Commit Graph

36306 Commits

Author SHA1 Message Date
Martin Weinelt
0e4b63f713 Revert "nixos/systemd-boot: Avoid remote mypy executions"
This reverts commit ea0dcd0ae1.
2023-10-23 03:38:13 +02:00
Arthur Gautier
08f4fe2087 qemu-vm: stop the swtpm once qemu stops
The idea is to run an async process waiting for swtpm
and we have to ensure that `FD_CLOEXEC` is cleared on this process'
stdin file descriptor, we use `fdflags` for this, a loadable builtin in
Bash ≥ 5.

The async process when exited will terminate `swtpm`, we bind the
termination of the async process to the termination of QEMU by virtue of
having `qemu` exec in that Bash script.

Signed-off-by: Arthur Gautier <baloo@superbaloo.net>
Co-authored-by: Raito Bezarius <masterancpp@gmail.com>
2023-10-23 01:02:24 +02:00
Atemu
e0417d79ff
Merge pull request #262574 from Atemu/installer-no-powersave-governor
installer/nixos-generate-config: don't set powersave cpuFreqGovernor
2023-10-23 00:59:19 +02:00
Martin Weinelt
3244b1eaef
Merge pull request #262678 from plumelo/feat/esphome-proc-subset
esphome: remove ProcSubset from serviceConfig
2023-10-23 00:46:21 +02:00
Anthony Roussel
ccf080ee05
amazon-ssm-agent: rename from ssm-agent 2023-10-22 22:04:09 +02:00
Sandro
f4d631c3d1
nixos/nginx: document implicit default port 80 2023-10-22 21:32:50 +02:00
Lassulus
448f34e913
Merge pull request #262381 from makefu/pkgs/ps3netsrv/replace-upstream
ps3netsrv: replace with webman mod fork
2023-10-22 20:32:13 +01:00
Emily
a61c6b478d
Merge pull request #262741 from emilylange/nixos-forgejo-postgres15
nixos/forgejo: work around permissions error on `postgresql_15`
2023-10-22 21:04:41 +02:00
Will Fancher
13f325005c
Merge pull request #262740 from ElvishJerricco/systemd-stage-1-improve-udhcpc-assertion
systemd-stage-1: Improve udhcpc assertion
2023-10-22 13:46:38 -04:00
Martin Weinelt
8c5947252d
Merge pull request #262776 from pennae/mosquitto-skip-bind-test
nixos/mosquitto: remove the bind_interface test
2023-10-22 19:28:24 +02:00
pennae
33ba318db6 nixos/mosquitto: remove the bind_interface test
bind_interface is the mosquitto way of trying to bind to all addresses
on an interface, but it is unreliable (trying to bind to link-local v6
addresses *sometimes* but not always) and just prone to failure in
general for reasons we have yet to discover.

since this kind of automatic behavior isn't particularly necessary in a
declarative system we may as well skip it.
2023-10-22 19:12:26 +02:00
Robert Schütz
80f59b1626
Merge pull request #261135 from dotlambda/nixos-iptsd-init
nixos/iptsd: init
2023-10-22 09:48:37 -07:00
Artturi
b2426befa0
Merge pull request #259784 from dmytrokyrychuk/init-spice-autorandr
spice-autorandr: init at 0.0.2
2023-10-22 18:52:10 +03:00
Martin Weinelt
410ccec99c
Merge pull request #261931 from mweinelt/homeassistant-satellite
homeassistant-satellite: init at 2.3.0
2023-10-22 16:53:03 +02:00
K900
e6f5980d87 nixos/tests/firefox: use the module
This should exercise the module a bit in the test, and also removes an awkward override.
2023-10-22 17:13:50 +03:00
K900
60421a1622 firefox: start killing all the per-extension options 2023-10-22 17:13:42 +03:00
Meghea Iulian
bff068e514
esphome: remove ProcSubset from serviceConfig
Remove ProcSubset from esphome serviceConfig because esphome/bwrap needs to
access it.
According to
https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html#ProcSubset=
ProcSubset isn't even recommended for most programs.
Fixes #262674
2023-10-22 17:09:00 +03:00
Raito Bezarius
83b131bb55 nixos/tests: adopt newest TPM support in test infra 2023-10-22 16:01:37 +02:00
Raito Bezarius
25872524f0 nixos/qemu-vm: add virtualisation.tpm for running TPM in QEMU infrastructure 2023-10-22 16:01:37 +02:00
Dmytro Kyrychuk
d147d7feed nixos/spice-autorandr: init 2023-10-22 13:45:56 +00:00
emilylange
b8585a119c
nixos/forgejo: work around permissions error on postgresql_15
From `postgresql_15`'s release notes:
> PostgreSQL 15 also revokes the CREATE permission from all users except
a database owner from the public (or default) schema.

