Commit Graph

33807 Commits

Author SHA1 Message Date
Raito Bezarius
efe64826c9 nixosTests.systemd-initrd-luks-tpm2: mount the host Nix store
Same rationale as caf6f41e2e.
2023-06-08 16:55:52 +02:00
Raito Bezarius
e190364fd7 nixosTests.systemd-initrd-networkd-ssh: mount the host Nix store
Same rationale as caf6f41e2e.
2023-06-08 16:55:49 +02:00
Raito Bezarius
db811f12eb nixosTests.systemd-initrd-swraid: mount the host Nix store
Same rationale as caf6f41e2e.
2023-06-08 16:55:45 +02:00
Raito Bezarius
de7f3cb2fa nixosTests.systemd-initrd-luks-fido2: mount the host Nix store
Same rationale as caf6f41e2e.
2023-06-08 16:55:29 +02:00
Raito Bezarius
955a77e1c4 nixosTests.systemd-initrd-btrfs-raid: mount the host Nix store
Same rationale as caf6f41e2e.
2023-06-08 16:55:25 +02:00
Raito Bezarius
caf6f41e2e nixosTests.initrd-luks-empty-passphrase: mount the host nix store
This is necessary because this test relies on switching the root fs to an empty one which
does not have a Nix store available in stage 1, therefore, we have to make this test
host-store only.

A better fix in the long term is to evaluate whether this is worth to enable a proper
Nix store image for it with EROFS?
2023-06-08 16:55:04 +02:00
Weijia Wang
4f40a8bdb4
Merge pull request #236640 from wegank/foundationdb-cleanup
foundationdb: cleanup
2023-06-08 15:50:03 +03:00
Martin Weinelt
93d26ea597
Merge pull request #236534 from NixOS/home-assistant
home-assistant: 2023.5.4 -> 2023.6.0
2023-06-08 14:47:11 +02:00
Weijia Wang
4b8f7098da foundationdb: cleanup 2023-06-08 14:48:41 +03:00
Weijia Wang
0dfe118d22
Merge pull request #236259 from wegank/mongodb-drop
mongodb-4_2: drop
2023-06-08 14:40:30 +03:00
Tom McLaughlin
f69aff8f89 github-runner: add thomasjm as maintainer 2023-06-08 01:03:15 -07:00
Will Fancher
5d6ea734a1 systemd stage 1 networking: Stop systemd-networkd on switch-root
This essentially backports
https://github.com/systemd/systemd/pull/27791. `systemd-networkd.service`
is sent the `SIGTERM` signal, but it is not required to be stopped
before `initrd-switch-root.target` is reached, despite the use of
`systemctl isolate initrd-switch-root.target`. This is because when
there is no ordering at all between two units, and a transaction stops
one and starts the other, the two operations can happen
simultaneously. This means the service could still be running when
`switch-root` actually occurs. Then, stage 2 systemd will see the
service still running and decide it doesn't need to add a start
operation for it to its initial transaction. Finally, the service
exits, but only after it's already too late. If, however, there is any
ordering at all between a stopping unit and a starting unit, then the
stop operation will be done first. This way, we ensure that the
service is properly exited before doing `switch-root`.

