nix
roundcube.nix
rshim.nix nixos/tests/rshim: init 2023-05-15 14:09:28 +02:00
rspamd.nix
rss2email.nix
rstudio-server.nix
rsyncd.nix
rsyslogd.nix
rxe.nix
sabnzbd.nix
samba-wsdd.nix
samba.nix
sanoid.nix
scaphandre.nix scaphandre: init at 0.5.0 (#238462) 2023-06-26 19:41:28 +02:00
schleuder.nix
sddm.nix
seafile.nix
searx.nix
service-runner.nix
sftpgo.nix nixos/tests/sftpgo: init 2023-05-25 22:46:15 +02:00
sfxr-qt.nix
sgtpuzzles.nix
shadow.nix
shattered-pixel-dungeon.nix
shiori.nix
signal-desktop.nix nixos/tests: fix typos 2023-05-19 22:31:04 -04:00
simple.nix
sing-box.nix nixos/sing-box: add basic test 2023-06-27 13:58:02 +08:00
slurm.nix
smokeping.nix
snapcast.nix
snapper.nix nixos/snapper/test: fix, make compliant with new config scheme 2023-06-18 16:20:31 +02:00
soapui.nix
sogo.nix
solanum.nix
sonarr.nix nixos/tests/sonarr.nix: get rid of with lib 2023-05-12 22:29:29 -03:00
sourcehut.nix
spacecookie.nix
sqlite3-to-mysql.nix
ssh-keys.nix
sslh.nix
sssd-ldap.nix nixos/test/sssd-ldap: do new login on a different VT 2023-05-09 18:51:47 +03:00
sssd.nix nixos/sssd: create symlinks in /etc to fix sssctl 2023-03-19 09:28:35 +01:00
starship.nix
step-ca.nix
strongswan-swanctl.nix
stunnel.nix
sudo.nix nixos/tests/sudo.nix: get rid of with lib 2023-05-12 22:29:30 -03:00
swap-file-btrfs.nix nixos/config/swap: check failure in swap file test 2023-05-16 10:48:53 -04:00
swap-partition.nix nixos/tests(treewide): vdb → vda, vdc → vdb, vdd → vdc, … / bootDevice → rootDevice 2023-04-21 13:00:19 +02:00
swap-random-encryption.nix nixos/config/swap: improve randomEncrytion 2023-05-05 13:36:42 -04:00
sway.nix nixosTests.sway: don't timeout gpg-agent 2023-06-21 16:08:00 +02:00
switch-test.nix
sympa.nix
syncthing-init.nix nixos/syncthing: fix escaping 2023-06-23 20:19:51 +02:00
syncthing-relay.nix
syncthing.nix
systemd-analyze.nix
systemd-binfmt.nix
systemd-boot-ovmf-broken-fat-driver.patch systemd-boot: Patch for firmwares that fail to load large files 2023-05-30 19:21:16 -04:00
systemd-boot.nix Merge staging-next into staging 2023-06-10 18:01:41 +00:00
systemd-bpf.nix
systemd-confinement.nix
systemd-coredump.nix
systemd-credentials-tpm2.nix
systemd-cryptenroll.nix
systemd-escaping.nix
systemd-homed.nix
systemd-initrd-btrfs-raid.nix nixosTests.systemd-initrd-btrfs-raid: mount the host Nix store 2023-06-08 16:55:25 +02:00
systemd-initrd-luks-fido2.nix nixos/qemu-vm: use persistent block device names 2023-06-16 19:36:03 +02:00
systemd-initrd-luks-keyfile.nix nixos/qemu-vm: use persistent block device names 2023-06-16 19:36:03 +02:00
systemd-initrd-luks-password.nix nixos/qemu-vm: use persistent block device names 2023-06-16 19:36:03 +02:00
systemd-initrd-luks-tpm2.nix nixos/qemu-vm: use persistent block device names 2023-06-16 19:36:03 +02:00
systemd-initrd-modprobe.nix
systemd-initrd-networkd-ssh.nix nixos/qemu-vm: use persistent block device names 2023-06-16 19:36:03 +02:00
systemd-initrd-networkd.nix systemd stage 1 networking: Add network-pre to flush tests 2023-06-08 00:25:15 -04:00
systemd-initrd-simple.nix systemd-initrd: Add users and groups with static IDs. 2023-04-12 13:55:50 -04:00
systemd-initrd-swraid.nix nixosTests.systemd-initrd-swraid: mount the host Nix store 2023-06-08 16:55:45 +02:00
systemd-initrd-vconsole.nix nixos/tests/systemd-initrd-vconsole: fix test and improve reliability 2023-06-15 06:48:05 -04:00
systemd-journal.nix
systemd-machinectl.nix
systemd-misc.nix
systemd-networkd-dhcpserver-static-leases.nix
systemd-networkd-dhcpserver.nix systemd-networkd: add bridge VLANs to DHCP server test 2023-05-17 11:57:55 -04:00
systemd-networkd-ipv6-prefix-delegation.nix nixos/tests: fix typos 2023-05-19 22:31:04 -04:00
