Commit Graph

31320 Commits

Author SHA1 Message Date
Bruno Inec
8f10857af4
let systemd handle /var/lib/goeland creation 2023-01-20 00:39:32 +01:00
Bruno Inec
988feead01
nixos/goeland: init 2023-01-20 00:39:31 +01:00
Izorkin
058951e85d
nixos/installer/cd-dvd: removing duplicate nixpkgs 2023-01-19 22:52:45 +03:00
rnhmjoj
b139c467e9
Revert "Revert "nixos/tests/installer: test relative paths in initrd secrets""
This reverts commit 8d45d82c71.

The tests shold pass now that systemd-boot handles failures in initrd
for older boot entries.
2023-01-19 20:50:59 +01:00
rnhmjoj
4ed9893770
nixos/systemd-boot: improve initrd-secrets error messages
This is the equivalent of eccc1e5b but for systemd-boot
2023-01-19 20:50:17 +01:00
rnhmjoj
2bc5625877
nixos-install: remove root requirement for bind mount
This moves the creation of the bind mount inside the `nixos-enter`
invocation. The command are executed in an unshared mount namespace, so
they can be run as an unprivileged user.
2023-01-19 20:50:17 +01:00
Artturi
f837537cdd
Merge pull request #207034 from ShamrockLee/root-layout 2023-01-19 15:51:39 +02:00
Artturin
e59b23d062 treewide: remove accidentally introduced -l
they were all removed in
c2b898da76
but these changes were made before that and merged after it
2023-01-19 15:07:45 +02:00
Vladimír Čunát
8d45d82c71
Revert "nixos/tests/installer: test relative paths in initrd secrets"
This reverts commit 9bb888c9f8 from PR #210812.
We first need to fix nixosTests.installer.simpleUefiSystemdBoot
2023-01-19 10:25:22 +01:00
guangtao
b5a3f795c3 nixos/nomad: fix multi-plugin-dir path 2023-01-18 22:22:43 -08:00
Naïm Favier
556a4a7951 nixos/installation-cd-minimal: include HTML doc
Although we don't really need HTML documentation in the minimal installer,
not including it may cause annoying cache misses in the case of the NixOS manual.
2023-01-19 00:30:33 +01:00
Vladimír Čunát
2b988c76fd
Revert "nixosTests.installer: bump memorySize"
This reverts commit 309ed272be.
The bump caused nixosTests.installer.luksroot hang, e.g. see
https://hydra.nixos.org/build/205951019
(I don't know why.)

The OOM issues were avoided by 6dccdc4585 (newer but merged earlier)
2023-01-18 11:45:48 +01:00
Pascal Bach
e229ca64d0
Merge pull request #211005 from AtaraxiaSjel/nixos/gitea-zstd
nixos/gitea: add tar.zst to the dump type
2023-01-18 09:22:38 +01:00
Ryan Lahfa
eb6d457115
Merge pull request #209246 from e1mo/dokuwiki/package-overriding
dokuwiki: Combine mechanism for plugins and templates
2023-01-18 00:51:18 +01:00
K900
860f1b67da
Merge pull request #198287 from K900/kpackage-fix
nixos/plasma5: make kpackage able to resolve dependencies
2023-01-17 21:46:42 +03:00
Jonas Heinrich
e8731b8778
Merge pull request #210701 from onny/wordpress-settings
nixos/wordpress: add settings option
2023-01-17 19:38:17 +01:00
Martin Weinelt
5770984a95
Merge pull request #211252 from schnusch/systemd-user-tmpfiles-rules
nixos: systemd: systemd.user.tmpfiles.users add default
2023-01-17 17:41:41 +00:00
schnusch
f0f2c6bec9 nixos: systemd: systemd.user.tmpfiles.users add default 2023-01-17 16:53:45 +01:00
Florian Klink
24b4189619
Merge pull request #207468 from schnusch/systemd-user-tmpfiles-rules
nixos: systemd: add systemd.user.tmpfiles.rules, systemd.user.tmpfiles.users.<name>.rules
2023-01-17 14:39:44 +01:00
schnusch
34ad8447c3 nixos: systemd: add systemd.user.tmpfiles 2023-01-17 12:19:40 +01:00
Naïm Favier
cd4f1a1df5
nixos-install: only mount if root 2023-01-17 11:39:34 +01:00
Maximilian Bosch
91054ce6ce
Merge pull request #207748 from blargg/wiki-js
nixos/wiki-js: Add git and openssh to the wiki-js service path to enable git backups.
2023-01-17 08:35:58 +01:00
Nick Cao
2b3c8ae88a
Merge pull request #209767 from 0x4A6F/master-coturn-tests
test/coturn: add some sanity-checks
2023-01-17 10:34:51 +08:00
Nick Cao
8f34f01185
Merge pull request #194343 from oxalica/fix/swap-btrfs
nixos/swap: fix creation on BTRFS and refactor assertions
2023-01-17 08:35:15 +08:00
Sandro
8986570cb3
Merge pull request #208956 from SuperSandro2000/profile-base-tcpdump 2023-01-17 01:20:31 +01:00
Tom Jankauski
eef1f70919 nixos/wiki-js: Add git and openssh to enable git backups. 2023-01-16 16:04:40 -08:00
Michele Guerini Rocco
594b94b4c3
Merge pull request #210812 from rnhmjoj/pr-initrd-secrets
boot.initrd.secrets fixes
2023-01-17 00:48:58 +01:00
oxalica
eecb6c2bd8 nixos/tests/swap-file-btrfs: init 2023-01-17 06:56:55 +08:00
oxalica
87a0c9490d nixos/swap: fix creation on BTRFS and refactor assertions 2023-01-17 06:47:21 +08:00
Jeff Huffman
96ec8c7623 nixos/documentation.man.mandb: Add skipPackages option, and include nixos-version
prevents unnecessary recreation of man caches

