Commit graph

5861 commits

Author SHA1 Message Date
Vladimír Čunát 2b988c76fd
Revert "nixosTests.installer: bump memorySize"
This reverts commit 309ed272be.
The bump caused nixosTests.installer.luksroot hang, e.g. see
https://hydra.nixos.org/build/205951019
(I don't know why.)

The OOM issues were avoided by 6dccdc4585 (newer but merged earlier)
2023-01-18 11:45:48 +01:00
Ryan Lahfa eb6d457115
Merge pull request #209246 from e1mo/dokuwiki/package-overriding
dokuwiki: Combine mechanism for plugins and templates
2023-01-18 00:51:18 +01:00
talyz dbd563b9b8
nixos/gitlab: Improve support for GitLab Pages
- provide options and set defaults for important settings
- generate the shared secret
- reenable gitlab-pages in test
2023-01-17 17:33:47 +01:00
Florian Klink 24b4189619
Merge pull request #207468 from schnusch/systemd-user-tmpfiles-rules
nixos: systemd: add systemd.user.tmpfiles.rules, systemd.user.tmpfiles.users.<name>.rules
2023-01-17 14:39:44 +01:00
schnusch 34ad8447c3 nixos: systemd: add systemd.user.tmpfiles 2023-01-17 12:19:40 +01:00
Nick Cao 2b3c8ae88a
Merge pull request #209767 from 0x4A6F/master-coturn-tests
test/coturn: add some sanity-checks
2023-01-17 10:34:51 +08:00
Nick Cao 8f34f01185
Merge pull request #194343 from oxalica/fix/swap-btrfs
nixos/swap: fix creation on BTRFS and refactor assertions
2023-01-17 08:35:15 +08:00
Michele Guerini Rocco 594b94b4c3
Merge pull request #210812 from rnhmjoj/pr-initrd-secrets
boot.initrd.secrets fixes
2023-01-17 00:48:58 +01:00
oxalica eecb6c2bd8 nixos/tests/swap-file-btrfs: init 2023-01-17 06:56:55 +08:00
Nick Cao a90e324332
Merge pull request #210785 from fgaz/mindustry/nixos-test
nixosTests.mindustry: init; mindustry: use SRI hashes
2023-01-16 16:21:06 +08:00
rnhmjoj 9bb888c9f8
nixos/tests/installer: test relative paths in initrd secrets 2023-01-16 02:31:02 +01:00
rnhmjoj 928181b5f3
nixos/tests/installer: add full disk encryption test
This tests a common full disk encryption setup:
https://gist.github.com/ladinu/bfebdd90a5afd45dec811296016b2a3f
2023-01-16 02:31:01 +01:00
Artturi ee5e15cf2d
Merge pull request #208614 from LeSuisse/grub2-CVE-2022-2601-CVE-2022-3775 2023-01-15 23:23:33 +02:00
Maximilian Bosch 8528a0b512
Merge pull request #210897 from K900/kernels-20230115
Kernels for 2023-01-15
2023-01-15 20:58:06 +01:00
Ryan Lahfa e2ac17f781
Merge pull request #207466 from Patryk27/fix/174065
nixos: add --specialisation to nixos-rebuild
2023-01-15 18:52:09 +01:00
Ryan Lahfa 503c288f4e
Merge pull request #207567 from Stunkymonkey/photoprism-module-init
nixos/photoprism: init module
2023-01-15 18:36:13 +01:00
Patryk Wychowaniec 2c55eba8f4
nixos: add --specialisation to nixos-rebuild
This commit fixes a papercut in nixos-rebuild where people wanting to
switch to a specialisation (or test one) were forced to manually figure
out the specialisation's path and run its activation script - since now,
there's a dedicated option to do just that.

This is a backwards-compatible change which doesn't affect the existing
behavior, which - to be fair - might still be considered sus by some
people, the painful scenario here being:

- you boot into specialisation `foo`,
- you run `nixos-rebuild switch`,
- whoops, you're no longer at specialisation `foo`, but you're rather
  brought back to the base system.

(it's especially painful for cases where specialisation is used to load
extra drivers, e.g. Nvidia, since then launching `nixos-rebuild switch`,
while forgetting that you're inside a specialisation, can cause some
parts of your system to get accidentally unloaded.)

I've tried to mitigate that by improving specialisations so that they
create a dedicated file somewhere in `/run/current-system` containing
the specialisation's name (which `nixos-rebuild` could then use as the
default value for `--specialisation`), but I haven't been able to come
up with anything working (plus it would be a breaking change then).

Closes https://github.com/NixOS/nixpkgs/issues/174065
2023-01-15 18:16:49 +01:00
Felix Buehler 0214f02419 nixos/photoprism: add test 2023-01-15 18:02:46 +01:00
Ryan Lahfa df1262baae
Merge pull request #210927 from JulienMalka/Ntfy-test-fix
nixos/ntfy-sh: Fixed nixos test
2023-01-15 17:06:50 +01:00
Matthieu Coudron cf10d7aef8
services.openssh: support freeform settings (#193757)
* services.openssh: support freeform settings

Keep "extraConfig" but introduces "settings".

Also renames several options

(mkRenamedOptionModule [ "services" "openssh" "kbdInteractiveAuthentication" ] [  "services" "openssh" "settings" "KbdInteractiveAuthentication" ])
(mkRenamedOptionModule [ "services" "openssh" "passwordAuthentication" ] [  "services" "openssh" "settings" "PasswordAuthentication" ])
(mkRenamedOptionModule [ "services" "openssh" "useDns" ] [  "services" "openssh" "settings" "UseDns" ])
(mkRenamedOptionModule [ "services" "openssh" "permitRootLogin" ] [  "services" "openssh" "settings" "PermitRootLogin" ])

