Martin Weinelt
96d69e40f2
nixos/zigbee2mqtt: run as zigbee2mqtt group
...
Not setting a group is a security defect, since that will run the unit
under the root group.
Fixes: 1af87596
("nixos/zigbee2mqtt: init")
2021-12-06 18:30:01 +01:00
Simon Weber
200c36255f
nixos/zigbee2mqtt: no longer pass dataDir to package
2021-12-06 18:28:59 +01:00
Jan Tojnar
75eaab3757
Merge pull request #126832 from ncfavier/gio-extra-modules
...
nixos: make GIO_EXTRA_MODULES a session variable
2021-12-06 16:23:48 +01:00
pennae
027f7e1b7f
nixos/lib/make-options-doc: generate options.xml from options.json
...
to do this we must replace derivations with attrsets in make-options-doc, since
xml can represent derivations differently from attrset but json cannot. this
also given asciidoc and mddoc the ability to handle derivation differently,
which they previously didn't have.
2021-12-06 16:12:32 +01:00
pennae
9b97a2ea88
nix/lib/make-options-doc: remove nix-level sorting
...
there are no remaining users of sorted option lists except the docbook build,
which sorts its input separately.
2021-12-06 16:12:32 +01:00
pennae
c533b01863
nixos/doc/manual: remove non-matching optionsXML inherit
2021-12-06 16:12:32 +01:00
pennae
4670400309
nixos/lib/make-options-doc: generate asciidoc/md in derivations
...
use the json file derivation we already have to also generate the asciidoc and
md options docs instead of formatting the options in nix. docbook docs are
already produced in derivations.
the new script produce the exact same output as the old in-nix generation.
2021-12-06 16:12:30 +01:00
Artturi
779a657e37
Merge pull request #148649 from Artturin/sgxgid
...
nixos: add sgx group with gid 304
2021-12-06 17:05:00 +02:00
talyz
125bb7dac1
discourse: Don't patch the public path
...
Instead of patching the path to /public in Discourse's sources, make
the nginx configuration refer to the symlink in the discourse
package which points to the real path.
When there is a mismatch between the path nginx serves and the path
Discourse thinks it serves, we can run into issues like files not
being served - at least when sendfile requests from the ruby app are
processed by nginx. The issue I ran into most recently is that backup
downloads don't work.
Since Discourse refers to the public directory relative to the Rails
root in many places, it's much easier to just sync this path to the
nginx configuration than trying to patch all occurrences in the
sources. This should hopefully mean less potential for breakage in
future Discourse releases, too.
2021-12-06 14:21:39 +01:00
ajs124
47da70cdda
Merge pull request #148783 from oxzi/claws-mail-ciao-cacao-v3
...
claws-mail: remove claws-mail-gtk2 version
2021-12-06 11:00:00 +00:00
Jörg Thalheim
c7fa870f5a
Merge pull request #148535 from martinetd/bpf
...
bpf update: bcc remove linux kernel dep + devendor libbpf again, bpftrace 0.13.0 -> 0.14.0 + remove kernel dep, pahole 1.20 -> 1.22 + remove submodule, libbpf revert 0.6.0 -> 0.5.0 (unusable)
2021-12-06 08:33:14 +00:00
Robert Hensing
862d167f17
Merge pull request #147441 from pennae/option-doc-staticizing
...
nixos/*: add trivial defaultText to options where applicable
2021-12-06 01:35:38 +01:00
pennae
c694c35f9d
nixos/*: escape pkgs reference in examples and descriptions
2021-12-06 00:38:05 +01:00
Alvar Penning
521f30f80c
claws-mail: remove claws-mail-gtk2 version
...
The GTK+ 2 version of Claws Mail, major version number three, relies on
Python 2, which is end-of-life and might be dropped in the nixpkgs.
In favour of #148779 , this older branch of Claws Mail was removed.
