Commit graph

39020 commits

Author SHA1 Message Date
K900 b5dc67dd94
Merge pull request #284130 from xNaxdy/fix-plasma5-mobilegear
nixos/plasma5: fix plasmaMobileGear path
2024-01-27 07:07:52 +03:00
Weijia Wang 4354538139 Merge branch 'staging-next' into staging 2024-01-27 04:17:36 +01:00
Weijia Wang 7d021ca26b
Merge pull request #265056 from rgri/init-mouse-actions
mouse-actions: init at 0.4.4
2024-01-27 03:47:42 +01:00
Julien Malka ceeddc5b15 nixos/systemd-boot: move builder script in bin folder 2024-01-27 01:29:40 +00:00
Thomas Gerbet 117fd19a77
Merge pull request #276306 from ambroisie/aria2-rpc-secret-file
nixos/aria2: implement 'rpcSecretFile'
2024-01-27 00:46:56 +01:00
Bruno BELANYI 44792c6df4 nixos: release notes for woodpecker update 2024-01-26 22:54:32 +00:00
Naxdy edc49b2e83
nixos/plasma5: fix plasmaMobileGear path 2024-01-26 23:52:49 +01:00
Yt a759a579fb
Merge pull request #283447 from Munksgaard/livebook-fixes
livebook: Use `mix release` to build instead of escript
2024-01-26 22:14:08 +00:00
Felix Buehler bdce5312c9 nixos/{zabbixServer,zabbixProxy}: prefer 'install' over 'mkdir/chmod/chown' 2024-01-26 23:10:57 +01:00
jacekpoz 49130d8bf7
nixos/ratbagd: add package option 2024-01-26 22:58:44 +01:00
Felix Buehler 4c9b5cb310 nixos/rabbitmq: prefer 'install' over 'mkdir/chmod/chown' 2024-01-26 22:56:28 +01:00
maxine 642317d03f
Merge pull request #283618 from SuperSandro2000/tailscale-resoleconf
nixos/tailscale: make resolvconf package depending on enablement of module
2024-01-26 22:41:14 +01:00
Felix Bühler d9de6dd272
Merge pull request #284075 from rhoriguchi/nixos/esphome
nixos/esphome: add option to use ping to check online status of devices
2024-01-26 22:13:11 +01:00
Kira Bruneau 473b20c3d7
Merge pull request #281909 from kira-bruneau/gamemode
nixos/gamemode: add gamemode group
2024-01-26 15:25:56 -05:00
superherointj cbe8e0c980 nixos/etcd: fix etcd category from misc to databases 2024-01-26 16:40:11 -03:00
superherointj 29d18e8f6f nixos/etcd: fixes etcd failing to start at boot and add openFirewall option
Fixes etcd failing to start at boot for network and firewall not being ready and etcd peers being unavailable because of network/firewall

* configure etcd systemd unit to:

  - delay etcd start-up until network and firewall are ready
  - restart on failure and be always on

* add openFirewall option

  The official etcd ports are 2379 for client requests and 2380 for peer communication:
  https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.txt
  https://etcd.io/docs/v3.4/op-guide/configuration/
2024-01-26 16:40:11 -03:00
Philip Munksgaard 1ee8e72834
livebook: Set KillMode=mixed
This will gracefully shut down the service instead of resulting in errors like
this:

```
Jan 24 10:11:11 foo livebook[981676]: 10:11:11.922 [error] GenServer :disksup terminating
Jan 24 10:11:11 foo livebook[981676]: ** (stop) {:port_died, :normal}
Jan 24 10:11:11 foo livebook[981676]: Last message: {:EXIT, #Port<0.8>, :normal}
Jan 24 10:11:11 foo livebook[981676]: 10:11:11.922 [error] GenServer :memsup terminating
Jan 24 10:11:11 foo livebook[981676]: ** (stop) {:port_died, :normal}
```
2024-01-26 20:19:49 +01:00
Philip Munksgaard 897d5670a3
livebook: Use mix release to build instead of escript
The current build of livebook does not work with the new [Livebook
Teams](https://livebook.dev/teams/) features. The problem can be observed by
running the current version of livebook, adding a new team and going to the team
page. The process will crash and the team page will show a 500 error.

The base of the problem is that the escript build method is not officially
supported. This commit changes the livebook package to use the `mix release`
workflow, which is also the one used to build the official Docker container.

Unfortunately, the binary built with `mix release` does not support command line
arguments like the `escript` binary does. Instead, users need to pass in most of
the configuration as environment variables, as documented
[here](https://hexdocs.pm/livebook/readme.html#environment-variables). As a
result, this commit also changes the Livebook service to reflect this new way of
configuring Livebook.

Finally, the Livebook release configuration specifically excludes the
ERTS (Erlang Runtime System), which means that the resulting release cannot run
without Erlang installed.

I have tested the results (both of the package and the service) locally.
2024-01-26 20:19:46 +01:00
Ryan Horiguchi 17243e6a84 nixos/esphome: add option to use ping to check online status of devices 2024-01-26 19:39:49 +01:00
maxine a3101b8137
Merge pull request #281424 from Cottand/nomad-173-166-1513
nomad: nomad_1_6 -> nomad_1_7, nomad_1_7: 1.7.2 -> 1.7.3. nomad_1_6: 1.6.5 -> 1.6.6, nomad_1_5: 1.5.12 -> 1.5.13, nomad_1_4: remove
2024-01-26 17:32:04 +01:00
Raito Bezarius b9e78cd4a0 rl-2405: highlight cryptsetup upgrade
It is probably a good idea to talk about it and leave it to release editors to decide how they want to present this.

