Commit graph

7877 commits

Author SHA1 Message Date
Herwig Hochleitner ae34cddb51
linuxPackages.systemtap: 4.8 -> 5.0a, add nixos tests (#276840)
* nixos/tests/systemtap: init smoke test

* linuxPackages.systemtap: use --sysroot instead of -r

* nixos/tests/systemtap: rule out warnings

* linuxPackages.systemtap: smaller sysroot

* nixos/tests/systemtap: test on a few more kernels

* linuxPackages.systemtap: provide debuginfo for tracing kernel.function

* linuxPackages.systemtap: test kernel.function probe

* linuxPackages.systemtap: 4.8 -> 5.0a
2024-01-09 19:38:02 +01:00
Yaya 0b3fbec39d nixosTests.paperless: Convert paperless extraConfig to settings
`services.paperless.extraConfig` has been replaced with
`services.paperless.settings` in #277019.
2024-01-09 13:47:52 +01:00
github-actions[bot] 6bf0bf35bb
Merge master into staging-next 2024-01-08 18:00:58 +00:00
Maciej Krüger b5b2f6bec4
Merge pull request #277620 from nbraud/nixos/pam/ssh-agent-auth-31611
nixos/pam: Add option for ssh-agent auth's trusted authorized_keys files
2024-01-08 17:42:02 +01:00
github-actions[bot] f85fe5fc29
Merge master into staging-next 2024-01-07 18:00:54 +00:00
Guillaume Girol db0f76e8c9
Merge pull request #271030 from symphorien/nixseparatedebuginfod
nixseparatedebuginfod: init at 0.3.0, plus module and nixos test
2024-01-07 17:45:13 +01:00
Jan Tojnar ff42d23313 Merge branch 'master' into staging-next
Conflicts:

pkgs/development/python-modules/dbt-core/default.nix
pkgs/development/python-modules/dbt-semantic-interfaces/default.nix

Still broken by pydantic 2 bump, though.
2024-01-07 16:14:41 +01:00
Nick Cao d49252891f
Merge pull request #279015 from oddlama/fix-typesense-tests
typesense: fix test failure due to initialization timing
2024-01-07 09:45:40 -05:00
oddlama c6394f7c41
typesense: fix test failure due to initialization timing 2024-01-07 13:04:59 +01:00
github-actions[bot] 9f96550945
Merge master into staging-next 2024-01-07 12:01:24 +00:00
Jörg Thalheim db59d03371
Merge branch 'master' into pr/bcachefs 2024-01-07 11:40:30 +01:00
Michael Hoang b09de27cd6 nixos-rebuild: add --target-host test 2024-01-07 03:40:01 +11:00
github-actions[bot] 4fb3b0394b
Merge master into staging-next 2024-01-06 12:01:05 +00:00
Jörg Thalheim 610af56da4 nixos/tests/sway: fix alacritty xwayland test
if WAYLAND_DISPLAY is set to some invalid string than alacritty will
exit with an error.
2024-01-06 11:21:27 +01:00
Martin Weinelt 430fd07751
Merge remote-tracking branch 'origin/master' into staging-next 2024-01-06 04:57:06 +01:00
Martin Weinelt 095dec0437
Merge pull request #278808 from mweinelt/maintenance
Scale back maintainership on various packages
2024-01-06 04:51:44 +01:00
Martin Weinelt eba4d277a0 Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
-	pkgs/development/python-modules/sabctools/default.nix
2024-01-06 04:51:01 +01:00
Sergei Trofimovich 01f78ec6f8 systemd.tests.systemd-journal-upload: fix meta eval
Without the change metadata evaluation fails as:

    $ nix-instantiate --eval --expr 'with import ./. {}; systemd.tests.systemd-journal-upload.meta'
    error:
       … while evaluating the attribute 'tests.systemd-journal-upload.meta'

       error: undefined variable 'raitoezarius'

       at nixos/tests/systemd-journal-upload.nix:5:33:

            4|   meta = with pkgs.lib.maintainers; {
            5|     maintainers = [ minijackson raitoezarius ];
             |                                 ^
            6|   };
2024-01-05 21:34:36 +00:00
Adam C. Stephens 8949c5d63b
Merge pull request #278810 from r-ryantm/auto-update/squeezelite
squeezelite: 1.9.9.1449 -> 1.9.9.1463
2024-01-05 14:43:18 -05:00
Adam Stephens a72a7ad723
nixos/tests/slimserver: regex squeezelite number in log 2024-01-05 12:43:01 -05:00
Martin Weinelt 4611371303
treewide: scale back maintainership for various packages 2024-01-05 14:43:39 +01:00
github-actions[bot] 340cf4304d
Merge master into staging-next 2024-01-05 06:01:12 +00:00
zowoq 3d0b034e87 maintainers/teams: add buildbot 2024-01-05 11:41:19 +10:00
github-actions[bot] 1e290d634f
Merge master into staging-next 2024-01-05 00:02:27 +00:00
Raito Bezarius 861431f282 nixos/tests/bootspec: test initrd and initrdSecrets a bit stricter
We will now ensure that no `initrdSecrets` leaks under no initrd secrets
and that `initrdSecrets` are there if we do have initrd secrets.
2024-01-04 23:11:23 +01:00
nicoo 9ed1423dcf nixos/pam: Warn on insecure sshAgentAuth configurations 2024-01-04 17:30:09 +00:00
Tomas Antonio Lopez 147cc4061e nixos/sourcehut: ensure that the repos directory exists
Fixes a bug where, if the OpenSSH server starts before the first initialization
of the git service, the SSH service fails to find the corresponding bind mount
and terminates with a 226/NAMESPACE error.
2024-01-04 00:00:32 +01:00
Maximilian Bosch 7e45990c06
nixos/sshd: fix socket activated ports when using ListenAddress
Noticed that issue while reviewing #275633: when declaring
`ListenAddress host` without a port, all ports declared by
`Port`/`cfg.ports` will be used with `host` according to
`sshd_config(5)`.

However, if this is done and socket activation is used, only a socket
for port 22 is created instead of a sockets for each port from
`Port`/`cfg.ports`. This patch corrects that behavior.

Also added a regression test for this case.
2024-01-03 19:42:45 +01:00
nicoo a46ea51ca3 nixos/pam: Rename option enableSSHAgentAuth to sshAgentAuth.enable 2024-01-03 14:49:36 +00:00
Ivan Mincik afc2f0f7bc postgresqlPackages.postgis: build minimal gdal version
This change is reducing closure size from 1.5G to
544M.
2024-01-03 11:38:02 +01:00
OPNA2608 c637680b5d lomiri.lomiri-indicator-network: init at 1.0.0 2024-01-02 18:33:17 +01:00
Guillaume Girol ff893386c5 nixos/sane: add nixos test 2024-01-02 12:00:00 +00:00
Gutyina Gergő 3306755683
nixos/c2fmzq-server: allow multiple freeform settings 2024-01-01 22:50:16 +01:00
Guillaume Girol dece72548e nixseparatedebuginfod: add module and nixos test 2024-01-01 13:42:13 +01:00
Sergei Trofimovich db45ed3801 nixosTests.kernel-generic: fix the eval
Without the change the eval fails as:

    $ nix build --no-link -f. nixosTests.kernel-generic
    error:
       error: value is a Boolean while a set was expected

This started happening after 80472e3754 "treewide: add
__attrsFailEvaluation and __recurseIntoDerivationForReleaseJobs"

As a result kernel attribute set got not just `kernel => drv` maps but
also `__attrsFailEvaluation => bool` one. It does not contain `name` and
fails the evaluation without recovery.

The change restores evaluation for me.
2024-01-01 09:21:59 +00:00
github-actions[bot] e61ae81f8f
Merge master into staging-next 2024-01-01 00:02:16 +00:00
Sergei Trofimovich 3d40057509 spark: fix tests eval under allowAliases = false
Without the change `tests` eval fails as:

    $ nix build --no-link -f. spark.tests --arg config '{ allowAliases = false; }'
    error: attribute 'nixosTest' missing
           12|   };
           13|   testSparkCluster = { sparkPackage, ... }: pkgs.nixosTest ({
             |                                             ^
           14|     name = "spark";
       Did you mean nixosTests?

`nixosTest` is an alias defined as:

    pkgs/top-level/aliases.nix:  nixosTest = testers.nixosTest; # Added 2022-05-05
2023-12-31 22:47:55 +00:00
Sergei Trofimovich 8f809e4630 nixops_unstable: fix tests eval with allowAliases = false;
Without the change `tests` eval fails as:

    $ nix build --no-link -f. nixops_unstable.tests --arg config '{ allowAliases = false; }'
    error:
       error: attribute 'nixosTest' missing
           22|   testLegacyNetwork = { nixopsPkg, ... }: pkgs.nixosTest ({
             |                                           ^
           23|     name = "nixops-legacy-network";
       Did you mean nixosTests?