2021-12-05 23:08:18 +01:00
Janne Heß
b30d619368
nixos/top-level: Check syntax of switch-to-configuration
2021-12-05 18:54:36 +01:00
Janne Heß
6f1e0dc34f
nixos/switch-to-configuration: Move excludes up
2021-12-05 18:54:19 +01:00
Janne Heß
5d34545954
nixos/switch-to-configuration: Ignore scopes
2021-12-05 18:47:35 +01:00
Janne Heß
1e422e7d58
nixos/switch-to-configuration: Fix dry order
...
This makes the order of the dry activation messages the same as the real
actions which makes more sense than another random order.
2021-12-05 18:46:50 +01:00
Janne Heß
3693e8b093
nixos/switch-to-configuration: Clean perl code
...
oct() is recommended by perlcritic and the rest was unused.
2021-12-05 18:45:44 +01:00
Janne Heß
50a0f33c2a
nixos/switch-to-configuration: Remove unnecessary TODOs
...
The first one doesn't make any sense because the directory where the
init binary resides does not contain other tools we need like
systemd-escape.
The second one doesn't make sense either because the errors are already
ignored.
2021-12-05 18:43:42 +01:00
Jörg Thalheim
8ae2771224
Merge pull request #148729 from bjornfor/add-missing-collectd-group-v2
...
nixos/collectd: add missing group
2021-12-05 17:18:55 +00:00
Ryan Mulligan
542e917e99
Merge pull request #148061 from astro/drbd_upstream
...
drbd: update, fix, add test
2021-12-05 09:10:22 -08:00
Bjørn Forsman
05bc708a7f
nixos/collectd: add missing group
...
While upgrading my NixOS system I was greeted by this error:
error:
Failed assertions:
- users.users.collectd.group is unset. This used to default to
nogroup, but this is unsafe. For example you can create a group
for this user with:
users.users.collectd.group = "collectd";
users.groups.collectd = {};
Let's fix it.
2021-12-05 17:17:12 +01:00
Bobby Rong
af6071db60
Merge pull request #148415 from erictapen/borgbackup
...
Revert "nixos/borgbackup: specify systemd WorkingDirectory"
2021-12-05 18:02:49 +08:00
Martin Weinelt
68dc5484e9
nixos/doc/manual/release-notes/rl-2111: add prometheus-smartctl-exporter
2021-12-05 03:18:17 +01:00
Martin Weinelt
0c008f9c0d
Merge pull request #147056 from mweinelt/smartctl-exporter
2021-12-05 03:00:48 +01:00
Bobby Rong
894fb34b23
Merge pull request #148159 from bobby285271/pantheon
...
pantheon.extra-elementary-contracts: split package
2021-12-05 09:56:34 +08:00
Martin Weinelt
d94cec6ead
Merge pull request #148543 from mweinelt/knot-hardening
2021-12-05 02:44:28 +01:00
Sean Heath
6af3d13bec
nixos/ddclient: fix permission for ddclient.conf ( #148179 )
2021-12-05 02:07:42 +01:00
Artturin
fc4df13e26
nixos: add sgx group with gid 304
...
fix Unknown group 'sgx', ignoring message from udev
2021-12-05 01:37:43 +02:00
Artturi
493d66a225
Merge pull request #145732 from gardspirito/mx-puppet-discord
2021-12-04 23:12:09 +02:00
Samuel Dionne-Riel
b976947ede
Merge pull request #121345 from samueldr/feature/plasma-mobile
...
Add support for Plasma Mobile
2021-12-04 15:37:26 -05:00
Thomas Gerbet
1a119b223c
vault{,bin}: 1.8.4 -> 1.9.0
...
https://github.com/hashicorp/vault/blob/v1.9.0/CHANGELOG.md
2021-12-05 06:10:43 +10:00
Martin Weinelt
146ddee13b
nixos/tests/knot: add extra cpu core to master
...
This verifies that we allow setting affinity in multicore systems.