Fixes #209835
2023-01-16 22:24:02 +01:00
Lassulus
14c48f9864
Merge pull request #211098 from Mic92/lxc-container
nixos/lxc-container: fix compatibility with systemd-nspawn
2023-01-16 17:31:25 +01:00
Michael Alan Dorman
2bb560b367 gmrender-resurrect: Add gmediarender service
This creates a systemd unit that will start and supervise the
gmediarender daemon.
2023-01-16 17:28:56 +01:00
Jörg Thalheim
22a8cf0c28 nixos/lxc-container: fix compatibility with systemd-nspawn 2023-01-16 15:50:37 +01:00
Jonas Heinrich
c51dd42311 nixos/wordpress: add settings option 2023-01-16 14:06:10 +01:00
maifel-maifel
4dbc2fe873
nixos/syncthing: point out pitfalls with extraOptions (#210208)
Co-authored-by: digital <git-voopaipa@dinid.net>
2023-01-16 13:12:12 +01:00
Nick Cao
7ace936995
Merge pull request #211003 from lilyinstarlight/fix/qt6-plugin-path
nixos/qt: set QT_PLUGIN_PATH and QML2_IMPORT_PATH when enabled
2023-01-16 18:34:23 +08:00
Nick Cao
a90e324332
Merge pull request #210785 from fgaz/mindustry/nixos-test
nixosTests.mindustry: init; mindustry: use SRI hashes
2023-01-16 16:21:06 +08:00
Nick Cao
d3a33fd310
Merge pull request #211042 from uninsane/pr/mx-puppet-discord-to-subdir
nixos/mx-puppet-discord: move into matrix category
2023-01-16 15:51:40 +08:00
LuoChen
7a6c0bb468 snapper: fix "type=oneshot" error in snapper-boot.service 2023-01-16 15:33:15 +08:00
colin
87c877fff8 nixos/mx-puppet-discord: move into matrix category 2023-01-16 06:23:25 +00:00
Lily Foster
185874df63
nixos/qt: set QT_PLUGIN_PATH and QML2_IMPORT_PATH when enabled 2023-01-15 22:08:47 -05:00
rnhmjoj
9bb888c9f8
nixos/tests/installer: test relative paths in initrd secrets 2023-01-16 02:31:02 +01:00
rnhmjoj
928181b5f3
nixos/tests/installer: add full disk encryption test
This tests a common full disk encryption setup:
https://gist.github.com/ladinu/bfebdd90a5afd45dec811296016b2a3f
2023-01-16 02:31:01 +01:00
rnhmjoj
9fc47e6db3
nixos-install: fix missing initrd.secrets paths
When installing NixOS in the target filesystem /mnt, paths relative to
configuration.nix in `initrd.secrets` are turned by Nix into absolute
paths that reference /mnt. While building the system derivation works,
installing the bootloader fails because the latter process takes place
inside the chroot environment where /mnt does not exist.