The alias is defined as:

    pkgs/top-level/aliases.nix:  nixosTest = testers.nixosTest; # Added 2022-05-05
2023-12-31 20:45:39 +00:00
Janik 6be9d4fc21
Merge pull request #266283 from Noodlesalat/ping-exporter-1.1.0
ping_exporter: init at 1.1.0
2023-12-31 20:50:30 +01:00
github-actions[bot] 65cbf5e637
Merge master into staging-next 2023-12-31 18:01:09 +00:00
Guillaume Girol a5cbc50912
Merge pull request #276385 from majiru/drawterm-tests
drawterm: unstable-2023-09-03 -> unstable-2023-12-23 & nixos tests
2023-12-31 15:41:26 +01:00
github-actions[bot] dc1ce0d685
Merge staging-next into staging 2023-12-31 12:01:23 +00:00
Martin Weinelt f142aeb3a2
Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
- pkgs/development/python-modules/scikit-build-core/default.nix
2023-12-31 12:00:30 +01:00
Maciej Krüger b8a8c2cf15
Merge pull request #266332 from nbraud/nixos/tests/ssh-agent-auth
Add NixOS test for `security.pam.enableSSHAgentAuth`
2023-12-31 10:38:36 +01:00
github-actions[bot] a9cb88c7ae
Merge staging-next into staging 2023-12-31 06:01:28 +00:00
Jan Tojnar 80020c7db4 Merge branch 'master' into staging-next
; Conflicts:
;	pkgs/development/lua-modules/generated-packages.nix
;	pkgs/development/lua-modules/overrides.nix
2023-12-31 02:31:32 +01:00
zowoq 41e3e7ef30 buildbot: 3.10.0 -> 3.10.1
Changelog: https://github.com/buildbot/buildbot/releases/tag/v3.10.1
2023-12-30 11:25:04 +10:00
Maximilian Bosch d25fdec5b3
Merge pull request #212430 from onny/nextcloud-cleanup
nixos/nextcloud: Move options into now freeForm extraOptions
2023-12-29 23:44:24 +01:00
github-actions[bot] 294b981465
Merge staging-next into staging 2023-12-29 18:01:23 +00:00
github-actions[bot] f50aae4fb1
Merge master into staging-next 2023-12-29 18:00:57 +00:00
nikstur 5a9c0b7600
Merge pull request #267983 from nikstur/replace-simple-activation-2
nixos: replace activationScripts 2/x
2023-12-29 16:29:11 +01:00
Bobby Rong 75e6da4bce
Merge pull request #277153 from trofi/nixosTests.allDrivers.anbox-avoid-aliases
nixosTests.allDrivers.anbox: avoid use of aliases
2023-12-29 21:59:43 +08:00
Felix Buehler 4a4e3f6d4e nixos/tests/prowlarr: check fo folder existance 2023-12-29 10:57:56 +01:00
nikstur 1c22b64fc9 nixos/tests/nextcloud: replace activationScript
Replace with a seprate systemd service
2023-12-29 03:41:45 +01:00
nikstur 36f2ab21ea nixos/tests/incron: replace activcationScript via tmpfiles 2023-12-29 03:21:36 +01:00
Jonas Heinrich dd8c96379f nixos/nextcloud: Move options into now freeForm extraOptions 2023-12-29 01:04:46 +01:00
github-actions[bot] a5650ee564
Merge staging-next into staging 2023-12-29 00:02:24 +00:00
github-actions[bot] bd7fd36fe2
Merge master into staging-next 2023-12-29 00:01:57 +00:00
Martin Weinelt fba845e36f
Merge pull request #277235 from adamcstephens/lxd-agent/path
nixos/lxd-agent: add system path for exec
2023-12-28 21:28:15 +01:00
Adam Stephens 3f8b1d2d26
nixos/lxd-agent: add system path for exec 2023-12-28 14:27:05 -05:00
github-actions[bot] 8455920fda
Merge staging-next into staging 2023-12-28 18:01:49 +00:00
Martin Weinelt 93d8c36a1b Merge remote-tracking branch 'origin/master' into staging-next 2023-12-28 16:56:50 +01:00
Lassulus 14912a23d1
Merge pull request #223412 from Luflosi/test-boot-from-zfs
nixos/tests/installer: test /boot on ZFS
2023-12-28 16:25:16 +01:00
Lassulus 07c7d9361a
Merge pull request #272963 from Luflosi/nixos/tests/ft2-clone-cleanup
nixos/tests/ft2-clone: cleanup
2023-12-28 16:18:43 +01:00
Bobby Rong af9ae66959
Merge pull request #277127 from bobby285271/upd/nixosTests.mate
nixosTests.mate: Extend the test
2023-12-28 21:51:33 +08:00
github-actions[bot] 49e189a2bf
Merge staging-next into staging 2023-12-28 12:01:27 +00:00
github-actions[bot] 97d15f47f2
Merge master into staging-next 2023-12-28 12:00:58 +00:00
Sergei Trofimovich 15a672bf1f nixosTests.tomcat: add lib to imports to fix eval
Without the change eval fails as:

    $ nix build --no-link -f. nixosTests.tomcat

        error: undefined variable 'lib'
2023-12-28 06:50:22 +00:00
Sergei Trofimovich 51d29a4759 nixosTests.nixops: Revert "tests.nixops: fix broken eval" to fix eval
This reverts commit c946245c7a.

Without the change test eval fail at top level of `nixpkgs` as:

    $ nix build --no-link -f. nixosTests.nixops
       error: function 'anonymous lambda' called without required argument 'testers'
2023-12-28 00:37:57 +00:00
github-actions[bot] 643e7d7b63
Merge staging-next into staging 2023-12-28 00:02:46 +00:00
github-actions[bot] 4b8e9717fa
Merge master into staging-next 2023-12-28 00:02:12 +00:00
Robert Hensing ddd6c029b5
Merge pull request #276986 from trofi/dockerTools.tests.docker-tools-no-aliases
dockerTools.tests.docker-tools: user `runCommand` instead of `runComm…
2023-12-28 00:50:45 +01:00
Sergei Trofimovich 64395b676f nixosTests.allDrivers.anbox: avoid use of aliases
Before the change eval of a test failed with disabled aliases as:

    $ nix build -f. nixosTests.allDrivers.anbox --arg config '{ allowAliases = false; }'
    ...
    error: attribute 'linuxPackages_5_15' missing
2023-12-27 18:36:19 +00:00
Bobby Rong 4a31c957c1
nixosTests.mate: Extend the test
It is always nice to have some OCR tests and a coredump check.
2023-12-27 23:01:58 +08:00
github-actions[bot] 0097df9129
Merge staging-next into staging 2023-12-27 12:01:18 +00:00
github-actions[bot] 04686e4ee3
Merge master into staging-next 2023-12-27 12:00:55 +00:00
Yt bd5ff67266
Merge pull request #261789 from onny/rspamd-trainer
nixos/rspamd-trainer: init; rspamd-trainer: init at unstable-2023-11-27
2023-12-27 11:28:42 +00:00
adisbladis 14f87e678a
Merge pull request #277074 from adisbladis/maintainers-treewide-various-adisbladis-remove
maintainers: Remove adisbladis as maintainer from various packages
2023-12-28 00:28:00 +13:00
Yt aae26351e7
Merge pull request #276542 from scvalex/livebook-0_12_0
livebook: 0.11.3 -> 0.12.0
2023-12-27 11:22:37 +00:00
adisbladis c24958f4c7 maintainers: Remove adisbladis as maintainer from various packages
These are a handful of packages I no longer use or/and have lost interest in.
2023-12-27 23:13:50 +13:00
Jonas Heinrich 80d88736da nixos/rspamd-trainer: init; rspamd-trainer: init at unstable-2023-11-27 2023-12-27 10:35:53 +01:00
nikstur c9569af3e0
Merge pull request #271326 from philiptaron/shutdown.target
treewide: depend on `shutdown.target` if `DefaultDependencies=no` in almost every case
2023-12-27 08:33:26 +01:00
Yt 56b8564a7d
Merge pull request #276525 from scvalex/livebook-configurable-package
livebook: configurable package and extraPackages
2023-12-27 07:30:25 +00:00
github-actions[bot] db1ec4df1e
Merge staging-next into staging 2023-12-27 06:01:29 +00:00
github-actions[bot] 308ac97674
Merge master into staging-next 2023-12-27 06:00:55 +00:00
Martin Weinelt d4c4e0269d
Merge pull request #274460 from mweinelt/kea-ipc-runtimedir
nixos/kea: return to merged runtime directory; preserve runtime directories
2023-12-27 02:08:14 +01:00
Sergei Trofimovich 4bb39bbc65 dockerTools.tests.docker-tools: user runCommand instead of runCommandNoCC alias
Noticed when evaluated tests without aliases enabled.
2023-12-26 22:42:38 +00:00
github-actions[bot] b3ceb9c6b7
Merge staging-next into staging 2023-12-26 18:01:24 +00:00
github-actions[bot] 31febba022
Merge master into staging-next 2023-12-26 18:00:56 +00:00
Felix Bühler d2e4e09de4
Merge pull request #276552 from r-ryantm/auto-update/freshrss
freshrss: 1.22.1 -> 1.23.0
2023-12-26 18:19:53 +01:00
Alexandru Scvortov 0ae9c34391 livebook: configurable package and extraPackages
Also fix examples to not include a semicolon in the .env file.
2023-12-25 21:47:14 +00:00
github-actions[bot] aa8844a8a9
Merge staging-next into staging 2023-12-25 18:01:25 +00:00
Jan Tojnar 2ac16accc0 Merge branch 'master' into staging-next
Conflicts:
	pkgs/development/python-modules/hahomematic/default.nix
2023-12-25 16:54:44 +01:00
Adam C. Stephens c52e9de9ae
Merge pull request #275895 from adamcstephens/lxcfs/5
lxcfs: 4.0.12 -> 5.0.4
2023-12-25 08:54:08 -05:00
Midnight Veil ed1a16e886 munin: fix missing Date::Parse module error & make test fail w/o a fix
Upstream change: https://github.com/munin-monitoring/munin/pull/1502
2023-12-25 09:13:32 +01:00
Tomas Antonio Lopez 195cbfc012 nixosTests.sourcehut: split tests belonging to different services 2023-12-25 03:49:11 +01:00
Tomas Antonio Lopez 2382d423f4 nixosTests.sourcehut: factor-out node configuration 2023-12-25 03:22:11 +01:00
github-actions[bot] 5d5f55c28d
Merge staging-next into staging 2023-12-25 00:02:44 +00:00
github-actions[bot] 88b151ed65
Merge master into staging-next 2023-12-25 00:02:15 +00:00
Felix Buehler 6fc02c6c6f nixos/freshrss: fix test http-auth 2023-12-25 01:01:20 +01:00
Alexandru Scvortov da08af643a livebook: 0.11.3 -> 0.12.0 2023-12-24 21:04:45 +00:00
Doron Behar 067338523e
Merge pull request #275281 from eliandoran/feature/mympd-service
nixos/mympd: init
2023-12-24 18:43:03 +00:00
Nudelsalat f3fb9a9134 nixos/tests/prometheus-ping-exporter: init 2023-12-24 18:11:31 +01:00
nicoo 9b8812794b nixosTests.ssh-agent-auth: Test both sudo and sudo-rs 2023-12-24 16:04:11 +00:00
nicoo 7e70c08470 nixosTests.ssh-agent-auth: init 2023-12-24 16:00:22 +00:00
github-actions[bot] 3d36e72396
Merge staging-next into staging 2023-12-24 06:01:29 +00:00
Jacob Moody c16ffa0a12 drawterm: add nixos tests 2023-12-23 22:53:49 -06:00
Martin Weinelt a3e53d17b6 Merge remote-tracking branch 'origin/master' into staging-next 2023-12-24 02:39:15 +01:00
Thiago Kenji Okada 7480c980f7
Merge pull request #276287 from gepbird/opentabletdriver-bump
opentabletdriver: 0.6.3.0 -> 0.6.4.0
2023-12-23 23:01:42 +00:00
Gutyina Gergő 77a17f4be6 opentabletdriver: 0.6.3.0 -> 0.6.4.0
Co-authored-by: Thiago Kenji Okada <thiagokokada@gmail.com>
2023-12-23 21:16:43 +00:00
Mario Rodas 2ba8c30b4e
Merge pull request #252790 from anthonyroussel/gns3-nixos-module
nixos/gns3-server: init
2023-12-23 09:27:39 -05:00
Bobby Rong 5cb00274f2
Merge pull request #276060 from bobby285271/fix/cinnamon-sessionpath
nixos/cinnamon: Unbreak sessionPath option
2023-12-23 21:05:08 +08:00
Bobby Rong c2bc30ee49
nixosTests.cinnamon{,-wayland}: Add test for sessionPath option 2023-12-23 10:09:35 +08:00
Guillaume Girol 7ed97e6e3f
Merge pull request #254773 from SuperSandro2000/reduce-python3m
treewide: don't use python3Minimal where it is not required
2023-12-22 10:55:38 +01:00
Adam Stephens 56e9ca19b3
lxcfs: 4.0.12 -> 5.0.4
Diff: https://github.com/lxc/lxcfs/compare/lxcfs-4.0.12...lxcfs-5.0.4