2021-12-04 16:53:31 +01:00
Martin Weinelt
893f7af236
nixos/tests/knot: log systemd unit hardening info
2021-12-04 16:53:31 +01:00
Martin Weinelt
67f102d8d8
nixos/knot: update systemd hardening
2021-12-04 16:53:31 +01:00
Felix Schröter
d6a4500f88
nixos/ddclient: support all special characters in password
2021-12-04 16:28:31 +01:00
Robert Hensing
430c9173e4
Merge pull request #148363 from hercules-ci/add-dockerTools-fakechroot
...
dockerTools: Add fakechroot to fakeRootCommands
2021-12-04 15:13:37 +01:00
Maximilian Bosch
5ffc828912
Merge pull request #148301 from Kranzes/nextcloud
...
nextcloud23: init at 23.0.0
2021-12-04 14:54:25 +01:00
Robert Hensing
ddda5f28e1
dockerTools: Keep fakechroot disabled by default
...
Avoid risk of breaking existing images by making it opt-in.
2021-12-04 13:49:10 +00:00
Robert Hensing
0e9bc9ffd1
dockerTools: Add fakechroot to fakeRootCommands
2021-12-04 13:49:10 +00:00
Dominique Martinet
559fe43665
nixos/tests: add bpf test
...
test bcc and bpftrace briefly
2021-12-04 21:12:07 +09:00
Dominique Martinet
efe6967e93
bcc: move from linux-kernels packages to normal packages
...
bcc doesn't really need kernel itself, it just cares about module path.
It's actually better to use /run/booted-system/kernel-modules/lib/modules
for two reasons:
- no need to rebuild bcc for each new kernel
- can use a newer bcc with a booted kernel that doesn't match the current
system
2021-12-04 21:07:09 +09:00
Maciej Krüger
ca82a582d9
nixos/rtsp-simple-server: init
2021-12-04 12:58:36 +01:00
Tristan
7f6a2d5663
oci-containers: fix imageFile example
2021-12-04 10:23:58 +01:00
Samuel Dionne-Riel
2f12f30f00
nixos/plasma5: Split common Plasma config for Mobile from Desktop
2021-12-03 20:17:04 -05:00
Samuel Dionne-Riel
7f4324c64e
nixos/plasma5: Add suggested plasma mobile apps
2021-12-03 20:17:04 -05:00
Samuel Dionne-Riel
7df34e1145
nixos/plasma5: configuration for plasma mobile
2021-12-03 20:17:04 -05:00
Samuel Dionne-Riel
13a03fb289
nixos/plasma5: Add maliit-keyboard to plasma mobile session
2021-12-03 20:17:04 -05:00
Samuel Dionne-Riel
b41923c1ca
nixos/plasma5: configuration for plasma mobile
2021-12-03 20:17:04 -05:00
Tyler Slabinski
da6a39436b
nixos/plasma5: Add mobile.enable option for plasma
2021-12-03 20:17:04 -05:00
Samuel Dionne-Riel
fde4f481d9
nixos/plasma5: Make kwinrc/kdeglobals internally configurable
...
This is used with the Plasma Mobile configuration to configure the
system as upstream recommends.
2021-12-03 20:17:04 -05:00
Artturi
610b719d91
Merge pull request #148491 from Artturin/sendkeydelay
...
nixos/test-driver: add 10ms delay to send_key
2021-12-04 02:13:49 +02:00
Niklas Hambüchen
6c9f46d063
Merge pull request #148389 from GTrunSec/consul
...
nixos/consul: update deprecated setting
2021-12-03 21:53:10 +01:00
Martin Weinelt
42ae887b23
Merge pull request #148471 from Ma27/postfix-exporter-hardening
2021-12-03 20:26:10 +01:00
Artturin
60422ba2ea
nixos/test-driver: add 10ms delay to send_key
...
attempt to fix https://github.com/NixOS/nixpkgs/issues/147294
2021-12-03 20:04:56 +02:00
Maximilian Bosch
8e6d403e65
nixos/prometheus-postfix-exporter: whitelist addr-family AF_UNIX
...
