dev/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity
534,092 Commits 3 Branches 0 Tags 4.3 GiB
e8f0afa7b0
Commit Graph

35824 Commits

Author SHA1 Message Date
Robert Hensing
d1c454a3eb
Merge pull request #257682 from Kharacternyk/transmission-doc-typo 
nixos/transmission: fix a typo in the docs
 2023-09-28 04:38:03 +01:00
Will Fancher
209f6f3c21
Merge pull request #257693 from NickCao/bindmount 
nixos/stage-1-systemd: fix initrd-fstab generation for bind mounts, a…
 2023-09-27 20:15:46 -04:00
Maximilian Bosch
e515dce892 nixos/sshd: fix sshd.conf validity check 
When using e.g. `{ addr = "[::]"; port = 22; }` at `listenAddresses`,
the check fails because of an escaping issue[1] with

    last 1 log lines:
    > Invalid test mode specification -f
    For full logs, run 'nix log /nix/store/c6pbpw5hjkjgipmarwyic9zyqr1xaix5-check-sshd-config.drv'

Using `lib.escapeShellArg` appears to solve the problem.

[1] https://github.com/NixOS/nixpkgs/pull/256090#issuecomment-1738063528
 2023-09-28 00:11:31 +00:00
Thiago Kenji Okada
8c01dd912f release-notes: add GraalVM changes 2023-09-27 23:49:26 +01:00
Nick Cao
37cac5f032
nixos/stage-1-systemd: makeFstabEntries: drop rootPrefix parameter 2023-09-27 18:31:56 -04:00
Brendan Taylor
95e66809de coredns: allow adding external plugins 
Solves https://github.com/NixOS/nixpkgs/issues/146603

CoreDNS has support for plugins that are added at compile time. This
exposes an argument `externalPlugins` that will build coredns with
the specified plugins.

Example:
```
coredns-fanout = pkgs.coredns.override {
  externalPlugins = [
    {name = "fanout"; repo = "github.com/networkservicemesh/fanout"; version = "v1.9.1";}
  ];
  vendorHash = "<SRI hash>";
};
```
 2023-09-27 23:35:47 +02:00
Kiran Ostrolenk
eb2c136196
regreet: fix user group in tmpfiles rules 
Prior to this commit the derivation assumed a user's primary group has
the same name as the user themselves. This is standard on linux but not
necessary (and indeed I believe not the default on NixOS).

Closes #232184
 2023-09-27 22:00:42 +01:00
Sander van der Burg
5bf3c4393c
Merge pull request #257672 from svanderburg/disnix-updates 
Disnix updates
 2023-09-27 21:51:27 +02:00
Robert Hensing
bdce311b57
Merge pull request #256544 from tweag/strict-foldl 
`lib.lists.foldl'`: Make stricter
 2023-09-27 20:01:14 +01:00
Nick Cao
0fecd7edc8
nixos/stage-1-systemd: fix initrd-fstab generation for bind mounts, again 
See https://github.com/NixOS/nixpkgs/pull/185089
 2023-09-27 14:34:17 -04:00
github-actions[bot]
b7f2311d92
Merge staging-next into staging 2023-09-27 18:01:33 +00:00
Matthieu Coudron
0ab2c96429 vimUtils: buildVimPluginFrom2Nix renamed to buildVimPlugin 
the `from2Nix` suffix is a legacy from vim2nix but we dont use that anymore. It makes the name of the function unusual and long.
 2023-09-27 19:08:38 +02:00
Nazar Vinnichuk
e40c8d3739 nixos/transmission: fix a typo in the docs 2023-09-27 19:55:37 +03:00
Ryan Lahfa
c22ca8e820
Merge pull request #254440 from Izorkin/add-nginx-bpf 2023-09-27 18:53:43 +02:00
Ryan Lahfa
e909050efd
Merge pull request #257047 from minijackson/netbox-3.6.2 2023-09-27 18:50:54 +02:00
Martin Weinelt
f7e03f4851
Merge pull request #251878 from NixOS/python-updates 
python-updates - major updates - 2023-09-15 (python3: 3.10 -> 3.11)
 2023-09-27 18:49:23 +02:00
Ryan Lahfa
12eb1e5d28
Merge pull request #249412 from JTarasovic/jdt/systemd-networkd/ipv6-assign-prefix 2023-09-27 18:39:00 +02:00
Ryan Lahfa
cb403e56a6
Merge pull request #249386 from JTarasovic/jdt/systemd-networkd/dhcpv6config 2023-09-27 18:38:16 +02:00
Sander van der Burg
32c36780d1 dysnomia: 0.10.1 -> 0.10.2 2023-09-27 18:35:30 +02:00
Vladimír Čunát
4eae6fe151
Merge #247401: glibc: 2.37-39 -> 2.38-23 
...into staging
 2023-09-27 18:04:40 +02:00
Vladimír Čunát
8a86b98f0b
Merge #255658: staging-next 2023-09-17 2023-09-27 18:00:00 +02:00
Maximilian Bosch
b9bff72147
Merge pull request #249792 from teto/postgresql-quality-of-life-changes 
services.postgres: move the generated statement at the top of the file
 2023-09-27 16:22:58 +02:00
pennae
d793c3b8b0 manual: fix parsing differences for markdown-it-py 3 
version 3 now recognizes these replacements as escaped, but neither look
like they should be.
 2023-09-27 15:35:23 +02:00
Janik
65e9f3c071
Merge pull request #257621 from herrwiese/for-master/usbguard-path-to-string 2023-09-27 14:21:57 +02:00
Andreas Wiese
1e8b8e6d38 nixos/usbguard: don't use path literal for pure evaluation 
PR#256295 reintroduced ruleFile option, but set the default as a path
literal, which was a "string path" previously.  This breaks evaluation
for being impure:

  error: access to absolute path '/var/lib/usbguard/rules.conf' is forbidden in pure eval mode (use '--impure' to override)
 2023-09-27 11:22:09 +02:00
github-actions[bot]
0ead40ab4d
Merge staging-next into staging 2023-09-27 06:01:26 +00:00
github-actions[bot]
9a4dae4abd
Merge master into staging-next 2023-09-27 06:01:00 +00:00
Artturi
31c647207a
Merge pull request #231384 from mrcjkb/tuxedo-rs 2023-09-27 08:08:50 +03:00
Gary Guo
e037977239 postgresql: default to v15 in 23.11 2023-09-27 03:51:06 +02:00
Eike Frost
be2b474c00 nixos/tlp fix NetworkManager RDW dispatcher script location 2023-09-26 21:35:54 -04:00
Silvan Mosberger
dd72ff27f7 lib.attrsets.foldlAttrs: Make stricter 
See the parent commit for the same change to lib.lists.foldl'
 2023-09-27 02:43:59 +02:00
Silvan Mosberger
3b6169f87b lib.lists.foldl': Make strict in the initial accumulator 
To maintain backwards compatibility, this can't be changed in the Nix language.
We can however ensure that the version Nixpkgs has the more intuitive behavior.
 2023-09-27 02:43:59 +02:00
Vladimír Čunát
583ffe89e5
Merge #251494: ffmpeg: ffmpeg_5 → ffmpeg_6 
...into staging
 2023-09-27 00:15:14 +02:00
Fabián Heredia Montiel
25088d4960 ffmpeg: ffmpeg_5 → ffmpeg_6 2023-09-26 15:54:44 -06:00
Maximilian Bosch
d77b59b41d
nixos/rust-motd: use a second attribute (order) for the of sections in TOML 
Rather than using `priority` with `sortProperties`, a new option called
`order` defines the ordering of the sections. I.e.

    order = [ "global" "uptime" "banner" ]

means that `uptime` comes before `banner`. Please note that `global` is
for global settings and not a section. I figured that it'd be too much
magic to hide this in the implementation and ask the user to specify the
order of _each_ section in `settings` instead.

OTOH this makes the intent way clearer than priorities. Also, this
remains opt-in, the option defaults to `attrNames cfg.settings`, i.e.
all sections ordered alphabetically.
 2023-09-26 23:28:40 +02:00
Marc Jakobi
01cc0a605a nixos/tuxedo-rs: init at 0.2.2 2023-09-26 23:28:05 +02:00
Minijackson
541d1eef67
netbox_3_3: remove 
should be, by now, unused by everyone

Co-authored-by: Raito Bezarius <masterancpp@gmail.com>
 2023-09-26 22:51:48 +02:00
Minijackson
828f0446f5
nixos/netbox: use netbox_3_6 for stateVersion>=23.11 2023-09-26 22:42:49 +02:00
Minijackson
3cc7cbce03
netbox_3_6: init, mark 3_5 as EOL 
use it for the upgrade test
increase tests memory, otherwise NetBox gets OOM killed