Changelog: https://linuxcontainers.org/lxcfs/news/
2023-12-21 23:10:27 -05:00
github-actions[bot] 6ce4f409b0
Merge staging-next into staging 2023-12-22 00:02:36 +00:00
github-actions[bot] a9a9030f1b
Merge master into staging-next 2023-12-22 00:02:09 +00:00
Pol Dellaiera 783163f959
Merge pull request #275429 from drupol/code-server/restore
code-server: restore and bump (4.16.1 -> 4.19.1)
2023-12-21 21:03:41 +01:00
github-actions[bot] fe3a0803f6
Merge staging-next into staging 2023-12-21 18:01:22 +00:00
github-actions[bot] 63fbe1a992
Merge master into staging-next 2023-12-21 18:00:56 +00:00
Doron Behar da384d0aa6
Merge pull request #275257 from schuelermine/update/musescore/4.2.0
musescore: 4.1.1 -> 4.2.0
2023-12-21 16:18:59 +00:00
Jonas Heinrich 08b802c343
Merge pull request #275718 from symphorien/fix-btrbk-tests
nixos/tests/btrbk-section-order.nix: fix test
2023-12-21 16:24:10 +01:00
Martin Weinelt fb9f2b0e17 Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
- pkgs/development/python-modules/django-anymail/default.nix
- pkgs/development/python-modules/dockerspawner/default.nix
2023-12-21 15:21:14 +01:00
Elian Doran d3ef138c1b nixos/mympd: add nixos test 2023-12-21 16:02:10 +02:00
ajs124 d644f3882d
Merge pull request #268146 from nevivurn/feat/openvpn-2.6.8
openvpn: 2.5.8 -> 2.6.8
2023-12-21 14:53:07 +01:00
Doron Behar 06bec0d01b nixosTests.musescore: fix for version 4.2.0 2023-12-21 15:33:33 +02:00
Marco Rebhan a4a9be35f4
nixos/krb5: add myself as maintainer for module & tests 2023-12-21 11:38:18 +01:00
Marco Rebhan fed77d1705
nixos/krb5: move to security.krb5 2023-12-21 11:35:26 +01:00
Marco Rebhan 92a541c0ed
nixos/krb5: cleanup, fix and RFC42-ify
This replaces the krb5 module's options with RFC 42-style krb5.settings
option, while greatly simplifying the code and fixing a few bugs,
namely:

- #243068 krb5: Configuration silently gets ignored when set by
  multiple modules
- not being able to use mkIf etc. inside subattributes of
  krb5.libdefaults, e.g. krb5.libdefaults.default_realm = mkIf ...

See #144575.
Closes #243068.

Co-authored-by: h7x4 <h7x4@nani.wtf>
2023-12-21 11:34:59 +01:00
Yongun Seong 52bdb3481c
openvpn: fix tests and add to passthru.tests 2023-12-21 15:34:08 +09:00
Raghav Sood 7d97d9ebd1
Merge pull request #275439 from RaghavSood/nitter/guest-accounts
nitter: unstable-2023-10-31 -> unstable-2023-12-03 (guest accounts support)
2023-12-21 14:03:35 +08:00
Sandro Jäckel e2702f5aee
treewide: don't use python3Minimal where it is not required
Building a python environment with python3Minimal requires hydra
to bootstrap pip and build all packages used in the environment
which would otherwise not be built. This reduces cache re-use and duplicates things.

Also common dependencies normally included in python itself
are not properly checked and can cause hard to debug errors
because everyone just assumes those modules are there.
2023-12-21 02:21:48 +01:00
github-actions[bot] f36fabca0f
Merge staging-next into staging 2023-12-21 00:02:47 +00:00
github-actions[bot] 63203647a1
Merge master into staging-next 2023-12-21 00:02:16 +00:00
Florian Klink 011e924109
Merge pull request #239201 from nesteroff/fix-timesync
systemd: disable NSCD when DNSSEC validation is disabled in timesyncd
2023-12-20 22:22:52 +02:00
WilliButz ac58b65cf5
Merge pull request #275112 from r-ryantm/auto-update/prometheus-nginx-exporter
prometheus-nginx-exporter: 0.11.0 -> 1.0.0
2023-12-20 20:27:28 +01:00
Franz Pletz faff9de754
nixos/prometheus/nginx-exporter: fix args for 1.0 2023-12-20 18:23:29 +01:00
github-actions[bot] 176c80219d
Merge master into staging-next 2023-12-20 12:00:53 +00:00
Guillaume Girol b3475a9eef nixos/tests/btrbk-section-order.nix: fix test 2023-12-20 12:00:00 +00:00
Yuri Nesterov 6008246790 systemd: disable NSCD when DNSSEC validation is disabled in timesyncd
When a system has a wrong date and time timesyncd is unable to synchronize it
because DNSSEC doesn't work. In order to break this chicken and egg problem
systemd-timesync disables DNSSEC validation by setting
SYSTEMD_NSS_RESOLVE_VALIDATE=0 in the unit file. However, it doesn't work in
NixOS because it uses NSCD. This patch disables NSCD in systemd-timesyncd when
SYSTEMD_NSS_RESOLVE_VALIDATE is set to 0 so that it uses NSS libraries
directly. In order for it to be able to find the libnss_resolve.so.2 library
this patch adds the systemd directory in the nix store to the LD_LIBRARY_PATH.
2023-12-20 13:21:43 +02:00
Robin Gloster b5556f2c37
Merge pull request #268109 from helsinki-systems/helsinki-maintainer-team
maintainers/teams: init and add helsinki-systems
2023-12-20 11:43:29 +01:00
github-actions[bot] 29310fd237
Merge staging-next into staging 2023-12-20 06:01:37 +00:00
Raghav Sood d380604c44
nitter: update tests to use guestAccounts 2023-12-20 11:36:11 +08:00
Tomas Antonio Lopez 6eb86e3c19 nixosTests.sourcehut: refactor script to use subtests 2023-12-20 02:57:38 +01:00
Tomas Antonio Lopez 262cb39d4f nixosTests.sourcehut: add myself as maintainer 2023-12-20 02:39:32 +01:00
Tomas Antonio Lopez 8f6a342064 nixosTests.sourcehut: test repository download 2023-12-20 02:32:06 +01:00
Julien Malka 0ddc907228
Merge pull request #273441 from JulienMalka/systemd-boot-garbage-test-rename 2023-12-20 01:26:11 +01:00
Yarny0 59539b9bc5 tsm-client: 8.1.20.0 -> 8.1.21.0
"Update History" (release notes):
https://www.ibm.com/support/pages/node/6998343

At the time of this writing,
the "APAR" links of the "Update History" lead to 404.
However, the abstracts indicate that
this update is not security critical.

Note that this update changed the GUI window title
to "IBM Storage Protect"
(the product itself was renamed with version 8.1.19.0 already).
The commit at hand adapts the GUI vm test accordingly.