* updated doc
* regen doc
2023-01-15 16:32:46 +01:00
K900 6dccdc4585
Merge pull request #210930 from pennae/installer-test-no-docs
nixosTests.installer.*: disable documentation
2023-01-15 18:25:41 +03:00
pennae a88a515653 nixosTests.installer.*: disable documentation
building the manual takes a pretty long time and sufficient memory to
cause hydra failures: https://hydra.nixos.org/build/205689097#tabs-buildsteps
2023-01-15 16:06:07 +01:00
Julien Malka d40d0ce7e6
nixos/ntfy-sh: Fixed nixos test 2023-01-15 15:59:30 +01:00
K900 33b60cca17 linux/hardened/patches/6.1: init at 6.1.6-hardened1 2023-01-15 15:23:24 +03:00
Francesco Gazzetta cbe58afca0 nixosTests.mindustry: init 2023-01-15 13:11:37 +01:00
github-actions[bot] 4712ed9439
Merge master into staging-next 2023-01-14 00:02:26 +00:00
Robert Hensing e973da60cd
Merge pull request #200225 from pacien/nixos-qemu-vm-restrictnetwork
nixos/qemu-vm: add option "restrictNetwork"
2023-01-13 21:47:21 +01:00
github-actions[bot] 49722fd14a
Merge master into staging-next 2023-01-13 18:01:34 +00:00
Sandro ba33f29792
Merge pull request #210434 from Stunkymonkey/test-acme-server-phases 2023-01-13 17:59:06 +01:00
Robert Schütz 0a9df042f2
Merge pull request #207595 from wahjava/update-vaultwarden
vaultwarden: 1.26.0 -> 1.27.0
2023-01-13 05:24:14 -08:00
Felix Buehler fec6e19fd1 nixos/tests/acme/generate-certs: deprecate phases 2023-01-12 22:56:46 +01:00
pacien b25e0e8ebc nixos/tests: add qemu-vm-restrictnetwork test 2023-01-12 19:50:27 +01:00
Rhys Davies eb4891d2d3 nixos/vaultwarden: fix test 2023-01-12 01:48:12 -08:00
github-actions[bot] 166b049bd9
Merge master into staging-next 2023-01-11 06:01:29 +00:00
Yaya 3cd1bd5888 nixos/tests/gitlab: Fix a regression introduced in 15.7.0
```
{"message":{"password":["must not contain commonly used combinations of
words and letters"]}}
```
2023-01-10 22:53:33 -05:00
Martin Weinelt c1e6c6af69 Merge remote-tracking branch 'origin/master' into staging-next 2023-01-11 03:51:33 +01:00
Robert Obryk 9dbdb05924 nixos/restic: add exclude parameter
This provides an easy way to specify exclude patterns in config. It was
already possible via extraBackupOptions; this change creates a simpler,
similar to other backup services, way to specify them.
2023-01-11 00:06:13 +01:00
Robert Obryk 2a46ef4fff nixos/tests/restic: test that restoring works
This commit also moves the indicator files out of the directory that's
being backed up, so that the directory remains static throughout the
backup operation.
2023-01-11 00:06:13 +01:00
Artturin 309ed272be nixosTests.installer: bump memorySize
Without it the tests sometimes fail because the OOM killer is triggered.
https://hydra.nixos.org/build/204713462
2023-01-10 18:45:34 +02:00
linsui a2e21c76c7 rename config.qt5 -> config.qt 2023-01-10 20:50:15 +08:00
Artturi 27c1ec2ecf
Merge pull request #209816 from Artturin/deprecate-top-level-platform-aliases 2023-01-09 22:15:50 +02:00
Artturin 2eeb34c273 treewide: {build,host,target}Platform -> stdenv.{build,host,target}Platform 2023-01-09 21:13:22 +02:00
github-actions[bot] 33aa224777
Merge master into staging-next 2023-01-09 18:01:24 +00:00
Naïm Favier b8ee437596
Merge pull request #208643 from ncfavier/installer-test-tmp 2023-01-09 13:20:02 +01:00
github-actions[bot] 99dd0da8dc
Merge master into staging-next 2023-01-09 06:01:08 +00:00
Bobby Rong 21b9c3cee5
Merge pull request #209709 from bobby285271/init/nixosTests.mate
nixos/tests/mate: init
2023-01-09 12:38:19 +08:00
Martin Weinelt 56103f5f70
nixos/tests/evcc: Ignore ERROR level messages
The version checker fails with an ERROR message, so asserting on that
isn't useful for us since 0.110.2.
2023-01-09 02:34:55 +01:00
Bobby Rong 76c0fad164
nixos/tests/mate: init 2023-01-08 23:57:34 +08:00
Martin Weinelt 4d65509504 Merge remote-tracking branch 'origin/master' into staging-next 2023-01-08 16:34:30 +01:00
K900 337d358300 nixos/n8n: disable telemetry by default
Originally intended to just speed up the tests, but probably a good idea in general.
2023-01-08 14:43:53 +03:00
github-actions[bot] 4bf238a8fb
Merge master into staging-next 2023-01-08 00:02:31 +00:00
Felix Bühler a4eb1b11bc
Merge pull request #209254 from Stunkymonkey/freshrss-srv-pgsql
nixos/freshrss: fix permissions and add database test
2023-01-07 19:13:30 +01:00
github-actions[bot] 3b3114f45d
Merge master into staging-next 2023-01-07 18:01:08 +00:00
Thiago Kenji Okada c2fdf2d137
Merge pull request #209191 from wegank/mongodb-more-drops
mongodb-4_0: drop
2023-01-07 13:04:34 +00:00
github-actions[bot] 76d33189ba
Merge master into staging-next 2023-01-07 12:01:24 +00:00
github-actions[bot] 0789ea69b1
Merge master into staging-next 2023-01-07 00:02:25 +00:00
Moritz 'e1mo' Fromm ee41b6b457
dokuwiki: Combine mechanism for plugins and templates
Copy templates and plugins into Dokuwiki instead of linking to address
template compatibility. As noted by @sinavir[^1], (some) templates would
fail due to relative PHP imports.

