Commit Graph

24038 Commits

Author SHA1 Message Date
Bobby Rong
dd596307b7
Merge pull request from VergeDX/kippo-remove
kippo: cleanup the corresponding broken module.
2021-10-11 17:19:11 +08:00
github-actions[bot]
03d816e015
Merge staging-next into staging 2021-10-11 00:02:14 +00:00
Martin Weinelt
f358794824
Merge pull request from jdreaver/prowlarr 2021-10-10 23:30:57 +02:00
David Reaver
11ce481845 nixos/tests/prowlarr: init 2021-10-10 14:05:33 -07:00
David Reaver
3d79c9250a nixos/prowlarr: init 2021-10-10 14:05:33 -07:00
Michele Guerini Rocco
727fa5a9b1
Merge pull request from legendofmiracles/wol
Adds a notice that the service.wakeonlan module was moved
2021-10-10 21:24:15 +02:00
github-actions[bot]
aac35c22db
Merge staging-next into staging 2021-10-10 18:01:41 +00:00
legendofmiracles
9aae71379d
nixos/wakeonlan: add note to rename.nix 2021-10-10 10:50:16 -06:00
Luflosi
7938ea67a7
nixos/doc/md-to-db.sh: handle path to nixpkgs with spaces
Without this change, the script will fail if the path to nixpkgs contains a space.
2021-10-10 11:57:51 +02:00
misuzu
f898fde586 docs/release-notes: mention iptables switch 2021-10-10 11:43:35 +03:00
Christian Kögler
b154b6f7d8 nixos/influxdb: Fix cross compilation for config.toml 2021-10-10 10:34:55 +02:00
github-actions[bot]
1b2b1c3d56
Merge staging-next into staging 2021-10-10 00:02:14 +00:00
Maximilian Bosch
3498c5ff3c
nixos/nextcloud: build manual without warnings 2021-10-09 22:45:39 +02:00
Maximilian Bosch
1ee008fcb5
nixos/nextcloud: fixup
A few minor changes to get  - nextcloud: add option to set
datadir and extensions - ready:

* `cfg.datadir` now gets `cfg.home` as default to make the type
  non-nullable.
* Enhanced the `basic` test to check the behavior with a custom datadir
  that's not `/var/lib/nextcloud`.
* Fix hashes for apps in option example.
* Simplify if/else for `appstoreenable` in override config.
* Simplify a few `mapAttrsToList`-expressions in
  `nextcloud-setup.service`.
2021-10-09 22:45:31 +02:00
Jan Tojnar
b2ef3e68e7 nixosTests.gnome: fix
GNOME Shell 41 made the Eval command we use for NixOS tests internal
so in order to be still able to use it, we need to run the shell
in an unsafe mode.

https://gitlab.gnome.org/GNOME/gnome-shell/-/merge_requests/1970
https://gitlab.gnome.org/GNOME/mutter/-/merge_requests/1983

Hopefully, the test driver will eventually get better so that
we will not need hacks like this forever.
2021-10-09 21:35:57 +02:00
Jan Tojnar
80ea989ac9 xdg-desktop-portal-gtk: 1.8.0 → 1.10.0
https://github.com/flatpak/xdg-desktop-portal-gtk/releases/tag/1.10.0
2021-10-09 21:35:57 +02:00
Jan Tojnar
ed3b4aa889 nixos/release-notes: Mention GNOME 41 2021-10-09 21:35:56 +02:00
Jan Tojnar
d106b07997 nixos/gnome: use GNOME xdg portal 2021-10-09 21:35:56 +02:00
Maximilian Bosch
7856e40da6
nixos/nextcloud: fix wording in manual 2021-10-09 20:52:52 +02:00
Robbert Gurdeep Singh
1852212872
nixos/nextcloud: fail systemd-service if apps don't activate 2021-10-09 20:33:17 +02:00
Robbert Gurdeep Singh
18b18929d7
nixos/nextcloud: add settings to manage nextcloud apps
Note the appstoreEnable which will prevent nextcloud form updating
nix-managed apps. This is needed because nextcloud will store an other
version of the app in /var/lib/nextcloud/store-apps and it will
no longer be manageable.
2021-10-09 20:33:16 +02:00
Robbert Gurdeep Singh
7ba02a7b1e
nixos/nextcloud: add services.nextcloud.datadir setting
This option can be used to set an alternative storage location for
files and app metadata.
2021-10-09 20:33:13 +02:00
github-actions[bot]
81e9eafb15
Merge staging-next into staging 2021-10-09 18:01:47 +00:00
Maximilian Bosch
80404a23c9
Merge pull request from Ma27/nextcloud-docs-and-secrets
nixos/nextcloud: manual improvements & pass secrets via the environment to `nextcloud-occ`
2021-10-09 20:01:15 +02:00
Maximilian Bosch
cbfe4a42f6
Merge pull request from Ma27/matrix-workers
nixos/matrix-synapse: minor improvements to implement worker-support
2021-10-09 15:24:41 +02:00
github-actions[bot]
73444b1e90
Merge staging-next into staging 2021-10-09 12:01:44 +00:00
Michele Guerini Rocco
46b2a2594a
Merge pull request from legendofmiracles/wol
nixos/wakeonlan: switch to systemd.link and to nixos/networking
2021-10-09 10:34:26 +02:00
Luke Granger-Brown
856913b191
Merge pull request from lukegb/buildcatrust
use buildcatrust to generate trust stores
2021-10-09 03:39:49 +01:00
github-actions[bot]
605eb4e1e0
Merge staging-next into staging 2021-10-08 18:01:58 +00:00
Maximilian Bosch
f57bed8832
nixos/nextcloud: drop adminpass/dbpass options entirely 2021-10-08 18:30:57 +02:00
ajs124
ae53e57a7a
Merge pull request from helsinki-systems/feat/jitsi-meet-websocket
nixos/jitsi-meet: add support for xmpp-websocket
2021-10-08 16:51:00 +02:00
Michael Brantley
121cfd1998 nixos/multipath: add multipath module
The multipath-tools package had existed in Nixpkgs for some time but
without a nixos module to configure/drive it. This module provides
attributes to drive the majority of multipath configuration options
and is being successfully used in stage-1 and stage-2 boot to mount
/nix from a multipath-serviced iSCSI volume.

Credit goes to @grahamc for early contributions to the module and
authoring the NixOS module test.
2021-10-08 09:47:38 -04:00
Graham Christensen
a85dcd9ca3 iscsi root initiator: allow specifying arbitrary iscsi commands too 2021-10-08 09:47:01 -04:00
Graham Christensen
829bbc708b boot.initrd.extraFiles: allow users to add arbitrary files to the initrd 2021-10-08 09:47:01 -04:00
Maximilian Bosch
b0ab15b0a1
nixos/matrix-synapse: expose rendered config file as readOnly option 2021-10-08 14:51:28 +02:00
github-actions[bot]
5da3c99f54
Merge staging-next into staging 2021-10-08 12:02:03 +00:00
Emil Karlson
d77c75a98e nixos/nix-daemon: Clarify daemonNiceLevel
The option doesn not currently do what some people expect,
clarify the limitations in documentation.
2021-10-08 13:59:35 +03:00
Robert Hensing
4bed9d16cc
Merge pull request from illdefined/nix-daemon-nice-level
modules/nix-daemon: Explain nice level limitations
2021-10-08 12:12:36 +02:00
Vanilla
75ec332e6a
kippo: cleanup the corresponding broken module. 2021-10-08 14:10:49 +08:00
github-actions[bot]
a9e549579c
Merge staging-next into staging 2021-10-08 06:01:53 +00:00
Bobby Rong
6a1c868a9d
Merge pull request from poscat0x04/v2ray-add-package-option
nixos/v2ray: add an option for specifying v2ray package used in the systemd service
2021-10-08 12:38:15 +08:00
Poscat
e4dd32f67e
nixos/v2ray: add an option for specifying v2ray package used in the systemd service 2021-10-08 12:02:10 +08:00
Luke Granger-Brown
9415562f1f nixos/tests/custom-ca: reenable Firefox test 2021-10-08 01:21:57 +00:00
Luke Granger-Brown
1b74469cd0 nixos/ca: use cacert package build for options and p11-kit output
The cacert package can now generate p11-kit-compatible output itself,
as well as generating the correct set of outputs for fully-joined
and unbundled "traditional" outputs (in standard PEM and
OpenSSL-compatible formats).
2021-10-08 01:21:57 +00:00
github-actions[bot]
b4569f7a81
Merge staging-next into staging 2021-10-08 00:02:10 +00:00
Lassulus
36187264df
Merge pull request from helsinki-systems/feat/varnish-optional-configcheck
nixos/varnish: add enableConfigCheck
2021-10-08 00:12:11 +02:00
legendofmiracles
31f04fec3c
nixos/wakeonlan: remove 2021-10-07 14:15:26 -06:00
legendofmiracles
bb3ea37eee
nixos/networking: add the wakeonlan option 2021-10-07 14:15:17 -06:00
github-actions[bot]
c081bc394c
Merge staging-next into staging 2021-10-07 18:01:44 +00:00
Florian Klink
643f23ffe5
Merge pull request from ymatsiuk/systemdtpm2
systemd: add missing TPM2 build dependencies
2021-10-07 19:48:46 +02:00
Eelco Dolstra
16a55282be
Merge pull request from edolstra/bump-fallback-paths
nix-fallback-paths.nix: Update to 2.3.16
2021-10-07 18:22:35 +02:00
Kim Lindberger
4e97bedf93
Merge pull request from deviant/nixos-boot-paths
nixos/boot: add /var/lib/nixos to pathsNeededForBoot
2021-10-07 17:38:54 +02:00
Eelco Dolstra
a47875938d
nix-fallback-paths.nix: Update to 2.3.16 2021-10-07 17:33:53 +02:00
Yurii Matsiuk
e8fe1c9efe
nixos/tests/systemd-cryptenroll: add basic TPM2 test 2021-10-07 15:58:02 +02:00
Jacek Galowicz
d68f1e43df
Merge pull request from blaggacao/nixos-test-ref/05-class-ify-test-driver
nixos test ref/05 class ify test driver
2021-10-07 14:37:01 +02:00
github-actions[bot]
1925039a74
Merge staging-next into staging 2021-10-07 12:01:47 +00:00
Timo Kaufmann
043bc8a984
Merge pull request from Vodurden/nixos-unstable
Support virtual Nintendo Switch Pro controllers in joycond
2021-10-07 13:54:30 +02:00
Kevin Cox
709b594db4
Merge pull request from kevincox/mautrix-facebook-module
nixos.mautrix-facebook: init module
2021-10-07 06:36:52 -04:00
Alexandre Iooss
9fea6d4c85 nixos/prometheus: systemd unit hardening of exporters 2021-10-07 10:19:55 +02:00
Michele Guerini Rocco
63d30d18a6
Merge pull request from Ma27/fix-qemu-net-opts-in-testdriver
nixos/qemu-vm: fix running VM with `QEMU_NET_OPTS`
2021-10-07 08:32:36 +02:00
github-actions[bot]
ae9f8ec1b6
Merge staging-next into staging 2021-10-07 00:02:11 +00:00
Maximilian Bosch
f700a92d5c
nixos/qemu-vm: quote QEMU_NET_OPTS
Co-authored-by: Michele Guerini Rocco <rnhmjoj@users.noreply.github.com>
2021-10-06 23:12:53 +02:00
John Ericson
cc3f2432d0 nixos/nix-daemon: Add enable option
Don't worry, it's is true by default. But I think this is important to
have because NixOS indeed shouldn't need Nix at run time when the
installation is not being modified, and now we can verify that.