Co-authored-by: Raito Bezarius <masterancpp@gmail.com>
 2023-09-26 22:42:49 +02:00
github-actions[bot]
4bfb61a48c
Merge master into staging-next 2023-09-26 18:01:12 +00:00
K900
f33cdbcc25 nixos/gnome: remove nixpkgs.config usage 
I have no idea how to keep this working, but it feels wrong anyway.
 2023-09-26 18:02:01 +03:00
K900
d3c27efa36 nixos/firefox: remove nixpkgs.config usage 2023-09-26 18:02:01 +03:00
K900
018f62a151 nixos/doc: remove reference to long removed option 2023-09-26 18:02:01 +03:00
K900
c018561f54 nixos/amdgpu-pro: remove nixpkgs.config usage 
A new X.org ABI is exceptionally unlikely at this point, and we can
add an assertion if it ever happens.
 2023-09-26 18:02:00 +03:00
K900
7a7c1859cd nixos/lightdm-tiny-greeter: remove nixpkgs.config usage 2023-09-26 18:02:00 +03:00
K900
38461ff27a nixos/locate: remove nixpkgs.config usage 2023-09-26 18:02:00 +03:00
K900
ce87196a00 nixos/nixpkgs: assert that nixpkgs.config is not set when pkgs is passed in externally 
This is a common footgun people hit often. Remove it.
 2023-09-26 18:02:00 +03:00
Yureka
d490800f0f nixos/peering-manager: use settingsFormat 2023-09-26 14:42:45 +02:00
Alexander Bantyev
299e0b9560
Merge pull request #255033 from AleXoundOS/castopod 
castopod: init at 1.6.4
 2023-09-26 16:42:26 +04:00
github-actions[bot]
3bfcfd7eef
Merge master into staging-next 2023-09-26 06:01:00 +00:00
Lin Jian
bba54c4900
Merge pull request #255813 from linj-fork/feat-kanata-all-device 
nixos/kanata: add default value, doc and warning for devices
 2023-09-26 13:50:59 +08:00
Fabián Heredia Montiel
312aa96fe6
Merge pull request #256565 from bjornfor/nixos-wireguard-add-metric-option 
nixos/wireguard: add metric option
 2023-09-25 21:15:02 -06:00
github-actions[bot]
cc5ae613ff
Merge master into staging-next 2023-09-26 00:02:17 +00:00
Will Fancher
350b6b84e6
Merge pull request #257325 from NixOS/honk/fix-initdb-script-startup 
nixos/modules/honk: fix initdb service startup
 2023-09-25 20:01:04 -04:00
Weijia Wang
c71554840b
Merge pull request #257104 from vifino/unifi-7.5.176 
unifi7: 7.4.156 -> 7.5.176
 2023-09-25 23:43:16 +02:00
Weijia Wang
9e821b5ae0
Merge pull request #241542 from dasj19/wordpress-avoid-language-folder 
wordpress: fixed installing of languages
 2023-09-25 23:32:31 +02:00
0x4A6F
a0db07dad5
Merge pull request #256295 from Janik-Haag/usbguard 
nixos/usbguard: restore ruleFile option
 2023-09-25 22:05:36 +02:00
Pol Dellaiera
57514f5beb
nixos/modules/honk: fix initdb service startup 2023-09-25 22:02:52 +02:00
github-actions[bot]
fc1f757bf6
Merge master into staging-next 2023-09-25 18:01:06 +00:00
Pol Dellaiera
a7b3106959
Merge pull request #256628 from alyssais/nix-prefetch-git-config 
nix-prefetch-git: ignore global and user git config
 2023-09-25 18:40:40 +02:00
Valentin Gagarin
370097ce86
remove the misleading warning on using nix-env for split outputs (#255947) 
The text was originally added [0] following an apparently incomplete
research on how everything plays together. In fact, Nix propagates
`outputs` to the corresponding nested derivations, and there is some
messy behavior in Nixpkgs that only seems to propagate
`meta.outputsToInstall` in `buildEnv`[1].