This is something to keep in mind going forward. There may be other
services that need this treatment. These `before` and `conflicts`
definitions are the correct way to ensure a unit is actually stopped
before you reach initrd-switch-root
2023-06-08 00:25:15 -04:00
Will Fancher
a9e34ff905 systemd stage 1 networking: Add network-pre to flush tests
This isn't actually wanted by any units by default.
2023-06-08 00:25:15 -04:00
Victor Engmark
8deaa732a8 refactor: Split mkdir -m … into mkdir + chmod
As recommended by ShellCheck
<https://www.shellcheck.net/wiki/SC2174>.
2023-06-08 15:55:40 +12:00
Victor Engmark
b0a9abedea refactor: Use dummy variable name for unused value
As recommended by ShellCheck
<https://github.com/koalaman/shellcheck/wiki/SC2034>.
2023-06-08 15:11:35 +12:00
Pol Dellaiera
2a77a04971
Merge pull request #235855 from soywod/himalaya-v0.8.0
himalaya: 0.7.3 -> 0.8.0
2023-06-08 04:34:37 +02:00
Martin Weinelt
5715d6b452
Merge pull request #236471 from Mic92/mediawiki-fixes
mediawiki: fix group used when apache2 is used
2023-06-08 03:13:35 +02:00
Martin Weinelt
4540dad9e7
nixos/tests/home-assistant: Drop esphome, fix post-restart expectation
Mentioning esphome in the config is now causing an error. Check for the
backup module post-restart, not esphome.
2023-06-07 23:55:51 +02:00
Pol Dellaiera
27c6a99b9c
Merge pull request #236436 from helsinki-systems/mariadb_changes
mariadb: init at 11.0.2 + upgrade default from 10.6 to 10.11
2023-06-07 20:31:10 +02:00
Jörg Thalheim
d3036bb608 mediawiki: fix group used when apache2 is used 2023-06-07 17:31:44 +02:00
Pol Dellaiera
fdcc0ecf37
Merge pull request #236303 from alyssais/StrictModes
nixos/sshd: add StrictModes option
2023-06-07 15:53:20 +02:00
Weijia Wang
4b3f710d96
Merge pull request #236363 from pennae/drop-unifi-maint
unifi: drop pennae from maintainers
2023-06-07 16:29:31 +03:00
ajs124
34eaaf331c mariadb: upgrade default from 10.6 to 10.11
which is the next LTS release
2023-06-07 13:10:23 +02:00
Clément DOUIN
be53021199
himalaya: 0.7.3 -> 0.8.0 2023-06-07 12:59:26 +02:00
happysalada
d804ca626a nixos/atuin: add database.createLocally 2023-06-07 05:35:09 -04:00
Michele Guerini Rocco
e9da2bac96
Merge pull request #236048 from rnhmjoj/pr-fix-i2c
nixos/hardware/i2c: fix uaccess rule
2023-06-07 10:22:18 +02:00
Michele Guerini Rocco
996dd1c645
Merge pull request #236311 from joee/patch-4
nixos/modules/web-servers/nginx/default.nix: fix minor typo
2023-06-07 09:05:22 +02:00
K900
a3dc53e3fc nixos/amazon-image: embiggen
aarch64 no longer fits in 2GB, blocking channel updates
2023-06-07 08:42:47 +03:00
Joe Edmonds
f87892b50b nixos/modules/web-servers/nginx/default.nix: fix minor typo 2023-06-06 21:55:15 -07:00
mdarocha
7eb512bfdc openraPackages.engines.devtest: init at 20230414 2023-06-07 02:26:43 +00:00
Jacob Moody
39f220b6df
nixos/grafana: add jsonData datasource option (#234364) 2023-06-07 00:11:10 +02:00
pennae
912caf09f7 unifi: drop pennae from maintainers
not using this any more, and really don't have the energy to deal with
neither the fallout of ubnt not officially supporting mongodb newer than
3.6, nor the hacks nixpkgs contains to work around that.
2023-06-06 23:29:46 +02:00
x10an14
dc7d4dece5
Document how to use packages with extensions. (#145011)
Co-authored-by: Artturi <Artturin@artturin.com>
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
Co-authored-by: Valentin Gagarin <valentin.gagarin@tweag.io>
2023-06-06 22:37:42 +02:00
Pol Dellaiera
43b346ea1e
Merge pull request #220481 from uoleg/master
nixos/nano: refactor nanorc creation
2023-06-06 21:35:26 +02:00