NixOS images that cannot "self-modify" are a legitamate
use-case that this supports more minimally. One should be able to e.g. do a
sshfs mount and use `nixos-install` to modify them remotely, or just
discard them and build fresh ones if they are run VMs or something.

The next step would be to make generations optional, allowing just
baking `/etc` and friends rather than using activation scripts. But
that's more involved so I'm leaving it out.
2021-10-06 16:43:48 -04:00
Maximilian Bosch
60e731d1ce
nixos/qemu-vm: fix running VM with QEMU_NET_OPTS
I realized quite recently that running a test VM - as documented in the
manual - like

    QEMU_NET_OPTS='hostfwd=tcp::8080-:80'  ./result/bin/nixos-run-vms

doesn't work anymore on `master`. After bisecting I realized that the
introduction of a forward-port option[1] is the problem since it adds a
trailing comma even if no forwarding options are specified via
`virtualisation.forwardPorts`. In that case, the networking options
would look like `-netdev user,id=user.0,,hostfwd=tcp::8080-:80' which
confused QEMU and thus the VM refused to start.

Now, the trailing comma is only added if additional port forwards are
specified declaratively.

[1] b8bfc81d5b
2021-10-06 22:40:30 +02:00
ajs124
e3ac5e1502 nixos/varnish: add enableConfigCheck 2021-10-06 22:05:46 +02:00
Robert Scott
1d5953184a
Merge pull request from pborzenkov/calibre-web-0.6.13
calibre-web: 0.6.12 -> 0.6.13
2021-10-06 20:36:08 +01:00
github-actions[bot]
3edaee3ccf
Merge staging-next into staging 2021-10-06 18:01:58 +00:00
Maximilian Bosch
9f37d6aee0
nixos/nextcloud: put secrets into the environment of nextcloud-setup.service
The `$(</path/to/file)`-expansion appears verbatim in the cmdline of
`nextcloud-occ` which means that an unprivileged user could find
sensitive values (i.e. admin password & database password) by monitoring
`/proc/<pid>/cmdline`.

Now, these values don't appear in a command line anymore, but will be
passed as environment variables to `nextcloud-occ`.
2021-10-06 18:18:18 +02:00
Maximilian Bosch
fb40526961
nixos/nextcloud: minor manual improvements
* Linkify documentation about objectstore-feature rather than only
  mentioning it.
* Use `<literal>` where it makes sense.
* Remove unnecessary `Whether to load` from `enableImagemagick` because
  `mkEnableOption` already prepends `Whether to enable` to the given
  description.
2021-10-06 17:33:31 +02:00
Bill Ewanick
cc3b147ed1 nixos/lemmy: init
Co-authored-by: Raphael Megzari <raphael@megzari.com>
2021-10-06 21:02:51 +09:00
github-actions[bot]
ffeeefedb8
Merge staging-next into staging 2021-10-06 12:02:08 +00:00
Michele Guerini Rocco
66b6bd0072
Merge pull request from eyJhb/bitlbee-user-group
nixos/bitlbee: added bitlbee to bitlbee group
2021-10-06 08:57:33 +02:00
rnhmjoj
a27dc95e72
nixos/fontdir: always link the font directory
This fixes the fonts directory availability when not running an xserver,
such as headless machines.
2021-10-06 08:52:39 +02:00
Michele Guerini Rocco
e99b3f242c
Merge pull request from rnhmjoj/setgid-nobody
nixos: make setgid wrappers root-owned
2021-10-06 08:36:35 +02:00
Jake Woods
1af6417b86 nixos/joycond: init
NixOS should be able to support the Nintendo Switch Pro controller for
steam and non-steam at the same time. Currently there are two mutually
exclusive ways to support the Pro Controller: Steam and `hid-nintendo`.

Unfortunately these don't work together, but there's a workaround in
newer versions of `joycond` (described [here](https://wiki.archlinux.org/title/Gamepad#Using_hid-nintendo_pro_controller_with_Steam_Games_(with_joycond))). To use this
workaround `hid-nintendo` and `joycond` need to be updated, and the
systemd and udev configuration needs to be made available in NixOS.
2021-10-06 13:19:36 +11:00
github-actions[bot]
4bbe70b6f4
Merge staging-next into staging 2021-10-06 00:02:16 +00:00
Jacek Galowicz
5c666cdf62 Re-RAII-ify the NixOS integration test driver's VLAN class.
We have no usecase for manually/selectively starting or stopping VLANs
in integration tests.
By starting and stopping the VLANs with the constructor and destructor
of VLAN objects, we remove the obligation and complexity to maintain
network lifetime separately.
2021-10-05 14:38:48 -05:00
Antoine Eiche
32face8dea nixos.tests.udisks2: state_dir is now of type pathlib.Path 2021-10-05 14:38:48 -05:00
Antoine Eiche
af859d1df1 nixos.tests.usbguard: state_dir is now of type pathlib.Path 2021-10-05 14:38:48 -05:00
Maximilian Bosch
3f63e3ce65 nixos/test-driver: fix graphics for VM
`-nographic` should only be set if no display is available. Otherwise,
tools such as `nixos-build-vms(8)` will never open up a graphical
display.
2021-10-05 14:38:48 -05:00
Maximilian Bosch
b2e59bcf77 nixos/build-vms: fix eval 2021-10-05 14:38:48 -05:00
David Arnold
b0fc9da879 nixos/test/test-driver: Class-ify the test driver
This commit encapsulates the involved domain into classes and
defines explicit and typed arguments where untyped dicts where used.

It preserves backwards compatibility through legacy wrappers.
2021-10-05 14:38:48 -05:00
Maximilian Bosch
f8feb1ad27
Merge pull request from mitchmindtree/nextcloud-objectstore
nixos/nextcloud: Add option for using object storage as primary storage
2021-10-05 20:52:24 +02:00
github-actions[bot]
f4ec0a418f
Merge staging-next into staging 2021-10-05 18:01:58 +00:00
Sandro
947fb3818f
Merge pull request from obadz/earlyoom-stderr 2021-10-05 17:16:59 +02:00
github-actions[bot]
0b1fa10263
Merge staging-next into staging 2021-10-05 12:01:39 +00:00
obadz
b4981eb8e1 earlyoom module: log stderr to journald
(Default is to do the same as stdout which is > /dev/null)
2021-10-05 12:03:24 +01:00
Naïm Favier
c53c69ab17
nixos: fixes after 2021-10-05 12:48:43 +02:00
Yureka
2384362ca7 nixos/gitea: fix eval after 2021-10-05 12:35:34 +02:00
Eelco Dolstra
f18bf9b9f1
Merge pull request from lovesegfault/no-auto-install
command-not-found: remove NIX_AUTO_INSTALL
2021-10-05 11:15:47 +02:00
Matt McHenry
a2a0a58f7c
less: improve default settings ()
* less: enable by default and set LESS=-R via lesskey

* since we set PAGER=less, programs.less.enable should default to
  true.

* some programs, notably git, set a custom LESS environment if none is
  present.  using the lesskey mechanism to set LESS=-R lets such
  programs continue to run less as they see fit.

This reverts commit 0e7b4e60a8.

* less: remove use of deprecated lesskey binary format

* less: enable in environment.nix rather than less.nix

per discussion in 
2021-10-05 11:13:48 +02:00
Andreas Rammhold
0873980dc8
Merge pull request from eyJhb/networkd-iaid
nixos/networkd: added IAID, DUIDType and DUIDRawData to DHCPv6 section
2021-10-05 10:06:05 +02:00
eyjhb
f4c69e198c
nixos/bitlbee: switched to systemd DynamicUser 2021-10-05 09:52:09 +02:00
mitchmindtree
c5d08ebee1 nixos/nextcloud: Fix ambiguity in objectstoreConfig string
Previously this was a little tricky to read and had the potential to
cause some ambiguity in string parsing.
2021-10-05 17:07:44 +10:00
github-actions[bot]
4fb183ae2e
Merge staging-next into staging 2021-10-05 06:01:48 +00:00
Maciej Krüger
20eeb1e09e
Merge pull request from mkg20001/htop 2021-10-05 06:33:40 +02:00
Maciej Krüger
a425421e28
nixos/htop: add module
This module allows setting global configuration for htop in /etc/htoprc,

for example to disable showing userland threads by default

Co-authored-by: pennae <82953136+pennae@users.noreply.github.com>

Co-authored-by: Aaron Andersen <aaron@fosslib.net>
2021-10-05 06:00:43 +02:00
github-actions[bot]
1dbe4c0174
Merge staging-next into staging 2021-10-05 00:02:08 +00:00
Kevin Cox
ed5403efc3
nixos.mautrix-facebook: init module
This is the first version of the mautrix-facebook module. Due to lack of secret support on NixOS as well as the requirement of a homeserver domain it requires some setup. For completeness here is my working config using NixOps secrets:

```nix
deployment.keys."mautrix-facebook-config.env" = {
	text = ''
		MAUTRIX_FACEBOOK_APPSERVICE_AS_TOKEN=${secrets.as_token}
		MAUTRIX_FACEBOOK_APPSERVICE_HS_TOKEN=${secrets.hs_token}
	'';
	destDir = "/var/keys";
};

deployment.keys."mautrix-facebook-registration.yaml" = {
	text = builtins.toJSON config.services.mautrix-facebook.registrationData;
	destDir = "/var/keys";
	user = "matrix-synapse";
};

users.users.matrix-synapse.extraGroups = ["keys"];

systemd.services.matrix-synapse.after = ["keys.service"];
systemd.services.matrix-synapse.wants = ["keys.service"];

services.mautrix-facebook = {
	enable = true;
	settings = {
		homeserver.domain = "bots.kevincox.ca";

		bridge = {
			displayname_template = "{displayname}";

			permissions = {
				"@kevincox:matrix.org" = "admin";
			};
		};
	};

	environmentFile = "/var/keys/mautrix-facebook-config.env";

	registrationData = {
		as_token = secrets.as_token;
		hs_token = secrets.hs_token;
	};
};

systemd.services.mautrix-facebook = rec {
	wants = ["keys.target"];
	after = wants;
};

services.matrix-synapse.app_service_config_files = [
	"/var/keys/mautrix-facebook-registration.yaml"
];
```
2021-10-04 18:40:28 -04:00
Bernardo Meurer
c301c1995e
command-not-found: remove NIX_AUTO_INSTALL 2021-10-04 12:43:39 -07:00
Robert Hensing
0699530f08
Merge pull request from ncfavier/cleanup-defaults-examples
nixos/doc: clean up defaults and examples
2021-10-04 20:37:42 +02:00
Naïm Favier
2ddc335e6f
nixos/doc: clean up defaults and examples 2021-10-04 12:47:20 +02:00
Félix Baylac-Jacqué
73846b372f
nixos/acme: add webroots to ReadWritePaths
Since 7a10478ea7, all /var except
/var/lib/acme gets mounted in a read-only fashion. This behavior
breaks the existing acme deployments having a webroot set outside of
/var/lib/acme.

Collecting the webroots and adding them to the paths read/write
mounted to the systemd service runtime tree.

