Commit graph

815 commits

Author SHA1 Message Date
Lin Jian debb218a7a
nixos/kmonad: add new option enableHardening (#370437) 2025-01-05 19:02:27 +08:00
Will Fancher 15be453e9a
switch-to-configuration: Better handling of socket-activated units (#359724) 2025-01-04 11:51:21 -05:00
Michael Livshin cdc84fcc96 udev: substitute /usr/bin/cat in rules
Used by alsa-utils 1.2.13.
2025-01-04 00:56:56 +02:00
Lin Jian 37e6624667
nixos/kmonad: add new option enableHardening
Before

```console
$ systemd-analyze security kmonad-foo.service | tail -n 1
→ Overall exposure level for kmonad-foo.service: 8.2 EXPOSED 🙁
```

After

```console
$ systemd-analyze security kmonad-foo.service | tail -n 1
→ Overall exposure level for kmonad-foo.service: 0.4 SAFE 😀
```
2025-01-04 03:41:15 +08:00
Lin Jian aff999e6d4
nixos/kmonad: avoid running an unnecessary bash (#370064) 2025-01-03 07:22:46 +08:00
Lin Jian c3588cf2c5
nixos/kmonad: avoid running an unnecessary bash 2025-01-03 02:21:23 +08:00
Lin Jian ed3f112a0e
nixos/kmonad: remove unnecessary cli flag --input
input has already been set in the config file.
2025-01-03 02:21:18 +08:00
Lin Jian 9695e75dde
nixos/kmonad: create determinate symlinks 2025-01-02 06:02:52 +08:00
Lin Jian e8ad057e99
nixos/kmonad: make sure new config is used after nixos-rebuild switch (#369853) 2025-01-02 01:39:54 +08:00
Lin Jian 280715cf39
nixos/kmonad: make sure new config is used after nixos-rebuild switch 2025-01-02 01:21:16 +08:00
Lin Jian 8463300edf
nixos/kmonad: use lib.getExe 2025-01-01 10:33:40 +08:00
Lin Jian f83da7d9bd
nixos/kmonad: use the official suffix for config file
Both the official Emacs[1] and Vim[2] plugins use kbd as the config file
suffix.

[1]: b07f3e1604/kbd-mode.el (L275)
[2]: 3797844519/ftdetect/kbd.vim (L18)
2025-01-01 10:33:40 +08:00
Lin Jian 28a1740fd1
nixos/kmonad: introduce a new helper function mkName 2025-01-01 10:33:40 +08:00
Lin Jian 657ff03cc3
nixos/kmonad: make type of delay more strict 2025-01-01 10:33:40 +08:00
Lin Jian 23768e2a12
nixos/kmonad: simplify config for default keyboard name 2025-01-01 10:33:39 +08:00
Lin Jian cbf4f6a86d
nixos/kmonad: improve doc 2025-01-01 10:33:39 +08:00
Lin Jian ffea31ccbb
nixos/kmonad: add meta.maintainers 2025-01-01 10:33:39 +08:00
Guillaume Girol ba00c29619
nixos/sane: ensure saned can access usb scanners (#367198) 2024-12-28 10:07:58 +01:00
Marcin Serwin 1d2118f727
asusd: allow specifying configs via paths 2024-12-23 17:02:04 +01:00
Marcin Serwin 8fa4a6c597
asusd: support multiple aura configs
Since version 6.0.0 asusd supports multiple aura devices. Since each of
them may have a different configuration, the `aura.ron` file, previously
used for configuration, is now ignored in favor of device specific
`aura_{prod_id}.ron` configuration. This change adds support for
specifying multiple aura configs via `auraConfigs` attribute and removes
the old `auraConfig` attribute.
2024-12-22 12:28:17 +01:00
Guillaume Girol 7d0c25dca2 nixos/sane: ensure saned can access usb scanners
For a user to be able to scan with an USB scanner, it must have write access
to the corresponding file in /dev/bus/usb. Enabling the sane module
adds SANE's upstream hwdb file and udev rules to udev search path. The
hwdb file tags the scanner as `libsane_matched` and a builtin (from
systemd upstream) udev rule marks all `libsane_matched` devices as
uaccess. When a physical user logins, logind adds an acl allowing them
to write to the device.

Unfortunately, saned is a daemon. Therefore, uaccess has no effect for
it, and if no other udev rule changes the device to belong to the
scanner group or the lp group, (there are such rules, but they are not
complete enough, in that some scanners known by SANE rules are not known
by these rules), it will not be able to write to the scanner.

This solves this by adding a udev rule so that all libsane_matched
devices have an acl rules so that users in the scanner group can write.

A similar rule is present on Arch and Debian at least.