Also, all URLs in package and module comments are updated.
2023-12-19 19:47:28 +01:00
github-actions[bot] ecc5467899
Merge staging-next into staging 2023-12-19 18:01:20 +00:00
Elian Doran afdbb7a9c0 nixos/snmpd: add nixos test 2023-12-19 18:54:34 +02:00
Pol Dellaiera 1a57f50d95
Revert "code-server: drop"
This reverts commit 72911a99d3.
2023-12-19 15:40:57 +01:00
Peder Bergebakken Sundt 1a647a10b8
Merge pull request #268806 from Izorkin/init-angie
angie: init at 1.4.0
2023-12-19 13:51:51 +01:00
Tomas Antonio Lopez 7d7cc717eb nixosTests.sourcehut: test pushing Git repositories 2023-12-19 01:54:46 +01:00
Tomas Antonio Lopez effb6bd756 nixosTests.sourcehut: configure Hut for direct API interaction 2023-12-19 01:43:19 +01:00
github-actions[bot] 1fc6296f9b
Merge staging-next into staging 2023-12-18 12:01:30 +00:00
Ryan Lahfa 17c3ebdba5
Merge pull request #265857 from 999eagle/feat/invidious-scale
nixos/invidious: cleanup, allow for easy scaling and load balancing, add http3-ytproxy
2023-12-18 10:17:09 +01:00
K900 aa3cd9c955 nixos/tests/gitlab: download even more RAM
Also remove the 32-bit conditional as it already fails on 4GB.
2023-12-18 11:35:09 +03:00
Pierre Bourdon afa3f9b7c1
Merge pull request #264966 from l0b0/test/verify-npmrc-setup
nixos: test `programs.npm.npmrc` setting
2023-12-18 07:06:14 +01:00
Izorkin 362a2e618c
nixos/tests: add test api in angie package 2023-12-17 22:43:15 +03:00
Izorkin b79f185409
nixos/tests/nginx-http3: add angie package in testing 2023-12-17 22:43:15 +03:00
Izorkin 86efccfa45
angie: init at 1.4.0 2023-12-17 22:43:13 +03:00
Sophie Tauchert 24e561fabc
nixos/invidious: change default database user to invidious
This makes sure we don't need any workarounds for running Invidious with a local
PostgreSQL database.
Changing the default user should be fine as the new init script for PostgreSQL automatically
creates the new user and changes the existing database's owner to the new user. The old user
will still linger and must be removed manually.
See also: https://github.com/NixOS/nixpkgs/pull/266270
2023-12-17 19:48:15 +01:00
Sophie Tauchert ac5c1886fd
nixos/invidious: add option to configure http3-ytproxy for invidious 2023-12-17 19:48:03 +01:00
Sophie Tauchert 65e8f8a697
nixos/tests/invidious: add test for scaled invidious 2023-12-17 19:48:02 +01:00
Sophie Tauchert 460e34b273
nixos/tests/invidious: move postgres-tcp into second machine and fix tests
Using PostgreSQL 15 without the init script fails due to
https://github.com/NixOS/nixpkgs/issues/216989.
2023-12-17 19:48:02 +01:00
github-actions[bot] 71c41d360a
Merge staging-next into staging 2023-12-17 18:01:38 +00:00
K900 cbed115407 nixos/tests/nixos-rebuild-specialisations: download even more RAM 2023-12-17 19:27:07 +03:00
github-actions[bot] 1aadb5d97e
Merge staging-next into staging 2023-12-16 00:02:42 +00:00
Franz Pletz 203ecda835
Merge pull request #274321 from Luflosi/update/kubo
kubo: 0.24.0 -> 0.25.0
2023-12-15 20:16:17 +01:00
Franz Pletz cbb38bf7b7
Merge pull request #264869 from h7x4/nixos-module-cleanup-quicktun
nixos/quicktun: clean up module, add tests
2023-12-15 20:14:39 +01:00
Martin Weinelt cd6ccb1737 Revert "kea: use separate runtime directories for each service"
This reverts commit 413011ddf4.

Using separate lockfile directories prevents the different kea daemons
from using the interprocess sync lockfile.

Keeping the runtime directory around might be the better approach.
2023-12-15 13:51:19 +01:00
github-actions[bot] 2b17e91c71
Merge staging-next into staging 2023-12-15 12:01:41 +00:00
K900 02357adddd
Merge pull request #274409 from K900/unblock-channels
Unblock channels
2023-12-15 13:23:40 +03:00
Janne Heß 39bbee99ff
Merge pull request #274262 from NetaliDev/zammad-update
zammad: 6.1.0 -> 6.2.0
2023-12-15 10:59:17 +01:00
K900 7e3d335152 nixos/tests/containers-imperative: download more RAM 2023-12-15 12:38:08 +03:00
Maximilian Bosch 00e923cdc1
Merge pull request #274275 from Ma27/hardened-kernel-updates
hardened kernel: test 6.6 & remove obsolete 4.14 from patches.json
2023-12-15 09:42:10 +01:00
Maximilian Bosch 28089f8874
Merge pull request #273858 from dotlambda/nextcloud28-init
nextcloud28: init at 28.0.0, nextcloud27: 27.1.4 -> 27.1.5, nextcloud26: 26.0.9 -> 26.0.10
2023-12-15 08:14:15 +01:00
Luflosi 60781d9b2d
nixos/tests/kubo: test socket activation for the Gateway
Add a new test to check that accessing the Gateway socket also starts the daemon via socket activation.
2023-12-14 23:19:34 +01:00
Luflosi 82c73a8d72
nixos/tests/kubo: disable broken FUSE test
The FUSE functionality is completely broken in Kubo v0.24.0.
See https://github.com/ipfs/kubo/issues/10242.
2023-12-14 23:19:33 +01:00
Maximilian Bosch aa19ae19c9
nixos/tests/kernel-generic: test hardened 6.6 2023-12-14 19:30:51 +01:00
github-actions[bot] 7be452e197
Merge staging-next into staging 2023-12-14 18:01:30 +00:00
netali 6fe98c3cc8
nixos/tests/zammad: set memory limit to 2048 MB
It seems like Zammad and the postgreSQL need more then 1 GB memory after
the update to Zammad 6.2.0. So this commit sets the memory limit to 2 GB.
2023-12-14 18:03:22 +01:00
Linus Heckemann 4f5aa65af5
Merge pull request #270444 from NukaDuka/cephfs-mount-fix
ceph: use absolute binary paths instead of relative paths
2023-12-14 14:12:28 +01:00
github-actions[bot] bae9ba4ab0
Merge staging-next into staging 2023-12-14 00:02:44 +00:00
Robert Schütz f6ea3f91b5 nextcloud28: init at 28.0.0 2023-12-13 15:57:33 -08:00
Morgan Jones 49ebc3878e
nixos/nebula: tests: revert wait_for_unit 2023-12-13 14:50:03 -08:00
Robert Hensing bef10a5ace
Merge pull request #269551 from tejing1/nixos-stub-ld
nixos/stub-ld: init module
2023-12-13 22:36:30 +01:00
github-actions[bot] 60cb61f1ee
Merge staging-next into staging 2023-12-13 18:01:36 +00:00
Weijia Wang 09beff8fb5
Merge pull request #273698 from foo-dogsquared/fix-guix-gc-service
nixos/guix: fix GC service
2023-12-13 17:43:44 +01:00
Gabriel Arazas 9c423e191f nixos/guix: add test for GC service 2023-12-13 14:27:08 +01:00
github-actions[bot] 688991ba84
Merge staging-next into staging 2023-12-13 12:01:48 +00:00
zowoq da353681bd telegraf: 1.28.5 -> 1.29.0
Diff: https://github.com/influxdata/telegraf/compare/v1.28.5...v1.29.0

Changelog: https://github.com/influxdata/telegraf/blob/v1.29.0/CHANGELOG.md
2023-12-13 08:49:02 +01:00
github-actions[bot] 1065f5a68a
Merge staging-next into staging 2023-12-12 18:01:44 +00:00
Bobby Rong af99a04cd4
Merge pull request #273584 from bobby285271/upd/flatpak
flatpak: 1.14.4 → 1.14.5
2023-12-12 23:49:01 +08:00
Ryan Lahfa 3bb93fb2cd
Merge pull request #271506 from Misterio77/nginx-redirect-status-code 2023-12-12 14:05:33 +01:00
illustris 409782d025
nixos/cloud-init: fail test faster 2023-12-12 09:40:12 +05:30
Bobby Rong 9ed63709bc
flatpak: 1.14.4 → 1.14.5
https://github.com/flatpak/flatpak/compare/1.14.4...1.14.5

This contains build fix for AppStream 1.0.
2023-12-11 23:58:03 +08:00
Gabriel Fontes a3c60d2ddc
nixos/nginx: make redirect status code configurable
Add an option to configure which code globalRedirect and forceSSL use.
It previously was always 301 with no easy way to override.
2023-12-11 11:09:02 -03:00
Kartik Gokte 41b27d7f4b nixosTests.ceph-single-node: remove dashboard check
Due to an [issue](https://www.spinics.net/lists/ceph-users/msg77812.html) with the cryptography python library, Ceph Dashboard and other mgr modules are currently broken, which will cause this test to always fail. Removing the check resolves this issue, and brings the test in line wit^Cthe other Ceph tests, which do not contain the dashboard check.
2023-12-11 19:11:20 +05:30
github-actions[bot] 384d12a4cc
Merge staging-next into staging 2023-12-11 12:01:51 +00:00
github-actions[bot] 6ac7b9234a
Merge master into staging-next 2023-12-11 12:01:23 +00:00
Jeff Huffman 0863f6d2da
nixos/stub-ld: init module 2023-12-11 05:47:23 -05:00
Florian Klink 1c09cb43ce nixos/avahi: rename remaining config options
services.avahi.nssmdns got split into services.avahi.nssmdns{4,6},
nothing should access the old alias anymore so there's no eval warnings.

