Commit graph

602 commits

Author SHA1 Message Date
nicoo 1f08575e3a nixos/sshd: Disable authorizedKeysInHomedir if stateVersion >= 24.11
Co-authored-by: Valentin Gagarin <valentin@gagarin.work>
2024-10-18 20:21:12 +00:00
Tomo 4f89295d80
{nodePackages,vimPlugins}.coc-metals: drop (#349105) 2024-10-18 09:53:32 -07:00
Paul Meyer 1ddf2d83e3 docs/release-notes: document deprecations in Go ecosystem
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2024-10-18 11:11:16 +02:00
Marie Ramlow ec4f809cd5 forgejo: 8.0.3 -> 9.0.0
Forgejo v9 is now licensed under GPL-3.0-or-later.
Release notes: https://codeberg.org/forgejo/forgejo/milestone/7235
2024-10-17 13:31:38 +02:00
Tomo 666d3bd33d {nodePackages,vimPlugins}.coc-metals: drop
Upstream deprecated it:
https://github.com/scalameta/coc-metals

Upstream recommends vimPlugins.nvim-metals instead.

Part of #229475
2024-10-16 21:51:52 +00:00
Tomo f3929d6b78 {nodePackages,vimPlugins}.coc-python: drop
See notice in the README:
https://github.com/neoclide/coc-python

> WARNING: it's recommended to use coc-pyright if
> you're using python3 or use coc-jedi if you're using jedi,
> the code of coc-python is too hard to maintain!

If that isn't convincing, the repo was archived on 2020-12-24.

Part of #229475
2024-10-16 05:59:46 +00:00
Azat Bahawi e2337957df
nixos/zapret: init (#347805) 2024-10-15 20:37:40 +00:00
Dmitry Voronin 5a5c04d1ea
nixos/zapret: init 2024-10-15 21:51:53 +03:00
Emily 9c2358e722 python3{11,12}Packages.nose: drop
🎉

This package has been deprecated and unmaintained upstream for almost a
decade, has required extensive patching to keep working on new Python
versions, will inevitably break again with Python 3.13 dropping 2to3,
is lacking a maintainer in Nixpkgs, is now unused in the tree, and
has caused us all far too many headaches lately. Let’s put an end
to this!

Shout‐outs to mweinelt and jchv for dealing with this situation
early on, pyrox0, Sigmanificient, and dotlambda for tackling a bunch
of packages, and natsukium for help with reviews. I never thought this
would get finished so quickly. We’ve collectively handled almost
1½ packages per day in the three months since I first opened the
tracking issue, and sometimes helped move the entire ecosystem forward.

Closes: #326513
2024-10-15 09:34:36 +01:00
Maximilian Bosch 782b08ba3d
Merge: percona: update packages, init 8.4 (#346027) 2024-10-14 12:40:48 +02:00
OTABI Tomoya 8f8f0badb3
buildPython*: Deprecate and remove (buildPython* { ... }).override (#333670) 2024-10-14 17:56:43 +09:00
Markus Kowalewski 812640f38a
nixos/saunafs: add module + test (#347337) 2024-10-14 09:24:51 +02:00
Oliver Schmidt 4b5141e018 percona: deprecate innovation/lts release flavours
Percona upstream has decided not to create releases or each MySQL
innovation upstream release, but just for LTS releases.
https://www.percona.com/blog/no-mysql-9-x-innovation-releases-from-percona/
2024-10-13 23:04:24 +02:00
Oliver Schmidt 8315d06e99 percona: release notes for 8.4 LTS release 2024-10-13 18:15:49 +02:00
Bjørn Forsman 97ad9186ca nixos/release-notes: add power.ups entry 2024-10-13 17:55:52 +02:00
Markus Kowalewski 2d5bae6932
nixos/release-notes: add saunafs under "New modules" sections 2024-10-12 19:13:03 +02:00
github-actions[bot] 4433a315bd
Merge master into staging-next 2024-10-12 12:05:08 +00:00
Michele Guerini Rocco 3106e48fbc
dhcpcd: bring back enablePrivSep option, nixos/release-notes: remove duplicate note (#347578) 2024-10-12 13:01:52 +02:00
Florian Klink 237016d023
gogs: remove (#348053) 2024-10-12 13:13:13 +03:00
Ramses b1e4854ecb
nixos/automatic-timezoned: set time.timeZone to null to avoid silent overriding (#347217) 2024-10-12 11:12:27 +02:00
Maximilian Bosch 875f00ed40
gogs: remove
Upstream development has stalled and several critical vulnerabilities
that weren't addressed within a year[1][2].