This change moves the hints on how to use NixOS specifics to NixOS
module documentation (which is hopefully easier to find through
search.nixos.org), describes the default behavior in Nixpkgs (updating
a the link to the source), and removes the confusing mention of
`nix-env`.

the last of them should not be there to begin with. we don't want
beginners to use `nix-env`, as this is known to run them into trouble
eventually.

[0]: https://github.com/NixOS/nixpkgs/pull/76794
[1]: 1774d07242/pkgs/build-support/buildenv/default.nix (L66)
 2023-09-25 16:23:01 +02:00
Yureka
6500b4580c
Revert "nixos/boot/rasbperrypi: add support for boot.initrd.secret with uboot (#240358)" (#257251) 
This reverts commit 94e939985b.
 2023-09-25 14:22:51 +02:00
github-actions[bot]
3e52e5929d
Merge master into staging-next 2023-09-25 12:01:02 +00:00
Thiago Kenji Okada
c69d9ad27a
Merge pull request #256945 from LeSuisse/mattermost-8.1.2 
mattermost: 7.10.5 -> 8.1.2
 2023-09-25 12:46:02 +01:00
Ryan Lahfa
4242ecd871
Merge pull request #248372 from yaxitech/amd-sev-guest 2023-09-25 13:10:42 +02:00
Alyssa Ross
c5c30274a3 nixosTests.tinywl: fix by adding Mesa drivers 
Required since upstream commit 49738406 ("render: don't fall back to
Pixman if we have a render node").
 2023-09-25 13:04:20 +02:00
WilliButz
2d30a37d9f
Merge pull request #248925 from FugiMuffi/prometheus-sabnzbd-exporter 
prometheus-sabnzbd-exporter: init at 0.1.70
 2023-09-25 12:09:36 +02:00
Frederik Rietdijk
f4822bb295
Merge pull request #254309 from pbsds/flit-prune 
python3Packages.flitBuildHook: remove
 2023-09-25 11:34:15 +02:00
Will Fancher
4bd4976b87
Merge pull request #251290 from Majiir/systemd-initrd-networking-features 
nixos/network-interfaces-systemd: support `vlans`, `bridges` in systemd-initrd
 2023-09-25 05:07:23 -04:00
misuzu
c220d280b0 nixosTests.castopod: init 2023-09-25 10:17:44 +04:00
misuzu
cf6e43a3dd nixos/castopod: init 2023-09-25 10:17:44 +04:00
github-actions[bot]
104c9ec59b
Merge master into staging-next 2023-09-25 06:01:10 +00:00
Charles Hall
94a42157f4 nixos/xonotic: init 2023-09-24 22:54:59 -03:00
github-actions[bot]
680b13891d
Merge master into staging-next 2023-09-25 00:02:13 +00:00
Artturi
713af20167
Merge pull request #241518 from Gerg-L/use-xdg-base-directories 2023-09-25 00:45:31 +03:00
github-actions[bot]
03a82ba5d4
Merge master into staging-next 2023-09-24 18:00:54 +00:00
Aaron Andersen
c51a273a92
Merge pull request #254370 from jakubgs/mtr-exporter/multi-job 
mtr-exporter: support specifying multiple jobs
 2023-09-24 11:39:23 -04:00
Adrian Pistol
191131077b unifi7: 7.4.156 -> 7.5.176 2023-09-24 17:25:08 +02:00
Ryan Lahfa
0fa52bd973
Merge pull request #257043 from Tom-Hubrecht/garage-envfile 2023-09-24 17:07:21 +02:00
Maximilian Bosch
e86dbb20f7
nixos/rl-2311: mention glibc 2.37 -> 2.38 bump 2023-09-24 16:41:22 +02:00
Tom Hubrecht
2d38d9edc0 nixos/garage: Add an environmentFile option 
Since garage 0.8.2, garage accepts environment variables for passing secrets,
e.g. `GARAGE_RPC_SECRET` or `GARAGE_ADMIN_TOKEN`. The added `environmentFile`
allows those secrets to not be present in the nix store.
 2023-09-24 14:47:05 +02:00
Maximilian Bosch
9bd9e20e9a
Merge pull request #256090 from CRTified/sshd-validation-fix 
nixos/sshd: Specify connection parameters for configuration validation
 2023-09-24 14:12:46 +02:00
github-actions[bot]
b6d5fc29bc
Merge master into staging-next 2023-09-24 12:01:00 +00:00
Aryeh Hillman
b6766564ed Update wg-quick.nix 
Update wg-quick.nix such that a search for `WireGuard` in the `NixOS Options` section of search.nixos.org brings up the convenient `networking.wg-quick.interfaces.wg0.configFile` option.
 2023-09-24 13:24:27 +02:00
Lin Jian
c5ba4c687e
nixos/kanata: add default value, doc and warning for devices 2023-09-24 17:09:23 +08:00
Minijackson
6c7e768420
netbox_3_5: introduce alias 
clears up ambiguity
use that alias in tests