Otherwise, `postfix_up{path="/var/lib/postfix/queue/public/showq"}` will
always be `0` indicating an postfix outage because this is a unix domain
socket that cannot be connected to:
2021/12/03 14:50:46 Failed to scrape showq socket: dial unix /var/lib/postfix/queue/public/showq: socket: address family not supported by protocol
2021-12-03 19:01:19 +01:00
Jörg Thalheim
4f08634a18
Merge pull request #148458 from lunik1/snapraid-fix
...
nixos/snapraid: relax permissions of snapraid-sync
2021-12-03 17:59:37 +00:00
Jörg Thalheim
99c916dd8e
Merge pull request #148201 from Artturin/nixservesecret
...
nix-serve: fix NIX_SECRET_KEY_FILE
2021-12-03 17:50:27 +00:00
GTrunSec
8e92c6c510
nixos/consul: update deprecated webUi
2021-12-03 09:46:24 -08:00
Artturi
7ca9a14f7d
Merge pull request #148382 from Artturin/lightdmtmpfile
2021-12-03 19:31:06 +02:00
Dmitry Kalinkin
721e732e36
Merge pull request #147809 from veprbl/pr/wafHook_release_notes
...
doc: add release notes for a wafHook change
2021-12-03 11:57:26 -05:00
Artturin
d87d5731d5
nixos/tests: fix nix-serve path
...
nixos/tests: rename nix-ssh-serve to nix-serve-ssh
nixos/tests/nix-serve-ssh: add --experimental-features
nixos-serve: add nix-serve-ssh to passthru.tests
2021-12-03 18:40:03 +02:00
lunik1
6073b099d0
nixos/snapraid: relax permissions of snapraid-sync
...
Remove PrivateDevices to silence warning about SnapRAID being
unable to access disk UUIDs.
Add CAP_FOWNER when touch is enabled so file time stamps can be
set.
2021-12-03 15:55:27 +00:00
Maciej Krüger
aac7065c8d
Merge pull request #148108 from mkg20001/lxdimageserver
2021-12-03 16:06:21 +01:00
Maciej Krüger
79f6a3147f
Merge pull request #147365 from FlorianFranzen/waydroid/psi-default
2021-12-03 14:58:31 +01:00
Florian Franzen
64a0cf0df2
nixos/waydroid: enable kernel psi interface if required
2021-12-03 13:04:17 +01:00
Kerstin Humm
ac8a9c3f03
Revert "nixos/borgbackup: specify systemd WorkingDirectory"
...
This reverts commit 62ab77a322
.
This broke nixosTests.borgbackup:
https://github.com/NixOS/nixpkgs/pull/143995#issuecomment-985136152
2021-12-03 12:21:13 +01:00
kyren
c23851c47e
Fix shairport-sync module to create and set an explicit group
2021-12-03 03:16:03 -05:00
Artturin
ebbfccf8a0
nixos/lightdm: fix tmpfile by changing 0 to -
...
Closes https://github.com/NixOS/nixpkgs/issues/116631
2021-12-03 06:22:21 +02:00
Philipp Dargel
a3401f6e33
OpenJDK: expose more versions
...
Provide a way to access all JDK versions.
2021-12-02 17:54:20 -08:00
ajs124
757dd008b2
postgresql_9_6: drop
2021-12-03 01:14:29 +01:00
github-actions[bot]
987163192b
Merge master into staging-next
2021-12-03 00:01:31 +00:00
ajs124
559552ea19
Merge pull request #145695 from mohe2015/step-ca-tests
...
nixos/tests: add step-ca test
2021-12-03 00:54:10 +01:00
Nicolas Benes
7065725f68
doc: add release notes for a wafHook change
2021-12-02 18:46:48 -05:00
Robert Hensing
66c19d856b
Merge pull request #148341 from hercules-ci/add-dockerTools-customization-layer-dependencies
...