Hardware OPAL based is interesting for certain companies with compliance constraints.
2024-01-26 17:17:23 +01:00
Ryan Lahfa 37832d237e
Merge pull request #283244 from bjornfor/nixos-add-polkit-to-installation-device
nixos/installation-device: enable polkit
2024-01-26 14:46:48 +01:00
Bobby Rong 4be8c3b2a5
Merge pull request #283687 from r-ryantm/auto-update/cinnamon.cinnamon-screensaver
cinnamon.cinnamon-screensaver: 6.0.2 -> 6.0.3
2024-01-26 21:45:36 +08:00
K900 07e7fcc46f nixos/test-driver: black 2024-01-26 16:27:53 +03:00
Jonas Heinrich e1c0d281b2 nixos/nextcloud: Rename extraOptions to settings 2024-01-26 14:22:49 +01:00
Isa 24930dadca mastodon: set LimitNOFILE 2024-01-26 12:30:57 +01:00
Lassulus da25b2382d
Merge pull request #280373 from h7x4/treewide-use-new-tmpfiles-api
treewide: use new tmpfiles API
2024-01-26 10:47:18 +01:00
tomberek 7aea9330a6
Merge pull request #60804 from jluttine/add-brightness-keys-to-light
light: support brightness control keys
2024-01-26 02:43:19 -05:00
Jacek Galowicz d6318f4a86
Merge pull request #262772 from RaitoBezarius/qemu-vm/wait-for-event
nixos/lib/test-driver: add `wait_for_qmp_event`
2024-01-26 08:27:06 +01:00
Aaron Jheng 096f6d6c00
prometheus-openvpn-exporter: remove 2024-01-26 14:37:05 +08:00
rgri 28614f6861 mouse-actions: init at 0.4.4
Co-authored-by: Donovan Glover <donovan@dglover.co>
Co-authored-by: Arne Keller <2012gdwu+github@posteo.de>
2024-01-25 22:25:29 -06:00
Morgan Helton 04918db10a nixos/pomerium: fix UI test 2024-01-25 22:04:59 -06:00
Morgan Helton 5b651da243 pomerium: add devusb to maintainers 2024-01-25 22:04:56 -06:00
Will Fancher f6d787c27f
Merge pull request #283818 from ElvishJerricco/revert-258680-network-online-x-multi-user
nixos/systemd: Temporarily bring back multi-user -> network-online
2024-01-25 18:18:18 -05:00
Robert Schütz 8433938f9b
Merge pull request #283617 from SuperSandro2000/headscale
nixos/headscale: install package system wide
2024-01-25 13:40:29 -08:00
Bruno BELANYI 3092020c0c nixos/aria2: add release note for 'rpcSecretFile' 2024-01-25 21:36:23 +00:00
Bruno BELANYI d3a1465196 nixos/aria2: implement 'rpcSecretFile'
Since this is supposed to be a secret, use a file path as an input
instead of making it part of the expression, which would expose it in
the nix store.
2024-01-25 21:36:21 +00:00
Felix Buehler d35003e302 python311Packages.recursive-pth-loader: rename from recursivePthLoader 2024-01-25 22:13:17 +01:00
Will Fancher 0d85bf0efe nixos/systemd: Temporarily bring back multi-user -> network-online
There were several modules, critically including NetworkManager, which
were not prepared for this change. Most of the change was good,
however. Let's bring back the dependency and change the assertion to a
warning for now.
2024-01-25 15:53:52 -05:00
maxine 066ccb996b
Merge pull request #282963 from NukaDuka/prometheus-pve-exporter-update
prometheus-pve-exporter: 2.3.0 -> 3.2.1
2024-01-25 21:17:19 +01:00
Raito Bezarius 1196ae6e6b nixos/lib/test-driver: add wait_for_qmp_event
Adds a function to wait for a new QMP event with a model filter
so that you can expect specific type of events with specific payloads.

e.g. a guest-reset-induced shutdown event.
2024-01-25 20:50:20 +01:00
Ryan Lahfa 8cc42008aa
Merge pull request #274281 from RaitoBezarius/hebbot-module
nixos/hebbot: init
2024-01-25 20:33:02 +01:00
Ryan Lahfa ae910a15e6
Merge pull request #281001 from RaitoBezarius/new-sieve-dovecot-api
nixos/mail/dovecot2: re-introduce extra settings and rename `sieveScripts`
2024-01-25 20:32:35 +01:00
Ryan Lahfa 6fe2736c6f
Merge pull request #246055 from Tom-Hubrecht/netbird
nixos/netbird: Allow running multiple netbird networks in parallel
2024-01-25 20:08:58 +01:00
rnhmjoj f522af7174
nixos/release-notes: mention dnsdist DNSCrypt options 2024-01-25 18:28:41 +01:00
Raito Bezarius 78bc60b8a4 nixos/hebbot: init
This is a NixOS module to support TWIM-style Matrix bots.
2024-01-25 18:27:33 +01:00
rnhmjoj a41bd09059
nixos/tests/dnsdist: test dnscrypt support 2024-01-25 18:25:40 +01:00
rnhmjoj 1a1b91b3b9
nixos/dnsdist: add options for dnscrypt 2024-01-25 18:25:40 +01:00
rnhmjoj cc9de1626b
nixos/tests/dnsdist: use runTest 2024-01-25 18:25:33 +01:00
Tom Hubrecht c2d822e6b0 nixos/netbird: Allow running multiple netbird networks in parallel 2024-01-25 17:25:59 +01:00
Raito Bezarius 3cb7823738 nixos/mail/dovecot2: warn about potential collision due to structured configuration
Plugin configuration is pesky in dovecot2, let's warn about potential conflicts
in the module system by using a fancy regex.

This is only band-aid, this should be removed ASAP.

We clean up also a 21.05-era warning.
2024-01-25 17:18:58 +01:00
Alejandro Sanchez Medina a63b9c15c9 doc: Update manuals bespoke syntax
doc: add figure definition to bespoke syntax reference

doc: add example definition to bespoke syntax reference

doc: add footnote definition to beskpoke syntax reference

The usage of footnotes in the manuals is not the one documented
in markdown-it-py: https://python-markdown.github.io/extensions/footnotes/

doc: add inline comment definition to beskpoke syntax reference

doc: add typographic replacements to beskpoke syntax reference

doc: Fix rendering of bespoke syntax reference

doc: remove references to DocBook in the NixOS manual

doc: add entry on lack of HTML support

doc: Minor improvement

doc: update typographic replacements entry in beskpoke syntax reference

doc: add link reference definitions to beskpoke syntax reference

doc: fix footnote definition in beskpoke syntax reference

doc: Minor improvements from code review

Co-authored-by: Valentin Gagarin <valentin.gagarin@tweag.io>
Co-authored-by: Valentin Gagarin <valentin.gagarin@tweag.io>
2024-01-25 16:33:35 +01:00
Sandro Jäckel 922351ec86
nixos/tailscale: make resolvconf package depending on enablement of module
If resolvconf is not enabled, trying to use it always fails because
/etc/resolvconf.conf contains an `exit 1`.
2024-01-25 15:50:36 +01:00
linsui 6d1e022e7c nixos/nautilus-open-any-terminal: init 2024-01-25 22:00:23 +08:00
Bobby Rong 85d2b356ca
nixosTests.cinnamon-wayland: Fix screensaver test
5e225dca4c
2024-01-25 21:41:57 +08:00
github-actions[bot] 8c2ba7797a
Merge master into staging-next 2024-01-25 12:01:19 +00:00
Julien Malka 39a2e0bb03
Merge pull request #283396 from newAM/clevis-clarify 2024-01-25 08:52:44 +01:00
github-actions[bot] c406bf8bac
Merge staging-next into staging 2024-01-25 06:01:31 +00:00
github-actions[bot] 5af80acc9a
Merge master into staging-next 2024-01-25 06:01:04 +00:00
Elijah M. Immer c847e364ea nixos/hyprland: move to programs/wayland
Just moved to hyprland module to programs/wayland.
This has no effect on the module side (still accessed the same way in
the module `programs.hyprland`) just moved to be inline with other
wayland compositors.

