Martin Weinelt
73e19e1a8d
nixos/lxd: use networkd for DHCP/RA
...
Enables networkd instead of dhcpcd for DHCP/RA. It offers a solid base
for network configuration, that is much more extensible than dhcpcd and
also better maintained than our bespoke `networking.interfaces` modules.
Closes : #287269
2024-02-08 17:57:46 +01:00
Aaron Andersen
2d8bd81554
Merge pull request #286063 from yaxitech/github-runner-node-runtimes-286059
...
nixos/github-runners: only override pkg if it has a `nodeRuntimes` arg
2024-02-08 07:20:13 -08:00
Maciej Krüger
bca04fb384
release-notes: add oil c++ note
2024-02-08 10:25:24 +01:00
github-actions[bot]
74098fff88
Merge master into staging-next
2024-02-08 06:01:13 +00:00
Ryan Lahfa
f5c054af12
Merge pull request #264369 from RaitoBezarius/drop-pamusb
...
pam_usb, nixos/pam-usb: drop
2024-02-08 04:26:23 +01:00
Raito Bezarius
2d78f55438
pam_usb, nixos/pam-usb: drop
...
`security.pam.usb` is broken anyway and upstream has abandoned the software.
2024-02-08 02:59:45 +01:00
Maciej Krüger
2ce33c60cf
lxd-container-image: set mode of configuration.nix
...
before:
```
[root@nixos:~]# ls -la /etc/nixos
total 16
drwxr-xr-x 2 root root 4096 Feb 8 00:51 .
drwxr-xr-x 16 root root 4096 Feb 8 00:51 ..
-r--r--r-- 1 root root 605 Feb 8 00:51 configuration.nix
-rw-r--r-- 1 root root 150 Feb 8 00:51 lxd.nix
```
after:
```
[root@nixos:~]# ls -la /etc/nixos
total 16
drwxr-xr-x 2 root root 4096 Feb 8 00:50 .
drwxr-xr-x 16 root root 4096 Feb 8 00:50 ..
-rw-r--r-- 1 root root 605 Feb 8 00:50 configuration.nix
-rw-r--r-- 1 root root 149 Feb 8 00:50 lxd.nix
```
2024-02-08 01:52:05 +01:00
github-actions[bot]
8cb642cb14
Merge master into staging-next
2024-02-08 00:02:08 +00:00
Peter Hoeg
9a113b42b3
nixos/version: add ANSI_COLOR
2024-02-08 00:14:53 +01:00
Jörg Thalheim
ded6a6cb80
Merge pull request #277137 from ajs124/fix/tt-rss-phpPackage
...
nixos/tt-rss: add phpPackage option
2024-02-07 23:19:57 +01:00
nikstur
ad2dfe1ef4
Merge pull request #286717 from msanft/nixos/appliance-docs
...
nixos/appliance-repart-image: use UKI in docs
2024-02-07 22:51:31 +01:00
nikstur
bbce103ca8
nixos/filesystems: add release notes
2024-02-07 22:13:00 +01:00
nikstur
1407ec7420
nixos/filesystems: add overlayfs docs
2024-02-07 22:13:00 +01:00
nikstur
1c1cfa073a
nixos/filesystems: init overlayfs
2024-02-07 22:13:00 +01:00
Kim Lindberger
debe2ca258
Merge pull request #286532 from flyingcircusio/PL-131811-gitlab-loose-coupling-upstream
...
nixos.gitlab: loosen the coupling of gitlab services to postgresql and redis
2024-02-07 19:29:01 +01:00
github-actions[bot]
296d2f6991
Merge master into staging-next
2024-02-07 18:00:58 +00:00
Sarah Brofeldt
cd5c10f696
Merge pull request #275896 from hoppla20/master
...
nixos/kubernetes: fix pki's mkSpec function
2024-02-07 18:44:35 +01:00
Oliver Schmidt
13ba002dd0
nixos/services.gitlab: loosen the coupling between gitlab and postgres/ redis to avoid restarts and races
...