Sandro
50ab2973ed
Merge pull request #236126 from pacien/exim-service-privilege-namespacing-fix
nixos/exim: apply privilege restrictions
2023-06-06 18:29:40 +02:00
Alyssa Ross
eeabae56e7
nixos/sshd: add StrictModes option 2023-06-06 16:06:09 +00:00
aszlig
c14dac6f25
Merge pull request #235972 (fix Taskserver test)
I'm merging this without review, since the tests run by ofborg are
succeeding. In addition to that, it's fixing a currently broken test so
the worst that could happen is that the test still does not work.
2023-06-06 17:55:22 +02:00
Ryan Lahfa
a06d736f1f
Merge pull request #227203 from badele/fix-smokeping-symbolic-links
nixos/smokeping: fix smokeping symbolic links
2023-06-06 16:02:58 +02:00
José Romildo Malaquias
4607765abc
Merge pull request #220054 from Scrumplex/init-qt6ct
qt6ct: init at 0.8
2023-06-06 09:40:27 -03:00
Domen Kožar
1b4ec8b16b
Merge pull request #233439 from tweag/nix-2.15
nix: 2.13.3 -> 2.15.1
2023-06-06 12:51:41 +01:00
Weijia Wang
3f467ff45f mongodb-4_2: drop 2023-06-06 14:26:11 +03:00
Anand Suresh
aa884b8f3d
improve documentation for nix.settings.sandbox (#188541)
* add information on the "relaxed" setting in `nix.settings.sandbox`
2023-06-06 10:32:26 +02:00
K900
c3ac633a81
Merge pull request #236109 from K900/no-more-dash-n
treewide: clean up usages of `cp -n`
2023-06-06 09:58:15 +03:00
Pol Dellaiera
cc47c2189f
Merge pull request #220068 from h7x4/hedgedoc-allow-nullable-client-secret
nixos/hedgedoc: allow `clientSecret` to be null
2023-06-05 21:54:02 +02:00
Tom Hubrecht
953ee5df82 nixos/pixelfed: Fix missing permissions for nginx serving files
Also fixes the service `pixelfed-cron` StateDirectory and uses the nginx user instead of group to define nginx appartenance to pixelfed's group
2023-06-05 20:49:16 +02:00
pacien
54be076ae7 nixos/exim: apply privilege restrictions
Since 816614bd62, the service is set to use the exim user so that
systemd takes care of the credentials ownership. The executable is
still required to run as root, to then drop privileges. The prefix '+'
that was used however interfers with the use of privilege restrictions
and other sandboxing options. Since we only want to escape the "User"
setting, we can use the '!' prefix instead.
2023-06-05 20:04:48 +02:00
Sandro
048f167595
Merge pull request #233423 from tomaskala/self-deploy-after-network-online
nixos/self-deploy: set after to requires, type to oneshot and remove wantedBy
2023-06-05 19:47:10 +02:00
K900
57e1ea5a18 nixos/libvirtd: don't use cp -n 2023-06-05 19:14:01 +03:00
github-actions[bot]
de4f02a6c8
Merge master into staging-next 2023-06-05 12:01:12 +00:00
Florian Klink
4627ee741d
Merge pull request #234877 from ElvishJerricco/auto-format-and-resize-with-systemd
Auto format and resize with systemd
2023-06-05 12:25:02 +03:00
misuzu
45ffb33514 nixos/gotosocial: init
Co-authored-by: Peder Bergebakken Sundt <pbsds@hotmail.com>
2023-06-05 09:07:34 +03:00
Will Fancher
b497502357 nixos: Use systemd-growfs for autoResize 2023-06-04 22:57:22 -04:00
Will Fancher
5176a4f113 nixos: Use systemd-makefs for autoFormat 2023-06-04 22:57:20 -04:00
github-actions[bot]
4a640f8bb6
Merge master into staging-next 2023-06-05 00:02:32 +00:00
Sandro
793dd34507
Merge pull request #219602 from 999eagle/traefik-envsubst
nixos/traefik: add environmentFiles option
2023-06-05 00:36:43 +02:00
aszlig
9b6f9e4624
nixos/tests/taskserver: Fix build
The test fails because the way the configuration switch was implemented
back then was by using a dummy configuration and simply activating that
dummy configuration from within the test script.