Also edit the module list to reflect where the file is located.
2024-01-24 20:20:07 -08:00
Jörg Thalheim 559ddda570
Merge pull request #279852 from Madouura/pr/bcachefs
bcachefs: update comments, release-notes, only use IFS for bcachefs, update bcachefs-tools and module
2024-01-25 01:11:04 +01:00
github-actions[bot] feb654493f
Merge staging-next into staging 2024-01-25 00:02:41 +00:00
github-actions[bot] a4b5a14b07
Merge master into staging-next 2024-01-25 00:02:13 +00:00
Sandro Jäckel 9f395dae71
nixos/headscale: install package system wide
this is required to confirm nodes and generally manage everything
2024-01-24 23:00:54 +01:00
Lassulus 65f1d64303
Merge pull request #279923 from jopejoe1/sshfs
nixos/filesystems: set `system.fsPackages` for sshfs
2024-01-24 22:04:41 +01:00
Alyssa Ross 0a95fd24f0
Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
	pkgs/development/libraries/libunwind/default.nix
2024-01-24 22:00:49 +01:00
maxine c62395c96d
Merge pull request #283568 from r-vdp/fwupd_1_9_12
fwupd: 1.9.11 -> 1.9.12
2024-01-24 21:33:59 +01:00
r-vdp 28ea07d4e3
fwupd: 1.9.11 -> 1.9.12
The fwupd daemon refuses to start when there is an uefi_capsule key without any
values in the config file, so I modified the module to only include this
key when there are actually values that go inside.
2024-01-24 20:29:01 +01:00
Niklas Hambüchen 987dc940ba
Merge pull request #281858 from nh2/fix-ceph-build-use-fmt_9
ceph: Fix build with GCC 13 by using fmt_8 -> fmt_9. Fixes #281027
2024-01-24 18:39:28 +01:00
Niklas Hambüchen 506b21518d ceph: Fix tests by adding back old required python libs. See #281858.
Fixes #241482.

Also fix test putting cluster in unhealthy `POOL_APP_NOT_ENABLED` state;
this seems to be the default state with Ceph 18.2.1 at least,
and it does not hurt to fix it now already in the way the Ceph docs say.

Also revert "nixosTests.ceph-single-node: remove dashboard check"

This reverts commit 41b27d7f4b.
2024-01-24 14:29:24 +00:00
github-actions[bot] 69383b97bd
Merge staging-next into staging 2024-01-24 12:01:44 +00:00
github-actions[bot] d45e853c88
Merge master into staging-next 2024-01-24 12:01:06 +00:00
Vladimír Čunát 7f979aeb86
nixos/knot: allow specifying the clear section
It was added in 3.3.4.  I'm not sure if it will be useful with NixOS
services, but I added it in the usual way anyway.
2024-01-24 10:33:55 +01:00
Cottand 36cd764d38 nixos: release notes for nomad breaking changes 2024-01-24 08:56:58 +00:00
a-n-n-a-l-e-e 18cc181b9b
Merge pull request #279511 from DanielSidhion/tigerbeetle-service
nixos/tigerbeetle: init module
2024-01-23 23:13:54 -08:00
h7x4 e672d527ff
Merge pull request #282472 from simonhollingshead/libjxl091
libjxl: 0.8.2 -> 0.9.1, libaom: remove butteraugli support
2024-01-24 07:27:04 +01:00
github-actions[bot] 297b3df1d5
Merge staging-next into staging 2024-01-24 06:01:25 +00:00
github-actions[bot] bd24648ae1
Merge master into staging-next 2024-01-24 06:00:59 +00:00
Simon Hollingshead 15a8cd49df libjxl: 0.8.2 -> 0.9.1, libaom: remove butteraugli support 2024-01-24 05:25:41 +00:00
Alex Martens c37de24b78 nixos/clevis: clairify secret creation 2024-01-23 20:46:52 -08:00
h7x4 f5d513c573
treewide: use new tmpfiles api 2024-01-24 05:13:17 +01:00
h7x4 e5f115b0d4
Merge pull request #283059 from Nanotwerp/patch-1
nixos/corectrl: add package option
2024-01-24 05:10:36 +01:00
github-actions[bot] 9bf128cad3
Merge staging-next into staging 2024-01-24 00:02:51 +00:00
github-actions[bot] 6a4e9dff73
Merge master into staging-next 2024-01-24 00:02:25 +00:00
kirillrdy 64cab3aa8d
Merge pull request #279285 from huantianad/jdtls-upgrade
jdt-language-server: 1.26.0 -> 1.31.0, use upstream wrapper
2024-01-24 06:19:20 +09:00
Nanotwerp 6638cf69fe nixos/corectrl: add package option
Co-authored-by: Emily <git@emilylange.de>
2024-01-23 15:35:44 -05:00
github-actions[bot] 0684df09d4
Merge staging-next into staging 2024-01-23 18:01:22 +00:00
github-actions[bot] 01a65d81f3
Merge master into staging-next 2024-01-23 18:00:56 +00:00
ppom 65544c693b
rustdesk-server: init module 2024-01-23 18:01:54 +01:00
Niklas Hambüchen aa6c8ae3a6
Merge pull request #253488 from nh2/install-grub-dont-stat-network-fs
install-grub.pl: Do stat() last to not hang on hanging network FS
2024-01-23 16:36:49 +01:00
Niklas Hambüchen b9ba9df3e8 install-grub.pl: Do stat() last to not hang on hanging network FS 2024-01-23 15:34:40 +00:00
Bjørn Forsman dadc54aabe nixos/installation-device: enable polkit
Polkit enables running 'reboot' and 'poweroff' in the installer without
being root, and non-root is the default login for a few NixOS releases
now.

There's no size increase in the minimal ISO:

  $ git checkout nixpkgs-unstable
  $ nix-build -A config.system.build.isoImage -I nixos-config=nixos/modules/installer/cd-dvd/installation-cd-minimal.nix nixos/default.nix && du -sc ./result/iso/*.iso
  /nix/store/bfvbvrrqjmnqqhyqyxc0w32gagdz2rya-nixos-24.05.git.1149dab64e7-x86_64-linux.iso
  998404  ./result/iso/nixos-24.05.git.1149dab64e7-x86_64-linux.iso
  998404  total

  $ git checkout THIS_COMMIT
  $ nix-build -A config.system.build.isoImage -I nixos-config=nixos/modules/installer/cd-dvd/installation-cd-minimal.nix nixos/default.nix && du -sc ./result/iso/*.iso
  /nix/store/l9x9rwlvfddnri70h1ifx865q0cvka5l-nixos-24.05.git.1149dab64e7-x86_64-linux.iso
  998404  ./result/iso/nixos-24.05.git.1149dab64e7-x86_64-linux.iso
  998404  total
2024-01-23 16:10:31 +01:00
Bruno BELANYI e837f4623d nixos/pyload: document new module 2024-01-23 15:07:40 +00:00
Bruno BELANYI 60518d6a52 nixos/pyload: init test 2024-01-23 15:07:40 +00:00
Bruno BELANYI 70d0a6e547 nixos/pyload: init 2024-01-23 15:04:44 +00:00
Raito Bezarius 72e23635e6 nixos/mail/dovecot2: imapsieve.mailbox.*.causes is a list
Otherwise, it's not possible to pass `COPY,APPEND` properly.
2024-01-23 14:04:08 +01:00
Raito Bezarius caf9e51e0f nixos/mail/dovecot2: re-introduce extra settings and rename sieveScripts
https://github.com/NixOS/nixpkgs/pull/275031 introduced structured configuration
for the dovecot2 sieve plugin, by doing so, it broke SNM configuration doing Sieve configurations.