[^1]: https://github.com/NixOS/nixpkgs/pull/208299#issuecomment-1370413116
2023-01-06 23:52:49 +01:00
Moritz 'e1mo' Fromm 8d4251f491
nixos/dokuwiki: Add e1mo as maintainer 2023-01-06 23:40:09 +01:00
Moritz 'e1mo' Fromm 236d90fde0
nixos/dokuwiki: Overhaul for structured settings
Added the RFC42-style added the posibility to use
`services.dokuwiki.sites.<name>.settings' instead of passing a plain
string to `<name>.extraConfig`. ´<name>.pluginsConfig` now also accepts
structured configuration.
2023-01-06 22:02:37 +01:00
Felix Buehler 0e2787884e nixos/freshrss: fix permissions and add database test 2023-01-06 21:16:50 +01:00
Moritz 'e1mo' Fromm 055100611d
nixos/dokuwiki: Simplify plugin fetching examples
Also replaced apache httpd referenced with ones to caddy
2023-01-06 15:12:47 +01:00
Moritz 'e1mo' Fromm da9185d964
nixosTests.dokuwiki: Deduplicate node configuration
Also added two "quality of life" tests to ensure customisations to the
dokuiwki package are not being discarded and both webserver
configurations handle rewriting correctly.
2023-01-06 14:51:34 +01:00
Weijia Wang 7afa7286f7 mongodb-4_0: drop 2023-01-05 21:21:33 +01:00
github-actions[bot] 4acd5a978b
Merge staging-next into staging 2023-01-05 12:01:57 +00:00
Colin Arnott de49ddabae
nixosTests.wordpress: iterate over versions
As a follow up to f9d1f80045, we should
add the ability to test explicit versions of the wordpress derivation.
Since we are currently only supporting wordpress6_1 in unstable, this
change is a noop.

Updates #209051
2023-01-05 06:38:37 +00:00
github-actions[bot] 0c98bf3e85
Merge staging-next into staging 2023-01-05 00:02:56 +00:00
Bjørn Forsman 1b80fc4204 nixos/tests/apcupsd.nix: init
This verifies that https://github.com/NixOS/nixpkgs/issues/208204
("apcupsd: apcaccess does not respect config from services.apcupsd") is
fixed.
2023-01-04 21:45:58 +01:00
github-actions[bot] 47507cf77a
Merge staging-next into staging 2023-01-04 06:01:44 +00:00
zowoq 469aec905b nixos/podman, podman: switch to netavark network stack 2023-01-04 14:25:14 +10:00
github-actions[bot] e2839320bb
Merge staging-next into staging 2023-01-03 12:01:44 +00:00
Kim Lindberger ba1e6e5f8c
Merge pull request #184206 from e1mo/e1mo/parsedmarc-new-config
nixos/parsedmarc: follow upstream configuration
2023-01-03 12:26:06 +01:00
github-actions[bot] 03e830eb69
Merge staging-next into staging 2023-01-03 00:02:53 +00:00
Florian Brandes 5b6881f4a0 nixos/paperless-ngx: fix startup order
The nixOS test failed sporadically with a timeout.
This is due to a race condition in the startup  of
the scheduler vs the task-queue.

The scheduler runs the migration scripts in "pre-start" and
celery isn't available, yet. The celery worker (paperless-task-queue)
was already started by systemd but was unable to connect
(as the migration scripts from "pre-start" still ran).

This fix adds the necessary "after" condition in the systemd
worker unit and adds a test to "paperless"

Signed-off-by: Florian Brandes <florian.brandes@posteo.de>
2023-01-02 15:21:45 +01:00
Jan Tojnar 5810109b42 Merge branch 'staging-next' into staging
- readline6 attribute removed from all-packages.nix in d879125d61
- readline attribute was bumped to readline82 in 50adabdd60
2023-01-02 03:04:32 +01:00
Jörg Thalheim c8104628f4 nixos/tests/installer/bcachefs: use ocr to type in password 2023-01-01 19:58:17 +01:00
Jörg Thalheim 13b0e42202 nixos/tests/installer: disable zfs for bcachefs tests
we are potentially testing very new kernels here, which are not
supported by zfs yet.
2023-01-01 19:58:17 +01:00
Naïm Favier 19cfb3e48c
nixos/tests/installer: test initrd secrets and nix-build
Both of those things rely on nixos-enter creating `/tmp` under the mount
point.
2023-01-01 17:20:37 +01:00
Naïm Favier 1596c87bdb
Merge pull request #195945 from ncfavier/wg-quick-nftables 2023-01-01 14:13:01 +01:00
Sandro 407160f700
Merge pull request #207382 from wegank/mongodb 2022-12-31 23:07:42 +01:00
Ryan Lahfa 06542b21a0
Merge pull request #205636 from LoveIsGrief/webhook-module
nixos/webhook: add support for a webhook service option
2022-12-31 22:31:38 +01:00
Moritz 'e1mo' Fromm 59c28cab1c
nixos/parsedmarc: follow upstream configuration
> Starting in version 8.0.0, most options from the `imap` section have
been moved to the `mailbox` section.

6b2131f0e8
2022-12-31 16:42:41 +01:00
Raito Bezarius e6597c8ac5 garage: mark 0.7.3 as EOL 2022-12-30 15:12:45 +01:00
Raito Bezarius 1db2175e7a nixos/garage: provide multiple versions to provide an upgrade path when using NixOS service
- Add mention to release notes 23.05
- Introduce Garage v0.8
- Protect against unexpected upgrade with stateVersion
- Test matrix over 0.7 × 0.8
2022-12-30 15:12:44 +01:00
Ryan Lahfa 30307eba48
Merge pull request #207453 from p-h/ulogd
ulogd: init at 2.0.8
2022-12-30 14:13:53 +01:00
Bobby Rong de07c59526
Merge pull request #208060 from chpatrick/fix-gnome-flashback-systemd
gnome.gnome-flashback: fix crash on start due to not finding .desktops
2022-12-30 20:12:51 +08:00
github-actions[bot] df1fb5ef89
Merge staging-next into staging 2022-12-29 06:01:46 +00:00
Will Fancher 3d7270abd5
Merge pull request #203171 from ElvishJerricco/zfs-fix-requested-credentials
nixos/zfs: Ensure pool has datasets to decrypt
2022-12-29 00:00:29 -05:00
Will Fancher 51809df302 nixos/tests/zfs: Test requestEncryptionCredentials as a list. 2022-12-28 22:45:28 -05:00
Will Fancher 22b6f785a7 nixos/tests/zfs: Represent real world usage better
It's better to utilize the boot process and systemd mechanisms to test
these zfs features, rather than manually simulating the same behavior
with testScript.
2022-12-28 22:42:37 -05:00
Lucas Franceschino e8e932bc80
nixos/webhook: init 2022-12-29 01:24:46 +01:00
Patrick Chilton 933b978fb9 gnome.gnome-flashback: add VM test 2022-12-29 00:35:21 +01:00
github-actions[bot] aaaeebad7a
Merge staging-next into staging 2022-12-28 18:01:50 +00:00
Jonas Heinrich 2b6a58a6a5
Merge pull request #208014 from LeSuisse/trafficserver-9.1.4
trafficserver: 9.1.3 -> 9.1.4
2022-12-28 18:53:43 +01:00
Jörg Thalheim 741a0f5a7f envfs: init at 1.0.0 2022-12-28 16:03:49 +01:00
Jörg Thalheim d165c5dcad
Merge pull request #204254 from raphaelr/initrd-openvpn
nixos/tests/initrd-network-openvpn: fix
2022-12-28 12:36:27 +00:00
Sergei Trofimovich 092d57c076 Merge remote-tracking branch 'origin/staging-next' into staging
Conflicts:
    pkgs/development/tools/language-servers/ansible-language-server/default.nix
2022-12-28 09:35:37 +00:00
Ryan Lahfa 861c7b189c
Merge pull request #182360 from Yarny0/cups-pdf
cups-pdf(-to-pdf): init
2022-12-28 09:08:49 +01:00
Philippe Hürlimann bcbedfeefc nixos/ulogd: init
Heavily based on original work by xvuko

