Commit graph

1225 commits

Author SHA1 Message Date
Robert Hensing ba5a6f19ed
Merge pull request #312516 from Stunkymonkey/nixos-swap-umask
nixos/swap: prefer 'umask' over 'chmod'
2024-06-20 20:06:13 +02:00
Sandro Jäckel 131ef6d2ed
nixos/no-x-libs: fix gjs
Due to the switch to finalAttrs, we now need to properly disable installTests.
2024-06-08 21:46:14 +02:00
Bobby Rong 6051698052
Merge pull request #314695 from nonetrix/patch-1
nixos/xdg/portal: Fix typo
2024-06-04 13:27:16 +08:00
Sandro 77e9384f0f
Merge pull request #314428 from SuperSandro2000/nox-gst 2024-05-27 14:03:46 +02:00
Izorkin 3381fdd745
nixos/no-x-libs: add pinentry-tty 2024-05-27 00:22:07 +03:00
Sandro Jäckel db66127c5b
nixos/no-x-libs: make sure gst-plugins-base has enableGl disabled 2024-05-26 20:51:00 +02:00
Sandro Jäckel cb58275dc6
nixos/no-x-libs: build gst-plugins-rs without gtk 2024-05-26 20:51:00 +02:00
fuggy ef5ff2a075
nixos/xdg/portal: Fix typo
There was a typo that misspelled /etc/ as /etx/
2024-05-25 17:26:15 -05:00
Sandro Jäckel b9ec2c14d8
nixos/no-x-libs: fix mpv build by disabling drmSupport, disable more GUI only relevant features 2024-05-25 02:36:13 +02:00
Sandro Jäckel 2a8e5155c9
nixos/no-x-libs: add libplacebo 2024-05-25 02:36:12 +02:00
nessdoor 633479572e
nixos/nsswitch: add support for overriding sudoers entries (#310818) 2024-05-20 12:28:31 -04:00
Felix Buehler 615d19beb3 nixos/swap: prefer 'umask' over 'chmod' 2024-05-16 23:53:47 +02:00
Jared Baur 91d7945974
nixos/terminfo: always use buildPlatform's terminfo (#309108)
Many terminal packages don't cross compile, so the `terminfo`
 NixOS module was not usable for nixos configurations that are
 cross-compiled.

Terminfo files (AFAIK) are small files that contain data about
 terminal capability, so they should never have any runtime
 dependencies that would cause any executables or otherwise
 incompatible outputs from the `buildPlatform` to leak into the
 nixos config's closure.
2024-05-06 09:04:43 +00:00
北雁 Cryolitia 04a7f3c371
nixos/xdg-terminal-exec: init module 2024-05-05 02:06:43 +08:00
Sandro a534c335e0
Merge pull request #307553 from SuperSandro2000/gst-plugins-good-nox
nixos/no-x-libs: disable more GUIs for gst_all_1.gst-plugins-good
2024-05-01 20:08:13 +02:00
Sandro Jäckel 08a681689f
nixos/no-x-libs: disable more GUIs for gst_all_1.gst-plugins-good 2024-04-28 22:14:08 +02:00
Sandro c960becaf8
nixos/no-x-libs: add ffmpeg, ffmpeg_6, ffmpeg_7 2024-04-28 18:27:19 +02:00
Peder Bergebakken Sundt 01a730b41e
Merge pull request #266540 from surfaceflinger/hardened-malloc-light
graphene-hardened-malloc: migrate to by-name, build light variant
2024-04-26 15:05:09 +02:00
nat af65b87b23
nixos/malloc: add graphene-hardened-light 2024-04-18 23:19:46 +02:00
Sandro Jäckel c5371710de
nixos/shells-environment: allow int and float in environment variables 2024-04-17 22:36:19 +02:00
Daniel Fullmer 68142254d2 nixos/zram: add compression algorithms to option enum
These options are available on a standard NixOS system, which can be
seeing by running `cat /sys/devices/virtual/block/zram0/comp_algorithm`.
2024-04-16 15:39:31 -07:00
stuebinm 6afb255d97 nixos: remove all uses of lib.mdDoc
these changes were generated with nixq 0.0.2, by running

  nixq ">> lib.mdDoc[remove] Argument[keep]" --batchmode nixos/**.nix
  nixq ">> mdDoc[remove] Argument[keep]" --batchmode nixos/**.nix
  nixq ">> Inherit >> mdDoc[remove]" --batchmode nixos/**.nix

two mentions of the mdDoc function remain in nixos/, both of which
are inside of comments.