Reported in https://github.com/NixOS/nixpkgs/pull/258424#issuecomment-1849428869
2023-12-11 09:36:15 +02:00
Julien Malka a989353ef2 nixos/tests/systemd-boot: change garbage-collect-entry test name
The test was improperly named in e63f3c012b
2023-12-10 23:57:28 +00:00
Ryan Lahfa 9faaff804f
Merge pull request #189277 from minijackson/systemd-journal-upload 2023-12-10 19:27:17 +01:00
github-actions[bot] 1e8386407c
Merge master into staging-next 2023-12-10 18:01:10 +00:00
Jonas Heinrich b3eddb0c53
Merge pull request #272646 from onny/btrbk-stream-compress
nixos/btrbk: Add required stream_compress packages
2023-12-10 18:38:38 +01:00
Nick Cao d8c2a3967b
Merge pull request #273273 from numinit/nebula-test-improvement
nixos/nebula: fix possibly flaky tests
2023-12-10 11:45:17 -05:00
Martin Weinelt ebfca42b8b
Merge pull request #272576 from NixOS/home-assistant
home-assistant: 2023.11.3 -> 2023.12.0
2023-12-10 14:51:43 +01:00
github-actions[bot] 958e403a78
Merge master into staging-next 2023-12-10 12:01:18 +00:00
Kerstin Humm 60274ea008 Revert "nixos/mobilizon: fix integration test by using postgresql_14"
This reverts commit 80ba58361d.
2023-12-10 07:23:16 +00:00
Morgan Jones ce5124df92
nixos/nebula: fix possibly flaky tests 2023-12-09 20:35:09 -08:00
github-actions[bot] 7c846b760d
Merge master into staging-next 2023-12-09 18:00:56 +00:00
Martin Weinelt 4324d082b2
nixos/tests/home-assistant: check for lovelace resources in config
This was recently fixed, but the test was not updated.
2023-12-09 17:51:13 +01:00
Weijia Wang 9ee819e1d5
Merge pull request #273102 from rvl/nixos-tests-maintainers
nixos/tests: Remove self from maintainers
2023-12-09 16:56:50 +01:00
Raito Bezarius eecfbe397a nixos/(tests/)journald-(remote|upload|gateway): add raitobezarius as a maintainer 2023-12-09 13:57:08 +01:00
Jonas Heinrich 1440b865c0 nixos/btrbk: Add required stream_compress packages 2023-12-09 13:03:46 +01:00
Rodney Lorrimar 32ee8b4c77
nixos/tests/mysql-backup: Remove self from maintainers 2023-12-09 17:46:09 +08:00
Rodney Lorrimar c5710ce274
nixos/tests/mongodb: Remove self from maintainers 2023-12-09 17:45:33 +08:00
Minijackson dadb93b425 nixos/tests/journal-upload: init 2023-12-09 01:54:44 +01:00
Minijackson 302c329ab5 nixos/tests/journal-gateway: init
move previous gateway test from systemd-journal -> systemd-journal-gateway
2023-12-09 01:54:44 +01:00
Weijia Wang ad7edda3e2 Merge branch 'master' into staging-next 2023-12-08 22:09:49 +01:00
Robert Hensing 47aff944e4
Merge pull request #257503 from SuperSandro2000/postgres-extraPlugins
nixos/postgresql: take extraPlugins packageset from package option
2023-12-08 21:51:05 +01:00
Luflosi c4cf844566
nixos/tests/ft2-clone: cleanup
- Remove unused `config` argument
- Don't enable the xserver again, since the import `./common/x11.nix` already takes care of that
- Remove an empty line at the end
2023-12-08 18:27:39 +01:00
Sandro Jäckel 3bb72ed9fd
treewide: fix services.postgresql.extraPlugins usage 2023-12-08 14:58:18 +01:00
Luflosi c351a84eec
nixos/tests/installer: test /boot on ZFS
Let's test / on ZFS and /boot on ZFS in separate tests since the GRUB integration for ZFS seems to be not very well maintained.
If the test breaks in the future it's easier to figure out that ZFS on /boot is at fault and either fix the issue or disable the test.
The new test creates a ZFS pool where all features not compatible with GRUB2 are disabled. The dataset is then mounted on /boot and we check that the installer correctly generates a bootable configuration.
Try to use as many ZFS features as possible to verify that GRUB can handle them.
2023-12-07 13:17:49 +01:00
github-actions[bot] 860e5725bd
Merge master into staging-next 2023-12-07 12:01:24 +00:00
Florian Klink 4db2e0cc80
Merge pull request #272542 from Sohalt/caddy-config-file
nixos/caddy: use caddyfile adapter by default with explicit configFile
2023-12-07 09:07:35 +02:00
Robert K. Bell 8353fad13d
nixos/dockerTools: fix includeStorePaths when enableFakechroot
After #268458, when setting `enableFakechroot = true` and
`includeStorePaths = false`, some of the store paths were getting
included into the image anyway, thru `bind-paths`.
This resulted in unexpectedly large images.

Now, the images will not contain any store paths under those
circumstances.
2023-12-07 18:06:01 +11:00
github-actions[bot] 32d842483f
Merge master into staging-next 2023-12-07 06:01:00 +00:00
Peder Bergebakken Sundt d41449afb3
Merge pull request #256737 from illustris/spark
spark: init 3.5.0, 3.4.0->3.4.2, 3.3.2->3.3.3
2023-12-07 04:24:16 +01:00
github-actions[bot] fd7a8aedb0
Merge master into staging-next 2023-12-07 00:02:20 +00:00
zowoq 18460b4820 nixos/buildbot: only run nixosTest on x86_64-linux
Test has been broken for a while on aarch64-linux.
2023-12-06 23:45:45 +01:00
sohalt 3c6b3d71fa nixos/caddy: Use caddyfile adapter by default when explicitly specifying configFile 2023-12-06 21:57:21 +01:00
Adam C. Stephens b1f7f1ce6d
Merge pull request #271689 from adamcstephens/lxc/team
treewide: init lxc team and take ownership of components
2023-12-06 13:55:45 -05:00
github-actions[bot] f48be2ac66
Merge master into staging-next 2023-12-06 12:01:16 +00:00
Jörg Thalheim 224537581a nixos/harmonia: test if extra-allowed-users works 2023-12-06 12:56:35 +01:00
github-actions[bot] 035a649a67
Merge master into staging-next 2023-12-06 06:01:30 +00:00
Martin Weinelt 17c08296e3
Merge pull request #269940 from mweinelt/home-assistant-errata
Home Assistant Custom Component Errata
2023-12-06 04:11:36 +01:00
Martin Weinelt 01616e5331
buildHomeAssistantComponent: migrate from pname to owner/domain
Also make the attribute name to match the domain name.

This is more in line with the home-assistant custom component ecosystem
and allows additional validation between the derivation and the manifest.

Also, at a later time, this will enable us to check for domain conflicts
at eval time.
2023-12-06 03:55:33 +01:00
github-actions[bot] 4d8ab2a703
Merge master into staging-next 2023-12-05 12:01:22 +00:00
Janik 7703f36fd1
Merge pull request #269469 from NetaliDev/zammad-update 2023-12-05 09:29:51 +01:00
Madoura 8772aa52b6
Revert "treewide: add bcachefsLinuxTesting and bcachefsLinuxTesting tests"
This reverts commit c2450c4515.

No longer needed as the default is 'linuxPackages_testing'
2023-12-05 01:04:21 -06:00
Fabián Heredia Montiel 5b8deaceca Merge remote-tracking branch 'origin/master' into staging-next
Fixed conflict in pkgs/applications/graphics/krita/

krita: 5.1.5 -> 5.2.0
7a40fdc288
, and
treewide: use kde mirror everywhere, don't use pname in download urls
aa15f5066d
2023-12-04 17:44:17 -06:00
netali 531fa59187
nixos/tests/zammad: fix test 2023-12-04 23:10:08 +01:00
Adam Stephens 6765aac154
treewide/lxc: set lxc team as maintainer 2023-12-04 10:06:50 -05:00
Peder Bergebakken Sundt 58ffd55cde
Merge pull request #249777 from LunNova/lunnova/input-remapper-2.x
input-remapper: 1.5.0 -> 2.0.1
2023-12-04 01:23:30 +01:00
Peder Bergebakken Sundt d2852f5af0
Merge pull request #238711 from moni-dz/contour
contour: 0.3.1.200 -> 0.3.12.262
2023-12-04 00:10:19 +01:00
fortuneteller2k 1769cf416e contour: 0.3.1.200 -> 0.3.12.262
- use qt6 by default
  - codesign macOS bundle executable
  - install terminfo for Darwin
  - install shell completions for zsh and fish
2023-12-04 02:39:26 +08:00
Weijia Wang d1fc3a5f9f
Merge pull request #253428 from Yarny0/tsm-freeform
nixos/tsm-client: migrate to freeform settings (RFC42)
2023-12-03 14:50:12 +01:00
Weijia Wang 4e81387d5b
Merge pull request #264331 from foo-dogsquared/add-nixos-guix-module
nixos/guix: init
2023-12-03 13:03:43 +01:00
github-actions[bot] e1f166b89a
Merge master into staging-next 2023-12-03 06:01:01 +00:00
Bobby Rong 43744f5bc4
Merge pull request #268515 from NixOS/cinnamon
Cinnamon 6.0
2023-12-03 12:20:39 +08:00
github-actions[bot] d865fa4303
Merge master into staging-next 2023-12-03 00:02:21 +00:00
Janik c3ac6b916c
Merge pull request #271441 from NetaliDev/mysql-auth-fix 2023-12-02 23:34:51 +01:00
netali 22b5fecd98
nixos/tests/auth-mysql: fix test 2023-12-02 20:18:30 +01:00
github-actions[bot] df742c9c0e
Merge master into staging-next 2023-12-02 12:01:25 +00:00
Ryan Lahfa 8626b5c06d
Merge pull request #257525 from SaumonNet/clevis 2023-12-02 12:58:01 +01:00
Peder Bergebakken Sundt 598129ea00
Merge pull request #243476 from OPNA2608/init/lomiri/ayatana-messages
ayatana-indicators: init messaging indicator, module, test
2023-12-02 12:56:21 +01:00
Julien Malka 3aa4ed0985 nixos/tests/installer: init clevis tests
Co-Authored-By: Camille Mondon <camillemondon@free.fr>
2023-12-02 11:55:52 +00:00
Yarny0 3fb29fecd5 nixos/tsm-client: use freeformType for server config
`tsm-client` uses a global configuration
file that must contain coordinates for each
server that it is supposed to contact.
This configuration consists of text
lines with key-value pairs.