Co-authored-by: Raito Bezarius <masterancpp@gmail.com>
 2023-09-24 10:13:05 +02:00
Jakub Sokołowski
4e587ac821
mtr-exporter: support specifying multiple jobs 
This ability has been added in `0.3.0` release:
https://github.com/mgumz/mtr-exporter/releases/tag/0.3.0
https://github.com/NixOS/nixpkgs/pull/252667

To achieve this a config is generated and symlinked at `/etc/mtr-exporter.conf`.

Signed-off-by: Jakub Sokołowski <jakub@status.im>
 2023-09-24 09:13:31 +02:00
github-actions[bot]
0e6413dbff
Merge master into staging-next 2023-09-24 00:02:23 +00:00
Felix Schröter
5365ecb40b rome: remove 
rome is no longer maintained.
A fork called biome is available in nixpkgs.
 2023-09-23 19:43:45 -03:00
Thiago Kenji Okada
a3a7520a2f
Merge pull request #119856 from ilian/oci-image 
oci-image: init scripts to build and upload image
 2023-09-23 21:09:07 +01:00
Martin Weinelt
1ff350f7b8
Merge pull request #81460 from vcunat/p/knot-nixConfig 
nixos/knot: allow full configuration by nix values
 2023-09-23 20:55:54 +02:00
Thomas Gerbet
a3e7a80c7e mattermost: 7.10.5 -> 8.1.2 
Fixes MMSA-2023-00224, MMSA-2023-00230, MMSA-2023-00222, MMSA-2023-00223, MMSA-2023-00217,
MMSA-2023-00210, MMSA-2023-00234, MMSA-2023-00232 and MMSA-2023-00239.

Mattermost 7.10.x is EOL, this contribution moves to the 8.1.x branch which is the new ESR.

Changelog can be found here:
https://docs.mattermost.com/install/self-managed-changelog.html#release-v8-0-major-release
https://docs.mattermost.com/install/self-managed-changelog.html#release-v8-1-extended-support-release
 2023-09-23 20:06:48 +02:00
github-actions[bot]
ab2ecc25c1
Merge master into staging-next 2023-09-23 18:00:59 +00:00
Nick Cao
1fe305df27
Merge pull request #256906 from oddlama/fix-typesense-0.25.1 
nixos/typesense: disable MemoryDenyWriteExecute which is needed since 0.25.1
 2023-09-23 11:37:13 -04:00
Janne Heß
cc55ef9d55
Merge pull request #254993 from helsinki-systems/feat/stc-mount-improvements 
nixos/switch-to-configuration: Mount improvements and a lot more test cases
 2023-09-23 17:03:13 +02:00
oddlama
11d4f6e4a8
nixos/typesense: disable MemoryDenyWriteExecute which is needed since 0.25.1 
also adjust default state directory mode to allow typesense group
 2023-09-23 16:37:23 +02:00
Aaron Andersen
2af64a3d1d
Merge pull request #246173 from bb2020/mbpfan 
nixos/mbpfan: adjust defaults
 2023-09-23 09:41:11 -04:00
Nick Cao
4a5b19463a
Merge pull request #256762 from mweinelt/matrix-synapse-network-online 
nixos/matrix-synapse: wait for network-online.target
 2023-09-23 09:12:06 -04:00
Maciej Krüger
9a914a7c52
Merge pull request #256491 from mkg20001/mkg/sudo-rs-resolve 
nixos/{sudo,-rs}: revert sudo-rs, make own module
 2023-09-23 15:08:06 +02:00
digital
94e939985b
nixos/boot/rasbperrypi: add support for boot.initrd.secret with uboot (#240358) 
Co-authored-by: digital <didev@dinid.net>
 2023-09-23 14:32:09 +02:00
Kirill Radzikhovskyy
ea9254a5a5 nixosTests.tranmission_4: init 2023-09-23 21:38:47 +10:00
Vladimír Čunát
1869818c57
nixos/knot: add release notes and partial compatibility 2023-09-23 10:05:17 +02:00
Martin Weinelt
45e71a7a99
nixosTests.kea: use knot.settings for configuration 2023-09-23 10:04:02 +02:00
Martin Weinelt
8e93f353cc
nixosTests.knot: use settings format 2023-09-23 10:04:02 +02:00
Vladimír Čunát
ce85980e77
nixos/knot: also allow config by YAML file 2023-09-23 10:04:02 +02:00
Vladimír Čunát
7fb737dde6
nixos/knot: allow full configuration by nix values (RFC 42) 2023-09-23 10:04:02 +02:00
github-actions[bot]
f95580a6ff
Merge master into staging-next 2023-09-23 06:00:57 +00:00
Artturi
87ee3c4fdf
Merge pull request #176886 from hyperfekt/nonderivation_fish-completion 2023-09-23 06:28:23 +03:00
Martin Weinelt
457d9bbc94
nixos/matrix-synapse: wait for network-online.target 
While network.target only guarantees that network devices have been
created the `network-online.target` allows delaying service startup
until after a configurable network state has been reached.