Back then it was fair to mark it as insecure, but given nothing has
happened since, it's time to remove it.

[1] https://forgejo.org/2023-11-release-v1-20-5-1/
[2] https://github.com/gogs/gogs/issues/7777
2024-10-12 10:36:06 +02:00
github-actions[bot] 4f2eec3440
Merge master into staging-next 2024-10-12 00:13:45 +00:00
Atemu 12ef18d2e3
nixos/systemd-boot: Simpler windows dual booting (#344327) 2024-10-11 20:25:08 +02:00
github-actions[bot] b415f9c282
Merge master into staging-next 2024-10-11 18:04:32 +00:00
Felix Uhl 73011ba96f nixos/systemd-boot: add windows option for easy dual-booting
When installing NixOS on a machine with Windows, the "easiest" solution
to dual-boot is re-using the existing EFI System Partition (ESP), which
allows systemd-boot to detect Windows automatically.

However, if there are multiple ESPs, maybe even on multiple disks,
systemd-boot is unable to detect the other OSes, and you either have to
use Grub and os-prober, or do a tedious manual configuration as
described in the wiki:
https://wiki.nixos.org/w/index.php?title=Dual_Booting_NixOS_and_Windows&redirect=no#EFI_with_multiple_disks

This commit automates and documents this properly so only a single line
like

    boot.loader.systemd-boot.windows."10".efiDeviceHandle = "HD0c2";

is required.

In the future, we might want to try automatically detecting this
during installation, but finding the correct device handle while the
kernel is running is tricky.
2024-10-11 10:56:02 +02:00
MithicSpirit e14483d6a6
formats.ini: disable merging as list by default
Previously, setting listsAsDuplicateKeys or listToValue would make it so
merging these treat all values as lists, by coercing non-lists via
lib.singleton. Some programs (such as gamemode; see #345121), allow some
values to be repeated but not others, which can lead to unexpected
behavior when non-list values are merged like this rather than throwing
an error.

This now makes that behavior opt-in via the mergeAsList option. Setting
mergeAsList (to either true or false) without setting either
listsAsDuplicateKeys or listToValue is an error, since lists are
meaningless in this case.
2024-10-10 17:57:41 -04:00
Sebastián Zavala Villagómez 8a277a6abf nixos/automatic-timezoned: set time.timeZone to null to avoid silent overriding
Currently if a timezone was selected explicitly, the service will
silently override the value, essentially ignoring what is meant to be a
a deliberate choice of option. This may cause confusion as to why the
option is not doing anything when this service is enabled, particularly
in more complex set-ups after some time.

This will simply make the choice deliberate from the user's part, either
by having to remove the option or lowering its priority as a recognition
that it may be ignored.

This change was inspired by the `services.tzupdate` module, which does
the same.