Nowadays, this doesn't work anymore and fails to typecheck because the
dummy "newServer" will inherit the same value for networking.hostName,
which in turn will generate two attributes for "server":

  > testScriptWithTypes:43: error: Name "server" already defined on line 43
  > [no-redef]
  >     client1: Machine; client2: Machine; server: Machine; server: Machine;

Fortunately, we don't need to do workarounds like this anymore and there
is the "specialisation" option, which allows to do this in a less ugly
way (and it also works with mypy).

Signed-off-by: aszlig <aszlig@nix.build>
2023-06-04 23:14:07 +02:00
figsoda
6ad2ed2ada
Merge pull request #235954 from wegank/nerdfonts-release-notes
rl-2305: mention nerdfonts update
2023-06-04 16:12:56 -04:00
rnhmjoj
b4e5de4ba4
nixos/hardware/i2c: fix uaccess rule 2023-06-04 21:22:32 +02:00
Weijia Wang
d465aaf7c6 rl-2305: mention nerdfonts update 2023-06-04 21:23:16 +03:00
github-actions[bot]
22e7031b28
Merge master into staging-next 2023-06-04 18:00:59 +00:00
figsoda
df34ed4185
Merge pull request #235204 from figsoda/text2 2023-06-04 13:02:55 -04:00
Julien Moutinho
b6ed3b8f40 nixos/public-inbox: explicit a few more freeform settings 2023-06-04 13:09:28 +00:00
Julien Moutinho
50301d73e9 public-inbox: 1.8.0 -> 1.9.0
Co-authored-by: Alyssa Ross <hi@alyssa.is>
2023-06-04 13:09:28 +00:00
github-actions[bot]
e50c762dbb
Merge master into staging-next 2023-06-04 06:01:17 +00:00
Tom Siewert
50d66bcba6
nixos/gitlab: Fix config reference for registry (#235639)
Support for gitlab-container-registry has been added in 014816cbe4.
However, when enabling the registry it will throw an error as it can't
find a `package` attribute.