This should resolve spurious failures, e.g. when synapse tries to load
the discovery information for its OIDC provider from a remote host.
 2023-09-22 22:41:40 +02:00
Peder Bergebakken Sundt
bdda7b0a53 python3Packages.flitBuildHook: remove 2023-09-22 21:11:24 +02:00
Sergei Trofimovich
e57034f9a7 modules/xmr-stak: drop broken cudaSupport option 
Tanvir Ahmed T. reports that `services.xmr-stak.enable = true;` shows
that `23.05` ships broken `xmr-stak` module:

    error: function 'anonymous lambda' called with unexpected argument 'cudaSupport'

I broke it when I removed `cudaSupport` flag in
    a5ce71d4e8

I'm just removing the option without an attempt to supply the stub as
module was already broken on `23.05` release. There are probably no
users of `xmr-stak` module by now.

Closes: https://github.com/NixOS/nixpkgs/issues/256703
 2023-09-22 17:40:04 +01:00
Maciej Krüger
59a8959287
release-notes: adjust to sudo-rs module 
As it's now called sudo-rs and also remove breaking changes for sudo
 2023-09-22 15:14:15 +02:00
Maciej Krüger
8e9b72be82
nixos/sudo-rs: add crossCompile 'fix' 
This is just a quick fix based on pname,
as I have no idea how to use slicing in the module

We should instead use slicing to get the package for the host
 2023-09-22 15:14:14 +02:00
Maciej Krüger
04e64fa716
nixosTests.sudo-rs: use sudo-rs 
As the module was renamed, we need to use the new one
 2023-09-22 15:14:14 +02:00
Maciej Krüger
03762aa42a
test-driver: revert stderr nullpipe 
Removes 2>/dev/null which re-adds stderr output breaking execute
 2023-09-22 15:14:13 +02:00
Maciej Krüger
7c8b8bd3e4
nixos/sudo-rs: init 
adds a new sudo-rs module that contains sudo-rs changes removed from sudo module
 2023-09-22 15:14:13 +02:00
Maciej Krüger
57d41f9751
nixos/sudo: revert sudo-rs 922926cfbc (partial #253876) 
This reverts the module changes that were added
by the addition of sudo-rs (merge 922926cfbc) from the sudo module.