Co-authored-by: xvuko <nix@vuko.pl>
2022-12-28 00:17:28 +01:00
Thomas Gerbet ede90bb8e1 trafficserver: 9.1.3 -> 9.1.4
Fixes CVE-2022-32749 and CVE-2022-40743.

https://raw.githubusercontent.com/apache/trafficserver/9.1.x/CHANGELOG-9.1.4
2022-12-27 21:15:43 +01:00
Mikael Voss a6f1bae946
nixos/tests/akkoma: init
This test is based in part on nixos/tests/pleroma.
2022-12-27 14:37:01 +01:00
Weijia Wang 06ce75d724 mongodb-3_4, mongodb-3_6: drop 2022-12-27 09:45:53 +01:00
K900 2d3cf010fe
Revert "treewide: use nativeBuildInputs with runCommand instead of inlining" 2022-12-26 21:05:35 +03:00
Naïm Favier c4bd20a686
nixos/wg-quick: add nftables test 2022-12-26 12:46:45 +01:00
Maciej Krüger 94373a589b
Merge pull request #203011 from duament/firewall-nftables 2022-12-26 00:57:24 +01:00
Sandro 5af3f865e8
Merge pull request #206775 from SuperSandro2000/runCommand-nativeBuildInputs 2022-12-25 21:42:05 +01:00
Jan Tojnar 72c37eddec Merge branch 'staging-next' into staging 2022-12-25 01:30:47 +01:00
Sandro c8c8ac5cc6
Merge pull request #203449 from yaxitech/azure-quote-provider 2022-12-24 16:19:39 +01:00
Robert Hensing d35f793cf2
Merge pull request #207563 from hercules-ci/flaky-nixosTests.keymap
Fix flaky `nixosTests.keymap`
2022-12-24 14:53:27 +01:00
Robert Hensing 5624311305 nixosTests.keymap: Remove unnecessary sleep
When test-input-reader runs, it's standard input exists and will
be buffered, so by the time the file exists, the standard input
can already be written to.
I have no reason to believe that a terminal emulator would start
accepting input _after_ launching the command.
I've tested this for hours in a loop without a single failure or
timeout.
2022-12-24 14:06:40 +01:00
Robert Hensing 2b5677caa3 nixosTests.keymap: Reorder test cases to make setup more reliable
I've run this test on repeat for hours, so there's reason to be
hopeful.
2022-12-24 14:06:31 +01:00
Ryan Lahfa 2994edb9e4
Merge pull request #205955 from Izorkin/update-peertube
peertube: 4.3.1 -> 5.0.0
2022-12-23 19:48:00 +01:00
Jacek Galowicz 9938dec682
Merge pull request #170636 from Synthetica9/wait_before_entry
nixos/test-driver: add wait_before_entry
2022-12-23 19:46:23 +01:00
Izorkin 9195f02b49
nixos/peertube: add secretsFile option 2022-12-23 20:47:04 +03:00
Kristoffer Dalby 571780384a
headscale: Update to 0.17.1, conform module to RFC0042
This commit upgrades headscale to the newest version, 0.17.0 and updates
the module with the current breaking config changes.

In addition, the module is rewritten to conform with RFC0042 to try to
prevent some drift between the module and the upstream.

A new maintainer, Misterio77, is added as maintainer.

Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
Co-authored-by: Gabriel Fontes <hi@m7.rs>
Co-authored-by: Geoffrey Huntley <ghuntley@ghuntley.com>
2022-12-23 15:47:53 +01:00
Florian Klink 6b1a896570
Merge pull request #205121 from alaviss/homed
nixos: systemd-homed support
2022-12-23 13:09:17 +01:00
Ryan Lahfa e2e8dfcf44
Merge pull request #207163 from NixOS/rfc0125-improvements
nixos/activation/bootspec: make initrd optional, serialize system, precise extensions' type
2022-12-23 00:43:29 +01:00
Rvfg a43c7b2a70
nixos/{firewall, nat}: add a nftables based implementation 2022-12-23 00:49:24 +08:00
Cole Helbling 0598d95719 nixos/tests: expose bootspec test
On x86_64-linux only because bootspec is for NixOS (for the moment?),
and NixOS is really only a Linux concept (for the moment?).