This attempts to fix up the public API to make it possible for SNM to pick up the pieces.
2024-01-23 14:04:08 +01:00
github-actions[bot] 04ed250013
Merge staging-next into staging 2024-01-23 12:01:46 +00:00
github-actions[bot] 568f381221
Merge master into staging-next 2024-01-23 12:01:17 +00:00
Florian Klink 439eb59727
Merge pull request #282908 from RaitoBezarius/unmaintain-dolibarr
dolibarr: remove myself from maintainers
2024-01-23 11:01:31 +02:00
h7x4 f1e0a0a3c5
Merge pull request #281985 from bryango/inetutils-low-priority
inetutils: set priority lower than util-linux
2024-01-23 09:18:31 +01:00
github-actions[bot] b8dad03876
Merge staging-next into staging 2024-01-23 06:01:22 +00:00
github-actions[bot] 70e275b1cb
Merge master into staging-next 2024-01-23 06:00:55 +00:00
Kartik Gokte dde72e969e nixos/prometheus-pve-exporter: updated schema and options to v3.2.1 2024-01-23 11:19:37 +05:30
Brenton Simpson f571033ce0 handheld-daemon: use kebab-case instead of camelCase for service name 2024-01-22 19:26:43 -08:00
Brenton Simpson bcf9a24332 handheld-daemon: init at 0.2.7 2024-01-22 19:26:42 -08:00
Peder Bergebakken Sundt 03c2b6235a
Merge pull request #277211 from trofi/nixosTests.nixops-fix-eval
nixosTests.nixops: Revert "tests.nixops: fix broken eval" to fix eval
2024-01-23 02:39:59 +01:00
github-actions[bot] 9cd951173e
Merge staging-next into staging 2024-01-23 00:02:58 +00:00
github-actions[bot] 8303a96c2d
Merge master into staging-next 2024-01-23 00:02:30 +00:00
huantian 302dc9deb2
jdt-language-server: 1.26.0 -> 1.31.0, use upstream wrapper
Co-authored-by: kirillrdy <kirillrdy@gmail.com>
2024-01-22 14:28:02 -08:00
Peder Bergebakken Sundt 0d308a02a6
Merge pull request #264844 from OPNA2608/init/lomiri/telephony-service
lomiri.telephony-service: init at 0.5.2
2024-01-22 23:23:52 +01:00
Peder Bergebakken Sundt 2f6dec4f46
Merge pull request #277825 from OPNA2608/init/lomiri/ayatana-indicator-datetime
ayatana-indicator-datetime: init at 23.10.1
2024-01-22 23:10:53 +01:00
Peder Bergebakken Sundt 76e9a3eafc
Merge pull request #272147 from SuperSandro2000/archisteamfarm
nixos/archisteamfarm: don't use asf abbreviation for more clarity
2024-01-22 22:57:04 +01:00
Ryan Lahfa 5b14fea3d6
Merge pull request #280405 from RaitoBezarius/keepalived-unicast
nixos/networking/keepalived: do not emit `unicastPeers` when there are none
2024-01-22 22:43:29 +01:00
Raito Bezarius 08c9562995 keepalived: add myself as a maintainer
I will use this for a while, so… let's keep it tidy.
2024-01-22 21:56:04 +01:00
Ryan Lahfa 32a6e224ae
Merge pull request #282929 from minijackson/netbox-3.7.1
Netbox 3.7.1
2024-01-22 20:52:54 +01:00
Robert Schütz 6de0d9293e
Revert "Dovecot: Do not include empty sieve_extensions and sieve_global_extensions" 2024-01-22 10:02:51 -08:00
github-actions[bot] 0c0f70ab25
Merge staging-next into staging 2024-01-22 18:01:24 +00:00
github-actions[bot] 3c7375b75c
Merge master into staging-next 2024-01-22 18:00:55 +00:00
nikstur 3ea482163b
Merge pull request #282320 from helsinki-systems/fix/nix-gc-unit-type
nixos/nix-gc: Minor module fixups
2024-01-22 17:49:18 +01:00
nikstur 733c8ee469
Merge pull request #282086 from nikstur/uki
nixos/uki: init
2024-01-22 17:43:09 +01:00
Minijackson da3587e8ea
nixos/rl-2405: document NetBox breaking change 2024-01-22 16:36:55 +01:00
Minijackson 5d2370f800
netbox_3_5: remove 2024-01-22 16:31:45 +01:00
Minijackson 163fed297e
netbox: 3.6.9 -> 3.7.1
Or another way to see it:

netbox_3_7: init at 3.7.1

Make NetBox 3.7 the default version if stateVersion >= 24.05,
switch upgrade test to test upgrade from 3.6 to 3.7,
remove clearcache command for >=3.7.0,
make reindex command mandatory
2024-01-22 16:31:45 +01:00
Jörg Thalheim b0a5444e43
Merge pull request #282878 from Mic92/buildbot
nixos/buildbot: don't require network-online.target
2024-01-22 15:53:13 +01:00
Luke Granger-Brown f5344c8b87
Merge pull request #280658 from simonhollingshead/add-fixedrandomdelay
nixos/auto-upgrade: add system.autoUpgrade.fixedRandomDelay
2024-01-22 14:48:23 +00:00
Raito Bezarius 9b0be1e3a3 dolibarr: remove myself from maintainers
It's a tiring piece of software.
2024-01-22 14:54:30 +01:00
bryango 940fb2a3e0
inetutils: release-note on meta.priority 2024-01-22 21:53:06 +08:00
github-actions[bot] 2227557d88
Merge staging-next into staging 2024-01-22 12:01:39 +00:00
github-actions[bot] 3a8094730e
Merge master into staging-next 2024-01-22 12:01:10 +00:00
Jörg Thalheim 372513f630 nixos/buildbot: don't require network-online.target
The daemon setup itself only requires the firewall to be up.
Workers will connect itself as they can reach the master instance.
That's why we don't need an online target for buildbot to function.
2024-01-22 12:54:42 +01:00
Linus Heckemann 18e5176621
Merge pull request #270727 from nikstur/nixos-perlless-activation
Perlless Activation
2024-01-22 10:11:44 +01:00
github-actions[bot] 32a33243c9
Merge staging-next into staging 2024-01-22 06:01:45 +00:00
github-actions[bot] f363b57fc7
Merge master into staging-next 2024-01-22 06:01:17 +00:00
h7x4 5f5210aa20
Merge pull request #281606 from MarcelCoding/bird-no-auto-restart
nixos/bird2: add option to disable auto reload
2024-01-22 01:24:37 +01:00
github-actions[bot] 7af142cf2c
Merge staging-next into staging 2024-01-22 00:02:41 +00:00
github-actions[bot] dceddd03df
Merge master into staging-next 2024-01-22 00:02:14 +00:00
nikstur 1f65b34e99 nixos/profiles/perlless: add release-note 2024-01-22 00:54:14 +01:00
nikstur 3df9c5ef3e nixos/profiles/perlless: add manual section 2024-01-22 00:54:14 +01:00
nikstur 8710a27bc6 nixos/profiles/perlless: init 2024-01-22 00:54:13 +01:00
nikstur 7763ea212a nixos/etc: add release-note about overlay 2024-01-22 00:54:13 +01:00
nikstur dbd8cb9d46 nixos/etc: add manual section 2024-01-22 00:54:13 +01:00
nikstur 60f529fc82 nixos/etc: optionally mount etc as an overlay 2024-01-22 00:54:13 +01:00
Peder Bergebakken Sundt 0fbb6483cf
Merge pull request #273537 from sigprof/nixos-ssh-askpass-xauthority
nixos/ssh: pass XAUTHORITY to ssh-askpass
2024-01-22 00:43:59 +01:00
Nick Cao 9969fb7ff4
Merge pull request #281904 from Stunkymonkey/ttyd-fix-leakage
ttyd: add test & use systemd LoadCredential
2024-01-21 14:48:40 -05:00
Peder Bergebakken Sundt 71ef6600a9
Merge pull request #272779 from gaykitty/stargazer-tests
stargazer: Implement full upstream test suite in nixosTests.stargazer
2024-01-21 20:28:56 +01:00
Peder Bergebakken Sundt 3747401ffe
Merge pull request #236744 from l0b0/shells-environment-remove-redundant-p-flag
nixos/modules: Split recursive mkdir with permissions
2024-01-21 20:16:14 +01:00
Bernardo Meurer 28ad748d40
Merge pull request #281845 from lovesegfault/fix-moonraker-warn 2024-01-21 14:09:00 -05:00
happysalada f3b08ca5a6 nixos/clamav: fix network-online requires assert 2024-01-21 11:37:54 -05:00
Robert Scott be19273a30
Merge pull request #274089 from risicle/ris-zerocallusedregs
cc-wrapper: add `zerocallusedregs` hardening flag, add `pkgsExtraHardening` package set
2024-01-21 13:33:06 +00:00
Robert Scott 43e4d9e2eb
Merge pull request #280915 from LeSuisse/es-7.17.16
elasticsearch: 7.17.10 -> 7.17.16
2024-01-21 13:09:23 +00:00
github-actions[bot] 73ac0953c4
Merge staging-next into staging 2024-01-21 12:01:26 +00:00
github-actions[bot] cabf4612ca
Merge master into staging-next 2024-01-21 12:01:00 +00:00
Jonas Heinrich 58fcc2db9d
Merge pull request #282339 from marcusramberg/marcus/ollama_listen
nixos/ollama: Add listenAddress
2024-01-21 12:57:53 +01:00
Robert Scott e79c133858 add pkgsExtraHardening package set
this package set can be used to trial new hardening flags or
enable those which are still known to cause some problems
2024-01-21 11:16:07 +00:00
Doron Behar 49e5ffd3a9
Merge pull request #235847 from doronbehar/nixos/taskserver-permissions
nixos/taskserver: Enable cfg.group to read clients' certificates
2024-01-21 09:32:07 +02:00
Sandro Jäckel 6d1d912716
nixos/archisteamfarm: drop with lib 2024-01-21 02:14:02 +01:00
Sandro Jäckel 2d324fc242
nixos/archisteamfarm: don't use asf abbreviation for more clarity 2024-01-21 02:14:00 +01:00
github-actions[bot] 15ca6bc57e
Merge staging-next into staging 2024-01-21 00:02:46 +00:00
github-actions[bot] 84335ac8cb
Merge master into staging-next 2024-01-21 00:02:21 +00:00
maxine f0dd758da7
Merge pull request #273707 from illustris/cloud-init
cloud-init: 23.3.3 -> 23.4.1, fix race condition on AWS
2024-01-21 00:39:06 +01:00
Marcus Ramberg 8d956b1725 nixos/ollama: Add listenAddress 2024-01-21 00:27:07 +01:00
OPNA2608 4921168567 ayatana-indicator-datetime: init at 23.10.0 2024-01-20 23:56:27 +01:00
OPNA2608 c56d24bb4c lomiri.telephony-service: init at 0.5.2 2024-01-20 23:03:40 +01:00
Silvan Mosberger f2c7f205fa
Merge pull request #273840 from risicle/ris-default-hardening-flags-release-notes
release-notes: add note on new ability to set `defaultHardeningFlags`
2024-01-20 22:39:38 +01:00
Felix Buehler c34493d7c0 ttyd: add test & use systemd LoadCredential 2024-01-20 21:01:51 +01:00
Nick Cao 1c6ebd4eab
Merge pull request #282215 from r-ryantm/auto-update/miriway
miriway: unstable-2024-01-01 -> unstable-2024-01-19
2024-01-20 14:26:50 -05:00
github-actions[bot] 4dea63e421
Merge master into staging-next 2024-01-20 18:01:02 +00:00
Maximilian Bosch 93d692f43b
Merge pull request #280600 from Ma27/nextcloud-state-tmpfiles
nixos/nextcloud: set up base directories & override.config.php with tmpfiles
2024-01-20 17:49:46 +01:00
h7x4 d7995e41b6
Merge pull request #277514 from gepbird/github-runner-update-docs
github-runner: mention manpage for serviceOverrides option
2024-01-20 16:57:03 +01:00
OPNA2608 122738871b nixos/tests/miriway: fix alacritty xwayland test 2024-01-20 16:51:40 +01:00
h7x4 e7069e4aa2
Merge pull request #281055 from majiru/resolved-dns-over-tls
nixos/resolved: add dnsovertls option
2024-01-20 15:21:45 +01:00
Kevin Cox 9cd3bd7a5c
Merge pull request #281915 from exi/patch-1
Dovecot: Do not include empty sieve_extensions and sieve_global_extensions
2024-01-20 09:10:41 -05:00
Robert Scott 40868719b0 cc-wrapper: add zerocallusedregs hardening flag
this uses the value `used-gpr` which seems to be a commonly
chosen value for general use
2024-01-20 13:48:33 +00:00
Robert Scott a8f8d26258 release-notes: add note on new ability to set defaultHardeningFlags 2024-01-20 12:40:02 +00:00
Janne Heß e04524a931
nixos/nix-gc: Use singleLineStr where possible 2024-01-20 13:16:39 +01:00
Janne Heß 2315174384
nixos/nix-gc: Add Type so systemctl waits properly 2024-01-20 13:15:20 +01:00
Janne Heß fd8727163d
nixos/nix-gc: Drop with lib; 2024-01-20 13:14:57 +01:00
github-actions[bot] 2aa3d6edac
Merge master into staging-next 2024-01-20 12:00:58 +00:00
Gutyina Gergő 79e8fb92b8
github-runner: mention manpage for serviceOverrides option 2024-01-20 10:22:53 +01:00
Lin Jian 436929e972
Merge pull request #282174 from linj-fork/pr/remove-emacsclient-desktop
nixos/emacs: drop custom emacsclient desktop file
2024-01-20 15:39:37 +08:00
github-actions[bot] 0cd628f6d5
Merge master into staging-next 2024-01-20 06:01:03 +00:00
h7x4 66cb51263e
Merge pull request #264552 from vifino/watchdogd
watchdogd: init at 4.0; add module
2024-01-20 06:21:24 +01:00
Jacob Moody dfc87b9048 nixos/resolved: add dnsovertls option 2024-01-19 21:29:22 -06:00
h7x4 62dbf40586
Merge pull request #282147 from eclairevoyant/acme
nixos/acme: fix assertion for renamed option
2024-01-20 03:27:15 +01:00
Lin Jian 9e98fce0c5
Merge pull request #281654 from SuperSandro2000/portunus-restart
nixos/portunus: restart on failure
2024-01-20 09:17:18 +08:00
Lin Jian 20f07b4aa9
nixos/emacs: drop custom emacsclient desktop file
This custom emacsclient desktop file was added[1] to Nixpkgs when
the upstream did not provide one.