[1]: <https://github.com/NixOS/nixpkgs/blob/master/nixos/modules/services/misc/tzupdate.nix#L24>
2024-10-10 14:33:12 -04:00
github-actions[bot] c64ae284c0
Merge master into staging-next 2024-10-10 18:04:46 +00:00
Fabián Heredia Montiel 0cdc526090
deno: 1.46.3 -> 2.0.0, deno_1: init at 1.46.3 (#347484) 2024-10-10 09:36:33 -06:00
github-actions[bot] a5883bc172
Merge master into staging-next 2024-10-10 12:05:39 +00:00
Franz Pletz 9958dd2df8
immersed-vr: rename to immersed (#341266) 2024-10-10 13:47:06 +02:00
Franz Pletz af7b205640
nixos/localtimed: set time.timeZone to null to avoid silent overriding (#347221) 2024-10-10 13:44:36 +02:00
06kellyjac dfce2bc3a7 deno_1: init at 1.46.3
Add a pre v2 copy of deno as deno_1 to provide some stability until our next
release and until 1.46 is fully abandoned soon.
deno_1 is expected to be removed prior to 24.11.
Added a release note.
2024-10-10 11:51:26 +01:00
06kellyjac 43984407b5 deno: 1.46.3 -> 2.0.0
Updates deno to v2.
Slight refactor of fetcher code for grabbing librusty_v8.
Updated the update scripts to use new Deno v2 interfaces and pull latest
toml dependency from jsr rather than the deno.land registry.
Added release note.
2024-10-10 11:51:26 +01:00
Frank Doepper ecdfb14ef9 nixos/frr: refactor
- use upstream service and scripts
- switch to integrated-vtysh-config, abandon per-daemon config
- use always daemon names in options (e.g. ospf -> ospfd)
- zebra, mgmtd and staticd are always enabled
- abandon vtyListenAddress, vtyListenPort options; use
  just "extraOptions" or "options" instead, respectively
- extend test to test staticd
- update release-notes
- pkgs.servers.frr: fix sbindir and remove FHS PATH
- introduce services.frr.openFilesLimit option
2024-10-09 22:49:50 +02:00
rnhmjoj fb28bba040
nixos/release-notes: remove duplicate note
Fix up the merge of the two dhcpcd hardening PRs (#336988 and #208780)
2024-10-09 20:57:17 +02:00
K900 0717a4da77 Merge remote-tracking branch 'origin/master' into staging-next 2024-10-09 21:08:25 +03:00
Franz Pletz ae4102c9f3
headscale (module and package): 0.22.3 -> 0.23.0 (#340054) 2024-10-09 17:01:18 +02:00
github-actions[bot] b1bc4ea2b5
Merge master into staging-next 2024-10-09 00:14:24 +00:00
Niklas Hambüchen b061499d34
ceph: 18.2.4 -> 19.2.0 (#344993) 2024-10-09 01:25:14 +02:00
Niklas Hambüchen b9b23b2a72 rl-2411: Mention Ceph upgrade 2024-10-08 23:18:51 +00:00
Florian Klink 2ec88eb10b
nixos/systemd: allow running shellcheck on generated systemd scripts (#311394) 2024-10-08 22:24:49 +03:00
Gavin John ab5706b3a5
nixos/programs.immersed-vr: rename to programs.immersed 2024-10-08 11:38:55 -07:00
K900 956f9243c0 Merge remote-tracking branch 'origin/master' into staging-next 2024-10-08 21:15:13 +03:00
Vladimír Čunát a0c9222e11
Merge branch 'master' into staging-next
(a bit older master for now, due to a conflict in dhcpcd service)
2024-10-08 14:59:47 +02:00
Florian Klink 146e83d76b
dhcpcd: enable sandboxing options (#208780) 2024-10-08 13:09:11 +03:00
Norbert Melzer 8af94f7ca2
rustic: 0.8.1 -> 0.9.1 (#346508) 2024-10-08 12:07:39 +02:00
r-vdp 2b224f0e3c
nixos/systemd: allow using writeShellApplication for systemd unit scripts 2024-10-08 12:01:48 +02:00
Sebastián Zavala Villagómez 1c5727cdf7 nixos/localtimed: set time.timeZone to null to avoid silent overriding
Currently if a timezone was selected explicitly, the service will
silently override the value, essentially ignoring what is meant to be a
a deliberate choice of option. This may cause confusion as to why the
option is not doing anything when this service is enabled, particularly
in more complex set-ups after some time.

This will simply make the choice deliberate from the user's part, either
by having to remove the option or lowering its priority as a recognition
that it may be ignored.

This change was inspired by the `services.tzupdate` module, which does
the same.

[1]: <https://github.com/NixOS/nixpkgs/blob/master/nixos/modules/services/misc/tzupdate.nix#L24>
2024-10-07 23:40:49 -04:00
Emily df769e85f3 Merge master into staging-next 2024-10-08 01:23:55 +01:00