Fixes 
2021-10-04 10:08:35 +02:00
github-actions[bot]
a9e2bd4b19
Merge staging-next into staging 2021-10-04 06:01:52 +00:00
Timothy DeHerrera
1c0a20efcf create-amis.sh: fix typo 2021-10-03 19:03:28 -07:00
Timothy DeHerrera
2d67b946b7 create-amis.sh: use status message
The progress ID is fairly useless. Status message is more useful for
humans.
2021-10-03 19:03:28 -07:00
Timothy DeHerrera
407998d15a create-amis.sh: add support for the ZFS AMIs 2021-10-03 19:03:28 -07:00
Timothy DeHerrera
1ff82fec9a create-amis.sh: allow uploading private AMIs 2021-10-03 19:03:28 -07:00
Timothy DeHerrera
0543f2d2f6 create-amis.sh: make vars overridable from env 2021-10-03 19:03:28 -07:00
github-actions[bot]
59ff1ff83a
Merge staging-next into staging 2021-10-04 00:02:34 +00:00
Naïm Favier
330b1e08b8
nixos/lib/make-options-doc: implement literalDocBook 2021-10-03 17:59:44 +02:00
maxine [they]
d1a18a3dbe
Merge pull request from maxeaubrey/modemmanager_1.18.0 2021-10-03 16:48:07 +02:00
Guillaume Girol
2b0a7ef8f2 nixos/hqplayerd: do not make manual depend on (unfree) hqplayerd 2021-10-03 12:00:00 +00:00
OPNA2608
bfd58f3cf3 nixos/gkraken: init 2021-10-03 12:42:55 +02:00
rnhmjoj
31790c81dc
nixos: make setgid wrappers root-owned 2021-10-03 11:44:57 +02:00
mitchmindtree
a539a82707 nixos/nextcloud: Account for nix_read_secret refactor in exception msg
Previously, the `nix_read_pwd` function was only used for reading the
`dbpassFile`, however it has since been refactored to handle reading
other secret files too. This fixes the message of the exception that is
thrown in the case that the file is not present so that it no longer
refers specifically to the `dbpass` file.
2021-10-03 17:29:13 +10:00
mitchmindtree
fbffaddefe nixos/nextcloud: Make objectstore.s3.useSsl explicitly true by default
This appears to match the nextcloud default behaviour observed here:

e2116e2fb2/lib/private/Files/ObjectStore/S3ConnectionTrait.php (L83)
2021-10-03 16:38:56 +10:00
mitchmindtree
b23d6a4113 nixos/nextcloud: Simplify objectstore.s3 options, remove submodule
Removes the submodule in favour of using an attrset.

Also:

- Makes better use of nix's laziness in config expansion.
- Makes use of `boolToString` where applicable.
2021-10-03 16:38:03 +10:00
Jörg Thalheim
0f5218878c
Merge pull request from Artturin/cfdynststartat
cfdyndns: fix startAt by setting it to *:0/5 instead of 5 minutes
2021-10-03 06:37:27 +01:00
Artturin
2e4938eb6a cfdyndns: fix startAt by setting it to *:0/5 instead of 5 minutes
5 minutes is invalid for startAt
2021-10-03 08:06:37 +03:00
mitchmindtree
03171ae31a nixos/nextcloud: Remove objectstore.s3.secret option
We should discourage users from adding secrets in a way that allows for
them to end up in the globally readable `/nix/store`. Users should use
the `objectstore.s3.secretFile` option instead.
2021-10-03 12:52:13 +10:00
mitchmindtree
1ed93ac4a1 nixos/nextcloud: Add option for using object storage as primary storage
This allows to declaratively configure an S3 class object storage as the
primary storage for the nextcloud service. Previously, this could only
be achieved by manually editing the `config.php`.

I've started testing this today with my own digitalocean nextcloud
instance, which now points to my digitalocean S3-compatible "Space" and
all appears to be working smoothly.

My motivation for this change is my recent discovery of how much cheaper
some S3-compatible object storage options are compared to digitalocean's
"Volume" options.

Implementation follows the "Simple Storage Service" instructions here:

https://docs.nextcloud.com/server/latest/admin_manual/configuration_files/primary_storage.html

I have neglected to implement a submodule for the OpenStack Swift
object storage as I don't personally have a use case for it or a method
to test it, however the new `nextcloud.objectstore.s3` submodule should
act as a useful guide for anyone who does wish to implement it.
2021-10-03 12:52:06 +10:00
Domen Kožar
21b1cfe684
Merge pull request from jansol/master
pipewire: 0.3.36 -> 0.3.38
2021-10-02 19:30:15 -05:00
Robert Hensing
c3bf08d1b0
Merge pull request from erikarvstedt/etc-simplify-source
nixos/etc: simplify source path handling
2021-10-03 00:50:39 +02:00
Thomas Tuegel
000e81bff6
Merge pull request from andir/master
nixos/plasma5: Install default KDE apps for music, images and documents
2021-10-02 15:56:12 -05:00
ajs124
352bb62051
Merge pull request from helsinki-systems/upd/varnish
varnish6/7: updates
2021-10-02 16:30:57 +02:00
Sandro
50b79f0270
Merge pull request from SuperSandro2000/SuperSandro2000-patch-1 2021-10-01 23:59:04 +02:00
Maximilian Bosch
cdb48d75c0
Merge pull request from Ma27/nextcloud-misc
nextcloud: misc changes
2021-10-01 21:08:31 +02:00
Artturi
8296c4d226
Merge pull request from Artturin/gdmoptions 2021-10-01 21:27:19 +03:00
Maximilian Bosch
598ad679d8
Merge pull request from SebTM/add_tp-auto-kbbl
tp-auto-kbbl: init at 0.1.5
2021-10-01 19:59:06 +02:00
Artturin
33b7bd2675 nixos/gdm: switch to rfc42 style settings 2021-10-01 20:53:49 +03:00
Sandro
5d53e38d24
nixos/gitea: switch default log level to Info 2021-10-01 19:52:35 +02:00
Maximilian Bosch
d022b4987a
Merge pull request from yayayayaka/nextcloud-21.0.5
nextcloud: 20.0.12 -> 20.0.13, 21.0.4 -> 21.0.5, 22.1.1 -> 22.2.0
2021-10-01 18:40:06 +02:00
Lassulus
1b94d11c92
Merge pull request from erikarvstedt/extra-container
extra-container: init at 0.8
2021-10-01 17:57:47 +02:00
Maximilian Bosch
10703a8c92
nixos/nextcloud: run tests against each Nextcloud instance 2021-10-01 17:03:32 +02:00
Maximilian Bosch
66edc1e846
nixos/nextcloud: use php8 where possible 2021-10-01 17:03:09 +02:00
Maximilian Bosch
675e262f5a
nixos/nextcloud: temp fix for MariaDB >=10.6
The MariaDB version 10.6 doesn't seem supported with current Nextcloud
versions and the test fails with the following error[1]:

    nextcloud # [   14.950034] nextcloud-setup-start[1001]: Error while trying to initialise the database: An exception occurred while executing a query: SQLSTATE[HY000]: General error: 4047 InnoDB refuses to write tables with ROW_FORMAT=COMPRESSED or KEY_BLOCK_SIZE.

According to a support-thread in upstream's Discourse[2] this is because
of a missing support so far.

Considering that we haven't received any bugreports so far - even though
the issue already exists on master - and the workaround[3] appears to
work fine, an evaluation warning for administrators should be
sufficient.

[1] https://hydra.nixos.org/build/155015223
[2] https://help.nextcloud.com/t/update-to-next-cloud-21-0-2-has-get-an-error/117028/15
[3] setting `innodb_read_only_compressed=0`
2021-10-01 15:25:31 +02:00
Sebastian Sellmeier
f0d1af9bd4
tp-auto-kbbl: init at 0.1.5 2021-10-01 13:12:58 +02:00
Jörg Thalheim
2aaf072d27
Merge pull request from queezle42/master
lirc: Set a writable lockdir
2021-10-01 08:23:51 +01:00
Raymond Gauthier
953bbc0d73
nixos/teamviewer: fix issue
Move to a forefront launch of the daemon. Doing so allowed us
to move the service from forking to simple to avoid the
missing pid  error log.

Also:

 -  Make the dbus dependency explicit.
2021-09-30 19:36:45 -04:00
Erik Arvstedt
a807cd3a00
nixos/extra-container: init 2021-09-30 22:52:14 +02:00
Raymond Gauthier
200e959995
nixos/teamviewer: fix issue
Add teamviewer package as a dbus package now that the
client / server communication depends on dbus.
2021-09-30 16:08:57 -04:00
ajs124
145f628f69 varnish65*: drop because it is EOL upstream
varnish66 could be introduced, but I don't think it's worth the effort
2021-09-30 20:26:39 +02:00
happysalada
8346dc04b3 pict-rs: add initial module 2021-09-30 21:32:25 +09:00
Thomas Tuegel
bf84010052
Merge pull request from CertainLach/plasma5-load-kwayland-integration
plasma5: load kwayland-integration plugin
2021-09-29 20:32:02 -05:00
Samuel Dionne-Riel
eaf85fe8c7
Merge pull request from samueldr/fix/126289-regression
Provide submodule to `security.wrappers` for older kernels
2021-09-29 18:30:50 -04:00
Samuel Dionne-Riel
110165b784 Provide submodule to security.wrappers for older kernels
Fixes a regression from 
2021-09-29 16:10:27 -04:00
Michele Guerini Rocco
b73d851b30
Merge pull request from rnhmjoj/qemu-fixup
nixos/qemu: use set -e in shell script
2021-09-29 19:01:44 +02:00
Michele Guerini Rocco
28e1ca8ebf
Merge pull request from rnhmjoj/test-fixes
nixos/tests: fix for memorySize being an integer
2021-09-29 16:54:32 +02:00
rnhmjoj
58be230026
nixos/tests/custom-ca: falkon -> qutebrowser
Use qutebrowser as the QtWebEngine test case because falkon has been
broken for a while.
2021-09-29 16:35:08 +02:00
Steve Purcell
4b518f4aa9 n8n: remove systemd option incompatible with nodejs
The MemoryDenyWriteExecute systemd option is widely known to be
incompatible with nodejs, and causes service crashes as reported in .

Fixes .
2021-09-29 14:21:13 +00:00
rnhmjoj
7960244eb1
nixos/tests: fix for memorySize being an integer 2021-09-29 15:51:06 +02:00
Alyssa Ross
d69583c6c2 opencv2: don't build unfree libraries by default
In opencv 2.x, unfree libraries are built by default.  The package
should therefore have been marked as unfree, but wasn't.