In the NixOS module, these servers may be declared
with an attribute set, where the attribute name
defines an alias for the server, and the value
is again an attribute set with the settings for
the respective server.
This is organized as an option of type `attrsOf submodule...`.

Before this commit:

Important settings have their own option within
the submodule.  For everything else, there is
the "catch-all" option `extraConfig` that may
be used to declare any key-value pairs.
There is also `text` that can be used to
add arbitrary text to each server's
section in the global config file.

After this commit:

`extraConfig` and `text` are gone,
the attribute names and values of each server's attribute
set are translated directly into key-value pairs,
with the following notable rules:

* Lists are translated into multiple lines
  with the same key, as such is permitted by
  the software for certain keys.
* `null` may be used to override/shadow a value that
  is defined elsewhere and hides the corresponding key.

Those "important settings" that have previously been
defined as dedicated options are still defined as such,
but they have been renamed to match their
corresponding key names in the configuration file.
There is a notable exception:
"Our" boolean option `genPasswd` influences the "real"
option `passwordaccess', but the latter one is
uncomfortable to use and might lead
to undesirable outcome if used the wrong way.
So it seems advisable to keep the boolean option
and the warning in its description.
To this end, the value of `getPasswd` itself is
later filtered out when the config file is generated.

The tsm-backup service module and the vm test are adapted.

Migration code will be added in a separate
commit to permit easy reversal later, when the
migration code is no longer deemed necessary.
2023-12-02 09:09:27 +01:00
github-actions[bot] 18f8671334
Merge master into staging-next 2023-12-02 06:00:54 +00:00
Bobby Rong b7fa2ea58b
nixosTests.cinnamon-wayland: init 2023-12-02 12:12:47 +08:00
Peder Bergebakken Sundt 08999b8e15
Merge pull request #271160 from ethorsoe/terminfo
nixos/terminfo: ignore broken packages in all-terminfo test
2023-12-02 03:16:34 +01:00
github-actions[bot] 5d5c0a00c7
Merge master into staging-next 2023-12-02 00:02:19 +00:00
Robert Scott 53bf3e8255
Merge pull request #267049 from justinas/justinas/remove-teleport-11
teleport_11: remove
2023-12-01 23:06:31 +00:00
github-actions[bot] b46f5c5c91
Merge master into staging-next 2023-12-01 18:01:03 +00:00
Nick Cao 79bea56197
Merge pull request #271426 from R-VdP/fix_eris_test
eris-server: fix nixos test
2023-12-01 10:32:48 -05:00
github-actions[bot] 9cca0e4288
Merge master into staging-next 2023-12-01 12:01:16 +00:00
r-vdp 4411e1933d
eris-server: fix nixos test 2023-12-01 12:24:03 +01:00
Anthony Roussel 7cfb941775
nixosTests.gns3-server: init 2023-12-01 12:11:21 +01:00
Emily Trau 61bc4eb133
Merge pull request #271246 from otavio/rio
rio: 0.0.27 -> 0.0.28
2023-12-01 21:17:10 +11:00
Gabriel Arazas ad277ea47e nixos/guix: init 2023-12-01 09:10:37 +01:00
Weijia Wang 07183914f1
Merge pull request #257692 from telotortium/anki-sync-server
nixos/anki-sync-server: init
2023-12-01 08:30:36 +01:00
Vladimír Čunát 305cd929fd
Merge branch 'staging' into staging-next 2023-12-01 07:33:49 +01:00
Mario Rodas 15b5295311
Merge pull request #270847 from anthonyroussel/updates/tomcat_10_1_16
tomcat10: 10.1.15 -> 10.1.16
2023-11-30 22:38:23 -05:00
Philip Taron 6f8091159e
nixos/tests/systemd-initrd-networkd: ensure correct ordering w.r.t. shutdown.target 2023-11-30 15:48:25 -08:00
Philip Taron 88dc5ded81
nixos/tests/stunnel: ensure correct ordering w.r.t. shutdown.target
Also, mark the service as `oneshot` since it is.
2023-11-30 15:47:09 -08:00
Philip Taron d8c9b26a16
nixos/tests/dhparams: ensure correct ordering w.r.t. shutdown.target 2023-11-30 15:45:52 -08:00
Tomas Antonio Lopez 89278c9846 nixosTests.sourcehut: run tests within a production environment 2023-12-01 00:31:37 +01:00
Tomas Antonio Lopez 33c13e9e4d nixosTests.sourcehut: listen on port 80, as well 2023-12-01 00:31:37 +01:00
Tomas Antonio Lopez 3943aa57c0 nixosTests.sourcehut: test user creation and OAuth token generation 2023-12-01 00:31:17 +01:00
Tomas Antonio Lopez ab1ad2b066 nixosTests.sourcehut: remove unused VM image specifications
At the time of this commit, sourcehut.builds is broken and its test
infrastructure is partial at best. The specified image only inflated the closure
size without any added benefit.
2023-12-01 00:29:01 +01:00
Franz Pletz 32caf62376
Merge pull request #268887 from jchw-forks/libvirt-nss 2023-11-30 20:48:24 +01:00
Otavio Salvador b06b8857e0 rio: 0.0.27 -> 0.0.28
Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
2023-11-30 15:33:27 -03:00
ajs124 7b6580dba4 maintainers/teams: init and add helsinki-systems 2023-11-30 19:11:08 +01:00
Peder Bergebakken Sundt 637577f1bb
Merge pull request #261704 from baloo/baloo/dublin-traceroute/init
dublin-traceroute: init at 2023.04.12
2023-11-30 18:17:24 +01:00
Dominique Martinet f0f6c77781 nixos/tests/anki-sync-server: add anki sync test
Start anki-sync-server service and drive anki manually through its
python lib to test sync.
The anki python part isn't a stable API and might require freqent
rework, let's see if it holds up...
2023-11-30 17:25:27 +01:00
Maciej Krüger 50bb5d3338
Merge pull request #264929 from adamcstephens/incus/generator 2023-11-30 16:01:35 +01:00
Emil Thorsoe fe978b9691 nixos/terminfo: ignore broken packages in all-terminfo test 2023-11-30 11:56:44 +02:00
emilylange 9b58faad99 nixosTests.jitsi-meet: test cfg.caddy.enable 2023-11-30 06:13:38 +00:00
Weijia Wang babc0d5e96
Merge pull request #257400 from wineee/deepin-23
deepin desktop environment: v20 -> v23Beta
2023-11-30 02:47:08 +01:00
Nick Cao a1ecbe2ea9
Merge pull request #270701 from sumnerevans/matrix-synapse-1.97
matrix-synapse: 1.95.1 -> 1.97.0
2023-11-29 10:57:58 -05:00
Nick Cao fd522b612d
nixosTests.matrix-synapse: fix requests certificate validation by using minica instead of openssl 2023-11-29 10:49:49 -05:00
github-actions[bot] e019e7cdb1
Merge staging-next into staging 2023-11-29 12:01:23 +00:00
Stig 9f060c688e
Merge pull request #265661 from TomaSajt/lanraragi
lanraragi: 0.8.90 -> 0.9.0
2023-11-29 13:01:07 +01:00
Florian Brandes 010a6250db
nixos/pgadmin: add passwordLength setting
pgadmin by default checks the length of the password
and will fail with passwords < 6 characters.
The produced error message is buried in python tracebacks
and hard to find and debug.

Therefore this adds the setting, and also adds a check
in the pre-start script of pgadmin.

The nixos/pgadmin tests have been modified, also.