Gitlab stays running at redis and postgresql restarts as if these
components were on a different host anyways. Handling reconnetctions is
part of the application logic.
Co-authored-by: Kim Lindberger <kim.lindberger@gmail.com>
for formatting fixes and test failure debugging.
2024-02-07 18:19:18 +01:00
Sandro
f7654894a3
Merge pull request #285298 from SuperSandro2000/govee2mqtt
...
govee2mqtt: init at 2024.01.21-088d4ca8, nixos/govee2mqtt: init
2024-02-07 18:14:05 +01:00
Moritz Sanft
66deaec720
nixos/appliance-repart-image: use UKI in docs
2024-02-07 17:45:22 +01:00
ajs124
106626b8d7
nixos/tt-rss: add phpPackage option
...
right now, we have php81 and php (which points to php82), which means that:
- php-fpm uses php81
- the update preStart uses php81
- the actual updater uses php82
2024-02-07 17:41:27 +01:00
ajs124
33ca948d6a
Merge pull request #259604 from sefidel/tt-rss-force-update-schema
...
nixos/tt-rss: supply --force-yes to update-schema
2024-02-07 17:39:03 +01:00
WilliButz
0139970416
nixos/qemu-vm: convert tmpfiles rules to settings
...
This change replaces the previously hard-coded `/boot` path with a
reference to `efiSysMountPoint` and more importantly this change makes
it possible to override these rules in scenarios in which they are not
desired.
One such scenario would be when `systemd-gpt-auto-generator(8)` is used
to automount the ESP. Consider this section from the mentioned manpage:
> The ESP is mounted to /boot/ if that directory exists and is not used
> for XBOOTLDR, and otherwise to /efi/. Same as for /boot/, an automount
> unit is used. The mount point will be created if necessary.
Prior to this change, the ESP would be automounted under `/efi` on first
boot, then the previous tmpfiles rules caused `/boot` to be created.
Following the quote above, this meant that the ESP is mounted under
`/boot` for each subsequent boot.
2024-02-07 16:25:30 +01:00
Robert Schütz
743b095b5e
Merge pull request #286454 from dotlambda/nginx-acme-auth_request-off
...
nixos/nginx: turn auth_request off for ACME challenge
2024-02-07 15:08:08 +00:00
Sandro Jäckel
d449e88309
nixos/chromium: remove lots of extra whitespace from docs
2024-02-07 16:04:26 +01:00
Sandro Jäckel
42b58f2c73
nixos/plasma5: enable programs.chromium.enablePlasmaBrowserIntegration
2024-02-07 16:04:25 +01:00
Sandro Jäckel
d4df5391d0
nixos/chromium: add enablePlasmaBrowserIntegration, plasmaBrowserIntegrationPackage options
2024-02-07 16:04:25 +01:00
Sandro Jäckel
a73a43d737
nixos/chromium: don't generate empty files
2024-02-07 16:04:20 +01:00
Sandro Jäckel
5538de972d
nixos/chromium: cleanup formatting a bit to
...
this also reduces the diff in the next commits
2024-02-07 16:03:42 +01:00
Kerstin
a3ed4692b7
Merge pull request #286943 from Tom-Hubrecht/kanidm
...
kanidm: 1.1.0-rc.15 -> 1.1.0-rc.16
2024-02-07 15:07:13 +01:00
Christoph Heiss
62854c0103
sourcehut: add myself as maintainer
...
I worked already a lot on this stuff, esp. modules - so it just makes
sense.
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-02-07 14:58:12 +01:00
Tom Hubrecht
ad67485526
kanidm: 1.1.0-rc.15 -> 1.1.0-rc.16
...
Release notes: https://github.com/kanidm/kanidm/releases/tag/v1.1.0-rc.16
2024-02-07 14:14:39 +01:00
Martin Weinelt
02324756dd
nixos/zigbee2mqtt: revert systemd unit to simple type
...
A recent release added systemd notify support, so I migrated our unit
towards that. The NixOS test did not reveal that the unit would not fully
activate.