I've disabled the non-free libraries by default, and added an option
to enable them.  There are three programs in Nixpkgs that depend on
opencv2: mathematica, pfstools, and p2pvc.  pfstools requires the
non-free libraries if it's built with opencv support, so I've disabled
opencv by default there and added an option to enable it.  p2pvc links
fine, so presumably doesn't need the non-free libraries.  I can't test
mathematica, so I'm just going to leave it alone.
2021-09-29 13:39:52 +00:00
Artturi
759ffe33a0
Merge pull request from Artturin/bootfixflag 2021-09-29 16:31:06 +03:00
Robert Hensing
286c71a230
Merge pull request from hercules-ci/dockerTools-test-pullImage
dockerTools: test pullImage
2021-09-29 15:27:49 +02:00
Robert Hensing
ae03fb8121
Merge pull request from jbedo/docker
dockerTools: fix export
2021-09-29 14:55:21 +02:00
Robert Hensing
16a4da9127 dockerTools: Test pullImage fetcher whenever its implementation changes 2021-09-29 14:41:08 +02:00
Artturin
c34905f516 nixos/boot: qemu-flags -> qemu-common
and dont use with import ...
2021-09-29 15:37:24 +03:00
Justin Bedo
020e88bf7a
nixos/tests/docker-tools: check explicitly for file in exportImage 2021-09-29 21:40:31 +10:00
Michele Guerini Rocco
e68eba2dba
Merge pull request from rnhmjoj/wpa-safe
nixos/wpa_supplicant: add safe secret handling
2021-09-29 13:35:29 +02:00
Maximilian Bosch
7d890267d1
Merge pull request from Ma27/drop-linux-5.13
linux_5_13: drop
2021-09-29 13:10:10 +02:00
Sandro
8c56eae689
Merge pull request from sorpaas/patch-3 2021-09-29 11:32:53 +02:00
rnhmjoj
3a0437d2b0
nixos/release-notes: document wpa_supplicant changes 2021-09-29 09:10:39 +02:00
rnhmjoj
62126f8c15
nixos/tests/wpa_supplicant: init 2021-09-29 09:10:39 +02:00
rnhmjoj
52b9dd7bf6
nixos/wpa_supplicant: add safe secret handling 2021-09-29 09:10:39 +02:00
rnhmjoj
1497e8f5f5
nixos/qemu: use set -e in shell script
Also fix this: https://github.com/koalaman/shellcheck/wiki/SC2166
2021-09-29 08:46:03 +02:00
Justin Bedo
0319228a45
docker-tools: add example for exportImage functionality and test 2021-09-29 15:35:21 +10:00
Jens Nolte
e66332826a lirc: Set a writable lockdir 2021-09-29 05:36:56 +02:00
Timothy DeHerrera
895f3956d2
Merge pull request from rnhmjoj/qemu-restoration
Qemu restoration
2021-09-28 21:35:23 -06:00
Wei Tang
3158087c78
tarsnap: always ping ipv4 address in preStart 2021-09-29 03:09:13 +02:00
Benjamin Staffin
5c7c38f61d
Merge pull request from Flakebi/dex
dex-oidc: 2.28.1 -> 2.30.0 and add module
2021-09-28 16:52:35 -04:00
Doron Behar
6cd8d67251
Merge pull request from milahu/patch-3
locate.nix: write /etc/updatedb.conf
2021-09-28 16:03:21 +00:00
eyjhb
4b8bd41060
nixos/networkd: added IAID, DUIDType and DUIDRawData to DHCPv6 section 2021-09-28 15:33:06 +02:00
misuzu
a15070a52e nixos/libvirtd: use /etc/ethertypes from iptables package 2021-09-28 10:47:48 +03:00
Peter Hoeg
aed860f876 nixos/zoneminder: not using zoneminder any longer 2021-09-28 09:21:08 +08:00
Maximilian Bosch
01eb8ec98a
linux_5_13: drop
5.13.19 was the last 5.13 release and the version is now EOL[1].

[1] https://lwn.net/Articles/869747/
2021-09-27 23:29:53 +02:00
Pavel Borzenkov
80f7656229 calibre-web: 0.6.12 -> 0.6.13
calibre-web no longer starts without proper calibre DB path configured,
so the default testcase (completely unconfigured) is removed.
2021-09-27 20:51:30 +02:00
Elis Hirwing
fb55c86904
Merge pull request from etu/zfs-syncoid-parent-permission-delegation
nixos/syncoid: Delegate permissions to parent dataset if target is missing
2021-09-27 19:55:32 +02:00
Elis Hirwing
f5f386d297
nixos/syncoid: Delegate permissions to parent dataset if target is missing
This is to address a regression introduced in .

When syncing the first dataset, syncoid expects that the target
dataset doesn't exist to have a clean slate to work with. So during
runtime we'll check if the target dataset does exist and if it doesn't
- delegate the permissions to the parent dataset instead.

But then, on unallow, we do the unallow on both the target and the
parent since the target dataset should have been created at this
point, so the unallow can't know which dataset that got permissions
just by which datasets exists.
2021-09-27 19:29:14 +02:00
Graham Christensen
6c88e85807
Merge pull request from deshaw/fastly-exporter
prometheus-fastly-exporter: init at v6.1.0
2021-09-27 11:09:33 -04:00
markuskowa
e3e5fc9bf1
Merge pull request from Artturin/snapperfix
nixos/snapper: change timer wantedBy to timers.target & add snapshotOnBoot
2021-09-27 14:13:34 +02:00
Michele Guerini Rocco
d64827a3a1
Merge pull request from deviant/postfix-virtual-section
nixos/postfix: Fix virtual alias manpage section
2021-09-27 13:43:41 +02:00
Brecht Savelkoul
8a585fd5c5 nixos/lighttpd: support new authentication modules 2021-09-27 07:33:27 +02:00
V
cc49c13a6b nixos/postfix: Fix virtual alias manpage section
virtual(8) is for virtual mailboxes, not aliases.
2021-09-27 06:39:27 +02:00
Maxine Aubrey
e05c1e3431
nixos/networkmanager: drop modemmanager overrides
as of 1.18.0, modemmanager defaults to strict when no other options are
passed, so we can just use the upstream unit as is
2021-09-27 02:33:55 +02:00
Jörg Thalheim
59cb7a87d7
Merge pull request from helsinki-systems/feat/activation-script-restart
nixos/switch-to-configuration: Allow activation scripts to restart units
2021-09-26 15:46:38 +01:00
Yaroslav Bolyukin
de5ffe51f6
plasma5: load kwayland-integration plugin
Signed-off-by: Yaroslav Bolyukin <iam@lach.pw>
2021-09-26 17:26:23 +03:00
Aaron Andersen
57f1ee46e4
Merge pull request from MayNiklas/owncast
nixos/owncast: init at 0.0.8
2021-09-25 15:25:13 -04:00
Mikael Voss
5f9e069984
modules/nix-daemon: Explain nice level limitations 2021-09-25 20:43:06 +02:00
Jan Solanti
c12e8a63ba pipewire: 0.3.36 -> 0.3.37 2021-09-25 17:51:39 +03:00
MayNiklas
69cb5e3dc6 nixos/owncast: release notes 2021-09-25 16:28:06 +02:00
Leo Maroni
e95a50a64b
nixos/networkd: add ActivationPolicy option 2021-09-25 16:03:42 +02:00
happysalada
0f9a1d70fa meilisearch: add docs 2021-09-25 21:45:52 +09:00
Erik Arvstedt
654f41435b
nixos/etc: simplify source path handling
This change is strictly functionally equivalent because we're just
lifting the transformation of `source` out of `mapAttrs` to the single point of
use (in escapeShellArgs).

This is also much faster because we can skip a map over all `etc` items.
2021-09-25 14:44:38 +02:00
Flakebi
6ca43a69cc
dex-oidc: add module 2021-09-25 13:12:51 +02:00
Michele Guerini Rocco
828a3b5d93
Merge pull request from andersk/gnome-shell-wrapped
nixos/gnome: Fix broken .gnome-shell-wrapped wrapper
2021-09-25 10:12:51 +02:00
Anders Kaseorg
98fe3260c6 nixos/gnome: Fix broken .gnome-shell-wrapped wrapper
The owner and group options are required after .

Signed-off-by: Anders Kaseorg <andersk@mit.edu>
2021-09-24 17:58:08 -07:00
Kim Lindberger
0686c40309
Merge pull request from ryantm/dev/ryantm/discourse-tmp
discourse: enable restoring backups bigger than RAM
2021-09-24 14:31:46 +02:00
Ryan Burns
40299257cc Merge branch 'master' into staging-next 2021-09-23 18:43:00 -07:00
Sandro
3d2ed13aaa
Merge pull request from yurrriq/helm-3.7.0 2021-09-23 21:29:10 +02:00
Kim Lindberger
3d3b1a7039
Merge pull request from ryantm/dev/ryantm/discourse-skip-create
nixos/discourse: add discourse.admin.skipCreate option
2021-09-23 19:09:59 +02:00
Ryan Mulligan
f933c68374 discourse: enable restoring backups bigger than RAM
When restoring a backup, discourse decompresses the backup archive in
the /share/discourse/tmp dir. Before this change, it is linked to /run
which is typically backed by memory, so the backup will fail to
restore if you do not have enough memory on your system to contain the
backup. This has already happened to me on two small forums.

This moves tmp to the StateDirectory /var/lib/discourse/tmp which is
typically backed by disk.
2021-09-23 09:59:31 -07:00
Eric Bailey
bbdb34607e kubernetes-helm: 3.6.3 -> 3.7.0 2021-09-23 11:26:20 -05:00
Michele Guerini Rocco
51bcdc4cda
Merge pull request from rnhmjoj/kube-fix
nixos/kubernetes: fix containerd settings
2021-09-23 17:35:13 +02:00
rnhmjoj
5ca89402ee
nixos/trafficserver: avoid input from derivation
Using builtins.readFile to load upstream defaults is a clever trick, but
it's not allowed in restricted evaluation mode: which means it fails on
Hydra, for example. Besides - in Nixpkgs - depending on derivation as
inputs is considered bad practice and should be avoided.
2021-09-23 12:52:31 +02:00
MayNiklas
1f934dad30 nixos/owncast: init owncast service 2021-09-23 10:48:29 +02:00
Thomas Hobson
69c606bcc9
transmission: fix error when watch-dir is enabled 2021-09-23 20:47:23 +12:00
Artturin
7001a46766 nixos/snapper: services.snapperd sync serviceConfig with upstream 2021-09-23 05:54:19 +03:00
Artturin
25d3e6d01f nixos/snapper: add snapshotRootOnBoot option 2021-09-23 05:54:11 +03:00
github-actions[bot]
796a5df129
Merge master into staging-next 2021-09-23 00:01:50 +00:00
rnhmjoj
6de529c64a
nixos/kubernetes: fix containerd settings
mkDefault must be applied to each setting individually, otherwise a
single change to `containerd.settings` replaces the whole attribute set.
2021-09-23 00:21:40 +02:00
rnhmjoj
b6fbbe768d
nixos/containerd: use v2 settings by default
Kubernetes is using v2 setting names and is the only module
in Nixpkgs using containerd, so it makes sense to upgrade.
2021-09-23 00:18:58 +02:00
Rickard Nilsson
d30701f2f1
nixos/opensmtpd: Add missing brackets in config ()
* nixos/opensmtpd: Add missing brackets in config

Without this commit, you end up missing the sendmail suid wrapper,
because the "program" attribute would not override the right thing.

* Update nixos/modules/services/mail/opensmtpd.nix

Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2021-09-22 22:01:39 +02:00
Maximilian Bosch
e4e5deaa34
Merge pull request from Ma27/safeeyes-appdata
nixos/safeeyes: misc improvements
2021-09-22 20:36:33 +02:00
github-actions[bot]
09a7436fcc
Merge master into staging-next 2021-09-22 18:01:01 +00:00
Vladimír Čunát
8be5516756
Merge : Fix several NixOS errors in Hydra evaluation
In particular, this should unblock the trunk-combined jobset.
2021-09-22 17:28:37 +02:00
rnhmjoj
5abd562a18
nixos/kubernetes: fix deprecation warning
The option `containerd.configFile` has been replaced by an equivalent
`settings` attribute set.
2021-09-22 16:11:49 +02:00
rnhmjoj
22d05f8fa2
nixos/plotinus: fix evaluation
Apparently setting a variable via `environment.variables` when the same
is already present in `environment.sessionVariables` (that is merged
into the former option) creates a conflict.