Ideally, we would also build the system within chroot, but this greatly
complicates the matter as it requires  manually copying over Nix, its
runtime dependencies and all channels. Possibly, this would also break
several assumptions users have about how nixos-install works.

A simpler and safer (but less neat) solution is to temporarily bind
mount all mount points in /mnt under /mnt/mnt to keep the paths
functional while the bootloader is being installed.
This is essentially the workaround described in issue #73404.
2023-01-16 02:31:01 +01:00
rnhmjoj
eccc1e5bf4
install-grub.pl: improve initrd-secrets error messages
The build of initrd-secrets can routinely fail for old boot entries
if the secrets have been removed or renamed in a later generation.
This always happens for generation 1, because it's built from the
NixOS installer and the paths differs by the mount point (i.e. /mnt).

The error is very confusing because it fails to mention it's about
an older generation and that it's somewhat harmless.

This commit turns the error into a warning for all generations but the
current, adds the name of the failed entry to the message and a note
explaining why it can happen.
2023-01-16 02:30:39 +01:00
Sandro
6fecd5a257
Merge pull request #204342 from anpandey/znc 2023-01-16 02:07:30 +01:00
Matthieu Coudron
14905af025
Merge pull request #210998 from teto/fix-sshd
services.openssh: fix doc
2023-01-16 01:52:47 +01:00
Dmitriy Kholkin
8e6f6d7db1
nixos/gitea: add tar.zst to the dump type 2023-01-16 03:34:11 +03:00
Jörg Thalheim
38d3031013
Merge pull request #210942 from GaetanLepage/autorandr
autorandr: 1.12.1 -> 1.13, nixos/services/autorandr: add ignoreLeadOption
2023-01-16 00:34:16 +01:00
Matthieu Coudron
293de575cb modules.openssh: provide default settings
else evaluation fails
2023-01-16 00:11:53 +01:00
Matthieu Coudron
83e2f6f3da services.openssh: fix doc 2023-01-16 00:06:40 +01:00
Artturi
ee5e15cf2d
Merge pull request #208614 from LeSuisse/grub2-CVE-2022-2601-CVE-2022-3775 2023-01-15 23:23:33 +02:00
Naïm Favier
7d3f7637c6
Merge pull request #210965 from Izorkin/fix-gitea 2023-01-15 21:50:58 +01:00
Maximilian Bosch
8528a0b512
Merge pull request #210897 from K900/kernels-20230115
Kernels for 2023-01-15
2023-01-15 20:58:06 +01:00
Izorkin
1fd7d52d82
nixos/gitea: fix creation of data directory 2023-01-15 21:33:21 +03:00
Maximilian Bosch
6f474d1af4
Merge pull request #209495 from amesgen/gitea-dump-activation
nixos/gitea: don't run gitea-dump on activation
2023-01-15 19:28:03 +01:00
Maximilian Bosch
9aa1391bdf
Merge pull request #208803 from Ma27/revert-kmod-stage-1-hack
Revert "nixos/stage-1: fix `modprobe` in initial ramdisk on systems w/glibc-2.34"
2023-01-15 19:10:10 +01:00
Ryan Lahfa
e2ac17f781
Merge pull request #207466 from Patryk27/fix/174065
nixos: add --specialisation to nixos-rebuild
2023-01-15 18:52:09 +01:00
Ryan Lahfa
503c288f4e
Merge pull request #207567 from Stunkymonkey/photoprism-module-init
nixos/photoprism: init module
2023-01-15 18:36:13 +01:00
Patryk Wychowaniec
2c55eba8f4
nixos: add --specialisation to nixos-rebuild
This commit fixes a papercut in nixos-rebuild where people wanting to
switch to a specialisation (or test one) were forced to manually figure
out the specialisation's path and run its activation script - since now,
there's a dedicated option to do just that.