Reverts: 165326d2c
(partially)
Closes : #286977
2024-02-07 13:51:11 +01:00
github-actions[bot]
03dd2b9470
Merge master into staging-next
2024-02-07 12:01:11 +00:00
Franz Pletz
5ef42fcd84
Merge pull request #286832 from trofi/crda-removal-and-wireless-regdb-update
...
crda: remove package, wireless-regdb: 2023.09.01 -> 2024.01.23
2024-02-07 11:52:55 +01:00
Sandro Jäckel
1b3f92087b
nixos/govee2mqtt: init
2024-02-07 10:39:23 +01:00
Rodney Lorrimar
8513f69b24
nixos/phosh: Ensure that desktop session is identified as Phosh
2024-02-07 20:10:15 +11:00
Will Fancher
ee9becfdfb
Merge pull request #285315 from jmbaur/sysupdate-fixes
...
nixos/sysupdate: allow lists in sysupdate config
2024-02-07 03:01:49 -05:00
Weijia Wang
29b534a3d4
restya-board: drop
2024-02-07 01:33:05 +01:00
github-actions[bot]
9824e51195
Merge master into staging-next
2024-02-07 00:02:01 +00:00
Martin Weinelt
7317fb9f77
Merge pull request #286287 from fleaz/frigate-update
...
frigate: 0.12.1 -> 0.13.1
2024-02-07 00:09:42 +01:00
Sergei Trofimovich
275855d632
nixos: hostapd: drop unused crda
package import
2024-02-06 22:45:01 +00:00
fleaz
250078ceba
frigate: 0.12.1 -> 0.13.1
...
Changelog:
https://github.com/blakeblackshear/frigate/releases/tag/v0.13.0
https://github.com/blakeblackshear/frigate/releases/tag/v0.13.1
Co-Authored-By: Martin Weinelt <hexa@darmstadt.ccc.de>
2024-02-06 22:54:22 +01:00
Felix Bühler
481c7ffc8e
Merge pull request #286069 from linsui/nau
...
nixos/nautilus-open-any-terminal: add to module-list.nix
2024-02-06 19:21:49 +01:00
Felix Bühler
9e23c379c7
Merge pull request #286032 from Stunkymonkey/k8s-pki-remove-chown
...
kubernetes: prefer 'install' over 'mkdir/chmod/chown'
2024-02-06 19:21:08 +01:00
Felix Bühler
5dac2ab264
Merge pull request #286577 from Pablo1107/photoprism-module/fix-manage-script-typo
...
nixos/photoprism: fix typo with duplicated exec call
2024-02-06 19:09:53 +01:00
github-actions[bot]
33b366b63f
Merge master into staging-next
2024-02-06 18:01:02 +00:00
Sandro
ed742ab4fc
Merge pull request #275621 from Yarny0/tsm-client-update
...
tsm-client: 8.1.20.0 -> 8.1.21.0
2024-02-06 17:17:40 +01:00
Florian Klink
7c0a129076
Merge pull request #256652 from giorgiga/rateLimitBurst-documentation
...
Clarify journal size limit defaults in documentaiton of services.journald.rateLimitBurst
2024-02-06 13:26:35 +01:00
github-actions[bot]
952bd69944
Merge master into staging-next
2024-02-06 06:00:54 +00:00
Sandro
4494fcaab7
nixos/acme: default to lets encrypt production URL instead of null, mention lets encrypt staging URI ( #270221 )
2024-02-06 01:51:09 +01:00
github-actions[bot]
8e7913be95
Merge master into staging-next
2024-02-06 00:02:21 +00:00
Pablo Andres Dealbera
14a1f86791
nixos/photoprism: fix typo
2024-02-05 19:34:43 -03:00
nu-nu-ko
ccf92aad9b
nixos/jellyfin: add directory options
2024-02-06 11:07:33 +13:00
Robert Hensing
274ae6a454
Merge pull request #284117 from Stunkymonkey/amqp-write-secret
...
nixos/rabbitmq: prefer 'install' over 'mkdir/chmod/chown'
2024-02-05 19:29:19 +01:00
github-actions[bot]
2579984b85
Merge master into staging-next
2024-02-05 18:01:13 +00:00
Peder Bergebakken Sundt
a8880f1647
nixos/ttyd: add entrypoint option
2024-02-05 17:38:00 +01:00
Leona Maroni
2b7e1ddb4a
nixos/youtrack: fix warnings ( #285775 )
...