Since lib.mdDoc is already defined as just id, this commit is a no-op as
far as Nix (and the built manual) is concerned.
2024-04-13 10:07:35 -07:00
Janik aeeedb0b60
Merge pull request #302608 from nbdd0121/dns
nixos/resolvconf: fix useLocalResolver when IPv6 is enabled
2024-04-12 21:59:42 +02:00
Janik bf69641481
Merge pull request #296584 from Schweber/master
nixos/resolvconf: add option "trust-ad" when `useLocalResolver` is enabled
2024-04-12 21:54:24 +02:00
Bjørn Forsman a29010fe79 nixos: improve many 'enable' descriptions 2024-04-09 07:10:17 +02:00
Gary Guo eb91bc05bd nixos/resolvconf: fix useLocalResolver when IPv6 is enabled
resolvconf.conf is a shell script and unlike resolv.conf, multiple
nameservers are specified by space separating them instead of adding
multiple lines.

Fixes: fc060cc3cb
2024-04-08 16:45:35 +01:00
edef 725bb4e48c lib: add xor
This gets clumsily reimplemented in various places, to no useful end.
2024-04-04 19:46:58 +00:00
Adam Stephens 790fb86a7f
nixos/users-groups: move linger to oneshot and add nixos test 2024-03-21 19:51:05 -04:00
Adam Stephens 564c3749d9
nixos/users-groups: fix broken linger 2024-03-21 13:47:15 -04:00
Silvan Mosberger 308671dbe8 nixos/nix: Fix example for nix.settings option
Attribute sets aren't valid option values, needs to be a list
2024-03-19 22:55:19 +01:00
Schweber beb139496a
nixos/resolvconf: add option "trust-ad" when useLocalResolver is enabled 2024-03-17 07:52:00 +00:00
Guillaume Girol 1f26e67560
Merge pull request #278064 from symphorien/nix_config_extra
nixos/nix: add workaround for https://github.com/NixOS/nix/issues/9487
2024-03-15 22:46:51 +01:00
Janik H. fc060cc3cb nixos/resolvconf: add ::1 as local dns resolver 2024-03-15 19:31:37 +01:00
Sandro c86e8fd7a0
Merge pull request #133542 from fpletz/refactor/pinentry-remove-multiple-outputs
pinentry: remove multiple outputs
2024-03-09 23:57:27 +01:00
Jordan Williams 8558d7b1ce
nixos/users-groups: Fix the update-lingering activation script failing
The update-lingering activation script currently fails during rebuilds.
This happens when removing a user with linger enabled.
The call to loginctl disable-linger runs for the non-existent user.
This returns an error code which causes the failure.

To mitigate this, this PR removes any residual linger files.
These are files named for the user in /var/lib/systemd/linger.
A simple check for user existence determines whether to delete the file.
This happens before the call to disable-linger to avoid any errors.

Fixes #283769.
2024-03-03 12:00:25 -06:00
Guillaume Girol 5b274d5f01 nixos/nix: add workaround for https://github.com/NixOS/nix/issues/9487
Nix has a suprising behavior where if the option `extra-foo` is set before `foo`, then setting `foo` overwrites the setting for `extra-foo`. This is reported as https://github.com/NixOS/nix/issues/9487, and will likely not be fixed any time soon.