Since an emacsclient desktop file is provided[2] by the upstream now,
we should remove our custom one from Nixpkgs to reduce maintenance
burden[3].

Fixes https://github.com/NixOS/nixpkgs/issues/245533

[1]: https://github.com/NixOS/nixpkgs/pull/35896
[2]: https://git.savannah.gnu.org/cgit/emacs.git/commit/etc/emacsclient.desktop?id=1a845a672dc73c8e98e6cb9bb734616e168e60ba
[3]: https://git.savannah.gnu.org/cgit/emacs.git/commit/etc/emacsclient.desktop?id=1500e4b4329d4d3d0141263230d74e1b314373b1
2024-01-20 08:21:08 +08:00
github-actions[bot] 650e10b010
Merge master into staging-next 2024-01-20 00:02:16 +00:00
Sandro a33557d1b9
Merge pull request #262895 from OPNA2608/init/lomiri/lomiri-indicator-network
lomiri.lomiri-indicator-network: init at 1.0.1
2024-01-20 00:42:26 +01:00
Adrian Pistol 07d610c8ab nixosTests.watchdogd: init 2024-01-20 00:15:35 +01:00
Adrian Pistol 58cbe00eb6 nixos/watchdog: add module 2024-01-20 00:15:31 +01:00
gaykitty 40eccbfa87 stargazer: Implement full upstream test suite in nixosTests.stargazer 2024-01-19 17:14:06 -05:00
h7x4 aeee68c738
Merge pull request #262401 from vifino/haproxy-quic
haproxy: 2.9.2 -> 2.9.3; Enable QUIC support
2024-01-19 22:54:05 +01:00
éclairevoyant b43dcaf48f
nixos/acme: fix assertion for renamed option 2024-01-19 16:28:56 -05:00
Peder Bergebakken Sundt 31ff0dfe49
Merge pull request #273024 from melvyn2/patch-1
nixos/sshServe: use bash as default shell for nix-ssh user
2024-01-19 22:26:44 +01:00
DS fdf411fb36 nixos/tigerbeetle: init module 2024-01-19 13:19:27 -08:00
Peder Bergebakken Sundt c3f2d4a319
Merge pull request #267327 from bbenno/fix/nixos-firebird
nixos/firebird: fix coerce error
2024-01-19 22:12:47 +01:00
h7x4 99e3c0032a
Merge pull request #281871 from RatCornu/tachidesk-server
nixos/suwayomi-server: init at 0.7.0
2024-01-19 20:19:06 +01:00
Julien Malka 42ad0d80ce
Merge pull request #281639 from Mic92/systemd-refactoring 2024-01-19 19:42:32 +01:00
github-actions[bot] 331c789712
Merge master into staging-next 2024-01-19 18:01:00 +00:00
Adrian Pistol 0b7a56c13c nixos/tests/haproxy: Test HTTPS, QUIC and Cert Auth 2024-01-19 18:55:27 +01:00
Sandro Jäckel ee0312bcff nixos/tests/nginx: add test variant for moreheaders module 2024-01-19 18:09:53 +01:00
nikstur ed2431905c nixos/tests/appliance-repart-image: use UKIs 2024-01-19 17:04:59 +01:00
nikstur 985bafa5fc nixos/uki: init 2024-01-19 17:04:59 +01:00
Franz Pletz e7279b9102
Merge pull request #281186 from Sohalt/podman-dns-firewall 2024-01-19 17:01:23 +01:00
nikstur 066151e0de
Merge pull request #277633 from nikstur/image-repart-improvements
Image repart improvements
2024-01-19 15:25:08 +01:00
nikstur a34af9a955 image/repart: add version and compression options
The version option is needed if you want to implement partition &
systemd-boot based A/B booting where the version information is encoded
in the files on the ESP. See systemd-sysupate docs for more details on
this:
https://www.freedesktop.org/software/systemd/man/latest/sysupdate.d.html

Note, however, that this is not *only* useful for systemd-sysupdate but
also for other similar updating tools/mechanisms.
2024-01-19 14:43:29 +01:00
Zolo c9e7344950
Update systemd-boot.nix
Extending the systemd-boot information and where to find more information.
2024-01-19 14:01:26 +01:00
github-actions[bot] 4679030218
Merge master into staging-next 2024-01-19 12:01:13 +00:00
Martin Weinelt c2853e2588
Merge pull request #258680 from lf-/jade/remove-multiuser-netonline-dep
nixos/systemd: don't require network-online.target for multi-user.target
2024-01-19 12:49:23 +01:00
Sandro eb09653fde
Merge pull request #266428 from lf-/jade/samba-fix-security-type 2024-01-19 12:29:19 +01:00
Robert Hensing e0000983db
Merge pull request #279170 from SuperSandro2000/nixos-repl-lib
nixos-rebuild: add lib to repl to make debugging even easier
2024-01-19 12:29:04 +01:00
Sandro 5897d4eb0d
nixos/portunus: remove superfluous explicit out
Co-authored-by: Lin Jian <me@linj.tech>
2024-01-19 11:58:07 +01:00
Sandro Jäckel fd199bdc5b
nixos/portunus: add seedSettings option 2024-01-19 11:57:01 +01:00
Ivan Mincik 908f931618
Merge pull request #276348 from NixOS/postgis-gdal-minimal
postgresqlPackages.postgis: build with minimal gdal version
2024-01-19 10:09:40 +01:00
Jade Lovelace 1323e3115d nixos/tests: fix ssh-audit under network-online dep fix 2024-01-19 00:11:35 -08:00
Jade Lovelace e7451cacf9 nixos/tests: fix installer under network-online dep fix 2024-01-19 00:11:35 -08:00
Jade Lovelace 843b3e7aa9 nixos/tests: fix guix under network-online dep fix 2024-01-19 00:11:34 -08:00
Jade Lovelace a8a9424e4f nixos/tests: fix adguardhome under network-online dep fix 2024-01-19 00:11:34 -08:00
Jade Lovelace fe474ed61a nixos: fix remaining services for network-online dep fix 2024-01-19 00:11:34 -08:00
Jade Lovelace 1b514b3e10 fix: rxe under network-online.target change [UNSURE IF CORRECT] 2024-01-19 00:11:34 -08:00
Jade Lovelace c80398e5d2 nixos/ircd-hybrid: fix evaluation error 2024-01-19 00:11:34 -08:00
Jade Lovelace 6c5ab28fce nixos: fix a bunch of services missing dep on network-online.target
This was done by generating a truly hilarious configuration:

rg 'services\.[^.]+\.enable\t' opts-tags | cut -f1 > allonconfig.nix

The following were not tested due to other evaluation errors. They
should probably be manually audited.
services.amule
services.castopod
services.ceph
services.chatgpt-retrieval-plugin
services.clamsmtp
services.clight
services.dante
services.dex
services.discourse
services.dwm-status
services.engelsystem
services.foundationdb
services.frigate
services.frp
services.grocy
services.guacamole-client
services.hedgedoc
services.home-assistant
services.honk
services.imaginary
services.jitsi-meet
services.kerberos_server
services.limesurvey
services.mastodon
services.mediawiki
services.mobilizon
services.moodle
services.mosquitto
services.nextcloud
services.nullmailer
services.patroni
services.pfix-srsd
services.pgpkeyserver-lite
services.postfixadmin
services.roundcube
services.schleuder
services.self-deploy
services.slskd
services.spacecookie
services.statsd
services.step-ca
services.sympa
services.tsmBackup
services.vdirsyncer
services.vikunja
services.yandex-disk
services.zabbixWeb
2024-01-19 00:11:34 -08:00
Jade Lovelace b8da5d6a3c nixos/tests: fix gitdaemon under network-online dep fix 2024-01-19 00:11:34 -08:00
Jade Lovelace 174ffdcbc4 nixos/tests: fix tayga under network-online dep fix 2024-01-19 00:11:34 -08:00
Jade Lovelace 9b29e5eb7e nixos/tests: fix owncast under network-online dep fix [BROKEN] 2024-01-19 00:11:34 -08:00
Jade Lovelace dbb2d3e220 nixos/tests: fix systemd-nspawm under network-online dep fix 2024-01-19 00:11:34 -08:00
Jade Lovelace 42cda3b36b nixos/tests: fix upnp under network-online dep fix 2024-01-19 00:11:34 -08:00
Jade Lovelace 5714c8465a nixos/tests: fix lemmy under network-online dep fix 2024-01-19 00:11:34 -08:00
Jade Lovelace 426d5046b5 nixos/tests: fix babeld under network-online dep fix 2024-01-19 00:11:33 -08:00
Reno Reckling 33ede4cc7c
use concatMapStringsSep in dovecot config
Co-authored-by: h7x4 <h7x4@nani.wtf>
2024-01-19 07:14:59 +01:00
github-actions[bot] 631f14c407
Merge master into staging-next 2024-01-19 06:00:59 +00:00
h7x4 5350f74b81
Merge pull request #277739 from KiaraGrouwstra/fix-sample-value-services-wordpress-sites-name-languages
fix sample value for option services.wordpress.sites.<name>.languages
2024-01-19 03:51:40 +01:00
RatCornu d32bb11129
nixos/suwayomi-server: add release note 2024-01-19 02:31:34 +01:00
RatCornu 279057b779
nixos/suwayomi-server: add nixos tests 2024-01-19 02:31:33 +01:00
RatCornu 4133bb1bb0
nixos/suwayomi-server: init at 0.7.0 2024-01-19 02:31:23 +01:00
Reno Reckling 9c5b8fe008
Merge branch 'NixOS:master' into patch-1 2024-01-19 01:31:50 +01:00
Jade Lovelace c11401bf4b nixos/tests: fix trafficserver under network-online dep fix 2024-01-18 16:28:42 -08:00
Jade Lovelace f25957bb58 nixos/tests: fix 3proxy under network-online dep fix 2024-01-18 16:28:42 -08:00
Jade Lovelace 83ba37ca2d nixos/tests: fix ulogd under network-online dep fix 2024-01-18 16:28:42 -08:00
Jade Lovelace 58aa87fb71 nixos/tests: fix nfs/kerberos under network-online dep fix [BROKEN] 2024-01-18 16:28:42 -08:00
Jade Lovelace 9fe27a9567 nixos/tests: fix buildbot under network-online dep fix 2024-01-18 16:28:42 -08:00
Jade Lovelace 274466d1fc nixos/tests: fix acme under network-online dep fix 2024-01-18 16:28:42 -08:00
Jade Lovelace 9067ecf283 nixos/tests: fix hostname under network-online dep fix [BROKEN] 2024-01-18 16:28:42 -08:00
Jade Lovelace cc63754f56 nixos/tests: fix networking under network-online dep fix 2024-01-18 16:28:42 -08:00
Jade Lovelace deb9370b88 nixos/tests: fix curl-impersonate under network-online dep fix 2024-01-18 16:28:42 -08:00
Jade Lovelace 81a3fa04ca nixos/buildbot: master also wants network-online.target 2024-01-18 16:28:42 -08:00
Jade Lovelace ce602cc0aa nixos/kea: also want network-online.target 2024-01-18 16:28:42 -08:00
Jade Lovelace 7078a1b356 nixos/tests: fix systemd-networkd-ipv6-prefix-delegation under network-online dep fix 2024-01-18 16:28:42 -08:00
Jade Lovelace a80464eee4 nixos/tests: fix bittorrent under network-online dep fix 2024-01-18 16:28:41 -08:00
Jade Lovelace 05dc4bd146 nixos/tests: fix ferm under network-online dep fix 2024-01-18 16:28:41 -08:00
Jade Lovelace 99813e788b nixos/tests: fix corerad under network-online dep fix 2024-01-18 16:28:41 -08:00
Jade Lovelace e4168ef9ba nixos/tests: fix rspamd under network-online dep fix 2024-01-18 16:28:41 -08:00
Jade Lovelace 9ce6ff06c7 nixos/tests: fix kanidm under network-online dep fix 2024-01-18 16:28:41 -08:00
Will Fancher 367d101073 nixos/systemd: assert After=network-online.target -> Wants=
This will catch broken services at the evaluation stage.
2024-01-18 16:28:41 -08:00
Jade Lovelace 062be41387 nixos/tests: fix zrepl under network-online dep fix 2024-01-18 16:28:41 -08:00
Jade Lovelace d51e4a6443 nixos/tests: fix uptermd under network-online dep fix 2024-01-18 16:28:41 -08:00
Jade Lovelace c940ae656d nixos/tests: fix opensmtpd under network-online dep fix 2024-01-18 16:28:41 -08:00
Jade Lovelace 80edf319fe nixos/paperless: fix network-online.target dependencies 2024-01-18 16:28:41 -08:00
Jade Lovelace c125c23468 nixos/tests: fix systemd-networkd-dhcpserver under network-online dep fix 2024-01-18 16:28:41 -08:00
Jade Lovelace 9ed2e58b70 nixos/tests: fix rss2email under network-online dep fix 2024-01-18 16:28:41 -08:00
Jade Lovelace 8169ded7a3 nixos/tests: fix qemu-vm-restrictnetwork under network-online dep fix 2024-01-18 16:28:41 -08:00
Jade Lovelace 62f30634db nixos/systemd: don't require network-online.target for multi-user.target
Previously we required network-online.target for multi-user.target. This
has made a lot of people very angry and has been widely regarded as a
bad move (or at least, very nonstandard):
15d761a525 (commitcomment-128564097)

This was done because of fragile tests and services declaring
dependencies on multi-user.target when they meant network-online.target.