Individual commits reverted:
* 409d29ca73 2023-08-31 | [nicoo] nixos/sudo: Split up `configFile` into individual sections
* 454151375d 2023-09-04 | [nicoo] nixos/sudo: Don't include empty sections
* 8742134c80 2023-09-04 | [nicoo] nixos/sudo: Only keep SSH_AUTH_SOCK if used for authentication
* f5aadb56be 2023-09-07 | [nicoo] nixos/sudo: Refactor option definitions
* 8b9e867ac8 2023-09-07 | [nicoo] nixos/sudo: Refactor checks for Todd C. Miller's implemetation
* 3a95964fd5 2023-09-07 | [nicoo] nixos/sudo: Drop useless `lib.` qualifiers
* b1eab8ca53 2023-09-07 | [nicoo] nixos/sudo: Handle `root`'s default rule through `extraRules`
* 717e51a140 2023-09-07 | [nicoo] nixos/sudo: Make the default rules' options configurable
* c11da39117 2023-09-07 | [nicoo] nixos/sudo: Drop the sudoers comment for `extraRules`
* f0107b4f63 2023-09-07 | [nicoo] nixos/sudo: Check syntax using the configured package
* 914bf58369 2023-09-07 | [nicoo] nixos/{sudo, terminfo}: Adjust defaults for compatibility with `sudo-rs`
* f66eb0df3b 2023-09-07 | [nicoo] nixos/sudo: Only wrap `sudoedit` when using Miller's sudo
* d63eb55e81 2023-09-13 | [nicoo] nixos/sudo: Generate `sudo-i` PAM config for interactive use of `sudo-rs`
* d8d0b8019f 2023-09-13 | [nicoo] nixos/sudo: Add myself as maintainer (nbraud/nixos/sudo-rs)
 2023-09-22 15:13:56 +02:00
github-actions[bot]
3431cedfe3
Merge master into staging-next 2023-09-22 12:01:02 +00:00
K900
daebf5c6e2
Merge pull request #254071 from alois31/plasma-setuid 
nixos/plasma5: remove pointless setuid wrappers
 2023-09-22 14:21:03 +03:00
Linus Heckemann
f6f5f60879 bcachefs tests: unlock directly to the right keyring 2023-09-22 12:58:04 +02:00
Janne Heß
358347e8b6
nixos/switchTest: Also test swap devices 2023-09-22 10:26:11 +02:00
Janne Heß
85c1c30fd9
nixos/switch-to-configuration: Never unmount / or /nix 
Also adds a huge test for fstab handling
 2023-09-22 10:26:10 +02:00
Alyssa Ross
7d40fbbc04
nix-prefetch-git: ignore global and user git config 
nix-prefetch-git is either run as part of a build, usually sandboxed,
or outside a build, unsandboxed, to prefetch something that will later
be used in a build.  It's important that the latter use produces
hashes that can be reproduced by the former.

One way that they can differ is if the user's git config does
something that changes the result of git clone.  I ran into this,
because my global git config automatically enables git-lfs, whereas
nix-prefetch-git otherwise only uses git-lfs if specifically
requested.  This led to very confusing hash mismatches.
 2023-09-22 06:59:40 +00:00
github-actions[bot]
c651d7d9e9
Merge master into staging-next 2023-09-22 00:02:14 +00:00
Thiago Kenji Okada
371cebacb5 maintainers/scripts/oci: add missing parameter 2023-09-21 22:57:39 +01:00
Thiago Kenji Okada
c655cdb536 maintainers/scripts/oci: make scripts fail on error 2023-09-21 22:57:39 +01:00
Thiago Kenji Okada
d5d4b08488 nixos/virtualisation: always use EFI for OCI 2023-09-21 22:57:39 +01:00
Thiago Kenji Okada
cd67657ae2 nixos/virtualisation: use systemd-networkd for OCI 2023-09-21 22:57:39 +01:00
Thiago Kenji Okada
5eae6db9e3 nixos/virtualisation: remove deprecated option from OCI common 2023-09-21 22:57:39 +01:00
ilian
e8fc4d22e9 maintainers/scripts/oci: Fix indentation 2023-09-21 22:57:39 +01:00
Samuel Dionne-Riel
2eb41eb208 nixos/virtualization: Allow building EFI / A1 OCI images 
A couple notes:
---------------

Adding invalid `console=` parameters is not an issue. Any invalid
console is unused. The kernel will use the "rightmost" (last) valid
`console=` parameter as the default output. Thus the SBBR-mandated AMA0
on A1, and ttyS0 on x86_64 as documented by Oracle.