dockerTools: Add store dependencies of the customization layer
2021-12-03 00:20:44 +01:00
Robert Hensing
d0bcc212de
nixosTests.docker-tools: Use unique binary in test case
2021-12-02 22:26:05 +00:00
pennae
3e9c5fc8ca
nixos/*: escape config reference in examples and descriptions
2021-12-02 22:35:05 +01:00
pennae
2512455639
nixos/*: add trivial defaultText for options with simple defaults
2021-12-02 22:35:04 +01:00
Martin Weinelt
42ffc37872
Merge pull request #148307 from mweinelt/release-notes-fixups
2021-12-02 22:06:07 +01:00
Aaron Andersen
ac573f3975
Merge pull request #148049 from hexagonal-sun/shairport-firewall-rules
...
nixos/shairport-sync: add firewall rules
2021-12-02 15:21:28 -05:00
Matthew Leach
ea90c516e7
nixos/shairport-sync: add firewall rules
...
Add an option to automatically open the firewall for shairport.
2021-12-02 19:24:50 +00:00
Ilan Joselevich
c0f4b20db7
nextcloud23: init at 23.0.0
2021-12-02 20:53:21 +02:00
Robert Hensing
78ada83361
nixos/eval-config: Deprecate extraArgs and check parameters
2021-12-02 18:23:43 +00:00
Robert Hensing
1a223857ab
nixos/documentation: Use new extendModules instead of legacy args
2021-12-02 18:23:43 +00:00
Robert Hensing
0b5aea2b27
nixos/eval-config: Remove a rec
2021-12-02 18:23:43 +00:00
Robert Hensing
59c4a35aab
nixos/eval-config: Avoid evalModules args and check parameters
2021-12-02 18:23:43 +00:00
Martin Weinelt
34d4676e9d
nixos/doc/manual/release-notes/rl-2111: fix multiple option links
2021-12-02 19:03:05 +01:00
github-actions[bot]
bcc4d12e17
Merge master into staging-next
2021-12-02 18:01:11 +00:00
Martin Weinelt
d1da5658a6
nixos/doc/manual/release-notes/rl-2111: move highlights introduction
2021-12-02 18:45:04 +01:00
AmineChikhaoui
fa06cf556e
ec2-amis: add release 21.11
2021-12-02 11:01:47 -05:00
Artturin
2fb77151e8
nix-serve: fix NIX_SECRET_KEY_FILE
2021-12-02 17:45:50 +02:00
github-actions[bot]
a68e0fdca5
Merge master into staging-next
2021-12-02 12:01:12 +00:00
adisbladis
fafe9a8d04
Merge pull request #148236 from Vonfry/emacs/remove-org-elpa
...
emacsPackages.orgPackages: deprecated
2021-12-02 01:43:22 -08:00
talyz
ab042d6452
discourse.plugins: Update all plugins to their latest versions
...
Also, add support for updating plugins which keep gem versions in
files at the root of the repo (discourse-prometheus) and replace the
`up-plugin.sh` script with a README file pointing to the plugin
packaging documentation.
2021-12-02 10:43:14 +01:00
talyz
e2415dbb8f
discourse: 2.7.9 -> 2.8.0.beta9
...
Update to the latest beta, since upstream advocates for it. See
https://github.com/NixOS/nixpkgs/issues/146308 for more info.
2021-12-02 10:31:00 +01:00
Jacek Galowicz
58371472fe
Merge pull request #146512 from DeterminateSystems/better-visibility
...
nixos/test-driver: more context when step finishes, give more functions nested labels
2021-12-02 09:26:21 +00:00
Vonfry
932ab304f0
emacsPackages.orgPackages: deprecated
...
org elpa is deprecated and moved into gnu elpa and nongnu elpa.
link: nix-community/emacs-overlay#191
2021-12-02 16:16:59 +08:00
github-actions[bot]
4746376a5f
Merge master into staging-next
2021-12-02 00:01:31 +00:00
Michele Guerini Rocco
9342984bde
Merge pull request #148160 from bb2020/transmission
...
nixos/transmission: adjust message-level enum
2021-12-01 21:28:16 +01:00