This is a backwards-compatible change which doesn't affect the existing
behavior, which - to be fair - might still be considered sus by some
people, the painful scenario here being:

- you boot into specialisation `foo`,
- you run `nixos-rebuild switch`,
- whoops, you're no longer at specialisation `foo`, but you're rather
  brought back to the base system.

(it's especially painful for cases where specialisation is used to load
extra drivers, e.g. Nvidia, since then launching `nixos-rebuild switch`,
while forgetting that you're inside a specialisation, can cause some
parts of your system to get accidentally unloaded.)

I've tried to mitigate that by improving specialisations so that they
create a dedicated file somewhere in `/run/current-system` containing
the specialisation's name (which `nixos-rebuild` could then use as the
default value for `--specialisation`), but I haven't been able to come
up with anything working (plus it would be a breaking change then).

Closes https://github.com/NixOS/nixpkgs/issues/174065
2023-01-15 18:16:49 +01:00
Felix Buehler
0214f02419 nixos/photoprism: add test 2023-01-15 18:02:46 +01:00
Felix Buehler
fb9e8b9bd4 nixos/photoprism: init module 2023-01-15 18:02:43 +01:00
Ryan Lahfa
f8dd03989e
Merge pull request #208038 from SuperSandro2000/uptime-kuma-apprise
nixos/uptime-kuma: add option to enable apprise support
2023-01-15 17:59:00 +01:00
Ryan Lahfa
07dabf11e1
Merge pull request #210935 from JulienMalka/Ntfy-data-folder
nixos/ntfy-sh: Create data folder and auth database
2023-01-15 17:49:34 +01:00
Ryan Lahfa
b42ea74b96
Merge pull request #206655 from vlinkz/distroname
nixos/version: add system.nixos.distroName and system.nixos.distroId options
2023-01-15 17:39:55 +01:00
Julien Malka
d32f9548cb
nixos/ntfy-sh: Create data folder and auth database 2023-01-15 17:34:23 +01:00
Ryan Lahfa
df1262baae
Merge pull request #210927 from JulienMalka/Ntfy-test-fix
nixos/ntfy-sh: Fixed nixos test
2023-01-15 17:06:50 +01:00
Gaetan Lepage
d599e734e5 autorandr: 1.12.1 -> 1.13, nixos/services/autorandr: add ignoreLeadOption 2023-01-15 16:57:13 +01:00
Matthieu Coudron
cf10d7aef8
services.openssh: support freeform settings (#193757)
* services.openssh: support freeform settings

Keep "extraConfig" but introduces "settings".

Also renames several options

(mkRenamedOptionModule [ "services" "openssh" "kbdInteractiveAuthentication" ] [  "services" "openssh" "settings" "KbdInteractiveAuthentication" ])
(mkRenamedOptionModule [ "services" "openssh" "passwordAuthentication" ] [  "services" "openssh" "settings" "PasswordAuthentication" ])
(mkRenamedOptionModule [ "services" "openssh" "useDns" ] [  "services" "openssh" "settings" "UseDns" ])
(mkRenamedOptionModule [ "services" "openssh" "permitRootLogin" ] [  "services" "openssh" "settings" "PermitRootLogin" ])