Not on aarch64-linux because it fails for whatever reason 🤷
2022-12-22 07:56:09 -08:00
Cole Helbling 21f4afd799 nixos/activation/bootspec: fix document output path
The RFC currently stipulates the document will be available at
`$out/boot.json`.
2022-12-22 07:56:09 -08:00
Ryan Lahfa 0b0726ae0b
Merge pull request #205983 from m1cr0man/acme-test-fix
nixos/acme: Increase number of retries in testing
2022-12-22 02:19:19 +01:00
Raito Bezarius 5dd2e60371 nixos/activation/bootspec: make initrd optional, serialize system, precise extensions' type 2022-12-21 23:28:21 +01:00
Michele Guerini Rocco 5dff7733aa
Merge pull request #203454 from rnhmjoj/pr-cups-socket
nixos/hardware/printers: stop cupsd when unneeded
2022-12-21 23:06:00 +01:00
0x4A6F 2b152c5727
test/coturn: add some sanity-checks 2022-12-20 22:54:01 +01:00
Sandro 9c624f5879
Merge pull request #203117 from sikmir/vmtools
vmTools: update current maintained debian versions
2022-12-20 15:51:50 +01:00
Sandro bf46d7b626
Merge pull request #172084 from priegger/prometheus-statsd-exporter 2022-12-19 23:16:02 +01:00
Guillaume Girol 92dbac3199
Merge pull request #205561 from symphorien/nginx-conf-validate
nixos/nginx: validate config at build time
2022-12-19 19:52:33 +00:00
Jörg Thalheim 9bf4ec6909
Merge pull request #206645 from Mic92/nix-ld
nixos/nix-ld: set NIX_LD by default
2022-12-19 16:26:02 +00:00
Jörg Thalheim 4ce47012a6 nixos/nix-ld: set NIX_LD by default 2022-12-19 17:06:41 +01:00
Franz Pletz 6f8f1b0454
Merge pull request #205865 from DeeUnderscore/fix/grafana-socket 2022-12-19 12:04:22 +01:00
Sandro Jäckel 26f704b545
treewide: use nativeBuildInputs with runCommand instead of inlining 2022-12-18 23:36:40 +01:00
figsoda a6a225e33c
Merge pull request #206722 from SuperSandro2000/sourcehut-nix
nixos/sourcehut: resolve deprecated setting
2022-12-18 13:55:43 -05:00
Valentin Gagarin f782da699e
Merge pull request #206646 from figsoda/typos 2022-12-18 18:27:57 +01:00
Sandro Jäckel 92c94a946f
nixos/sourcehut: resolve deprecated setting 2022-12-18 16:53:49 +01:00
Vincent Bernat fc39b5ecc8 nginx: make global redirect vhost option accept exceptions
By moving the return into a location directive, one can provide
exceptions by adding locations. This is similar to what the forceSSL
option does.
2022-12-18 12:21:27 +01:00
figsoda 6bb0dbf91f nixos: fix typos 2022-12-17 19:31:14 -05:00
Robert Hensing cf150c53f1
Merge pull request #200724 from JonathanLorimer/allow-configuration-of-roles
services.postgresql: Allow configuration of user roles in ensureUser
2022-12-18 00:40:57 +01:00
Lucas Savva c9a5bf4a38
nixos/acme: Increase number of retries in testing
Helps to avoid failures in Hydra when the host server starts
the web server too slowly.
2022-12-17 21:12:13 +00:00
Jörg Thalheim 668a2b2f33
Merge pull request #172237 from DeterminateSystems/bootspec-rfc
Support external bootloader backends (RFC-0125)
2022-12-17 08:35:53 +00:00
Raito Bezarius aac4134f43 nixos/tests/bootspec: add EFI support for GRUB test 2022-12-16 17:15:59 -08:00
Ryan Lahfa 4428f9f5e9
Merge pull request #198239 from jacobgreenleaf/jacobg-borg-inhibit
nixos/borgbackup: Add option for inhibiting sleep
2022-12-17 00:45:10 +01:00
Sandro 528a316b31
Merge pull request #205246 from Frostman/unpoller-2.4.0 2022-12-16 22:51:06 +01:00
Sandro c338bf3244
Merge pull request #205712 from devusb/atuin-server 2022-12-16 22:38:35 +01:00
Manuel Bärenz 3479b87182
nixosTests.mastodon: Put script in separate file 2022-12-16 16:19:41 +03:00
Izorkin 883a56c0cc
nixos/tests/mastodon: add test with external services 2022-12-16 16:19:41 +03:00
Naïm Favier dc644c312f
Merge pull request #206061 from ncfavier/nginx-duplicate-modules 2022-12-16 10:09:19 +01:00
Morgan Helton a935888d45 nixos/atuin: init module 2022-12-15 21:07:15 -06:00
Naïm Favier 6c61c436cf
nginx: detect duplicate modules
Nginx breaks at runtime when duplicate modules are added. To detect
this, add a `name` key to all modules.

Also remove the outdated modsecurity v2 module and unify `modsecurity`
and `modsecurity-nginx`.
2022-12-16 01:57:14 +01:00
Artturin 05a2dfd674 lib.replaceChars: warn about being a deprecated alias
replaceStrings has been in nix since 2015(nix 1.10)

so it is safe to remove the fallback

d6d5885c15
2022-12-15 22:25:51 +02:00
Martin Weinelt d37dca5f14
nixos/tests/vaultwarden: Update selenium tests for 2022.10.0
A few form element ids were changed around and a button was renamed.
2022-12-14 15:00:21 +01:00
Franz Pletz a0b6072547
nixos/grafana: add test case for socket proxy 2022-12-14 14:42:13 +01:00
Franz Pletz 78aaaaaadb
Merge pull request #201505 from r-ryantm/auto-update/ntfy-sh 2022-12-14 12:08:03 +01:00
Franz Pletz 5e11704593
nixos/ntfy-sh: fix & expose nixos test 2022-12-14 11:09:52 +01:00
Martin Weinelt 76e962151a nixos/tests/evcc: Fail when the unit produces fatal log messages 2022-12-11 01:25:13 +01:00
Guillaume Girol a768871934 nixos/nginx: validate syntax of config file at build time
Shamelessly stolen from nixcloud-webservices:
https://github.com/nixcloud/nixcloud-webservices/blob/master/modules/web/webserver/lib/nginx_check_config.nix

The nixos test testing the behavior of nginx in case of faulty config
would not build with this change (on purpose), so I modified it so that
the failure is not syntactic.
2022-12-10 23:04:57 +01:00
Sergei Lukianov 136b81be7d nixos/tests/prometheuts-exporters.unpoller: fix test script
Unpoller behaviour changed and now it'll not server metrics if no
controller available, so, let's check for not available controller
message instead.
2022-12-09 21:40:36 -08:00
Yarny0 85aeeac28d cups-pdf: add vm test 2022-12-09 22:20:09 +01:00
Leorize 05420f34cf nixos: add systemd-homed support
As a start, it's not very configurable, but works pretty well.
2022-12-09 12:10:51 -06:00
Artturi 8ffe22e286
Merge pull request #203956 from Artturin/addforbiddendependenciesregex
nixos/top-level.nix: add forbiddenDependenciesRegex option
2022-12-09 07:54:00 +02:00
Martin Weinelt a4f2ca1ef3
Merge pull request #205123 from Frostman/prometheus-smartctl-exporter-0.9.1 2022-12-09 01:58:06 +01:00
Martin Weinelt c7fbae1289
nixos/tests/prometheus-exporters.smartctl: update test script
We can't actually get metrics for a virtual disk drive so the exporter
fails to start with 0.9.x.