`nvme_core.shutdown_timeout=10` was added as it was written this way in
the A1 images. Unclear whether `nvme.shutdown_timeout=10` is wrong. At
worst this is a no-op.
 2023-09-21 22:57:38 +01:00
Samuel Dionne-Riel
d944fb4a19 nixos/virtualization: Allow building EFI OCI images 2023-09-21 22:57:38 +01:00
Samuel Dionne-Riel
9849ccb241 nixos: Add OCI image options 
Follows what amazon images does.
 2023-09-21 22:57:38 +01:00
Samuel Dionne-Riel
3a35abf169 nixos/oci-image: Minor cleanup 2023-09-21 22:15:22 +01:00
Samuel Dionne-Riel
5056824e64 maintainers/scripts/oci: Allow A1 image builds 2023-09-21 22:15:22 +01:00
ilian
362d1d6218 oci-image: init scripts to build and upload image 
Add image configuration for Oracle Cloud Infrastructure and scripts to
build and upload the image as a Custom Image.
 2023-09-21 22:15:22 +01:00
Artturi
ff10769cc9
Merge pull request #165298 from danielfullmer/gdm-banner 2023-09-21 23:40:15 +03:00
Bjørn Forsman
ed7c0c6e75 nixos/wireguard: add metric option 
This new option, networking.wireguard.interfaces.NAME.metric, allows
increasing the metric of the routes, effectively lowering priority.

(I'm using high metric to allow having the Wireguard interface always
up, even when the client machines are on their home network. Before I
had to stop the interface when home to avoid packet routing issues.)
 2023-09-21 22:19:21 +02:00
github-actions[bot]
25421963c7
Merge master into staging-next 2023-09-21 18:00:53 +00:00
Robert Gerus
294c4ec956 nixos/glasgow: init hardware module 2023-09-21 11:48:01 -05:00
Markus S. Wamser
02f0dc8cff grocy: add package option 
apply review from @SuperSandro2000

Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
 2023-09-21 18:01:23 +02:00
Maciej Krüger
7fd7b57ddc
release-notes: mention networking.networkmanager.firewallBackend 
Co-authored-by: Florian Klink <flokli@flokli.de>

Co-authored-by: Lin Jian <me@linj.tech>
 2023-09-21 16:19:07 +02:00
Sandro Jäckel
9a85d77152
nixos/networkmanager: default firewallBackend to nftables, remove firewallBackend 
Co-authored-by: Florian Klink <flokli@flokli.de>

Co-authored-by: Lin Jian <me@linj.tech>
 2023-09-21 16:18:57 +02:00
Sandro Jäckel
ad0ca163e1
nixos/networkmanager: cleanup, fix example rendering 2023-09-21 15:16:54 +02:00
Martin Weinelt
b4bd254b86
Merge pull request #256289 from Ma27/refactor-synapse-assertions 
nixos/matrix-synapse: refactor assertions for missing listener resources
 2023-09-21 14:06:38 +02:00
github-actions[bot]
4c610adf95
Merge master into staging-next 2023-09-21 12:01:19 +00:00
Maximilian Bosch
214cf0b934
nixos/rust-motd: .attrs.json -> "$NIX_ATTRS_JSON_FILE" 
That way the derivation can also be built in a `nix-shell` where
`.attrs.json` isn't under "$NIX_BUILD_TOP".
 2023-09-21 13:17:13 +02:00
Maximilian Bosch
11376df6d4
nixos/rust-motd: allow ordering sections by priority 
Closes #234802

The problem here is that with e.g.

    {
      uptime.prefix = "Up";
      banner.command = "hostname | figlet -f slant";
    }

`banner` still appears before `uptime` in the final motd text because
Nix sorts attribute names alphabetically internally.

To work around this without breaking compatibility or losing the
property to override individual sections in other modules - e.g.

    {
      banner.color = mkForce "blue";
    }

I decided to introduce an option `priority` here, similar to the
priority field for `nginx`[1] and with the same semantics (i.e. higher
value means lower priority).

Internally a bunch of env vars are generated, i.e. `env0` to `envN` for
`N` sections with each of them containing a declaration for the TOML,
i.e. `env0` contains `{ uptime.prefix = "Up"; }` and `env1` contains
`{ banner.command = "hostname | figlet -f slant"; }` if `uptime.priority`
is set to a value below 1000.

In this order, the declarations are concatenated together by `jq(1)`
which doesn't sort keys alphabetically which results in a JSON
representation with `uptime` before `banner`. This is finally piped to
`json2toml` which converts this into TOML for rust-motd.

[1] https://nixos.org/manual/nixos/unstable/options#opt-services.nginx.virtualHosts._name_.locations._name_.priority
 2023-09-21 13:17:13 +02:00
hexchen
8ec182e570 nixos/prometheus: fix blackbox exporter 2023-09-21 08:49:10 +02:00
github-actions[bot]
743d7baa31
Merge master into staging-next 2023-09-21 06:01:07 +00:00