This commit fixes the registry configuration by adding the missing
`registry` part.
2023-06-04 02:32:35 +02:00
github-actions[bot]
d8ea5b9435
Merge master into staging-next 2023-06-03 18:01:49 +00:00
Jan Tojnar
b575d76ce1 nixos/gdm: Do not require GTK for account-service-util 2023-06-03 17:31:15 +02:00
Lassulus
704b08c0e9
Merge pull request #235672 from mart-w/fix/redundant-syncthing-patchnote-23.05 2023-06-03 16:07:17 +02:00
github-actions[bot]
4e2bb74acd
Merge master into staging-next 2023-06-03 12:01:39 +00:00
happysalada
ba3d0f7a95 nixos/gitea: requires database 2023-06-03 05:14:46 -04:00
Bruno Adelé
0498957eac
nixos/smokeping: Fix smokeping preStart systemd 2023-06-03 08:06:18 +02:00
github-actions[bot]
6a837d8fb1
Merge master into staging-next 2023-06-03 06:01:11 +00:00
Gabriel Fontes
4ff3a5795b nixos/tests/prometheus-exporters: add graphite 2023-06-03 03:13:09 +00:00
Gabriel Fontes
dff2e184f4 nixos/prometheus.exporters.graphite: init 2023-06-03 03:13:09 +00:00
Gabriel Fontes
147668b8cf nixos/sitespeed-io: init 2023-06-03 03:12:51 +00:00
github-actions[bot]
4b2e2c8b39
Merge master into staging-next 2023-06-03 00:02:20 +00:00
Martin Wurm
22513042e6 nixos/syncthing: Remove unnecessary patch note
The breaking change in this patch note has been reverted for now, see #226088.
2023-06-03 01:38:53 +02:00
Pol Dellaiera
161182c362
Merge pull request #234987 from mmusnjak/apache-datasketches
apache_datasketches: init at 1.6.0
2023-06-02 21:55:22 +02:00
happysalada
ee1c6053fb nixos/ntfy-sh: use dynamic user and add defaults 2023-06-02 15:22:14 -04:00
Marko Mušnjak
aafe0f4314
apache_datasketches: init at 1.6.0
PostgreSQL extension providing approximate algorithms for
distinct item counts, quantile estimation and frequent items detection.
2023-06-02 21:03:19 +02:00
github-actions[bot]
6084eca7dc
Merge master into staging-next 2023-06-02 18:01:04 +00:00
Linus Heckemann
15c3a653d5
Merge pull request #235440 from lheckemann/garage
nixos/garage: allow unsafe replication modes, restart on config change
2023-06-02 19:22:03 +02:00
Linus Heckemann
c4f727c944 nixos/garage: allow unsafe replication modes, restart on config change 2023-06-02 18:11:44 +02:00
K900
e534047e2d
Merge pull request #234620 from linj-fork/fix/murmur-after
nixos/murmur: make it be after network.target again
2023-06-02 18:13:12 +03:00
Ryan Lahfa
4a4238a840
Merge pull request #235143 from wlcx/patch-1
nixos/pixelfed: fix broken try_files
2023-06-02 17:12:14 +02:00
Ryan Lahfa
0902958046
Merge pull request #235295 from nikstur/qemu-vm-improve-comments-and-docs
nixos/qemu-vm: improve comments and option descriptions
2023-06-02 15:34:49 +02:00
Bobby Rong
7f96a08418
Merge pull request #235511 from bobby285271/upd/cinnamon-bpo
Cinnamon updates 2023-06-02
2023-06-02 21:25:34 +08:00
Mario Rodas
99287fe19b
Merge pull request #235450 from Luflosi/update/aaaaxy
aaaaxy: 1.3.538 -> 1.4.2
2023-06-02 07:42:12 -05:00
Bobby Rong
68dd259958
Merge pull request #235514 from bobby285271/upd/pantheon
Pantheon updates 2023-06-02
2023-06-02 20:36:02 +08:00
github-actions[bot]
c8021f68a8
Merge master into staging-next 2023-06-02 12:01:23 +00:00
Bobby Rong
9f5dc9f927
nixos/tests/cinnamon: silence a warning and remove unused args
Module argument `nodes.machine.config` is deprecated. Use `nodes.machine` instead.
2023-06-02 19:51:12 +08:00
Bobby Rong
e447cb9776
nixos/pantheon: enable xdg-desktop-portal-gtk by default 2023-06-02 19:29:26 +08:00
Ryan Lahfa
32630256f2
Merge pull request #235424 from AmineChikhaoui/ec2-amis-rel-23.05 2023-06-02 12:18:48 +02:00
github-actions[bot]
1625d790e1
Merge staging-next into staging 2023-06-02 06:01:45 +00:00
Bobby Rong
7cf3428fd5
nixos/cinnamon: fix slick-greeter icon theme package default 2023-06-02 11:40:09 +08:00
Nick Cao
9e2fa20321
Merge pull request #235425 from 999eagle/fix/nitter
nixos/nitter: fix proxy option
2023-06-01 20:26:54 -06:00
github-actions[bot]
8b93c4f667
Merge staging-next into staging 2023-06-02 00:03:07 +00:00
Dennis Gosnell
dcf201d275
nixosTests.virtualbox: remove cdepillabout as maintainer 2023-06-02 07:44:51 +09:00
Silvan Mosberger
d4fe69faea nix-fallback-paths.nix: Update to 2.15.1 2023-06-01 22:55:14 +02:00
Alex Crawford
67c72f85a3 rl-2305: Use immutable URL for the systemd release notes 2023-06-01 13:48:11 -07:00