Instead let's just make sure it said that /dev/vda was unavailable.
2022-12-09 01:40:01 +01:00
Robert Hensing 470e6fd1cd
Merge pull request #201902 from ck3mp3r/dockertools-architecture-in-config-200725
Adding ability to set image architecture when creating OCI images using DockerTools
2022-12-08 23:54:50 +01:00
ajs124 3071eef957
Merge pull request #201707 from helsinki-systems/alias-krb5Full
krb5Full: turn into alias
2022-12-08 23:54:02 +01:00
Ryan Lahfa 022c7d777a
Merge pull request #196837 from KoviRobi/dnsmasq-attrsets-config
nixos/dnsmasq: Use attrs instead of plain text config
2022-12-08 23:47:08 +01:00
ajs124 c7930769a7 krb5Full: turn into alias 2022-12-08 23:08:44 +01:00
Raito Bezarius 092e6d39cd nixos/tests/bootspec: init
This will test various scenarios of bootspec generation.
2022-12-08 13:50:04 -08:00
Robert Hensing cf7b358d69 nixosTests.docker-tools: Fix syntax
This may be unnecessary, but I'm not waiting for the tests again.
2022-12-08 22:29:38 +01:00
Christian Kemper afe2d0bb8b fix docker inspect image reference 2022-12-08 20:29:10 +01:00
Christian Kemper f6ae4479ea dockerTools: allowing architecture to be specified
... for buildImage, buildLayeredImage and streamLayeredImage,
adding docs and tests.
2022-12-08 20:29:09 +01:00
Leorize 0cc87ab901 nixos/systemd/userdbd: add method to enable service
This is recommended to enable in conjunction with systemd-homed.
2022-12-08 10:28:41 -06:00
rnhmjoj 4f67365482
nixos/tests/printing: split into service/socket
This splits the tests into two: one where cups.socket is started
normally, the order with socket activation.

Why? It's almost impossible to follow the test with 4 different
machines printing at the same time. It should also be more efficient
because only two VMs at a time were needed anyway.
2022-12-07 15:57:45 +01:00
Andrei Pampu acb964a35c nixos/tests/bazarr: remove unfree predicate for unrar 2022-12-07 14:59:49 +01:00
Yureka a0e889791f nixos/tests/peering-manager: init 2022-12-07 12:54:55 +01:00
Robert Hensing ab823e3a11 cassandra_4: init 2022-12-06 14:09:38 +01:00
Bjørn Forsman 831fc4f86a nixos/tests/bazarr: remove unneeded timezone workaround
The issue was fixed in bazarr-1.1.3.
2022-12-05 18:51:53 +01:00
Jacob Greenleaf 0111e9547e nixos/borgbackup: Add option for inhibiting sleep
Adds a new option for backup jobs `inhibitsSleep` which prevents
the system from going to sleep while a backup is in progress.
Uses `systemd-inhibit`, which holds a "lock" that prevents the
system from sleeping while the process it invokes is running.

This did require wrapping the existing backup script using
`writeShellScript` so that it could be run by `systemd-inhibit`.
2022-12-04 19:57:41 -08:00
Robert Kovacsics 2c00429560 nixos/dnsmasq: Use attrs instead of plain text config
This should make it easier to configure in multiple places, override
defaults, etc.
2022-12-04 23:08:37 +00:00
Vincent Haupert dbff3c22c1 nixos/aesmd: add option environment 2022-12-04 20:12:50 +01:00
Andreas Stührk da0dc8339c nixos/aesmd: add option to configure quote provider library
Changes sgx-psw to append `aesm` to `LD_LIBRARY_PATH`:
- Append instead of prepend to allow for overriding in service config
- As we already add a wrapper to add `aesm` to `LD_LIBRARY_PATH` it is
  not necessary to also set in `LD_LIBRARY_PATH` of the systemd service.

Co-authored-by: Vincent Haupert <mail@vincent-haupert.de>
2022-12-04 20:12:50 +01:00
Maximilian Bosch 331d854662
Merge pull request #203874 from noneucat/fix/grocy/storage
nixos/grocy: fix file uploads
2022-12-04 17:28:07 +01:00
Sandro e38618a657
Merge pull request #203825 from SuperSandro2000/mastodon-tootctl
Closes https://github.com/NixOS/nixpkgs/issues/199029
2022-12-04 11:29:45 +01:00
Luke Granger-Brown c7918fed9e nixos/prometheus/unifi-poller: rename to unpoller. 2022-12-03 20:12:54 +00:00
Henri Menke da053d008f
maintainers: remove and add hmenke 2022-12-03 12:26:58 +01:00
Raphael Robatsch 9f874dd95e nixos/tests/initrd-network-openvpn: fix
- The default cipher is BF-CBC, which openvpn refuses to use by default.
  Switched to AES-256-CBC.
- openvpn does not require an external "ip" executable anymore, and does
  not support the "ipconfig" option by default, so remove that option.
2022-12-03 10:32:38 +01:00
Sandro Jäckel 6e845a8491
nixos/mastodon: replace mastodon-env with a proper wrapper mastodon-tootctl 2022-12-03 02:59:39 +01:00
Artturin a34d7b67fd nixos/top-level.nix: add forbiddenDependenciesRegex option
useful for making sure that there's no dev outputs in the system
2022-12-02 21:15:24 +02:00
Robert Hensing 146620355f nixosTests.postgresql: Fix attribute name shadowing 2022-12-02 18:15:01 +00:00
Robert Hensing 7bfbf037d7 Merge remote-tracking branch 'upstream/master' into allow-configuration-of-roles 2022-12-02 18:12:14 +00:00
Georg Haas 8d47058b32
nixos/tests/tayga: init 2022-12-01 11:17:39 +01:00
Andy Chun @noneucat f8f19f84c6 nixos/grocy: add a basic smoke test for file uploads 2022-11-30 22:18:05 -08:00
Mario Rodas 4a057b08c4
Merge pull request #203733 from nagy/freenet-nixos-test
nixosTests.freenet: init
2022-11-30 21:18:55 -05:00
Thomas Gerbet 622f4ee354 php8*: disable PCRE2 JIT SEAlloc to avoid crashes when forking
This is a follow up to #200815 and #184634.