* updated doc
* regen doc
2023-01-15 16:32:46 +01:00
K900
6dccdc4585
Merge pull request #210930 from pennae/installer-test-no-docs
nixosTests.installer.*: disable documentation
2023-01-15 18:25:41 +03:00
pennae
a88a515653 nixosTests.installer.*: disable documentation
building the manual takes a pretty long time and sufficient memory to
cause hydra failures: https://hydra.nixos.org/build/205689097#tabs-buildsteps
2023-01-15 16:06:07 +01:00
Julien Malka
d40d0ce7e6
nixos/ntfy-sh: Fixed nixos test 2023-01-15 15:59:30 +01:00
K900
33b60cca17 linux/hardened/patches/6.1: init at 6.1.6-hardened1 2023-01-15 15:23:24 +03:00
Francesco Gazzetta
cbe58afca0 nixosTests.mindustry: init 2023-01-15 13:11:37 +01:00
Sandro
fa8ae2120d
Merge pull request #208715 from elohmeier/prom-rspamd-fix
Fixes https://github.com/NixOS/nixpkgs/issues/210390
2023-01-15 02:49:52 +01:00
Ryan Lahfa
33231c337e
Merge pull request #209538 from voidzero/zsh-syntax-hl.regexp
zsh-syntax-highlighting: add regexp to list of highlighters
2023-01-15 00:26:10 +01:00
Victor Fuentes
d3528cdc3d
nixos/version: add config.system.nixos.distroName and config.system.nixos.distroId 2023-01-14 16:19:06 -05:00
Elian Doran
ba0a640afd fancontrol: restart service after suspend 2023-01-14 19:33:48 +01:00
Martin Weinelt
b974cf6522
Merge pull request #209180 from NixOS/staging-next 2023-01-14 16:26:39 +00:00
Aaron Andersen
4e798adb3d
Merge pull request #209692 from veehaitch/gh-runner-mkmerge
nixos/github-runners: use `mkMerge` for `serviceConfig`
2023-01-14 11:10:14 -05:00
github-actions[bot]
79cb2f7e61
Merge master into staging-next 2023-01-14 11:12:34 +00:00
Naïm Favier
94197f9339
Merge pull request #207725 from SuperSandro2000/nixos-nginx 2023-01-14 10:45:32 +01:00
github-actions[bot]
4712ed9439
Merge master into staging-next 2023-01-14 00:02:26 +00:00
Robert Hensing
e973da60cd
Merge pull request #200225 from pacien/nixos-qemu-vm-restrictnetwork
nixos/qemu-vm: add option "restrictNetwork"
2023-01-13 21:47:21 +01:00
github-actions[bot]
49722fd14a
Merge master into staging-next 2023-01-13 18:01:34 +00:00
Sandro
ba33f29792
Merge pull request #210434 from Stunkymonkey/test-acme-server-phases 2023-01-13 17:59:06 +01:00
Robert Schütz
0a9df042f2
Merge pull request #207595 from wahjava/update-vaultwarden
vaultwarden: 1.26.0 -> 1.27.0
2023-01-13 05:24:14 -08:00
pennae
d6e464b4c5
Merge pull request #208983 from pennae/nixos-manual-md
nixos/manual: convert module chapters to markdown
2023-01-13 13:29:01 +01:00
Peder Bergebakken Sundt
5c7fa218c1 nixos/flexget: add package option 2023-01-13 13:08:05 +01:00
github-actions[bot]
85724d692e
Merge master into staging-next 2023-01-13 12:01:30 +00:00
Robin Gloster
96edaa02de
Merge pull request #210511 from mayflower/gitaly-runtime-dir
nixos/gitlab: set gitaly runtime dir
2023-01-13 12:33:37 +01:00
Franz Pletz
b88913fb11
nixos/gitlab: set gitaly runtime dir
If `runtime_dir` is not set, gitaly will use `/tmp` as a place for sockets
and packed binaries like `git2go`. If the gitlab instance does not experience
much traffic and gitlay is not restarted regularly, systemd-tmpfiles will
remove the binaries. This breaks some gitlab functionality until gitaly is
restarted manually.
2023-01-13 11:26:52 +01:00
Janne Heß
ea98d03597
Merge pull request #209755 from ivanbrennan/fix-neovim-runtime
nixos.programs.neovim: fix runtime
2023-01-13 09:43:07 +01:00
Martin Weinelt
5342b695b1 Merge remote-tracking branch 'origin/master' into staging-next 2023-01-12 23:07:01 +01:00
Felix Buehler
fec6e19fd1 nixos/tests/acme/generate-certs: deprecate phases 2023-01-12 22:56:46 +01:00
pacien
b25e0e8ebc nixos/tests: add qemu-vm-restrictnetwork test 2023-01-12 19:50:27 +01:00
Sandro
a9fb542957
Merge pull request #202095 from DeeUnderscore/update/git-bug-0.8.0 2023-01-12 16:32:53 +01:00
Naïm Favier
7e1cf49870
Merge pull request #161237 from miallo/nixos-version-configuration-revision 2023-01-12 12:31:54 +01:00
Rhys Davies
eb4891d2d3 nixos/vaultwarden: fix test 2023-01-12 01:48:12 -08:00
Martin Weinelt
2895576165 Merge remote-tracking branch 'origin/master' into staging-next 2023-01-11 15:37:38 +01:00