Note that we don't chgroup the file instead, because this posed problems
in the past: scanners are often also printers, and a device's group
cannot be simultaneously lp and scanner.

Fixes: https://github.com/NixOS/nixpkgs/issues/361981
2024-12-21 12:00:00 +00:00
William Edwards 11d10df01a inputplumber: init at 0.39.2 2024-12-19 09:30:46 -08:00
Andreas Fuchs 878be9c20b Address review feedback: Attempt to fix wonky indentation 2024-12-18 08:17:04 -05:00
Jörg Thalheim ace2b4c260 nixos/firmware: fix compression condition 2024-12-16 09:01:17 +01:00
Jörg Thalheim 0a9dd5612d nixos/firmware: make compression configurable
In nixos-images for nixos-anywhere, we optimize for the smallest
possible image size because our installer is loaded into RAM.
2024-12-13 15:52:21 +01:00
Arne Keller 0a324bb35b
scanservjs: init at 2.27.1; nixos/scanservjs: init (#249806) 2024-12-12 17:01:22 +01:00
Silvan Mosberger 4f0dadbf38 treewide: format all inactive Nix files
After final improvements to the official formatter implementation,
this commit now performs the first treewide reformat of Nix files using it.
This is part of the implementation of RFC 166.

Only "inactive" files are reformatted, meaning only files that
aren't being touched by any PR with activity in the past 2 months.
This is to avoid conflicts for PRs that might soon be merged.
Later we can do a full treewide reformat to get the rest,
which should not cause as many conflicts.

A CI check has already been running for some time to ensure that new and
already-formatted files are formatted, so the files being reformatted here
should also stay formatted.

This commit was automatically created and can be verified using

    nix-build a08b3a4d19.tar.gz \
      --argstr baseRev b32a094368
    result/bin/apply-formatting $NIXPKGS_PATH
2024-12-10 20:26:33 +01:00
chayleaf ce37a0a30a
nixos/scanservjs: init
Init NixOS module for scanservjs

https://github.com/sbs20/scanservjs/
2024-12-09 03:00:18 +07:00
Felix Buehler 3344c302e2 nixos/services.usbrelayd: remove with lib; 2024-12-08 13:21:53 +01:00
Felix Buehler a5b237c027 nixos/services.trezord: remove with lib; 2024-12-08 13:21:53 +01:00
Felix Buehler 21a5864657 nixos/hardware.sane.dsseries: remove with lib; 2024-12-08 13:21:53 +01:00
Felix Buehler bbea258a9d nixos/hardware.sane.brscan5: remove with lib; 2024-12-08 13:21:53 +01:00
Felix Buehler 5cbb902a79 nixos/hardware.sane.brscan4: remove with lib; 2024-12-08 13:21:53 +01:00
Felix Buehler e7095ad753 nixos/services.actkbd: remove with lib; 2024-12-08 13:21:52 +01:00
Will Fancher 5c8a2cab3f
nixos/buffyboard: init (#358941) 2024-12-07 03:36:18 -05:00
Jakub Ryška 9b37d566f2
nixos/asusd: correct suffix of asus/profile.conf to ron (#285904) 2024-12-05 22:10:11 +02:00
Andreas Fuchs bf9c6c9861 switch-to-configuration-ng: Better handling of socket-activated units
Previously, if any unit had a socket associated with it, stc-ng
counted it as "socket-activated", meaning that the unit would get
stopped and the socket get restarted. That can wreak havoc on units
like systemd-udevd and systemd-networkd.

Instead, let units set the new flag notSocketActivated, which sets a
boolean on the unit indicating to stc-ng that the unit wants to be
treated like any other non-socket-activated unit instead. That will
stop/start or restart these units on upgrades, without unnecessarily
tearing down any machinery that the system needs to run.
2024-11-27 21:36:09 -05:00
Colin 900bd0d8e6 nixos/buffyboard: init
[buffyboard](https://gitlab.postmarketos.org/postmarketOS/buffybox/-/tree/master/buffyboard)
is the on-screen framebuffer keyboard provided by postmarketOS's
buffybox project.

enable this with `services.buffybox.enable = true;`: any additional
settings are strictly optional.

once enabled, tab to an unused TTY (e.g. Ctrl+Alt+F2) and use the
mouse/touchpad/touchscreen to use the virtual keyboard. may require
a manual `systemctl start buffybox` if enabled on an already-booted
device.

Co-authored-by: Luflosi <luflosi@luflosi.de>
2024-11-26 09:13:32 +00:00
Sefa Eyeoglu 91fee43100
nixos/monado: add forceDefaultRuntime option
This option replaces the active runtime manifest in the user directory.
Games running through Steam's Pressure Vessel cannot read /etc so
forcefully overriding the file every time the service starts, will allow
those games to use Monado.

Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2024-11-20 21:42:06 +01:00
Toast d5808aee19
handheld-daemon-ui: init at 3.2.3 (#305027)
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
Co-authored-by: Arne Keller <2012gdwu+github@posteo.de>
2024-11-19 11:17:59 +01:00
Gaetan Lepage 8fac714b78 nixos/g810-led: fix module 2024-11-17 11:48:24 +01:00
Masum Reza c04b381470
nixos/g810-led: init (#355884) 2024-11-15 10:03:47 +05:30
Gaetan Lepage a5f34daeeb nixos/g810-led: init 2024-11-14 13:49:40 +01:00
Sandro 3d5dcee08a
nixos/udisks2: add package option (#293495) 2024-11-11 14:57:07 +01:00
K900 44207d25be
nixos/amdvlk: don't set "amdgpu" xserver driver (#353987) 2024-11-06 13:39:09 +03:00
John Titor 5473874d08
nixos/amdvlk: don't set "amdgpu" xserver driver
Not related and this should never have been in the module in the first place.
Probably got in during a rebase.
2024-11-06 16:06:04 +05:30
Sandro 3774135e4e
nixos/bluetooth: reference bluez doc in descriptions (#352965) 2024-11-06 01:33:08 +01:00
AnnaGraphic 0d0690dc79 nixos/bluetooth: reference bluez doc in descriptions 2024-11-05 22:58:48 +01:00
Sandro a4e9a2f859
tuxedo-keyboard: fix compilation for kernel 6.10 and 6.11 (#336633) 2024-11-05 16:43:58 +01:00
Philip Taron 2b12f69e85
spacenavd: resolve merge conflicts and address PR feedback 2024-11-04 09:02:39 -08:00
Jan B. 4391c3883b
nixos/tuxedo-drivers: init 2024-11-03 22:54:56 +01:00
Noa Aarts 64a429e14a
nixosModules.monado: use hardware.graphics instead of hardware.opengl 2024-11-02 21:47:02 +01:00
Noa Aarts 5bfad8d9f6
nixosModules.monado: format using nixfmt 2024-11-02 21:46:42 +01:00
Anderson Torres 178ea7bbd5 nixos/triggerhappy: update and format
mpc-cli is now mpc
2024-11-01 20:07:03 -03:00
Sefa Eyeoglu 17313151da
nixos/monado: install monado-vulkan-layers (#301044) 2024-10-31 19:21:38 +01:00
Sefa Eyeoglu 0642aa2f53
nixos/monado: install monado-vulkan-layers
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2024-10-24 15:01:42 +02:00
Rafael Fernández López 3f119f80a5
nvidia-container-toolkit: assert nvidia driver is present
Also, do not add the `nvidia` driver to `videoDrivers` automatically;
assert it is present (or the datacenter one) instead.
2024-10-22 00:05:26 +02:00
r-vdp c9160efd81
nixos/kmonad: init 2024-10-18 11:47:26 +02:00
Someone a9b63f037b
nvidia-container-toolkit: add "nvidia" to services.xserver.videoDrivers (#344174) 2024-10-14 19:58:35 +00:00
Tom Vincent 069e6f3262
nixos/upower: update percentage defaults
Current defaults were added in aecfea0, which were in turn based on upstream:
28bd86c181/etc/UPower.conf.

Current upstream config:
94c91f93f1/etc/UPower.conf
2024-09-27 09:41:55 +01:00
Rafael Fernández López 0d3c3735e5
nvidia-container-toolkit: add "nvidia" to services.xserver.videoDrivers
This will ensure that all requirements are met when the
nvidia-container-toolkit is enabled in order to generate the CDI specs
for the machine.

Also, if `config.virtualisation.docker.rootless.enable` is true,
automatically enable the CDI feature if the Docker version > 25 for
the rootless installation.
2024-09-24 17:10:07 +02:00
Robert Schütz 030f88a326 nixos/iptsd: Touch was renamed to Touchscreen in v3 2024-09-23 12:31:51 -07:00
Josh Hoffer 4080d35d2b nixos/udev: only restart when udev rules change
Only restart `systemd-udevd.service` if udev rules in `/etc/udev/rules`
actually changed. The paths of `services.udev.packages` may change
frequently but the resulting udev rules built by `udevRulesFor`
likely change less often.