* nixos/youtrack: fix extraParams warning
* nixos/youtrack: use new option for port in nginx config
2024-02-05 17:17:45 +01:00
Sandro
1b06c0f273
Merge pull request #286341 from Izorkin/update-fastfetch
2024-02-05 17:08:45 +01:00
Sandro
a53f27e149
Merge pull request #278050 from purcell/sonarr-4
2024-02-05 16:35:41 +01:00
Franz Pletz
fadde8db1f
Merge pull request #286324 from Izorkin/update-libvirt-oom
...
nixos/libvirt: changing process priority for oom killer
2024-02-05 15:47:25 +01:00
Steve Purcell
a907d05c50
sonarr: 3.0.10.1567 -> 4.0.0.748
2024-02-05 14:38:12 +00:00
Mario Rodas
5ee614b31c
Merge pull request #278034 from trofi/nixosTests.kernel-generic-fix-eval
...
nixosTests.kernel-generic: fix the eval
2024-02-05 08:15:20 -05:00
Adam C. Stephens
af25a022c6
Merge pull request #285858 from adamcstephens/incus/refactor
...
incus: fix lxd-to-incus, add static client, support multi-version
2024-02-05 07:50:18 -05:00
github-actions[bot]
5f4d3d57a7
Merge master into staging-next
2024-02-05 12:01:16 +00:00
Cosima Neidahl
62046f5787
Merge pull request #283543 from OPNA2608/init/lomiri/ayatana-indicator-session
...
ayatana-indicator-session: init at 23.10.3
2024-02-05 12:26:10 +01:00
Robert Schütz
1dd5f2b1f9
nixos/nginx: turn auth_request off for ACME challenge
...
This is e.g. necessary when using tailscale-nginx-auth.
2024-02-05 00:33:33 -08:00
github-actions[bot]
0f22335f7d
Merge master into staging-next
2024-02-05 06:01:04 +00:00
jerrita
e686847d20
nixos/nftables: add option for flattening rulesetFile
...
Co-authored-by: Lin Jian <me@linj.tech>
2024-02-05 11:27:16 +08:00
360ied
11cf6ab0dd
nixos/murmur: systemd service hardening
...
Murmur provides an official systemd service file in their repo,
which contains various service hardening settings:
c4b5858d14/auxiliary_files/config_files/mumble-server.service.in (L7)
The service configuration in nixpkgs does not include these hardening settings.
This commit adds the hardening settings to the murmur service in nixpkgs.
This drops the `systemd-analyze security` score of murmur.service from 9.2 (UNSAFE) to 2.1 (OK).
2024-02-04 21:23:34 -05:00
Weijia Wang
1f4b41071c
Merge pull request #286343 from fgaz/urn-timer/nixos-test
...
nixosTests.urn-timer: init
2024-02-05 01:57:20 +01:00
Sandro Jäckel
c64c45da9c
nixos/nextcloud: don't execute cron when in maintenace/upgrade, don't kill cgroup
...
Those are upstream recommendations taken from
22d2472b8f/admin_manual/configuration_server/background_jobs_configuration.rst (systemd)
2024-02-05 01:29:13 +01:00
Sandro Jäckel
42daa00928
nixos/nextcloud: little formatting
2024-02-05 01:29:13 +01:00
LRFLEW
8b0d333f54
nixos/archisteamfarm: allow bots.*.passwordFile to be null ( #284978 )
...
* Make services.archisteamfarm.bots.*.passwordFile Nullable
This adds support for alternate password specification methods, such as through the web-ui.
* Update description for services.archisteamfarm.bots.*.passwordFile
Adds note about omitting or setting to null to provide the password through the web-ui.