Signed-off-by: Florian Brandes <florian.brandes@posteo.de>
2023-11-29 10:21:52 +01:00
Adam Joseph c946245c7a tests.nixops: fix broken eval 2023-11-29 09:44:46 +01:00
TomaSajt eac5dfd20f
lanraragi: 0.8.90 -> 0.9.0 2023-11-29 08:52:48 +01:00
Anthony Roussel b3c4d8ae8a
nixosTests.tomcat: add anthonyroussel to maintainers 2023-11-29 07:56:25 +01:00
Emily Trau ec05aa0a80
Merge pull request #269527 from SuperSandro2000/nextcloud
nextcloud27: 27.1.3 -> 27.1.4;  nextcloud26: 26.0.8 -> 26.0.9
2023-11-29 17:10:22 +11:00
github-actions[bot] f63d259d88
Merge staging-next into staging 2023-11-29 00:04:47 +00:00
Martin Weinelt 18100dc6c2 Merge remote-tracking branch 'origin/staging-next' into staging 2023-11-28 23:32:19 +01:00
Will Fancher 7f213113e6
Merge pull request #218441 from tomfitzhenry/unl0kr
add boot.initrd.unl0kr
2023-11-28 16:10:11 -05:00
Adam Stephens 2cd9619801
nixos/lxc-container: use lxc systemd generator 2023-11-28 15:14:43 -05:00
Arthur Gautier 070bcf9da4 nixos/dublin-traceroute: init 2023-11-28 08:47:56 -08:00
nikstur 6a70cde59e
Merge pull request #270000 from nikstur/fix-systemd-timesync-test
nixos/tests/systemd-timesyncd: tmpfiles.rules -> tmpfiles.settings
2023-11-28 01:48:21 +01:00
Justinas Stankevicius 5ab2f13ff6 teleport_11: remove 2023-11-27 23:22:57 +02:00
nikstur 5257a52c8b nixos/tests/systemd-timesyncd: tmpfiles.rules -> tmpfiles.settings
This also fixes some warning systemd-tmpfiles was issuing before.
2023-11-27 19:29:25 +01:00
github-actions[bot] d5776afdf5
Merge staging-next into staging 2023-11-27 00:02:41 +00:00
Jörg Thalheim 501680a656 nixos/telegraf: include procps if procstat input is configured 2023-11-26 20:26:48 +01:00
Maciej Krüger 3250f15338
Merge pull request #263471 from nbraud/nixos/sudo-rs/cleanup 2023-11-26 19:57:31 +01:00
Robert Scott 5689f242a1
Merge pull request #269766 from gaykitty/stargazer-update
stargazer: 1.0.5 -> 1.1.0
2023-11-26 18:09:28 +00:00
github-actions[bot] 4069806fb6
Merge staging-next into staging 2023-11-26 06:01:19 +00:00
Mario Rodas 1744e3fa01
Merge pull request #266675 from anthonyroussel/sonic-server-nixos
nixos/sonic-server: init
2023-11-25 23:45:16 -05:00
Robert Scott b7a2c41788
Merge pull request #268853 from nevivurn/feat/gvisor-unbreak
gvisor: 20221102.1 -> 20231113.0
2023-11-26 00:43:40 +00:00
Sandro Jäckel 79e3ab84dd
nixos/tests/nextcloud: fix with-declarative-redis-and-secrets test 2023-11-25 22:58:06 +01:00
Jan Tojnar 2e92094b86 Merge branch 'staging-next' into staging
Conflicts:
- pkgs/development/python-modules/pyqt/6.x.nix:
	NIX_CFLAGS_COMPILE changed
	cb6f270be2 version bump removes flag no longer necessary
	b7a8d59e3a adds flag to fix builds on Darwin, not sure if needed after the bump
2023-11-25 19:27:24 +01:00
Artturi 4706651a16
Merge pull request #268187 from imincik/geoserver-fix-data-dir 2023-11-25 16:22:31 +02:00
nicoo 211c4b0545 nixos/tests/sudo-rs: cleanup 2023-11-25 14:11:24 +00:00
nicoo b05648b541 nixos/sudo-rs: Simplify activation 2023-11-25 14:11:23 +00:00
gaykitty 88273849a6 nixosTests.stargazer: switch to using gemget 2023-11-24 19:44:35 -05:00
github-actions[bot] d578170670
Merge staging-next into staging 2023-11-25 00:02:35 +00:00
Ryan Lahfa 264ddf3f05
Merge pull request #269199 from jnsgruk/lxd-ui-0.4 2023-11-24 21:48:14 +01:00
Yongun Seong ee59d35be8
nixosTests.gvisor: remove flaky test 2023-11-25 03:05:11 +09:00
github-actions[bot] 9c362ea601
Merge staging-next into staging 2023-11-24 18:01:24 +00:00
Ryan Lahfa 58fdc495ed
Merge pull request #269452 from RaitoBezarius/zfs-superstable 2023-11-24 17:41:43 +01:00
Raito Bezarius e04c0b0d99 zfs_2_1: init at 2.1.13
This re-introduces the old stable ZFS version we had in the past following
the many predicted issues of ZFS 2.2.x series, that is much more stable
than any further ZFS version at the moment.

I am also removing myself from maintenance of any further ZFS versions as I am
planning to quit ZFS maintenance at some point.

In the meantime, for users like me who depend on ZFS for critical operations, here is a ZFS version
that is known to work for LTS kernels.
2023-11-24 15:47:21 +01:00
github-actions[bot] f4335ece6e
Merge staging-next into staging 2023-11-24 12:01:44 +00:00
Chris Marchesi 6182b0bde8 nixos/xscreensaver: add module tests
Co-authored-by: Aidan Gauland <aidalgol@fastmail.net>
Co-authored-by: Anderson Torres <torres.anderson.85@protonmail.com>
2023-11-24 08:53:00 -03:00
github-actions[bot] 79027ec35d
Merge staging-next into staging 2023-11-23 18:01:20 +00:00
Robert Hensing 779e50580c
Merge pull request #224611 from srhb/kafka-settings-module
Kafka: Settings and KRaft support
2023-11-23 17:35:29 +01:00
Jon Seager 78f17a3aaa
nixos/tests/lxd-ui: add a basic selenium test to check the UI is functioning 2023-11-23 10:27:41 +00:00
K900 3ff36ca61e nixos/tests/containers-ip: don't include channel sources
They're not used in the test, saves a rebuild.
2023-11-23 12:54:31 +03:00
github-actions[bot] 5b50965f04
Merge staging-next into staging 2023-11-23 06:01:34 +00:00
sinanmohd aa0b9d2780 nixos/tests/seatd: init 2023-11-23 13:50:14 +11:00
rewine b9aa854644
deepin: don't wait dde-wm-chooser in v23 2023-11-23 10:00:46 +08:00
github-actions[bot] 36f6f9f93f
Merge staging-next into staging 2023-11-22 06:01:23 +00:00
Sarah Brofeldt 56973b2dd1 nixos/tests/kafka: test KRaft mode 2023-11-22 06:47:08 +01:00
Sarah Brofeldt 45f84cdfd5 nixos/apache-kafka: structured settings
- Use lazyAttrs (for config references) settings for main server.properties.
- Drop dangerous default for "log.dirs"
- Drop apache-kafka homedir; unused and confusing
- Support formatting kraft logdirs
2023-11-22 06:47:08 +01:00
Stig d35c19ca52
Merge pull request #262104 from zakame/contrib/convos-7.16
convos: 7.02 -> 8.05
2023-11-22 02:10:33 +01:00
github-actions[bot] 96c0d0e833
Merge staging-next into staging 2023-11-22 00:02:48 +00:00
Zak B. Elep 69d54db300 nixos/tests/convos: drop journalctl test 2023-11-22 00:47:11 +08:00
piegames cec1751cbd nixosTests.gnome-extensions: Init 2023-11-21 08:42:34 +01:00
piegames 27be325d39 nixosTests.gnome: Small cleanup 2023-11-21 08:42:33 +01:00
John Chadwick 412543ddd8 nixos/libvirtd: add support for nss modules 2023-11-21 01:39:02 -05:00
github-actions[bot] a1e27bbf99
Merge staging-next into staging 2023-11-20 18:01:49 +00:00
Nick Cao 90ef10b571
Merge pull request #253918 from tie/centrifugo
centrifugo: init at 5.1.1
2023-11-20 08:59:54 -05:00
Ivan Trubach 3be1aab86f centrifugo: init at 5.1.1 2023-11-20 10:18:21 +03:00
github-actions[bot] 07e4594bf9
Merge staging-next into staging 2023-11-20 00:02:50 +00:00
Mario Rodas fa14a14694
Merge pull request #258036 from anthonyroussel/fix-ssm-seelog
nixos/amazon-ssm-agent: fix missing seelog.xml file
2023-11-19 18:55:57 -05:00
Mario Rodas c93541b24e
Merge pull request #264910 from anthonyroussel/ocsinventory-agent+nixos
nixos/ocsinventory-agent: init
2023-11-19 18:55:06 -05:00
Luna Nova 135690307d
input-remapper: 1.5.0 -> 2.0.1
Corrected data path replacement

Updated test for new UI

https://github.com/sezanzeb/input-remapper/releases/tag/2.0.0
https://github.com/sezanzeb/input-remapper/releases/tag/2.0.1
2023-11-19 11:02:46 -08:00
github-actions[bot] bb547494d0
Merge staging-next into staging 2023-11-19 18:01:21 +00:00
Artturi b736459b60
Merge pull request #260089 from anthonyroussel/thanos_0_32_4 2023-11-19 18:37:48 +02:00
Mario Rodas d3deaacfb4
Merge pull request #263550 from anthonyroussel/updates/axis2
axis2: 1.7.9 -> 1.8.2, tomcat10: 10.0.27 -> 10.1.15, tomcat9: 9.0.75 -> 9.0.82
2023-11-19 09:39:19 -05:00
Otavio Salvador cf7fa1145b rio: 0.0.19 -> 0.0.27
Refs: #260413.
Fixes: #257334.
Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
2023-11-18 22:24:10 -03:00
github-actions[bot] a24f483a6b
Merge staging-next into staging 2023-11-19 00:02:52 +00:00
Madoura c2450c4515
treewide: add bcachefsLinuxTesting and bcachefsLinuxTesting tests
nixos/tests/installer: add bcachefsLinuxTesting and bcachefsLinuxTesting tests

bcachefs-tools: add bcachefsLinuxTesting and bcachefsLinuxTesting tests
2023-11-18 09:58:56 -06:00
Ivan Mincik a08880000d geoserver: add nixos test 2023-11-18 11:13:05 +01:00
github-actions[bot] cd58dff98b
Merge staging-next into staging 2023-11-18 00:02:40 +00:00
Ryan Lahfa d3530f494c
Merge pull request #264358 from RaitoBezarius/drop-nodejs 2023-11-17 23:26:13 +01:00
Julien Malka 4d968c70fb
Merge pull request #265365 from JulienMalka/systemd-boot-garbage-test
nixos/tests/systemd-boot: add garbage-collect-entry test
2023-11-17 22:34:30 +01:00
Adam C. Stephens 4b8d7d814e
Merge pull request #265556 from adamcstephens/slimserver/fix
slimserver: fix broken package
2023-11-17 15:47:26 -05:00
Raito Bezarius 72911a99d3 code-server: drop
Depends on Node.js 16 and cannot be trivially upgraded to Node.js 18.
2023-11-17 20:26:55 +01:00
Raito Bezarius 022ee4d701 kibana7: drop
Depends on EOL software and no maintenance has been attempted to change this after a ping
(https://github.com/NixOS/nixpkgs/issues/259178)
Feel free to adopt and re-introduce if you care about this software.