https://www.postgresql.org/about/news/postgresql-15-released-2526/

This directly affects `services.postgresql.ensureUsers` in NixOS,
leading to
> permission denied for schema public

`postgresql_15` is now the default for stateVersion `23.11`/`unstable`.

So until this is resolved globally, we work around this issue.
2023-10-22 15:25:34 +02:00
Jacek Galowicz
dda77fcc55
Merge pull request #257535 from RaitoBezarius/vmstate
nixos/lib/test-driver: use QMP API to watch for VM state
2023-10-22 14:22:34 +01:00
Will Fancher
1a6c2e4837 systemd-stage-1: Improve udhcpc assertion 2023-10-22 09:12:34 -04:00
Yureka
0288685a4d nixos/matrix-synapse: remove opentracing options 2023-10-22 14:15:39 +02:00
Guillaume Girol
f32a622d3a paperwork: 2.1.2 -> 2.2.0
changelog: https://gitlab.gnome.org/World/OpenPaperwork/paperwork/-/blob/develop/paperwork-gtk/ChangeLog
2023-10-22 14:11:39 +02:00
Will Fancher
a662970807
Merge pull request #262167 from jakubgs/systemd/fix-autofs-config
systemd: rename required AUTOFS4_FS to AUTOFS_FS
2023-10-22 08:08:11 -04:00
Maciej Krüger
49bc1a76e0
Merge pull request #261692 from josephst/fix-lxc-container-bootloader
nixos/lxc-container: use absolute path for ln in install-lxc-sbin-init.sh
2023-10-22 13:47:14 +02:00
nikstur
9b20e22b88
Merge pull request #262573 from ElvishJerricco/systemd-repart-stage-1-assertion
nixos/systemd-repart: Add assertion requiring systemd in initrd
2023-10-22 11:53:59 +02:00
Vladimír Čunát
ece040c37c
Merge #258573: nixos/release-combined: make gitlab a channel blocker 2023-10-22 11:24:50 +02:00
Ryan Lahfa
efccbbab5b
Merge pull request #258994 from lorenzleutgeb/msr
nixos/hardware/cpu/x86/msr: init
2023-10-22 10:24:12 +01:00
Lin Jian
23203f8e12
Merge pull request #262666 from SuperSandro2000/patch-1
nixos/acme: fix upstream documentation link
2023-10-22 17:13:26 +08:00
Lin Jian
c132df63df
Merge pull request #250792 from ckiee/init-rkvm
{,nixos/}rkvm: init
2023-10-22 17:11:12 +08:00
Lorenz Leutgeb
62c63f746a nixos/undervolt: Use hardware.cpu.x86.msr 2023-10-22 09:41:00 +02:00
Lorenz Leutgeb
84803308bf nixos/xmrig: Use hardware.cpu.x86.msr 2023-10-22 09:41:00 +02:00
Lorenz Leutgeb
b70a63a910 nixos/tlp: Use hardware.cpu.x86.msr 2023-10-22 09:41:00 +02:00
Lorenz Leutgeb
b893b67028 nixos/throttled: Use hardware.cpu.x86.msr 2023-10-22 09:40:59 +02:00
Lorenz Leutgeb
a98c933412 nixos/hardware/cpu/intel/msr: init 2023-10-22 09:40:59 +02:00
Sandro
4a97d6181c
nixos/acme: fix upstream documentation link 2023-10-22 05:47:45 +02:00
Joseph Stahl
d156ab6c9c nixos/lxc-container: use absolute path for ln in install-lxc-sbin-init.sh
Recent change to nixos-rebuild (https://github.com/NixOS/nixpkgs/pull/258571)
adds systemd-run, which brings with it a cleaner environment
(ie $PATH not available).
Workaround: use absolute path for ln to avoid command-not-found error
2023-10-22 03:18:15 +03:00
github-actions[bot]
1cf369a0dd
Merge master into staging-next 2023-10-22 00:02:31 +00:00
Peder Bergebakken Sundt
d2af1eb6ff
Merge pull request #256449 from illustris/hadoop
hadoop: 3.3.5 -> 3.3.6, build container executor from source
2023-10-22 01:40:19 +02:00
K900
c92fb2994f
Merge pull request #262617 from aij/fix/programs.firefox.enable
nixos/firefox: Fix package references
2023-10-22 01:22:16 +03:00
Ivan Jager
57436cf549 nixos/firefox: Fix package references
https://github.com/NixOS/nixpkgs/pull/262017 removed `with pkgs;` so setting
`programs.firefox.enable = true` resulted in evaluation errors like
`error: undefined variable 'ff2mpv'`