2024-02-05 01:18:23 +01:00
github-actions[bot]
42e44c0583
Merge master into staging-next
2024-02-05 00:02:17 +00:00
oddlama
b7f29692c0
nixos/hostapd: fix utf8Ssid setting not properly honored
2024-02-05 00:52:08 +01:00
Weijia Wang
7ece427021
Merge pull request #279268 from superherointj/etcd-fix-firewall-startup
...
nixos/etcd: fixes etcd failing to start at boot and add openFirewall option
2024-02-05 00:37:09 +01:00
Weijia Wang
295de1fecf
Merge pull request #279997 from ShamrockLee/optparse-bash-drop
...
optparse-bash: drop
2024-02-05 00:35:01 +01:00
Weijia Wang
e2fb30fabc
Merge pull request #239785 from milibopp/neo4j-5.9.0
...
neo4j: 4.4.11 -> 5.9.0
2024-02-05 00:21:21 +01:00
Izorkin
15dfbbd4c3
fastfetch: add vulkanSupport option
2024-02-05 01:32:05 +03:00
Izorkin
69206539d4
fastfetch: add waylandSupport option
2024-02-05 01:32:04 +03:00
Izorkin
556b8c7b6f
fastfetch: add x11Support option
2024-02-05 01:32:03 +03:00
Robert Hensing
6761394083
nixos/rabbitmq: Rename cookie -> unsafeCookie
...
Not a mkRenamedOptionModule, because user intervention is required
to determine whether they have a problem. mkRenamed* does not let
us explain anything to the user.
2024-02-04 21:41:29 +01:00
Francesco Gazzetta
6bc390f75b
nixosTests.urn-timer: init
2024-02-04 19:59:22 +01:00
github-actions[bot]
145a9cb679
Merge master into staging-next
2024-02-04 18:01:14 +00:00
Izorkin
9ad115e5f3
nixos/libvirt: changing process priority for oom killer
2024-02-04 19:54:02 +03:00
Artturi
8f893ff1da
Merge pull request #221628 from rhysmdnz/intune
...
Microsoft Intune
2024-02-04 17:31:58 +02:00
OPNA2608
6bb7d0d790
ayatana-indicator-session: init at 23.10.3
2024-02-04 15:42:21 +01:00
piegames
65a2ccdd22
Merge pull request #285869 from 4JX/gnome-extensions-update
...
gnomeExtensions: auto-update
2024-02-04 15:28:49 +01:00
github-actions[bot]
5a036cc96a
Merge master into staging-next
2024-02-03 18:00:51 +00:00
Linus Heckemann
9f571cb4ef
Merge pull request #284508 from nikstur/etc-overlay-leading-slash
...
nixos/etc: remove leading slash from paths
2024-02-03 18:01:01 +01:00
linsui
b88eaf5d62
nixos/nautilus-open-any-terminal: add to module-list.nix
2024-02-03 22:27:31 +08:00
Vincent Haupert
e6854b295b
nixos/github-runners: only override pkg if it has a nodeRuntimes
arg
...
Older versions of the github-runner package might not have the
`nodeRuntimes` argument yet causing an error as the NixOS module always
tries to override the argument.
The commit makes sure we only override `nodeRuntimes` if the configured
package has a `nodeRuntimes` argument.
2024-02-03 14:33:39 +01:00
Felix Buehler
ffadbb6788
kubernetes: prefer 'install' over 'mkdir/chmod/chown'
2024-02-03 11:16:23 +01:00
github-actions[bot]
95ffc37024
Merge staging-next into staging
2024-02-03 06:01:25 +00:00
Martin Weinelt
e1ee205a99
Merge pull request #285931 from mweinelt/zigbee2mqtt-1.35.2
...
zigbee2mqtt: 1.35.1 -> 1.35.2
2024-02-03 03:44:36 +01:00
Martin Weinelt
dec6392bc2
nixos/tests/zigbee2mqtt: test against dummy serial device
2024-02-03 02:22:44 +01:00
Martin Weinelt
165326d2ca
zigbee2mqtt: 1.35.1 -> 1.35.2
...