This will probably seriously hamper ELK usability in nixpkgs, but as it
receives no maintenance…
2023-11-17 20:26:55 +01:00
github-actions[bot] 27846a08e0
Merge staging-next into staging 2023-11-17 18:01:17 +00:00
Ryan Lahfa 65481ecfef
Merge pull request #267985 from JulienMalka/absent-bootspec 2023-11-17 18:07:10 +01:00
Ryan Lahfa ccfe07c316
Merge pull request #266270 from Ma27/postgresql-ownership-15 2023-11-17 18:02:17 +01:00
Raito Bezarius 10baca4935 nixos/invidious: do not use ensureDBOwnership
Invidious uses a strange setup where the database name is different from the system username
for non-explicit reasons.

Because of that, it makes it hard to migrate it to use `ensureDBOwnership`, we leave it to Invidious' maintainers
to pick up the pieces.
2023-11-17 15:53:08 +01:00
Raito Bezarius 73198870cd nixos/tests/pgbouncer: do not use ensureDBOwnership
pgbouncer test is special in the sense where it actually tries
to connect via SCRAM SHA, let's avoid `ensureDBOwnership` here
otherwise for some reason pgbouncer will try to look in pg_shadow
for the authuser…
2023-11-17 15:52:51 +01:00
Julien Malka 81e378618e
nixos/systemd-boot: allow for bootspec-less generations
Generation built with old versions of NixOS with no bootspec
support may still be present on the system and must be
accounted for.
2023-11-17 14:39:04 +01:00
Adam Stephens 226b8a9f9a
nixos/tests/slimserver: add end to end with squeezelite 2023-11-17 08:18:34 -05:00
Adam Stephens aafccbad47
nixos/slimserver: init service test 2023-11-17 08:18:31 -05:00
github-actions[bot] ed41f11452
Merge staging-next into staging 2023-11-17 06:01:33 +00:00
paumr f561320b8e nixos/tests/archi: init smoke tests for Archi 2023-11-17 01:09:08 +01:00
github-actions[bot] b1a6d03be7
Merge staging-next into staging 2023-11-17 00:02:43 +00:00
Weijia Wang 5d0ea948f7
Merge pull request #267490 from onny/wordpress-update5
wordpress6_4: init at 6.4.1; wordpressPackages: update
2023-11-16 22:24:07 +01:00
Matthias Beyer da1923d134
Merge pull request #267931 from picnoir/pic/toot-0-38-2
toot: 0.38.1 -> 0.38.2
2023-11-16 21:20:06 +01:00
github-actions[bot] 6c1dce1973
Merge staging-next into staging 2023-11-16 18:01:47 +00:00
Pol Dellaiera 3acc2484cf
Merge pull request #267560 from anthonyroussel/bugfix/plantuml-server-nixos
nixos/plantuml-server: fix
2023-11-16 18:32:44 +01:00
Félix Baylac Jacqué 7e7d403939 nixosTests.pleroma: un-vendor toot
Upstream released 0.38.2. This new release contains the pleroma fix we
previously were getting from master.

We don't need this override anymore to get the test to succeed.

https://github.com/ihabunek/toot/issues/399#issuecomment-1814712723
2023-11-16 18:16:15 +01:00
github-actions[bot] e34ef9d128
Merge staging-next into staging 2023-11-16 12:01:29 +00:00
Vladimír Čunát 5f02fb19c7
Merge branch 'staging-next' into staging 2023-11-16 09:54:06 +01:00
rnhmjoj 7f71262745
nixos/tests/dnscrypt-wrapper: test TCP and run on port 443
- Test both TCP and UDP queries (tinydns → bind)
- Test IPv6 by default
- Run DNSCrypt on port 443 along with HTTPS
2023-11-15 21:42:40 +01:00
Anthony Roussel 2b455c1649
nixosTests.plantuml-server: init 2023-11-15 15:12:56 +01:00
Ryan Lahfa d983d6c863
Merge pull request #251950 from erictapen/mastodon 2023-11-15 01:46:50 +01:00
ajs124 bf93b0bd3f nixos/test/ejabberd: remove myself as maintainer 2023-11-14 22:34:27 +01:00
Kerstin Humm c82195d9e8
mastodon: 4.1.6 -> 4.2.1
- run streaming processes in separate systemd services
- remove redundancy in test
- fix update script
- release notes

See https://github.com/mastodon/mastodon/releases/tag/v4.2.1 for details
2023-11-14 21:13:46 +01:00
Kerstin Humm 0f535d40f9
nixos/mastodon: fix integration test 2023-11-14 21:13:45 +01:00
Jonas Heinrich 0d6a668d40 nixos/wordpress: Add test for wordpress6_4 2023-11-14 18:34:57 +01:00
Félix Baylac Jacqué f80b2b510d nixosTests/pleroma: fix test
Two issues:

1. We need a subjectAltName on the TLS cert. Stolen from the akkoma
   test. <3 illdefined
2. There's a bug in the current toot release wrt. date parsing. It's
   been fixed upstream but it's not been released yet. Using the
   current toot master for this VM test to work around this.

Note: I warned upstream we'd need a new toot release.

Fixes https://github.com/NixOS/nixpkgs/issues/264951
2023-11-14 16:45:54 +01:00
ajs124 7623b1c0fd
Merge pull request #266299 from wahjava/update-unbound
unbound: 1.18.0 -> 1.19.0
2023-11-14 15:45:54 +01:00
Niklas Hambüchen f9c7c12de6
Merge pull request #266702 from nh2/plausible-listen-address-no-distributed-erlang
plausible, nixos/plausible: Add `listenAddress` option
2023-11-14 10:52:21 +01:00
Niklas Hambüchen 65a471717c plausible, nixos/plausible: Add listenAddress option.
This changes

* the plausible HTTP web server

to be listening on localhost only, explicitly.

This makes Plausible have an explicit safe default configuration,
like all other networked services in NixOS.

For background discussion, see: https://github.com/NixOS/nixpkgs/issues/130244

As per my upstream Plausible contribution
(https://github.com/plausible/analytics/pull/1190)
Plausible >= 1.5 also defaults to listening to localhost only;
nevertheless, this default should be stated explicitly in nixpkgs
for easier review and independence from upstream changes, and
a NixOS user must be able to configure the
`listenAddress`, as there are valid use cases for that.

Also, disable

* the Erlang Beam VM inter-node RPC port
* the Erlang EPMD port

because Plausible does not use them (see added comment).
This is done by setting `RELEASE_DISTRIBUTION=none`.

Thus, this commit also removes the NixOS setting `releaseCookiePath`,
because it now has no effect.
2023-11-14 10:51:16 +01:00
Felix Bühler f2fc5b4195
Merge pull request #265696 from Stunkymonkey/nixos-exportarr
nixos/exportarr: init
2023-11-13 22:58:32 +01:00
Maximilian Bosch 48459567ae nixos/postgresql: drop ensurePermissions, fix ensureUsers for postgresql15
Closes #216989

First of all, a bit of context: in PostgreSQL, newly created users don't
have the CREATE privilege on the public schema of a database even with
`ALL PRIVILEGES` granted via `ensurePermissions` which is how most of
the DB users are currently set up "declaratively"[1]. This means e.g. a
freshly deployed Nextcloud service will break early because Nextcloud
itself cannot CREATE any tables in the public schema anymore.

The other issue here is that `ensurePermissions` is a mere hack. It's
effectively a mixture of SQL code (e.g. `DATABASE foo` is relying on how
a value is substituted in a query. You'd have to parse a subset of SQL
to actually know which object are permissions granted to for a user).

After analyzing the existing modules I realized that in every case with
a single exception[2] the UNIX system user is equal to the db user is
equal to the db name and I don't see a compelling reason why people
would change that in 99% of the cases. In fact, some modules would even
break if you'd change that because the declarations of the system user &
the db user are mixed up[3].

So I decided to go with something new which restricts the ways to use
`ensure*` options rather than expanding those[4]. Effectively this means
that

* The DB user _must_ be equal to the DB name.
* Permissions are granted via `ensureDBOwnerhip` for an attribute-set in
  `ensureUsers`. That way, the user is actually the owner and can
  perform `CREATE`.
* For such a postgres user, a database must be declared in
  `ensureDatabases`.

For anything else, a custom state management should be implemented. This
can either be `initialScript`, doing it manual, outside of the module or
by implementing proper state management for postgresql[5], but the
current state of `ensure*` isn't even declarative, but a convergent tool
which is what Nix actually claims to _not_ do.

Regarding existing setups: there are effectively two options:

* Leave everything as-is (assuming that system user == db user == db
  name): then the DB user will automatically become the DB owner and
  everything else stays the same.

* Drop the `createDatabase = true;` declarations: nothing will change
  because a removal of `ensure*` statements is ignored, so it doesn't
  matter at all whether this option is kept after the first deploy (and
  later on you'd usually restore from backups anyways).

  The DB user isn't the owner of the DB then, but for an existing setup
  this is irrelevant because CREATE on the public schema isn't revoked
  from existing users (only not granted for new users).

[1] not really declarative though because removals of these statements
    are simply ignored for instance: https://github.com/NixOS/nixpkgs/issues/206467
[2] `services.invidious`: I removed the `ensure*` part temporarily
    because it IMHO falls into the category "manage the state on your
    own" (see the commit message). See also
    https://github.com/NixOS/nixpkgs/pull/265857
[3] e.g. roundcube had `"DATABASE ${cfg.database.username}" = "ALL PRIVILEGES";`
[4] As opposed to other changes that are considered a potential fix, but
    also add more things like collation for DBs or passwords that are
    _never_ touched again when changing those.
[5] As suggested in e.g. https://github.com/NixOS/nixpkgs/issues/206467
2023-11-13 17:16:25 +01:00
Ashish SHUKLA 61f957f876
nixos/unbound: Fix deprecation warnings 2023-11-13 08:35:56 +00:00
Nick Cao 025064944d
Merge pull request #267120 from teutat3s/zhf/fix-prometheus-exporter-smokeping
nixosTests.prometheus-exporters.smokeping fix test
2023-11-12 20:23:34 -05:00
teutat3s 5458e56907
nixosTests.prometheus-exporters.smokeping fix test 2023-11-13 00:46:27 +01:00