The PCRE2 JIT SEAlloc does not support the `fork()` as announced in
their README [0]:
> If you are enabling JIT under SELinux environment you may also want to add
>  --enable-jit-sealloc, which enables the use of an executable memory allocator
>  that is compatible with SELinux. Warning: this allocator is experimental!
>  It does not support fork() operation and may crash when no disk space is
>  available. This option has no effect if JIT is disabled.

As a result using it in PHP can break apps and tools, it can only be
enabled under very specific context where you have a full picture of
what the PHP code is doing.

This contribution disables again the PCRE2 JIT SEAlloc and extends the
existing PHP/PCRE2 tests to make sure we do not enable it again by
mistake.

[0] https://www.pcre.org/readme.txt
2022-11-30 13:22:39 +01:00
Daniel Nagy 807c2f1fc0
nixosTests.freenet: init 2022-11-30 12:15:00 +01:00
Bruno Bigras 86730cdb4b
Merge pull request #203452 from robryk/restic
nixos/tests/restic: readability & not parsing human-readable output
2022-11-29 11:35:39 -05:00
Sandro 5b408166d8
Merge pull request #203063 from fabianhauser/fix/musescore-test 2022-11-29 17:24:08 +01:00
Jonathan Lorimer 193aa6faf4
Add declarative role config to postgres.service
remove trailing whitespace

switch docs to markdown

use mdDoc

remove trailing whitespace

get rid of double space

add tests and update options to use submodule

remove whitespace

remove whitespace

use mdDoc

remove whitespace

make default a no-op

make ALTER ROLE a single sql statement

document null case
2022-11-28 09:44:46 -05:00
Robert Obryk ccfc1d2421 nixos/tests/restic: use machine-readable output
This change causes us to stop relying on the way `restic snapshots`
formats its human-readable output.
2022-11-28 14:55:32 +01:00
Robert Obryk 7cdb313558 nixos/tests/restic: unify naming
This commit makes the correspondence between a backup job and location
of its repository clearer.
2022-11-28 14:55:28 +01:00
Robert Obryk 84e05961f8 nixos/tests/restic: cleanup 2022-11-28 14:55:21 +01:00
Sandro 853077236a
Merge pull request #202124 from SuperSandro2000/dbus-passthru-daemon 2022-11-28 01:35:34 +01:00
Sandro 9185121c22
Merge pull request #201060 from gador/sqlite3-to-mysql-init 2022-11-28 00:55:45 +01:00
Gerd Flaig adddfe7932 Use file sink encoding json
Encoding ndjson isn't supported in recent versions.
2022-11-27 12:56:00 -05:00
Mario Rodas 98d30160b4
Merge pull request #202619 from NickCao/stratis
stratisd: 3.3.0 -> 3.4.0

Closes #203194
2022-11-27 08:58:59 -05:00
Martin Weinelt 8e46323226 nixos/tests/pinnwand: drop reaper, refactor steck setup 2022-11-27 13:50:44 +01:00
Martin Weinelt 35d7617d81
Merge pull request #200354 from mweinelt/kanidm-1.1.0-alpha.10 2022-11-26 22:11:29 +01:00
Nikolay Korotkiy dd1c4ff5fc
vmTools: update current maintained debian versions 2022-11-26 23:53:24 +03:00
Flakebi 887020f39c nixos/kanidm: Add tls options
Since 1.1.0-alpha.10 kanidm requires TLS to be set up or it won't start.
2022-11-26 21:42:35 +01:00
Silvan Mosberger a566d0842e
Merge pull request #172736 from infinisil/docker-nix-shell 2022-11-26 20:21:59 +01:00
Silvan Mosberger 22d1a12f8b
Merge pull request #203028 from NixOS/pure-nixos-tests 2022-11-26 17:13:32 +01:00
Fabian Hauser 7dd3214c52 nixos/tests/musescore: fix 2022-11-26 14:24:45 +01:00
Silvan Mosberger 47813a3214 nixos/tests: Make pure
Just had @fabianhauser at the #ZurichZHF hackathon run into this, causing the
tests to fail evaluation due to some system impurity
2022-11-26 11:52:51 +01:00
Tom Fitzhenry cc16ce5945 nixos/tests/phosh: add subtest to check the on-screen keyboard 2022-11-26 10:17:04 +01:00
Francesco Gazzetta e518978869
Merge pull request #202728 from fgaz/warzone2100/4.3.2
warzone2100: 4.3.1 -> 4.3.2, add nixos test
2022-11-26 08:54:21 +00:00
Izorkin 5cfb7fb716 nixos/tests/mastodon: update test 2022-11-25 15:00:19 +01:00
Izorkin e8927f2631 nixos/tests/mastodon: remove CA service 2022-11-25 15:00:19 +01:00
Martin Weinelt a4e5468bc0
Merge pull request #202187 from hmenke/alps 2022-11-25 01:34:53 +01:00
Lassulus 43b6a1ffe9
Merge pull request #202216 from helsinki-systems/feat/nixos-acme-test-20y
nixos/tests/acme/server: generate certs with longer validity
2022-11-24 21:42:50 +01:00
Francesco Gazzetta cc0182e2d1 nixosTests.warzone2100: init 2022-11-24 20:48:42 +01:00
Nick Cao 7d2faad3b7
nixos/stratis: update tests to use new features 2022-11-24 10:02:20 +08:00
Martin Weinelt 8cbf9ed05b
Merge pull request #202567 from phfroidmont/master 2022-11-23 22:04:36 +01:00
Paul-Henri Froidmont b8ffc572d2
nixos/patroni: only run tests on x86_64-linux
etcd doesn't support other architectures and refuses to start
2022-11-23 21:54:19 +01:00
Linus Heckemann 24e33a4d2e nixos/ec2: remove paravirtualization-specific code
Paravirtualized EC2 instances haven't been supported since 2017.
It's safe to remove this now.
2022-11-23 17:18:18 +01:00
Félix Baylac-Jacqué 8040c468ed
nixosTests/prosody[-mysql]: fix tests TLS setup
The tests TLS setup was bogus: the xmpp-send-message script was trying
to connect to the server through a bogus domain name. Injecting the
right one.