https://github.com/Koenkk/zigbee2mqtt/releases/tag/1.35.2
2024-02-03 02:21:15 +01:00
Nick Cao
4ff6cdece8
Merge pull request #285602 from NickCao/nvmetcfg-test
...
nixosTests.nvmetcfg: init
2024-02-02 20:15:27 -05:00
Nick Cao
ed3e7a5208
nixosTests.nvmetcfg: init
2024-02-02 17:10:25 -05:00
4JX
59885a1059
nixosTests.gnome-extensions: system-monitor has been removed
...
https://github.com/NixOS/nixpkgs/pull/274140
2024-02-02 19:13:29 +01:00
Adam Stephens
5f087b3221
incus: lxd-to-incus is now part of main package
...
Previously upstream was packaging this separately due to the inclusion
of lxd in the go dependencies. This has been dropped and the package
has been merged into the main go.mod file.
2024-02-02 13:04:13 -05:00
github-actions[bot]
58c80dd7b8
Merge staging-next into staging
2024-02-02 18:01:50 +00:00
Adam Stephens
7585f26855
nixos/incus: add zfs/lib/udev to path
...
Incus needs to find zvol_id for some operations, but zfs does not put
this executable in the bin directory. Exposing lib/udev into the Incus
path solves discovery of the executable
e5690705e8/internal/server/storage/drivers/driver_zfs_volumes.go (L1820C1-L1820C41)
2024-02-02 12:36:41 -05:00
Martin Weinelt
d435c2d39f
Merge pull request #285698 from adamcstephens/lxc/test-sleep
...
nixos/tests/incus: check system is running for verifying up
2024-02-02 18:07:16 +01:00
Adam Stephens
cdcb919ff7
nixos/tests/incus: check system is running for verifying up
...
It can can take a few seconds for the generator to initialize in slow
environments. Switch to using systemctl is-system-running which should
reflect the system is fully booted.
2024-02-02 10:13:16 -05:00
Maximilian Bosch
11ef076aab
Merge pull request #285035 from Ma27/kernel-rust-matrix
...
nixos/tests/kernel-rust: test against 6.7 and testing (6.8rc1)
2024-02-02 15:24:05 +01:00
github-actions[bot]
0675b4b947
Merge staging-next into staging
2024-02-02 12:01:43 +00:00
h7x4
7ac5d2ce0c
Merge pull request #284154 from PassiveLemon/ALVR
...
alvr: init at 20.6.1
2024-02-02 11:36:08 +01:00
github-actions[bot]
3a8e4cc2aa
Merge staging-next into staging
2024-02-02 06:01:42 +00:00
Will Fancher
8c1a6046a2
Merge pull request #285411 from NickCao/networkd-stage1
...
nixos/networkd: drop upstreamed stage-1 unit dependencies
2024-02-01 20:35:17 -05:00
github-actions[bot]
6b866c8f85
Merge staging-next into staging
2024-02-02 00:02:44 +00:00
Rhys Davies
d102910f47
nixos/pam: Add pam_intune
2024-02-02 10:01:52 +13:00
Rhys Davies
295a32a6b1
nixos/intune: init
2024-02-02 10:00:33 +13:00
h7x4
932344b54a
Merge pull request #270475 from MinerSebas/prometheus-restic-exporter
...
prometheus-restic-exporter: init at 1.4.0
2024-02-01 20:05:11 +01:00
Pierre Bourdon
3484985991
Merge pull request #285587 from edef1c/wrapper-cve-2023-6246
...
nixos/modules/security/wrappers: limit argv0 to 512 bytes
2024-02-01 19:18:45 +01:00
edef
b4c9840652
nixos/modules/security/wrappers: limit argv0 to 512 bytes
...
This mitigates CVE-2023-6246, crucially without a mass-rebuild.