This still doesn't fix https://github.com/NixOS/nixpkgs/issues/262600
2023-10-21 16:53:32 -05:00
Ryan Lahfa
96107a2d2a
Merge pull request #261047 from adamcstephens/zfs/2.2.0
zfs/zfsUnstable: 2.1.13/2.2.0-rc5 -> 2.2.0
2023-10-21 22:38:05 +01:00
Rishi Desai
52effd56af nixos/fanout: add test 2023-10-21 17:31:14 -03:00
Rishi Desai
d1df9108ba nixos/fanout: init fanout oneshot module 2023-10-21 17:31:14 -03:00
Janik
abca224ce4
Merge pull request #242467 from dadada/dev/dadada/init-nixos-soft-serve
nixos/soft-serve: init
2023-10-21 21:58:47 +02:00
Robert Hensing
0987120ad2
Merge pull request #262582 from hercules-ci/nixos-test-rename-store-image
nixos/qemu-vm: Rename nixos-disk-image -> nix-store-image
2023-10-21 20:46:23 +02:00
Alyssa Ross
83b8726e5f
Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
	pkgs/development/python-modules/velbus-aio/default.nix
2023-10-21 17:24:16 +00:00
Robert Hensing
7096340f9e nixos/qemu-vm: Rename nixos-disk-image -> nix-store-image
For the image that's actually a store image only.
Helps with visibility. The name "nixos-disk-image" has no special
significance, by grepping nixpkgs.
2023-10-21 19:13:58 +02:00
nikstur
95e6dfd5d9
Merge pull request #260275 from thillux/jitterentropy-rngd
jitterentropy-rngd: init at 1.2.8
2023-10-21 19:10:51 +02:00
Ryan Lahfa
e6ade691a5
Merge pull request #259347 from ElvishJerricco/systemd-stage-1-zfs-sysusr-dependency
systemd 254: ZFS /usr fix with systemd-stage-1
2023-10-21 18:04:13 +01:00
Will Fancher
b57c850790 nixos/systemd-repart: Add assertion requiring systemd in initrd 2023-10-21 12:29:34 -04:00
Atemu
fb602e5608 installer/nixos-generate-config: don't set powersave cpuFreqGovernor
This script would always "detect" the "powersave" governor as it is available on
practically all CPUs while the "ondemand" governor is only available on some old
CPUs.

IME the "powersave" governor barely provides any power savings but introduces
massive performance deficits, including noticable stuttering. This is not the
default experience we should offer users, even for those who use laptops.

Use the kernel default (currently "performance", CPU makers may change it in
future) instead.
2023-10-21 18:29:25 +02:00
Ryan Lahfa
c5442c247f
Merge pull request #257262 from dongcarl/2023-09-nginx-fixes
nixos/nginx: Allow empty port for listen directive (for unix socket)
2023-10-21 17:26:57 +01:00
Adam Stephens
1a81fe0cc8
zfs: 2.1.13 -> 2.2.0 2023-10-21 12:16:31 -04:00
dadada
77f7b5a3e5
nixos/soft-serve: init
This adds a NixOS module for Soft Serve, a tasty, self-hostable Git
server for the command line. The module has a test that checks some
basic things like creating users, creating a repo and cloning it.

Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2023-10-21 17:51:42 +02:00
Ryan Lahfa
0b0440e028
Merge pull request #254647 from Janik-Haag/networkManagerEnsureProfiles
nixos/networkmanager: add declarative profiles
2023-10-21 15:06:41 +01:00
github-actions[bot]
0c34dab04f
Merge master into staging-next 2023-10-21 12:01:08 +00:00
Sandro Jäckel
b11e3eb7d1 nixos/asf: update hardening options to match upstream 2023-10-21 13:50:05 +02:00
Ryan Lahfa
8fc9bb20e4
Merge pull request #258801 from Izorkin/fix-netdata 2023-10-21 13:34:31 +02:00
nikstur
6958acea7e
Merge pull request #262179 from ElvishJerricco/systemd-stage-1-specific-fs-packages
systemd-stage-1: Use specific fs packages
2023-10-21 13:25:42 +02:00
Raito Bezarius
f94876a65c nixos/lib/test-driver: wire up QMP client
Now that we have a QMP client, we can wire it up in the test driver.

For now, it is almost completely useless because of the need of a constant "event loop", especially
for event listening.

In the next commits, we will slowly enable more and more usecases.
2023-10-21 13:03:15 +02:00
K900
186cd78231
Merge pull request #262017 from K900/firefox-preserve-old-args
nixos/firefox: preserve old wrapper args when overriding
2023-10-21 11:46:40 +03:00
github-actions[bot]
1c4183d88a
Merge master into staging-next 2023-10-21 06:00:57 +00:00
Sandro Jäckel
7f94b9e9c6
nixos/fail2ban: change bantime default to not be config breaking 2023-10-21 02:38:29 +02:00
github-actions[bot]
fb3e2499b7
Merge master into staging-next 2023-10-21 00:02:17 +00:00
Janik H
a316aa58d9
nixos/networkmanager: add declarative profiles 2023-10-21 00:20:36 +02:00
Bjørn Forsman
5c78e5b4aa nixos/ddclient: simplify with lib.getExe 2023-10-20 23:49:18 +02:00
Bjørn Forsman
8a8ec36615 Revert "ddclient: remove package and module on upstream maintainer request"
This reverts commit d35df28f65.

Upstream ddclient has new maintainers and made a new release (update in
next commit(s)).
2023-10-20 23:49:18 +02:00
makefu
d85a7949c9
ps3netsrv: add notice about replacement of with webman-mod fork 2023-10-20 23:16:42 +02:00
Dmitry Kalinkin
6392f18258
Merge pull request #262351 from h7x4/remove-nix-exec-bits
treewide: remove execute bit for non-executable `*.nix` files
2023-10-20 14:45:16 -04:00
Yueh-Shun Li
872fe27639
voms, xrootd: clean up $out/etc.orig (#241466)
When externalEtc is not null, create an extra output "etc" and move the
"$out/etc" content into "$etc/etc" before creating the symlink at
"$out/etc".
2023-10-20 14:35:38 -04:00
github-actions[bot]
cfc75eec46
Merge master into staging-next 2023-10-20 18:00:54 +00:00
h7x4
e6321d2788
treewide: remove execute bit for non-executable *.nix files 2023-10-20 19:55:39 +02:00
Vladimír Čunát
9320d9e7bc
Merge #260527: Mailman fixes
...into staging-next
2023-10-20 18:56:03 +02:00
Martin Weinelt
95856e526e
nixos/homeassistant-satellite: init 2023-10-20 17:26:10 +02:00
Bjørn Forsman
142074c2a8 nixos: fix bad mkEnableOption descriptions
Fix descriptions that don't account for (1) the "Whether to enable"
prefix or (2) the automatically added trailing dot.
2023-10-20 16:22:40 +01:00
Pol Dellaiera
fdecb1dabf
Merge pull request #244941 from h7x4/reduce-options-in-hedgedoc-module
nixos/hedgedoc: refactor to reduce option count
2023-10-20 16:07:16 +02:00
nikstur
feb3b2522f
Merge pull request #262292 from helsinki-systems/feat/stc-no-filter-units
nixos/switch-to-configuration: Allow not filtering units
2023-10-20 16:04:32 +02:00
Janne Heß
a1012b2160
nixos/switch-to-configuration: Allow not filtering units 2023-10-20 15:45:43 +02:00
github-actions[bot]
d7e9da1742
Merge master into staging-next 2023-10-20 12:01:24 +00:00
chayleaf
e2b6ff8384 nixos/akkoma: add services.akkoma.dist.extraFlags
This allows configuring Erlang flags
2023-10-20 17:34:14 +07:00
Cabia Rangris
585a8b12b1
Merge pull request #258853 from SuperSandro2000/dex
nixos/dex: fix start with latest systemd update
2023-10-20 09:59:21 +00:00
Arian van Putten
0257e9f13a
Merge pull request #261449 from arianvp/growpart-online
nixos/grow-partition: Resize partition online instead of in initrd
2023-10-20 09:25:31 +00:00
Arian van Putten
b756441de2 nixos/grow-partition: add nixos test 2023-10-20 08:58:10 +00:00
Markus Theil
e98a8367ec jitterentropy-rngd: init at 1.2.8
Add jitterentropy-rngd, a tool similar to rng-tools.
While not necessarily needed, it is useful for those
who want to strengthen their kernel entropy input pool
by periodic insertion of an independent source.