For reference: this started with the change in .
2021-09-22 15:53:29 +02:00
rnhmjoj
a8576d4053
nixos/tests/mpv: remove deprecated mpv-with-scripts
It has been replaced by wrapMpv in 2020-05-22.
2021-09-22 15:40:59 +02:00
rnhmjoj
cbd515e44c
nixos/tests/atop: remove top-level string
Attributes in the top-level of a test should be derivations,
otherwise they will cause an evaluation failure in hydra.
2021-09-22 15:07:15 +02:00
rnhmjoj
699b8d671d
nixos/tests/wasabibackend: fix bitcoind config
Since c6017d98 services.bitcoind is submodule.
2021-09-22 14:48:14 +02:00
Maximilian Bosch
f59c862770
nixos/safeeyes: add safeeyes to the global path
This will be needed for e.g. the settings dialog to work properly.
2021-09-22 13:12:27 +02:00
Maximilian Bosch
693ccbac67
nixos/safeeyes: add alsa-utils for aplay to the service's path
This is needed in order to use the `audiblealert`-plugin which requires
`aplay` to be available to work.
2021-09-22 13:07:33 +02:00
rnhmjoj
df49f6565c
nixos/tests/pantheon: fix missing lib 2021-09-22 12:59:09 +02:00
rnhmjoj
c744ecb69f
nixos/tests/systemd-networkd-ipv6-prefix-delegation: fix wrapper
The owner,group options are mandatory after .
2021-09-22 12:40:03 +02:00
rnhmjoj
b53a5b91b9
nixos/atop: fix broken wrapper
The setuid,owner,group options are mandatory after .
2021-09-22 12:38:19 +02:00
Alyssa Ross
b898e958da
Merge remote-tracking branch 'nixpkgs/master' into staging-next
Conflicts:
	pkgs/os-specific/linux/libfabric/default.nix
	pkgs/tools/filesystems/btrfs-progs/default.nix
2021-09-22 10:07:27 +00:00
rnhmjoj
196621010c
nixos/tests/mariadb-galera-rsync: fix nogroup
This fixes the evaluation after for .
2021-09-22 11:49:11 +02:00
rnhmjoj
113cc7b136
nixos/tests/mariadb-galera-mariabackup: fix nogroup
This fixes the evaluation after for .
2021-09-22 11:46:30 +02:00
rnhmjoj
20ad669618
nixos/tests/minio: fix deprecation warning
The `accessKey` and `secretKey` options have been deprecated in favour
of the new `rootCredentialsFile`.
2021-09-22 11:35:22 +02:00
rnhmjoj
87d76b1783
nixos/tests/mysql: fix nogroup
This fixes the evaluation after for .
2021-09-22 11:20:30 +02:00
rnhmjoj
08cd8667ee
nixos: filalex77 -> Br1ght0ne
The maintainers has changed username in 512c3c0a.
2021-09-22 11:20:30 +02:00
rnhmjoj
1f55c7e022
nixos/tests: drop latestKernel.hardened
The latest kernel does not guarantee a hardened version anymore,
see ga5341beb for the motivation.
2021-09-22 11:20:30 +02:00
rnhmjoj
88b3c29cf1
nixos: heimdalFull -> heimdal
The package has been renamed in 2018-05-01.
2021-09-22 11:20:30 +02:00
rnhmjoj
3f10924949
nixos/flannel: pkgs.etcdctl -> pkgs.etcd
The package has been renamed in 2018-04-25.
2021-09-22 11:20:30 +02:00
rnhmjoj
1f826a7164
nixos/tests/ec2: fix conflicting option values 2021-09-22 11:20:30 +02:00
rnhmjoj
e2a668224f
nixos/tests/enlightenment: fix renamed options
All program-specific `autoLogin` options have been unified under
`displayManager.autoLogin`.
2021-09-22 11:20:29 +02:00
rnhmjoj
56ad0a49c8
nixos/dnscrypt-wrapper: fix nogroup
The group was actually there but I didn't add it by mistake.
This fixes the evaluation after for .
2021-09-22 11:20:24 +02:00
rnhmjoj
169cd512d4
nixos/tests/cntr: fix evaluation
The maintainer email address is srk@48.io, hence srk, but the attribute
name in the maintainer list is actually sorki.
2021-09-22 09:06:50 +02:00
rnhmjoj
78b0883e2f
nixos/tests/prometheus-exporters: fix nogroup
Add a group after the removal of the nogroup default in .
2021-09-22 09:06:50 +02:00
rnhmjoj
5b4f8afae4
nixos/tests: stdenv.lib -> lib
These must have been reintroduced by mistake after the deprecation.
2021-09-22 09:06:50 +02:00
Ryan Mulligan
6a9003f316 nixos/discourse: add discourse.admin.skipCreate option 2021-09-21 16:45:59 -07:00
Jörg Thalheim
5c34515b99
Merge pull request from Izorkin/fix-netdata
nixos/netdata: fix working with disabled ipmi plugin
2021-09-22 00:43:58 +01:00
Sandro
bfc38d3d0d
Merge pull request from ju1m/apparmor 2021-09-21 22:10:10 +02:00
Sandro
f18f2d87f3
Merge pull request from legendofmiracles/weylus 2021-09-21 22:04:38 +02:00
Sandro
41e2ef1012
Merge pull request from illdefined/feature/memoryallocator-mimalloc 2021-09-21 20:06:35 +02:00
github-actions[bot]
611b805c53
Merge master into staging-next 2021-09-21 18:01:16 +00:00
embr
023239912c nixos/mastodon: Add configurable web- and streaming concurrency
Might as well do this while I'm at it.
2021-09-21 16:35:17 +02:00
embr
8c1e6a8598 nixos/mastodon: Fix sidekiq's DB_POOL, add configurable concurrency
The `services.mastodon` module currently hardcodes sidekiq's concurrency
to 25, but doesn't set a DB pool size, which defaults to 5 or the number
of configured web threads.

(This behaviour is very strange, and arguably a mastodon bug.)

This also makes sidekiq's concurrency configurable, because 25 is a tad
high for the hardware I'm running it on.
2021-09-21 16:35:17 +02:00
github-actions[bot]
fd3d37414d
Merge master into staging-next 2021-09-21 12:01:29 +00:00
Sandro
e80237d8f4
Merge pull request from trofi/fix-smokeping
nixos/smokeping: drop dangling fping6 suid swapper
2021-09-21 13:44:54 +02:00
Michele Guerini Rocco
806e2b3643
Merge pull request from dschrempf/localtimed_nogroup
nixos/localtimed: nogroup fix
2021-09-21 13:35:30 +02:00
Souvik Sen
2f669293bf prometheus-fastly-exporter: init at v6.1.0 2021-09-21 04:05:18 -04:00
Michele Guerini Rocco
5d76e62fd0
Merge pull request from rnhmjoj/vmware-fix
nixos/vmware-guest: fix setuid wrapper
2021-09-21 08:36:04 +02:00
github-actions[bot]
fa2601f3b2
Merge master into staging-next 2021-09-21 06:01:04 +00:00
Artturi
3b2440afd0
Merge pull request from unode/cpupower-gui
linuxPackages.cpupower-gui: init at 1.0.0
2021-09-21 03:37:10 +03:00
rnhmjoj
74c572d2f8
nixos/vmware-guest: fix setuid wrapper
Since 904f68fb0, setuid/owner/group are required.
2021-09-20 23:49:46 +02:00
Dominik Schrempf
fade6648c7
nixos/localtimed: nogroup fix 2021-09-20 22:16:09 +02:00
github-actions[bot]
ecf5e75910
Merge master into staging-next 2021-09-20 18:01:12 +00:00
Mikael Voss
5437b17b8e
nixos/malloc: add mimalloc 2021-09-20 19:10:28 +02:00
Jonathan Ringer
82ff732055
nixosTests.pantheon: fix evaluation 2021-09-20 09:37:09 -07:00
Michele Guerini Rocco
2fcef20cb1
Merge pull request from austinbutler/tpm2-tss-group
nixos/tpm2: define group, fix after 
2021-09-20 18:34:39 +02:00
Guillaume Girol
f50fc9e7b2
Merge pull request from DarkDNA/greetd-nonogroup
nixos/greetd: Fix for nogroup removal.
2021-09-20 16:30:05 +00:00
Guillaume Girol
f0fac59a17
nixos/tpm2: remove tss static gid 2021-09-20 16:24:33 +00:00
davidak
d64c54199d
Merge pull request from bobby285271/pantheon-manual
nixos/panthoen: mention appcenter changes in manual
2021-09-20 18:10:29 +02:00
Michele Guerini Rocco
ea1eae5b47
Merge pull request from rnhmjoj/lock-kernel-fix
nixos/lock-kernel-modules: reorder before/after
2021-09-20 15:13:12 +02:00
github-actions[bot]
9e5021eef4
Merge master into staging-next 2021-09-20 12:01:15 +00:00
happysalada
bdd04deff5 meilisearch: module cleanup 2021-09-20 16:12:29 +09:00
happysalada
6903737a8c meilisearch: nixpkgs-fmt 2021-09-20 16:12:29 +09:00
Oleksii Filonenko
be72fadd54 nixosTests.meilisearch: init
(cherry picked from commit 4cc2d55f6ac2440843ef3387909dbc703f65397d)
2021-09-20 16:12:29 +09:00
Oleksii Filonenko
811fe35a66 nixos/meilisearch: init
Reviewed-by: Aaron Andersen <aanderse@users.noreply.github.com>
(cherry picked from commit 5844ea85c3ad96b8a2df9da50374c530e86a904d)
2021-09-20 16:12:29 +09:00
Sergei Trofimovich
9000350994 nixos/smokeping: drop dangling fping6 suid swapper
After recent change `services.smokeping.enable = true;` system
started failing the build as:

```
nixpkgs-master $ nix build --no-link -f nixos system --keep-going
...
Checking that Nix store paths of all wrapped programs exist... FAIL
The path /nix/store/kr2sr80g9ny74im6m6dyh9v44hnzm261-fping-5.0/bin/fping6 does not exist!
Please, check the value of `security.wrappers."fping6".source`.
```

`fping` does not provide `fping6` binary for a while. Let's just remove it.