Change-Id: I762a0d489ade88dafd3775d54a09f555dc8c2527
2024-02-01 18:16:55 +00:00
github-actions[bot]
381e01e471
Merge staging-next into staging
2024-02-01 18:01:21 +00:00
Atemu
f38bca1ca5
Merge pull request #279677 from leona-ya/paperless-nltk
...
nixos/paperless: use nltk_data package as NLTK data source
2024-02-01 16:59:28 +01:00
Leona Maroni
6300f478e9
nixos/paperless: use nltk_data package as NLTK data source
...
nixos
2024-02-01 16:53:34 +01:00
MinerSebas
da91e4d75b
nixos/tests/prometheus-exporters: add test for prometheus-restic-exporter
2024-02-01 15:00:35 +01:00
MinerSebas
d1f031cbbd
nixos/prometheus-restic-exporter: init module
2024-02-01 14:48:56 +01:00
Leona Maroni
0f2df9ff19
nixos/youtrack: rebuild module for 2023.x support
2024-02-01 13:36:13 +01:00
Martin Weinelt
27fa02d0f1
Merge remote-tracking branch 'origin/staging-next' into staging
...
Conflicts:
- pkgs/development/compilers/llvm/10/clang/default.nix
- pkgs/development/compilers/llvm/8/clang/default.nix
2024-02-01 12:25:11 +01:00
Markus Kowalewski
5b64cf6fc6
tests/slurm: use getDev for mpi test
2024-02-01 11:08:56 +01:00
Nick Cao
0850ee016b
nixos/networkd: drop upstreamed stage-1 unit dependencies
...
Reference: https://github.com/systemd/systemd/pull/27791
2024-01-31 22:52:52 -05:00
Andreas Stührk
fc6c92faf3
nixos/nftables: remove default systemd dependencies
...
With DefaultDependencies enabled, systemd adds "After=basic.target" to
service units. `basic.target` has a dependency on `sockets.target`, so
the `nftables` has (amongst others) the following order constraints:
* Before=network-pre.target
* After=sockets.target
Those constraints are often unsatisfiable. For example, `systemd-networkd`
has a dependency `After=network-pre.target`. When a socket unit now uses
`BindToDevice=` on a device managed by `networkd`, a timeout occurs
because `networkd` waits for `network-pre.target`, but
`network-pre.target` depends (through nftables) on `sockets.target`, but
the device to bind the socket to is never brought up, as this would
happen through `networkd`.
This is fixed by removing the implicit dependency on `basic.target`.
2024-01-31 23:26:05 +01:00
Adam Stephens
75ec325cb9
nixos/pam: remove pam_cgfs
...
pam_cgfs is a cgroups-v1 pam module. Verified with upstream that
this module no longer necessary on cgroups-v2 systems.
2024-01-31 17:19:23 -05:00
Felix Bühler
6c22593ad4
Merge pull request #284799 from Pablo1107/photoprism-module/fix-manage-script
...
nixos/photoprism: use nsenter to call photoprism bin with correct UID and PID
2024-01-31 20:52:11 +01:00
Martin Weinelt
509d6bc2ca
Merge pull request #285326 from pbsds/pretalx-1706723715
...
nixos/pretalx: add 24.05 "new service" release note
2024-01-31 20:04:23 +01:00
Franz Pletz
9e485b2169
Merge pull request #284326 from WilliButz/snmp-exporter-module/fix-logPrefix
...
nixos/prometheus-snmp-exporter: fix undefined logPrefix
2024-01-31 19:55:40 +01:00
Peder Bergebakken Sundt
15f31376b5
nixos/pretalx: add 24.05 "new service" release note
2024-01-31 18:57:53 +01:00
Jared Baur
514bfa6674
nixos/sysupdate: fix systemd-sysupdate test
...
The test fails when the `Target`'s parent directories don't exist. For
the purpose of this test though, we can just download it to the root
directory for simplicity.
2024-01-31 09:16:04 -08:00
Jared Baur
50866dc20f
nixos/sysupdate: allow lists in sysupdate config
...