systemd-networkd-vrf.nix nixos/tests/systemd-networkd-vrf: clean up 2023-05-11 11:07:54 +02:00
systemd-networkd.nix
systemd-no-tainted.nix
systemd-nspawn-configfile.nix nixos/tests/systemd-nspawn-configfile: init 2023-06-12 12:08:39 +02:00
systemd-nspawn.nix
systemd-oomd.nix
systemd-portabled.nix
systemd-repart.nix Merge pull request #232533 from nikstur/systemd-repart-create-root 2023-05-22 09:13:00 -04:00
systemd-shutdown.nix
systemd-timesyncd.nix nixos/tests/systemd-timesyncd.nix: get rid of with lib 2023-05-12 22:29:30 -03:00
systemd-user-tmpfiles-rules.nix
systemd-userdbd.nix
systemd.nix
tandoor-recipes.nix
taskserver.nix nixos/tests/taskserver: Fix build 2023-06-04 23:14:07 +02:00
tayga.nix
teeworlds.nix
telegraf.nix
teleport.nix
terminal-emulators.nix
thelounge.nix
tiddlywiki.nix
tigervnc.nix
timescaledb.nix
timezone.nix
tinydns.nix
tinywl.nix
tmate-ssh-server.nix nixos/tmate-ssh-server: fix test by opening port on firewall 2023-06-27 21:21:25 +08:00
tomcat.nix
tor.nix nixos/tests/tor.nix: get rid of with lib 2023-05-12 22:29:30 -03:00
tracee.nix tracee: 0.11.0 -> 0.13.0 2023-04-05 10:47:26 +01:00
traefik.nix nixos/traefik: add environmentFiles option 2023-04-25 16:05:28 +02:00
trafficserver.nix
transmission.nix
trezord.nix
trickster.nix
trilium-server.nix
tsm-client-gui.nix
tuptime.nix
turbovnc-headless-server.nix
tuxguitar.nix
txredisapi.nix
ucarp.nix
udisks2.nix
ulogd.nix nixos/tests/ulogd.nix: get rid of with lib 2023-05-12 22:29:26 -03:00
unbound.nix nixos/tests: fix typos 2023-05-19 22:31:04 -04:00
unifi.nix
upnp.nix
uptermd.nix
uptime-kuma.nix nixos/tests/uptime-kuma.nix: get rid of with lib 2023-05-12 22:29:30 -03:00
usbguard.nix
user-activation-scripts.nix
user-home-mode.nix
uwsgi.nix
v2ray.nix
varnish.nix
vault-agent.nix nixosTests.vault-agent: init 2023-04-25 15:58:30 +02:00
vault-dev.nix
vault-postgresql.nix
vault.nix
vaultwarden.nix vaultwarden: 1.27.0 -> 1.28.0 2023-03-28 10:15:39 -07:00
vector.nix nixosTests.vector: fix race condition 2023-05-11 19:45:47 +02:00
vengi-tools.nix
victoriametrics.nix
vikunja.nix nixos/vikunja: test 'port' option 2023-05-13 18:01:36 +01:00
virtualbox.nix treewide: use optionalAttrs instead of 'else {}' 2023-06-25 11:01:34 -03:00
vscode-remote-ssh.nix vscode: move rev and vscodeServer to derivation 2023-06-09 18:52:10 +10:00
vscodium.nix
vsftpd.nix
warzone2100.nix
wasabibackend.nix
webhook.nix
wiki-js.nix nixosTests.wiki-js: fix test on i686-linux 2023-05-09 15:22:35 +02:00
wine.nix
without-nix.nix
wmderland.nix
wordpress.nix wordpress: 6.1.1 -> 6.2; wordpress6_2: init 2023-05-03 13:56:50 +02:00
wpa_supplicant.nix
wrappers.nix nixos/wrappers: allow setuid and setgid wrappers to run in user namespaces 2023-08-09 12:00:00 +00:00
xandikos.nix
xautolock.nix nixos/tests/xautolock.nix: get rid of with lib 2023-05-12 22:29:26 -03:00
xfce.nix nixosTests.xfce: silence a deprecation warning 2023-03-15 17:03:35 +08:00
xmonad-xdg-autostart.nix
xmonad.nix
xpadneo.nix
xrdp.nix
xss-lock.nix nixos/tests/xss-lock.nix: get rid of with lib 2023-05-12 22:29:30 -03:00
xterm.nix
xxh.nix
yabar.nix nixos/tests/yabar.nix: get rid of with lib 2023-05-12 22:29:30 -03:00
yggdrasil.nix nixos/tests/yggdrasil: fix local peering test 2023-04-11 14:34:28 +02:00
zammad.nix zammad: link test in passthru.tests 2023-05-17 16:06:50 +02:00
zeronet-conservancy.nix
zfs.nix Merge pull request #207039 from NixOS/qemu-boot-disk-using-make-disk-image 2023-04-21 13:47:17 +02:00
zigbee2mqtt.nix
zoneminder.nix
zookeeper.nix
zram-generator.nix nixos/zram: add writebackDevice option and corresponding test 2023-03-21 09:26:27 +08:00
zrepl.nix
zsh-history.nix