Closes: https://github.com/NixOS/nixpkgs/issues/138581
2021-09-20 07:57:56 +01:00
github-actions[bot]
f666c4d10f
Merge master into staging-next 2021-09-20 06:01:17 +00:00
happysalada
b51e813153 elasticsearch: support version 6 2021-09-20 14:31:02 +09:00
Bobby Rong
2610f6e0df
nixos/panthoen: mention appcenter changes in manual 2021-09-20 10:06:22 +08:00
Amanda Cameron
bd28ff08d3 nixos/greetd: Fix for nogroup removal. 2021-09-19 17:37:27 -04:00
Austin Butler
b88b46b830 nixos/tcsd: make group uid dynamic 2021-09-19 12:42:46 -07:00
Austin Butler
8b6fa3c821 nixos/tpm2: define group, fix after NixOS#133166 2021-09-19 12:40:54 -07:00
github-actions[bot]
78ca5a3e45
Merge master into staging-next 2021-09-19 18:01:13 +00:00
Guillaume Girol
07d82812bc
Merge pull request from symphorien/nonogroup-fixes-2
Fixes after 
2021-09-19 17:15:02 +00:00
Alyssa Ross
e2bb7997c4
Merge remote-tracking branch 'nixpkgs/master' into staging-next
Conflicts:
	nixos/doc/manual/release-notes/rl-2111.section.md
2021-09-19 17:08:00 +00:00
Izorkin
1e54f84012
nixos/netdata: fix working with disabled ipmi plugin 2021-09-19 19:15:49 +03:00
Aaron Andersen
559449530f
Merge pull request from onny/opensnitch
nixos/opensnitch: Add module for opensnitch
2021-09-19 11:31:21 -04:00
Jeremy Kolb
cb9167139e
vmware-guest: Use vmware-vmblock-fuse for drag-and-drop synchronization () 2021-09-19 18:15:41 +03:00
Michele Guerini Rocco
108986ab71
Merge pull request from rnhmjoj/fix-physlock
nixos/physlock: fix broken wrapper
2021-09-19 17:06:38 +02:00
Naïm Favier
2f8ae51da9
cups: 2.3.3 -> 2.3.3op2
https://github.com/OpenPrinting/cups/releases/tag/v2.3.3op1
https://github.com/OpenPrinting/cups/releases/tag/v2.3.3op2
2021-09-19 16:17:05 +02:00
rnhmjoj
1bd7260adb
nixos/lock-kernel-modules: reorder before/after
Moving the service before multi-user.target (so the `hardened` test
continue to work the way it did before) can result in locking the kernel
too early. It's better to lock it a bit later and changing the test to
wait specifically for the disable-kernel-module-loading.service.
2021-09-19 12:06:00 +02:00
rnhmjoj
64f5d681d9
nixos/physlock: fix broken wrapper
- `user` doesn't exist -> `owner`
- set `setuid,group` as well (no longer optional)
2021-09-19 11:53:41 +02:00
davidak
dfa2dd95c2
Merge pull request from bobby285271/pantheon-team
treewide: switch from pantheon.maintainers to lib.teams.pantheon
2021-09-19 02:58:11 +02:00
davidak
a0d68379c2
Merge pull request from bobby285271/pantheon-tweaks
pantheon-tweaks: init at 1.0.1
2021-09-19 02:47:37 +02:00
Michele Guerini Rocco
1cf01b5215
Merge pull request from rnhmjoj/layouts
nixos/extra-layouts: avoid all rebuilds
2021-09-19 01:10:55 +02:00
Guillaume Girol
ceb2e6667b
Merge pull request from rnhmjoj/wrappers
nixos/security/wrappers: make well-typed
2021-09-18 15:28:49 +00:00
Bobby Rong
0fd8cc3908
treewide: switch from pantheon.maintainers to lib.teams.pantheon 2021-09-18 23:07:00 +08:00
rnhmjoj
bd3cb03c6f
nixos/docs: document new qemu-vm features 2021-09-18 16:58:16 +02:00
rnhmjoj
e4e5d4d899
nixos/documentation: always show qemu-vm options 2021-09-18 16:58:16 +02:00
rnhmjoj
b29c2f97c3
nixos/lib/qemu-flags: rename to qemu-common
The current name is misleading: it doesn't contain cli arguments,
but several constants and utility functions related to qemu.
This commit also removes the use of `with import ...` for clarity.
2021-09-18 16:58:16 +02:00
Bobby Rong
f126efd820
nixos/pantheon-tweaks: init 2021-09-18 22:49:53 +08:00
rnhmjoj
b8bfc81d5b
nixos/qemu: add option to forward ports 2021-09-18 16:47:12 +02:00
rnhmjoj
44d95b773b
nixos/qemu: make display resolution configurable 2021-09-18 16:47:11 +02:00
rnhmjoj
ec6c604b6e
nixos/qemu: make shared directories configurable 2021-09-18 16:47:11 +02:00
rnhmjoj
30f0faac22
nixos/qemu: add types to all options 2021-09-18 16:47:11 +02:00
rnhmjoj
f1f434c4f7
nixos/qemu: cleaner formatting of the run-machine-vm script 2021-09-18 16:47:11 +02:00
rnhmjoj
2af5413cc6
nixos/qemu: set a reasonable msize by default 2021-09-18 16:47:10 +02:00
rnhmjoj
65e83389ef
nixos/qemu: fix deprecation warning 2021-09-18 16:47:10 +02:00
rnhmjoj
c1fd51f490
nixos/qemu: fix several shellcheck issues
- Fix shell quoting issues
- Fix unsafe cd in run-machine-vm script
2021-09-18 16:46:20 +02:00
happysalada
47961c73be docs: fix release notes format 2021-09-18 23:39:59 +09:00
Jonas Heinrich
0dcac759f2 nixos/dokuwiki: Add support for Caddy web server 2021-09-18 23:09:21 +09:00
Raphael Megzari
62468d6ff7
Merge branch 'master' into staging-next 2021-09-18 22:46:18 +09:00
Guillaume Girol
af5ba65b9f nixos/nntp-proxy: define group, fix after 2021-09-18 14:42:08 +02:00
Guillaume Girol
fa3664a176 nixos/logcheck: define group, fix after 2021-09-18 14:42:08 +02:00
Guillaume Girol
cd2b24c306 nixos/heapster: define group, fix after 2021-09-18 14:42:08 +02:00
Guillaume Girol
9e94e48b94 nixos/gammu-smsd: define group, fix after 2021-09-18 14:42:08 +02:00
Guillaume Girol
ca2db671ba nixos/cgminer: define group, fix eval after 2021-09-18 14:42:08 +02:00
Guillaume Girol
3e9520f414 nixos/cgminer: fix type of services.cgminer.config option 2021-09-18 14:42:08 +02:00
Guillaume Girol
8c2e6705b3 nixos/gpsd: define group, fix after 2021-09-18 14:42:08 +02:00
Guillaume Girol
615db90f3d nixos/openntpd, nixos/ntp: define group, fix after 2021-09-18 14:42:08 +02:00
Guillaume Girol
88b4ba2169 nixos/unifi: define group, fix after 2021-09-18 14:42:08 +02:00
github-actions[bot]
7da057ad4e
Merge master into staging-next 2021-09-18 12:01:25 +00:00
Guillaume Girol
8ba5f8115c nixos/zope2: define group
untested as the module is broken (attribute 'modules' missing)
2021-09-18 12:00:00 +00:00
Guillaume Girol
23d14d89b8 nixos/tvheadend: define group, fix eval after 2021-09-18 12:00:00 +00:00
Guillaume Girol
fd04a872bc nixos/toxvpn: define group, fix eval after 2021-09-18 12:00:00 +00:00
Guillaume Girol
d09ab77588 nixos/shout: define group, fix eval after 2021-09-18 12:00:00 +00:00
Guillaume Girol
feeca7dd55 nixos/rippled: define group, fix eval after 2021-09-18 12:00:00 +00:00
Guillaume Girol
a654d779fe nixos/ripple-data-api: define group
required after 
untested, the module is broken by the removal of couchdb
2021-09-18 12:00:00 +00:00
Guillaume Girol
6cf8b27fd6 nixos/rdnssd: define group; fix after 2021-09-18 12:00:00 +00:00
Bobby Rong
1b16dbeb55
nixos/rl-2111: mention pantheon 6 upgrade and touchegg module 2021-09-18 19:35:16 +08:00
Bobby Rong
4998805947
nixos/pantheon: prefer pantheon.epiphany 2021-09-18 19:33:41 +08:00
Bobby Rong
dc19457a80
nixos/pantheon: remove lightlocker
screen locker has been embedded in the compositor, see github.com/elementary/gala/pull/809
2021-09-18 19:33:41 +08:00
Bobby Rong
158181403a
nixos/pantheon: enable touchegg by default 2021-09-18 19:33:41 +08:00
Bobby Rong
b420199b87
nixos/pantheon: enable fwupd by default
this is needed in switchboard-plug-about
2021-09-18 19:33:41 +08:00
Bobby Rong
a66bcfe997
nixos/pantheon: fix test command for wingpanel 2021-09-18 19:33:40 +08:00
Bobby Rong
3f3502ca93
nixos/pantheon: update excludePackages example in docs 2021-09-18 19:33:40 +08:00
Bobby Rong
760f7e57e4
nixos/pantheon: install elementary-mail by default 2021-09-18 19:33:40 +08:00
Bobby Rong
0366acbcd5
nixos/pantheon: add inter and open-dyslexic as preinstalled font 2021-09-18 19:33:40 +08:00
Bobby Rong
2478c8bf01
nixos/touchegg: init 2021-09-18 19:33:40 +08:00
Bobby Rong
de73ad2567
pantheon.elementary-files: 4.5.0 -> 6.0.2 2021-09-18 19:33:38 +08:00
Bobby Rong
91073bc810
pantheon.elementary-screenshot: 1.7.1 -> 6.0.0
renamed from pantheon.elementary-screenshot-tool
2021-09-18 19:33:38 +08:00
Bobby Rong
7973714304
pantheon.elementary-dpms-helper: drop package 2021-09-18 19:33:36 +08:00
Bobby Rong
75473c2d70
gnome.gnome-settings-daemon338: init at 3.38.2
light-locker is no longer used in Pantheon 6, we will try using the upstream gnome-settings-daemon
2021-09-18 19:33:36 +08:00
Aaron Andersen
4ec195a9c1
Merge pull request from illustris/spark3
Spark: init module
2021-09-18 07:28:19 -04:00
github-actions[bot]
263bdbdad4
Merge master into staging-next 2021-09-18 06:01:19 +00:00
Artturi
e7b6d118f2
Merge pull request from chkno/user-activation-scripts
Run userActivationScripts at login
2021-09-18 05:25:06 +03:00
github-actions[bot]
c4fd2a8f99
Merge master into staging-next 2021-09-18 00:01:33 +00:00
figsoda
f181160d4b
Merge pull request from figsoda/xdg-mime
nixos/xdg/mime: add config for associations between mimetypes and applications
2021-09-17 17:27:46 -04:00
Ninjatrappeur
e0a6a786c4
Merge pull request from NinjaTrappeur/massimo-zaniboni-master 2021-09-17 20:20:01 +02:00
github-actions[bot]
a21275cdae
Merge master into staging-next 2021-09-17 18:01:14 +00:00
illustris
13839b0022 nixos/spark: add test 2021-09-17 22:40:06 +05:30
illustris
dd987c2dbe nixos/spark: release notes 2021-09-17 22:34:53 +05:30
illustris
71d15cf816 nixos/spark: init module 2021-09-17 22:34:47 +05:30
Robert Hensing
f023c47101
Merge pull request from i-do-cpp/add-disableInstallerTools-test
installers/tools: add test for system.disableInstallerTools option
2021-09-17 17:09:39 +02:00
Massimo Zaniboni
a3d011eebc
nixos-docs: improved the installation instructions of Pleroma
- Detailed initial config generation process.
- Detailed Nginx Configuration.
- Detailed private/public conf split.

docs: Improved documentation of Pleroma service

Secrets are only in the private file, and in a draft format for avoiding GitHub
complaints.