I'm a bit confused about that one. I know for sure this NixOS test
succeeded last time I checked it, but the TLS conf is bogus for sure.
I assume the slixmpp SNI validation was a bit too loose and was
tightened at some point.
2022-11-23 11:05:12 +01:00
Félix Baylac-Jacqué 501d684de8
nixosTests/prosody: add timeout
The xmpp-sendmessage the slixmpp-powered python script tend to timeout
and block the nixos channels.

Adding a signal-based timeout making sure that whatever happens, the
script won't run for more than 2 minutes. That should be pleinty
enough time to finish regardless of the runner specs. As a data point,
it runs in about 10 secs on my desktop machine.
2022-11-23 11:03:00 +01:00
Henri Menke d02af66091
nixos/alps: fix for Hydra failure
https://hydra.nixos.org/build/199758163
2022-11-22 20:50:28 +01:00
Martin Weinelt 005233baa2
nixos/tests/evcc: init 2022-11-21 22:40:15 +01:00
Sandro Jäckel c7f5becba3 dbus: remove unused daemon passhtru 2022-11-21 20:23:00 +01:00
ajs124 57abd8c1cf nixos/tests/acme/server: generate certs with longer validity 2022-11-21 18:18:17 +01:00
ajs124 7274df353c nixos/tests/acme/server: patch certificate generation for longer validity 2022-11-21 18:17:55 +01:00
Janne Heß c107fb66da
Merge pull request #202132 from ElvishJerricco/systemd-stage-1-tests-hibernate
nixos: ext fixes with systemd-initrd
2022-11-21 10:38:19 +01:00
Nick Cao 46328f5596
nixosTests.systemd-initrd-luks-password: test mounting device unlocked in initrd after switching root 2022-11-21 14:49:20 +08:00
Will Fancher 23b3add0e3 nixos: Fix hibernate test with systemd stage 1 2022-11-20 21:01:51 -05:00
Maximilian Bosch 853d0a3f2b
Merge pull request #199150 from Ma27/grafana-fixup
nixos/grafana: documentation/warning improvements after #191768
2022-11-20 20:53:25 +01:00
Maximilian Bosch 2580440389
Merge pull request #198470 from RaitoBezarius/nc25-openssl
nextcloud25: use openssl 1.1 as a PHP extension to fix RC4 encryption
2022-11-20 18:32:41 +01:00
Maximilian Bosch 9d7e9c5965
nixos/grafana: allow using both directories or single YAML files for non-Nix provisioning 2022-11-20 18:21:41 +01:00
Maximilian Bosch febc8a4307
nixos/tests/grafana: demonstrate how to use the file provider
Yes, it's still a store path, but it's only for demonstration purposes.
Also we now have fewer warnings in the provision test.
2022-11-20 18:21:40 +01:00
Maximilian Bosch afd6199cff
nixos/grafana: re-add legacy notifiers test, mention notifiers in release notes 2022-11-20 18:21:39 +01:00
Maximilian Bosch 957e368f3d
nixos/grafana: provision.{datasources,dashboards} can't be a list anymore
The hack with `either` had the side-effect that the sub-options of the
submodule didn't appear in the manual. I decided to remove this because
the "migration" isn't that hard, you just need to fix some module
declarations.

However, `mkRenamedOptionModule` wouldn't work here because it'd create
a "virtual" option for the deprecated path (i.e.
`services.grafana.provision.{datasources,dashboards}`), but that's the
already a new option, i.e. the submodule for the new stuff.

To make sure that you still get errors, I implemented a small hack using
`coercedTo` which throws an error if a list is specified (as it would be
done on 22.05) which explains what to do instead to make the migration
easier.

Also, I linkified the options in the manual now to make it easier to
navigate between those.
2022-11-20 18:21:35 +01:00
ajs124 626e8b67fa nixos/tests/acme/server: regenerate certs
expired today
2022-11-20 16:37:42 +01:00
Elis Hirwing 14cc62d7e6
Merge pull request #201000 from drupol/php/8.2.0
php82: init at 8.2.0rc6
2022-11-20 16:01:00 +01:00
Georg Haas f20402f8e3
nixos/tests/deluge: fix test
deluge-console always exits with code 1. This is known in https://dev.deluge-torrent.org/ticket/3291
2022-11-20 00:35:59 +01:00
Martin Weinelt c021df5792
Merge pull request #197254 from Atemu/fstab-escape-options 2022-11-19 18:08:40 +01:00
Martin Weinelt 2714a22521
Merge pull request #198820 from talyz/keycloak-admin-password 2022-11-19 15:03:03 +01:00
Martin Weinelt 218e2f5e14
Merge pull request #193740 from illustris/hbase
hbase: remove 1.7, 2.4.11 -> 2.4.15, init 2.5.1, 3.0.0-alpha-2 -> alpha-3
2022-11-19 14:28:11 +01:00
Zhaofeng Li 3d185562b5 nixos/tests/phosh: init 2022-11-19 06:55:25 +01:00
Anderson Torres fc8a4f7291
Merge pull request #201521 from hmenke/alps
nixos/alps: add hardening, extensible options, test
2022-11-18 14:46:03 -03:00
Manuel Bärenz af447367ec nixos/mastodon: Add turion as maintainer 2022-11-17 20:05:50 +01:00
Kerstin Humm 7718720149 nixos/mastodon: increase RAM for NixOS test vm 2022-11-17 20:05:50 +01:00
Henri Menke 9820effbba
nixos/alps: test login and cookie 2022-11-17 17:12:57 +01:00
Henri Menke aeb5a692c3
nixos/alps: add hardening, extensible options, test 2022-11-17 17:12:54 +01:00
Pol Dellaiera 1812d1540e
php82: init at 8.2.0rc6 2022-11-16 18:57:26 +01:00