The entropy source is a NIST SP800-90B compliant
non-physical true RNG source on most systems.
See the jitterentropy documentation for details
(http://chronox.de/jent/doc/CPU-Jitter-NPTRNG.pdf).

Signed-off-by: Markus Theil <theil.markus@gmail.com>
2023-10-20 10:04:11 +02:00
Artturin
3342d1a9a9 Merge branch 'master' into staging-next 2023-10-20 09:29:36 +03:00
Fabián Heredia Montiel
6b29b95a75
Merge pull request #261975 from R-VdP/rvdp/fish_status_subcommands
fish: use the subcommand style for the status command
2023-10-19 22:01:56 -06:00
Will Fancher
18013cc71e systemd-stage-1: Use specific fs packages 2023-10-19 21:13:22 -04:00
Jakub Sokołowski
26c4e35cea
systemd: rename required AUTOFS4_FS to AUTOFS_FS
The `AUTOFS4_FS` name appears to be a legacy naming stub:

>Ok, I ran the script, and also decided that we might as well remove
>the AUTOFS4 legacy naming stub entry by now.
>
>It has been five years, and people will have either picked up the new
>name with 'make oldconfig', or they just don't use 'make oldconfig' at
>all.

https://lore.kernel.org/lkml/CAHk-=wgK9-Tx4BxYMrc0pg==mcaz3cjWF6-CBwVpM_BZAmf4JQ@mail.gmail.com/#r

That has been remove in 6.6 kernel and results in a failure:
```
error:
       Failed assertions:
       - CONFIG_AUTOFS4_FS is not enabled!
```

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2023-10-20 01:44:13 +02:00
Martin Weinelt
d042a29613
Merge pull request #253764 from linj-fork/fix-ping-wrapper
nixos/network-interfaces: stop wrapping ping with cap_net_raw
2023-10-20 00:57:55 +02:00
Thiago Kenji Okada
bcdd2da2dc
Merge pull request #262051 from thiagokokada/qt-module-fixes
nixos/qt: multiple fixes
2023-10-19 23:34:24 +01:00
Emily
4d0db3bfee
Merge pull request #259254 from Tom-Hubrecht/nixos-outline
nixos/outline: Add the possibility of using local storage instead of S3
2023-10-20 00:10:40 +02:00
Martin Weinelt
bb8f272106
nixos/wyoming-openwakeword: allow access to /proc/cpuinfo
Required somewhere in tensorflow, likely for CPU feature discovery.
2023-10-19 23:11:14 +02:00
Thiago Kenji Okada
38623a8003 nixos/qt: improve module documentation 2023-10-19 21:54:22 +01:00
Thiago Kenji Okada
39250f5df5 nixos/qt: multiple fixes
- Removal of top-level `with lib`
- Allow usage of module without setting `platformTheme`, so we can set
  the QT_PLUGIN_PATH/QML2_IMPORT_PATH paths without theming
- Add support for kvantum and some other styles
- Add myself as maintainer
2023-10-19 21:54:22 +01:00
nicoo
ea0dcd0ae1 nixos/systemd-boot: Avoid remote mypy executions 2023-10-19 20:58:52 +01:00
Kiskae
e24d43a18c nixos/nvidia: partially revert #181674
nvidia has changed the name of the chardev in the latest beta driver.
Match the behavior of `nvidia-modprobe` and hardcode the major number.
2023-10-19 21:57:35 +02:00
github-actions[bot]
0bcaa2f556
Merge master into staging-next 2023-10-19 18:00:54 +00:00