This works around this issue by always putting `extra-*` settings after non-extra ones in the nixos-generated `/etc/nix.conf`.
2024-03-03 17:03:46 +01:00
Franz Pletz 764d15f59f
pinentry: remove multiple outputs package
fixes #133156 #124753
2024-03-02 17:16:53 +01:00
github-actions[bot] a3e2b0de90
Merge master into staging-next 2024-02-24 12:01:15 +00:00
Colin a65967a12c nixos/nix: documentation: fix outdated reference to /etc/nix.conf 2024-02-24 21:29:38 +11:00
github-actions[bot] 2ad339408a
Merge staging-next into staging 2024-02-18 00:02:44 +00:00
Sandro d12bb5b983
Merge pull request #213783 from SuperSandro2000/nox-vte
nixos/vte: use vte without any GUI dependencies; nixos/no-x-libs: add vte
2024-02-17 20:55:54 +01:00
github-actions[bot] 8bc9edd60d
Merge staging-next into staging 2024-02-17 18:01:24 +00:00
Jan Tojnar f896ce73af
Merge pull request #268197 from jtojnar/xdp-variable-changes
xdg-desktop-portal: Use custom variable for finding portals
2024-02-17 14:18:55 +01:00
github-actions[bot] daaa4e1653
Merge staging-next into staging 2024-02-17 00:02:47 +00:00
Linus Heckemann 5863c27340
Merge pull request #287506 from Ma27/warn-user-password-options
nixos/users-groups: warn on ambiguous password settings
2024-02-16 22:20:38 +01:00
Izorkin fdf77d10cb
nixos/no-x-libs: build pipewire without vulkan support 2024-02-16 09:21:00 +03:00
Jonas Chevalier c3ef726ee1
nixos/ldso: avoid instance of nixpkgs (#288509)
Follow-up to #269551

Avoid creating a new instance of nixpkgs to access two variables.
`pkgs.pkgsi686Linux` was being accessed whenever the feature is being
used or not.

A second instance of nixpkgs is being created in
`nixos/modules/config/stub-ld.nix` and can be disabled by setting
`environment.ldso32 = null` or `environment.stub-ld.enable = false`.

Both combined fixes this error:

    error: attribute 'i686-linux' missing
2024-02-15 13:01:03 +01:00
Jan Tojnar fe40e99020 nixos/xdg/portal: Use systemPackage instead of buildEnv
Portals are global so we can just link them globally.

There might, in theory, be some unexpected system-path contamination
(e.g. when a portal package installs its executables to `/bin`)
but I think the risk is relatively minor compared to the added complexity.

While at it, let’s point the environment variable to system-path.
That will allow changes to installed portals to apply without having to re-log in.
2024-02-11 03:32:47 +01:00
Jan Tojnar 3b2f55e89f xdg-desktop-portal: Use custom variable for finding portals
x-d-p only looks for portal definitions in one of two places:
- datadir (which we cannot install anything to, since Nix packages are immutable)
- when `XDG_DESKTOP_PORTAL_DIR` environment variable is set, the path specified therein
  (meant for tests, disables looking for portal configuration anywhere else)

Let’s introduce our own `NIX_XDG_DESKTOP_PORTAL_DIR` environment variable
that will only control the portal definitions lookup.
We will not use it for searching for configuration
because it would require looking in the parent directory
and `XDG_CONFIG_DIRS` variable is sufficient for us.
2024-02-11 03:21:55 +01:00
Maximilian Bosch f6954309e8
nixos/users-groups: warn on ambiguous password settings
After 4b128008c5 it took me a while in a
test setup to find out why `root` didn't have the password anymore I
declared in my config.

Because of that I got reminded how the order of preference works for the
password options:

    hashedPassword > password > hashedPasswordFile

If the user is new, initialPassword & initialHashedPassword are also
relevant. Also, the override is silent in contrast to any other
conflicting definition in NixOS.

To make this less surprising I decided to warn in such a case -
assertions would probably break too much that technically works as
intended.

Also removed the `initialHashedPassword` for `root`. This would cause a
warning whenever you set something in your own config and a `!` is added
automatically by `users-groups.pl`.

`systemd-sysusers` also seems to implement these precedence rules, so
having the warning for that case also seems useful.
2024-02-09 16:44:35 +01:00