Fixed Nginx configuration.

docs: Improved the Nginx reverse proxy settings of Pleroma service
2021-09-17 15:31:11 +02:00
Luke Granger-Brown
65b8408ce8 Merge remote-tracking branch 'upstream/staging' into staging-next 2021-09-17 12:18:44 +00:00
Jonas Heinrich
38431cf21c nixos/wordpress: caddy support 2021-09-17 19:12:21 +09:00
github-actions[bot]
00e2bbfcff
Merge staging-next into staging 2021-09-17 06:02:03 +00:00
figsoda
590bd1db94
Merge pull request from dsg22/feature-libinput-expose-transformatrionmatrix-option
libinput: Add transformation matrix option
2021-09-16 20:17:52 -04:00
rnhmjoj
3026ff17ec
nixos/doc: new progress in xserver.extraLayouts 2021-09-17 02:12:19 +02:00
github-actions[bot]
2ad7b248e6
Merge staging-next into staging 2021-09-17 00:02:15 +00:00
rnhmjoj
e4da1edf8b
nixos/extra-layouts: avoid all rebuilds
Just setting the XKB_CONFIG_ROOT should be enough, so we don't need to
rebuild the xserver, xkbcomp and other packages anymore.
However, the variable has to be passed explicitely to scripts running at
build time: in particular to xkbvalidate and xkb-console-keymap.
2021-09-17 01:48:46 +02:00
Jan Tojnar
2006672bf0
Merge pull request from jansol/master
pipewire: 0.3.35 -> 0.3.36
2021-09-16 21:17:59 +02:00
Robert Hensing
70b9016e94
Merge pull request from mkenigs/rm-runInMachine
nixos/testing: remove unused function runInMachine
2021-09-16 20:04:35 +02:00
Sandro
5795c33bdd
Merge pull request from ehmry/tox-bootstrapd 2021-09-16 20:02:02 +02:00
github-actions[bot]
9905c2647a
Merge staging-next into staging 2021-09-16 18:01:40 +00:00
Timothy DeHerrera
f77b7736b3
Merge pull request from NixOS/SuperSandro2000-patch-1
nixos/documentation: use full option names
2021-09-16 11:42:53 -06:00
Jan Solanti
996b51ee85 pipewire: 0.3.35 -> 0.3.36 2021-09-16 18:52:08 +03:00
github-actions[bot]
85bd312fb6
Merge staging-next into staging 2021-09-16 12:02:04 +00:00
Jan Tojnar
79c444b5bd
Merge pull request from jansol/master
pipewire: 0.3.34 -> 0.3.35
2021-09-16 11:44:47 +02:00
github-actions[bot]
52ebc93c96
Merge staging-next into staging 2021-09-16 06:01:54 +00:00
Martin Weinelt
6f12ff7aa5
Merge pull request from NixOS/home-assistant
home-assistant: 2021.8.8 -> 2021.9.6
2021-09-16 04:48:39 +02:00
Martin Weinelt
cf75539971 nixos/home-assistant: allow serial access for usb discovery and zwave_js
via https://www.home-assistant.io/blog/2021/09/01/release-20219/#usb-discovery
and https://www.home-assistant.io/integrations/usb/
2021-09-16 04:22:32 +02:00
github-actions[bot]
6a10b23c61
Merge staging-next into staging 2021-09-16 00:02:05 +00:00
Artturi
74b3e9ff87
Merge pull request from Artturin/tmpontmpfssize 2021-09-16 02:25:02 +03:00
Sandro
4f78c74b57
nixos/documentation: use full option names 2021-09-15 22:43:44 +02:00
Emery Hemingway
0721aa49a3 nixos/tox-bootstrapd: use DynamicUser 2021-09-15 22:01:56 +02:00
rnhmjoj
dc34788a25
nixos/lock-kernel-modules: use udevadm settle
Instead of relying on systemd-udev-settle, which is deprecated,
directly call `udevamd settle` to wait for hardware to settle.
2021-09-15 14:36:50 +02:00
github-actions[bot]
24a34e5706
Merge staging-next into staging 2021-09-15 12:01:34 +00:00
Lara
fe034d33be nixos/gitlab: Enable roation of log files
This commit enables a logrotate service for gitlab using the default
values from omnibus. [1]

[1] https://gitlab.com/gitlab-org/omnibus-gitlab/-/blob/master/files/gitlab-cookbooks/gitlab/attributes/default.rb#L754

Resolves 
2021-09-15 09:57:18 +02:00
Michele Guerini Rocco
0e848f7b12
Merge pull request from rnhmjoj/gdm-no-udev-settle
nixos/gdm: remove udev-settle dependency
2021-09-15 09:52:10 +02:00
i-do-cpp
92139c2045 installers/tools: add test for system.disableInstallerTools option
This test ensures the installer tools are actually unavailable
with the option set to true.
2021-09-15 09:18:35 +02:00
github-actions[bot]
0f78d9c4b7
Merge staging-next into staging 2021-09-15 00:02:12 +00:00
github-actions[bot]
728f30ca03
Merge master into staging-next 2021-09-15 00:01:33 +00:00
Guillaume Girol
955d01c675
Merge pull request from symphorien/systemd-coredump-group
nixos/systemd: create a group for systemd-coredump
2021-09-14 20:07:47 +00:00
Guillaume Girol
777c50f3f2
Merge pull request from symphorien/vsftpd-nogroup
nixos/vsftpd: allocate group; fix fallout of 
2021-09-14 20:07:02 +00:00
github-actions[bot]
95f24a8a57
Merge staging-next into staging 2021-09-14 18:01:40 +00:00
github-actions[bot]
91c89490cc
Merge master into staging-next 2021-09-14 18:01:05 +00:00
Artturi
045bf139db
Merge pull request from matthewbauer/add-disableInstallerTools-option 2021-09-14 20:41:02 +03:00
Jonas Heinrich
94f775024e Opensnitch: Add module 2021-09-14 18:51:23 +02:00
Bobby Rong
39261adc92
Merge pull request from delroth/tor-netlink
nixos/tor: allow AF_NETLINK address family
2021-09-14 22:57:34 +08:00
ajs124
9c566248df
Merge pull request from helsinki-systems/fix/dry-activation
nixos/activation-script: Fix dependencies for dry activation
2021-09-14 15:55:37 +02:00
Guillaume Girol
9739ba6baf nixos/systemd: create a group for systemd-coredump
Fixes:
```
activating the configuration...
warning: user ‘systemd-coredump’ has unknown group ‘systemd-coredump’
setting up /etc...
```

Oversight of 
2021-09-14 12:00:00 +00:00
Guillaume Girol
eb328077c3 nixos/vsftpd: allocate group; fix fallout of 2021-09-14 12:00:00 +00:00
github-actions[bot]
79a728d821
Merge staging-next into staging 2021-09-14 00:01:57 +00:00
github-actions[bot]
1db0c42d5a
Merge master into staging-next 2021-09-14 00:01:23 +00:00
Guillaume Girol
3592034595
Merge pull request from symphorien/nonogroup
Don't default to nogroup for the primary group of users.
2021-09-13 18:29:21 +00:00
github-actions[bot]
04e48fbe4f
Merge staging-next into staging 2021-09-13 18:01:51 +00:00
Jonathan Ringer
ca1731455d
Merge remote-tracking branch 'origin/master' into staging-next 2021-09-13 08:09:52 -07:00
Kim Lindberger
460d7f63c6
Merge pull request from talyz/parsedmarc
parsedmarc: Add package and NixOS module
2021-09-13 15:44:18 +02:00
talyz
6496902fb2
nixos/parsedmarc: Add manual entry and release note 2021-09-13 13:57:17 +02:00
talyz
d46e78fd76
nixos/parsedmarc: Add test 2021-09-13 13:57:11 +02:00
talyz
98d9617705
nixos/parsedmarc: Add NixOS module 2021-09-13 13:57:06 +02:00
talyz
3a1e1f0624
nixos/elasticsearch: Wait for elasticsearch to start up properly
Other services that depend on elasticsearch should be started after
it, but since the versions we're packaging have to run as
"Type=simple", they're started as soon as the elasticsearch binary has
been executed, likely winning the race against it.

This makes sure elasticsearch is up and running, responding to a
simple query, before dependents are started.
2021-09-13 13:57:01 +02:00
rnhmjoj
27b0c53d23
doc/release-notes: mention security.wrappers changes 2021-09-13 13:48:13 +02:00
rnhmjoj
65e83b0e23
nixos: fix nobody/nogroup in security.wrappers 2021-09-13 13:48:13 +02:00
rnhmjoj
fedd7cd690
nixos: explicitely set security.wrappers ownership
This is slightly more verbose and inconvenient, but it forces you
to think about what the wrapper ownership and permissions will be.
2021-09-13 13:48:13 +02:00
rnhmjoj
8f76a6eefc
nixos: add implict security.wrappers options
This is to keep the same permissions/setuid/setgid as before the change
in security.wrappers defaults.
2021-09-13 13:48:13 +02:00
rnhmjoj
41a498578e
nixos/mail: reuse security.wrappers type 2021-09-13 13:48:13 +02:00
rnhmjoj
27dcb04cde
nixos/security/wrappers: remove WRAPPER_PATH
This appears to be a leftover from 628e6a83.
2021-09-13 13:48:13 +02:00
rnhmjoj
936e8eaf41
nixos/security/wrappers: fix shell quoting 2021-09-13 13:48:12 +02:00
Alyssa Ross
0f279e2e0c nixos/top-level: fix cross
When cross-compiling, we can't run the runtime shell to check syntax
if it's e.g. for a different architecture.  We have two options here.
We can disable syntax checking when cross compiling, but that risks
letting errors through.  Or, we can do what I've done here, and change
the syntax check to use stdenv's shell instead of the runtime shell.
This requires the stdenv shell and runtime shell to be broadly
compatible, but I think that's so ingrained in Nixpkgs anyway that
it's fine.  And this way we avoid conditionals that check for cross.
2021-09-13 11:13:38 +00:00
rnhmjoj
7d8b303e3f
nixos/security/wrappers: check that sources exist
Add a shell script that checks if the paths of all wrapped programs
actually exist to catch mistakes. This only checks for Nix store paths,
which are always expected to exist at build time.
2021-09-13 10:38:04 +02:00
Florian Klink
8019c95b55
Merge pull request from andir/systemdv249
systemd v249
2021-09-13 09:39:49 +02:00
figsoda
ec2690c67f nixos/xdg/mime: add config for associations
between mimetypes and applications
2021-09-12 21:02:40 -04:00
github-actions[bot]
dfd1161f35
Merge staging-next into staging 2021-09-13 00:02:22 +00:00
github-actions[bot]
ac962ee61a
Merge master into staging-next 2021-09-13 00:01:41 +00:00
Sandro
a79648dd7f
Merge pull request from john-consumable/master 2021-09-13 00:42:54 +02:00
Andreas Rammhold
92442b1f99
nixos/tests/prometheus: wait for influxdb exporter before quering
Previously the influxdb exporter test was flaky as even after the
service has started there is still a race before the service is actually
listening and accepting connection on port 9122.

With this commit the test will wait for the port to be open before
proceeding.
2021-09-12 23:45:55 +02:00
Andreas Rammhold
72197a5c79
nixos/tests/herbstluftwm: fix timeout that was given in seconds
Hydra accepts timeouts as value of seconds after which the test is
terminated / considered failed. Using the value 30 here has the effect
that the test was terminate after 30 seconds. That time might be
sufficient for the test execution itself but it has another downside:

Jobs on hydra inherit the timeout of their parent. In this case all the
builds that are a dependency of the herbstluftwm test *must* finish
(each) within 30s. And since not all of the dependencies are cached in
the binary cache this could lead to an issue with pacakges that take
longer than 30s to build at the time when the herbstluftwm test is built
by hydra.