Lists are convenient to have in sysupdate configuration when using
multiple `MatchPattern` under `Target` when the target can have multiple
filenames. This use-case is helpful for BootLoaderSpec bootcounting where the target file on
disk can have multiple filenames, and in order for sysupdate to properly
ensure only N number of instances of this target exist at one time, we
need to have multiple match patterns.
2024-01-31 09:12:28 -08:00
Peder Bergebakken Sundt
0d13d2a90f
nixos/ttyd: remove with lib;
2024-01-31 17:58:59 +01:00
Peder Bergebakken Sundt
4c70703931
nixos/ttyd: add writable option
...
Co-authored-by: Carsten Rodin <19612711+carstoid@users.noreply.github.com>
2024-01-31 17:57:42 +01:00
Peder Bergebakken Sundt
19159ced3e
Merge pull request #249523 from greizgh/seafile-10
...
Seafile 10
2024-01-31 17:13:54 +01:00
Peder Bergebakken Sundt
d5d752af43
Merge pull request #280821 from SuperSandro2000/pretalx
...
pretalx: init 2023.1.3
2024-01-31 17:11:38 +01:00
Peder Bergebakken Sundt
9118823ed3
Merge pull request #226532 from SuperSandro2000/dhcpcd
...
dhcpcd: change files after patching; nixos/dhcpcd: link dhcpcd.conf to /etc/ to fix dhcpcd -k
2024-01-31 16:43:54 +01:00
Jörg Thalheim
7d5c09b02e
Merge pull request #285167 from Mic92/systemd-boot
...
nixos/systemd-boot: fix editor option
2024-01-31 22:38:09 +07:00
Nick Cao
2c4eca2c07
Merge pull request #285100 from Tungsten842/revert-281529-acpid
...
Revert "acpid: Disable network access"
2024-01-31 08:25:37 -05:00
Maximilian Bosch
37ac24e2c7
nixos/tests/kernel-rust: test against 6.7 and testing (6.8rc1)
...
In #283893 we realized that not only 6.7, but also testing is affected.
And with more stable kernels following, we'll probably want to test
against all of them whether Rust support is working fine. As long as
it's not the default at least, then we should probably move this to
`kernel-generic`.
Every kernel that's new enough to support `rust-out-of-tree-module` (and
`linux_testing`) is part of this text matrix.
2024-01-31 09:52:20 +01:00
Jörg Thalheim
202e697233
nixos/systemd-boot: fix editor option
2024-01-31 10:46:30 +07:00
Mario Rodas
4006079f95
Merge pull request #276177 from aaronjheng/prometheus-openvpn-exporter
...
prometheus-openvpn-exporter: remove
2024-01-30 19:32:50 -05:00
WilliButz
ccff749532
nixos/boot.uki: allow partial overrides of default UKI settings
...
Previously any user-provided config for boot.uki.settings would need to
either specify a full set of config for ukify or a combination of
mkOptionDefault to merge the "settings" attribute set with the module's
defaults and then mkOverride or mkForce to override a contained
attribute.
Now it is possible to trivially override parts of the module's default
config, such as the initrd or kernel command line, but overriding the
full set of settings now requires mkOverride / mkForce.
2024-01-30 23:54:40 +01:00
Thomas Gerbet
898c3061fe
Merge pull request #279253 from risicle/ris-packagekit-1.2.8
...
packagekit: 1.2.5.1pre -> 1.2.8
2024-01-30 23:37:46 +01:00
Tungsten842
c1afcd1c8c
Revert "acpid: Disable network access"
2024-01-30 22:49:43 +01:00
Robert Scott
19b3ab3fe4
packagekit: use test_nop backend by default
...
nix backend is broken and this is causing the nixos test to
fail
2024-01-30 20:41:15 +00:00
Guillaume Girol
996d064488
Merge pull request #278131 from symphorien/sane_test
...
nixos/sane: add nixos test
2024-01-30 21:00:12 +01:00
Robert Hensing
056a4d8d52
Merge pull request #283406 from tfc/nixos-rebuild-socket
...
nixos-rebuild: Handle too-long tmpdir paths on macOS
2024-01-30 19:02:37 +01:00