This has the added benefit of not adding `services.udev.packages` to
the system closure if they are only used for their udev rules
(issue #308937).
2024-09-19 17:26:01 +02:00
Marco Rebhan 3b12ef2f6f
nixos/udisks2: add package option 2024-09-09 14:13:08 +02:00
sohalt 896663ce96 nixos/spacenavd: Use upstream module 2024-09-04 19:01:41 +02:00
Benno Bielmeier b8c7d88784 nixos/services.thinkfan: fix undefined variables
In d9dc50dc11 the usage of `with lib;` has
been removed from thinkfan.nix. Unfortunately, adjusting the check line
and its usage of the functions all,id,zipListsWith has not been updated
resulting in evaluation errors complaining about "undefined variable".
Update: partly covered in 0646a0771b of #339084

rel: #208242
2024-09-03 10:42:28 +02:00
Felix Buehler 0646a0771b nixos/services.thinkfan: fix all & id 2024-09-02 21:12:56 +02:00
Felix Buehler 6747d84812 nixos/services.kanata: fix utils 2024-09-01 19:42:03 +02:00
Felix Bühler 30eba5df55
nixos/services.libinput: remove with lib; (#338054) 2024-08-30 23:15:31 +02:00
Felix Buehler a79aa024ca nixos/services.usbmuxd: remove with lib; 2024-08-30 00:30:54 +02:00
Felix Buehler ab7b22c311 nixos/services.upower: remove with lib; 2024-08-30 00:30:54 +02:00
Felix Buehler c1573bb3ef nixos/services.undervolt: remove with lib; 2024-08-30 00:30:54 +02:00
Felix Buehler 0de89d26ea nixos/services.udisks2: remove with lib; 2024-08-30 00:30:53 +02:00
Felix Buehler b00fba5c63 nixos/services.udev: remove with lib; 2024-08-30 00:30:53 +02:00
Felix Buehler 48633eb323 nixos/hardware.tuxedo-rs: remove with lib; 2024-08-30 00:30:53 +02:00
Felix Buehler 624ea29c27 nixos/services.triggerhappy: remove with lib; 2024-08-30 00:30:53 +02:00
Felix Buehler cb1696c728 nixos/services.tlp: remove with lib; 2024-08-30 00:30:53 +02:00
Felix Buehler 00052ae198 nixos/services.throttled: remove with lib; 2024-08-30 00:30:52 +02:00
Felix Buehler d9dc50dc11 nixos/services.thinkfan: remove with lib; 2024-08-30 00:30:52 +02:00
Felix Buehler f4fdd33746 nixos/services.thermald: remove with lib; 2024-08-30 00:30:52 +02:00
Felix Buehler b80de00ac6 nixos/services.tcsd: remove with lib; 2024-08-30 00:30:52 +02:00
Felix Buehler d59ce5878b nixos/hardware.spacenavd: remove with lib; 2024-08-30 00:30:52 +02:00
Felix Buehler 131116e4f0 nixos/services.saned: remove with lib; 2024-08-30 00:30:51 +02:00
Felix Buehler e2a4b6715f nixos/services.ratbagd: remove with lib; 2024-08-30 00:30:51 +02:00
Felix Buehler 439cb745b0 nixos/hardware.rasdaemon: remove with lib; 2024-08-30 00:30:51 +02:00
Felix Buehler 08ec49ef41 nixos/services.pommed: remove with lib; 2024-08-30 00:30:51 +02:00
Felix Buehler 2f256fd905 nixos/services.pcscd: remove with lib; 2024-08-30 00:30:51 +02:00
Felix Buehler b2d74343f1 nixos/services.openrgb: remove with lib; 2024-08-30 00:30:50 +02:00
Felix Buehler 78b24bea0f nixos/services.lirc: remove with lib; 2024-08-30 00:30:50 +02:00
Felix Buehler 827d9dfac9 nixos/services.keyd: remove with lib; 2024-08-30 00:30:50 +02:00
Felix Buehler 3b7622d31b nixos/services.kanata: remove with lib; 2024-08-30 00:30:50 +02:00
Felix Buehler f5c96d88c1 nixos/services.joycond: remove with lib; 2024-08-30 00:30:50 +02:00
Felix Buehler d71be6eda5 nixos/services.irqbalance: remove with lib; 2024-08-30 00:30:49 +02:00
Felix Buehler 650db2b016 nixos/services.interception-tools: remove with lib; 2024-08-30 00:30:49 +02:00
Felix Buehler d3a4a69eda nixos/services.illum: remove with lib; 2024-08-30 00:30:49 +02:00
Felix Buehler 8ebc06069d nixos/services.fwupd: remove with lib; 2024-08-30 00:30:49 +02:00
Felix Buehler 6c707fe30f nixos/services.freefall: remove with lib; 2024-08-30 00:30:49 +02:00
Felix Buehler 29536d4a4d nixos/services.fancontrol: remove with lib; 2024-08-30 00:30:48 +02:00
Felix Buehler 3822e798f8 nixos/services.brltty: remove with lib; 2024-08-30 00:30:48 +02:00
Felix Buehler 555402cee5 nixos/services.bolt: remove with lib; 2024-08-30 00:30:48 +02:00