It is best to not set the timeout here and let hydra deal with it.  Our
default timeout for builds is two hours which is more than sufficient
for most builds and tests. If the test fails we will spent ~2h doing
something or nothing at worst but at least we wont kill the build just
because a dependency wasn't fullfilled already.
2021-09-12 23:45:55 +02:00
Andreas Rammhold
64556974b6
systemd: 247.6 -> 249.4
This updates systemd to version v249.4 from version v247.6.

Besides the many new features that can be found in the upstream
repository they also introduced a bunch of cleanup which ended up
requiring a few more patches on our side.

a) 0022-core-Handle-lookup-paths-being-symlinks.patch:
  The way symlinked units were handled was changed in such that the last
  name of a unit file within one of the unit directories
  (/run/systemd/system, /etc/systemd/system, ...) is used as the name
  for the unit. Unfortunately that code didn't take into account that
  the unit directories themselves could already be symlinks and thus
  caused all our units to be recognized slightly different.

  There is an upstream PR for this new patch:
    https://github.com/systemd/systemd/pull/20479

b) The way the APIVFS is setup has been changed in such a way that we
   now always have /run. This required a few changes to the
   confinement tests which did assert that they didn't exist. Instead of
   adding another patch we can just adopt the upstream behavior. An
   empty /run doesn't seem harmful.

   As part of this work I refactored the confinement test just a little
   bit to allow better debugging of test failures. Previously it would
   just fail at some point and it wasn't obvious which of the many
   commands failed or what the unexpected string was. This should now be
   more obvious.

c) Again related to the confinement tests the way a file was tested for
   being accessible was optimized. Previously systemd would in some
   situations open a file twice during that check. This was reduced to
   one operation but required the procfs to be mounted in a units
   namespace.

   An upstream bug was filed and fixed. We are now carrying the
   essential patch to fix that issue until it is backported to a new
   release (likely only version 250). The good part about this story is
   that upstream systemd now has a test case that looks very similar to
   one of our confinement tests. Hopefully that will lead to less
   friction in the long run.

   https://github.com/systemd/systemd/issues/20514
   https://github.com/systemd/systemd/pull/20515

d) Previously we could grep for dlopen( somewhat reliably but now
   upstream started using a wrapper around dlopen that is most of the
   time used with linebreaks. This makes using grep not ergonomic
   anymore.

   With this bump we are grepping for anything that looks like a
   dynamic library name (in contrast to a dlopen(3) call) and replace
   those instead. That seems more robust. Time will tell if this holds.

   I tried using coccinelle to patch all those call sites using its
   tooling but unfornately it does stumble upon the _cleanup_
   annotations that are very common in the systemd code.

e) We now have some machinery for libbpf support in our systemd build.
   That being said it doesn't actually work as generating some skeletons
   doesn't work just yet. It fails with the below error message and is
   disabled by default (in both minimal and the regular build).

   > FAILED: src/core/bpf/socket_bind/socket-bind.skel.h
   > /build/source/tools/build-bpf-skel.py --clang_exec /nix/store/x1bi2mkapk1m0zq2g02nr018qyjkdn7a-clang-wrapper-12.0.1/bin/clang --llvm_strip_exec /nix/store/zm0kqan9qc77x219yihmmisi9g3sg8ns-llvm-12.0.1/bin/llvm-strip --bpftool_exec /nix/store/l6dg8jlbh8qnqa58mshh3d8r6999dk0p-bpftools-5.13.11/bin/bpftool --arch x86_64 ../src/core/bpf/socket_bind/socket-bind.bpf.c src/core/bpf/socket_bind/socket-bind.skel.h
   > libbpf: elf: socket_bind_bpf is not a valid eBPF object file
   > Error: failed to open BPF object file: BPF object format invalid
   > Traceback (most recent call last):
   >   File "/build/source/tools/build-bpf-skel.py", line 128, in <module>
   >     bpf_build(args)
   >   File "/build/source/tools/build-bpf-skel.py", line 92, in bpf_build
   >     gen_bpf_skeleton(bpftool_exec=args.bpftool_exec,
   >   File "/build/source/tools/build-bpf-skel.py", line 63, in gen_bpf_skeleton
   >     skel = subprocess.check_output(bpftool_args, universal_newlines=True)
   >   File "/nix/store/81lwy2hfqj4c1943b1x8a0qsivjhdhw9-python3-3.9.6/lib/python3.9/subprocess.py", line 424, in check_output
   >     return run(*popenargs, stdout=PIPE, timeout=timeout, check=True,
   >   File "/nix/store/81lwy2hfqj4c1943b1x8a0qsivjhdhw9-python3-3.9.6/lib/python3.9/subprocess.py", line 528, in run
   >     raise CalledProcessError(retcode, process.args,
   > subprocess.CalledProcessError: Command '['/nix/store/l6dg8jlbh8qnqa58mshh3d8r6999dk0p-bpftools-5.13.11/bin/bpftool', 'g', 's', '../src/core/bpf/socket_bind/socket-bind.bpf.o']' returned non-zero exit status 255.
   > [102/1457] Compiling C object src/journal/libjournal-core.a.p/journald-server.c.oapture output)put)ut)
   > ninja: build stopped: subcommand failed.

  f) We do now have support for TPM2 based disk encryption in our
     systemd build. The actual bits and pieces to make use of that are
     missing but there are various ongoing efforts in that direction.
     There is also the story about systemd in our initrd to enable this
     being used for root volumes. None of this will yet work out of the
     box but we can start improving on that front.

  g) FIDO2 support was added systemd and consequently we can now use
     that. Just with TPM2 there hasn't been any integration work with
     NixOS and instead this just adds that capability to work on that.

Co-Authored-By: Jörg Thalheim <joerg@thalheim.io>
2021-09-12 23:45:49 +02:00
Maximilian Bosch
2444c11431
nixos/kernel: add 5.14 to kernel test-suite
I guess that this was just forgotten in  and I realized while
running these tests for the latest kernel updates.
2021-09-12 22:43:46 +02:00
Sandro
e4b50b4821
Merge pull request from ToxicFrog/crossfire 2021-09-12 22:13:02 +02:00
rnhmjoj
22004f7e8f
nixos/security/wrappers: use fixed defaults
To keep backward compatibility and have a typing would require making
all options null by default, adding a defaultText containing the actual
value, write the default value logic based on `!= null` and replacing
the nulls laters. This pretty much defeats the point of having used
a submodule type.
2021-09-12 21:43:25 +02:00
rnhmjoj
904f68fb0f
nixos/security/wrappers: make well-typed
The security.wrappers option is morally a set of submodules but it's
actually (un)typed as a generic attribute set. This is bad for several
reasons:

1. Some of the "submodule" option are not document;
2. the default values are not documented and are chosen based on
   somewhat bizarre rules (issue );
3. It's not possible to override an existing wrapper due to the
   dumb types.attrs.merge strategy;
4. It's easy to make mistakes that will go unnoticed, which is
   really bad given the sensitivity of this module (issue ).

This makes the option a proper set of submodule and add strict types and
descriptions to every sub-option. Considering it's not yet clear if the
way the default values are picked is intended, this reproduces the current
behavior, but it's now documented explicitly.
2021-09-12 21:43:03 +02:00
Maximilian Bosch
364b5555ee
Merge pull request from Ma27/pi-sudo
nixos/privacyidea: use `sudo(8)` that's configured via the module
2021-09-12 20:09:49 +02:00
github-actions[bot]
fef6f602e6
Merge staging-next into staging 2021-09-12 18:01:50 +00:00
github-actions[bot]
a13bf1828b
Merge master into staging-next 2021-09-12 18:01:21 +00:00
Maximilian Bosch
8b13843f4e
Merge pull request from zhaofengli/promtail-allow-positions-file
nixos/promtail: Allow write access to positions file if not in CacheDirectory
2021-09-12 18:17:25 +02:00
Matthieu Coudron
ab9c7819fe
Merge pull request from teto/lua-flat
Various lua changes/cleanup
2021-09-12 18:08:53 +02:00
Daniël de Kok
6f2ce2a65e treewide: remove danieldk as maintainer from a set of packages
I currently do not have much time to work on nixpkgs. Remove
myself as a maintainer from a bunch of packages to avoid that
people are waiting on me for a review.
2021-09-12 14:42:12 +00:00
ajs124
119c9e1f70 nixos/rabbitmq: clean-up after f091420c1d 2021-09-12 16:32:36 +02:00
Jan Solanti
f4fbb21176 pipewire: 0.3.34 -> 0.3.35 2021-09-12 16:33:50 +03:00
Guillaume Girol
27f0f8965b nixos/tests/caddy.nix: fix eval 2021-09-12 14:59:30 +02:00
Guillaume Girol
476fcfd2aa nixos: add release notes about users.users.name.group 2021-09-12 14:59:30 +02:00
Guillaume Girol
bc3bca822a nixos: define the primary group of users where needed 2021-09-12 14:59:30 +02:00
github-actions[bot]
7267016c66
Merge staging-next into staging 2021-09-12 12:01:42 +00:00
github-actions[bot]
acd45cb351
Merge master into staging-next 2021-09-12 12:01:10 +00:00
Sandro
e26b155274
Merge pull request from SuperSandro2000/wicd
treewide: yank wicd as it is abandoned
2021-09-12 12:56:10 +02:00
Janne Heß
4db13430fb
nixos/activation-script: Fix dependencies for dry activation 2021-09-12 11:34:13 +02:00
github-actions[bot]
3d192af340
Merge staging-next into staging 2021-09-12 06:01:33 +00:00
github-actions[bot]
45de5d0c9a
Merge master into staging-next 2021-09-12 06:01:00 +00:00
Jörg Thalheim
fc4247e827
Merge pull request from bobby285271/markdown
nixos/doc: Convert more articles to CommonMark
2021-09-12 04:51:20 +01:00
zowoq
07109dd495 nixos/kubernetes: add cni-plugin-flannel to kubelet.cni.packages
the flannel plugin was removed from `cni-plugins` in ee8ed2cd8d
2021-09-12 12:47:45 +10:00
Bobby Rong
7fb52b1325
nixos: nixos/doc/manual/installation/installing.xml to CommonMark 2021-09-12 09:26:37 +08:00
Matthieu Coudron
b97977681e lua: add LUA_PATH changes to release notes
lua interpreters have been patched not to look into FHS folders anymore.
2021-09-12 03:03:56 +02:00
happysalada
30a04a1ad9 rl-2111: add bash default upgrade to version 5 2021-09-12 09:48:54 +09:00
github-actions[bot]
3f2255106a
Merge master into staging-next 2021-09-12 00:01:45 +00:00
John Soo
b1c57920f5 nixos/datadog-agent: Note breaking changes in release notes. 2021-09-11 15:32:14 -07:00
John Soo
a51ee771be nixos/datadog-agent: Update process collection binary. 2021-09-11 15:32:14 -07:00
John Soo
e131d6bf51 datadog-agent: Add release note entry. 2021-09-11 15:32:14 -07:00
Sandro Jäckel
781766e30c
treewide: yank wicd as it is abandoned 2021-09-11 23:46:52 +02:00
Timothy DeHerrera
8e2f255cb6
Merge pull request from figsoda/git-module
nixos/git: init
2021-09-11 15:42:22 -06:00
Davíð Steinn Geirsson
4598ff3bb8 nixos/libinput: Add transformation matrix option 2021-09-11 20:53:29 +00:00