Let's rip off the bandaid and fix our tests.
2024-01-18 16:28:39 -08:00
Reno Reckling 1e4065d90a
Do not include sieve_extensions and sieve_global_extensions if they are the default value
Setting them to empty string will disable the default behaviour, leading to missing extensions.
2024-01-19 01:21:07 +01:00
nikstur 1e70382b81 nixos/version: add options to identify images
This is useful when building appliance images that use among other
things partition based A/B updates.
2024-01-19 01:16:49 +01:00
github-actions[bot] b459003bdd
Merge master into staging-next 2024-01-19 00:02:22 +00:00
Kira Bruneau b250e162d6 nixos/gamemode: add gamemode group
Gamemode 1.8 requires users to be in the gamemode group to set the CPU
governor, so we should automatically create it when it's enabled.
2024-01-18 18:06:36 -05:00
nikstur 094f6cca9a nixos/systemd-sysusers: add release-note 2024-01-18 23:08:14 +01:00
nikstur d4a8fe24c2 nixos/systemd-sysusers: add manual section 2024-01-18 23:08:14 +01:00
nikstur eec1845744 nixos/systemd-sysusers: init 2024-01-18 23:08:14 +01:00
Julian Stecklina be2a4f37af nixos/dbus: explicitly set homeMode for dbus
Otherwise /run/dbus is created with the wrong permissions.

For some reason our recent changes made /run/dbus be 0700 instead of
0755. This is actually the default of homeMode. So something worked by
accident before?
2024-01-18 23:08:14 +01:00
nikstur 4b128008c5 nixos/test-instrumentation: use file to set root password 2024-01-18 23:08:13 +01:00
Niklas Hambüchen 305821576a
Merge pull request #273239 from nh2/issue-31138-fix-xkbvalidate-xkb-dir
xserver service: xkbvalidate: Respect `xkb.dir`
2024-01-18 21:56:39 +01:00
Bernardo Meurer a09b1c12fb
nixos/moonraker: don't warn about harmless update_manager settings
The only setting we care to warn about is `enable_system_updates`,
there's no reason to issue warnings when folks set, for example,
`enable_auto_refresh`.
2024-01-18 13:52:50 -05:00
github-actions[bot] dc4a7c97b0
Merge master into staging-next 2024-01-18 18:00:55 +00:00
K900 967d49b8a8 Merge remote-tracking branch 'origin/staging-next' into staging 2024-01-18 19:15:32 +03:00
Adithya Nair 8b5644684e
nixos/frp: use toml configFile
According to upstream, the INI configuration file is deprecated and
TOML/YAML/JSON is recommended.
Link: https://github.com/fatedier/frp/tree/dev#configuration-files
2024-01-18 21:37:40 +05:30
Janne Heß 15c31afd8a
Merge pull request #271067 from nikstur/sysinit-reactivation
nixos/switch-to-configuration: add sysinit-reactivation.target
2024-01-18 16:13:32 +01:00
NicGrimpe 82ea33a081
nixos/maintainers: in docs, ./option-usage.nix -> ./option-usages.nix (#271592) 2024-01-18 16:09:29 +01:00
Silvan Mosberger ef8ce2794b
Merge pull request #241953 from MultisampledNight/doc/fix-outdated-containers
doc: fix outdated /var/lib/container from pre-22.05 listing in NixOS manual
2024-01-18 16:06:08 +01:00
nikstur 1472cd16bb
Merge pull request #265951 from nikstur/systemd-255
systemd: 254.6 -> 255.2
2024-01-18 15:51:10 +01:00
Adam C. Stephens 887d3f54c6
Merge pull request #278753 from adamcstephens/incus/migrate-test
incus, lxd: ensure lxd->incus migration is supported and tested
2024-01-18 08:01:23 -05:00
mian | mian fbe9d95ed9
fix semi-colon missing 2024-01-18 16:31:54 +08:00
Franz Pletz c00a2d02bd
Merge pull request #251882 from r-ryantm/auto-update/prometheus-snmp-exporter
prometheus-snmp-exporter: 0.22.0 -> 0.25.0
2024-01-18 08:16:39 +01:00
github-actions[bot] c98a84a2fb
Merge staging-next into staging 2024-01-18 06:01:21 +00:00
K900 3d6a5ad604 systemd-lib: fix automount generation after 9fbf82d9cb
This one got missed in the refactor.
2024-01-18 08:33:46 +03:00
github-actions[bot] f8b9065479
Merge staging-next into staging 2024-01-18 00:02:50 +00:00
Sandro Jäckel f154807e93
nixos/portunus: restart on failure 2024-01-18 01:01:30 +01:00
nikstur 8f3abd21aa switch-to-configuration: add sysinit-reactivation release note 2024-01-18 00:46:30 +01:00
nikstur d10ef8be71 switch-to-configuration: add sysinit-reactivation manual section 2024-01-18 00:46:30 +01:00
nikstur e6b66f08a5 nixos/switch-to-configuration: add sysinit-reactivation.target 2024-01-18 00:46:30 +01:00
Franz Pletz ed2ea66bbf
Merge pull request #278539 from Ma27/sshd-socket-activation-ports
nixos/sshd: fix socket activated ports when using ListenAddress
2024-01-17 23:27:52 +01:00
Jörg Thalheim 4a20af3932 nixos/systemd-boot: move all template variables in one place
This makes it easier to reason about what variables are inserted during packaging.
We also make sure that template file is also valid python syntax, which makes editor errors go away during development.
2024-01-17 22:53:17 +01:00
Someone 8282fe9c6f
Merge pull request #269639 from SomeoneSerge/update/cudaPackages
cudaPackages: bump the default 11 -> 12
2024-01-17 21:13:37 +00:00
Silvan Mosberger 8cf3cd91b2 check-by-name: Update contributor docs
Now that the tooling is pinned instead of being fetched indirectly from
the channel, the docs need some updating
2024-01-17 21:26:39 +01:00
WilliButz bb9c7762bc
nixos/prometheus-snmp-exporter: add config check
This is introduced and enabled by default because the config syntax for
the exporter changed with release 0.23.0.

This should make the breaking config change obvious before services are
deployed with an incompatible old config.

The check is based on the check present in the blackbox-exporter module.
2024-01-17 20:34:30 +01:00
WilliButz a8ea9fe492
nixos/prometheus-snmp-exporter: switch to new config syntax
Introduced with version 0.23.0, see
b75fc6b839/auth-split-migration.md
2024-01-17 20:32:45 +01:00
Marcel a63a884c00
nixos/bird2: add option to disable auto reload
In a critical setup of bird with many BGP sessions,
you want to control the exact time when configuration
changes are applied. Therefore, an option was added,
to disable automatic reloading the systemd unit,
when configuration changes are made. The administrator
how has the ability to control how changes are applied.
2024-01-17 20:09:34 +01:00
Will Fancher 59ba511744
Merge pull request #266370 from SuperSandro2000/systemd-install-wantedby
systemd-lib: add Install WantedBy section to make units similar to upstream ones
2024-01-17 13:04:03 -05:00
github-actions[bot] 5fe540596f
Merge staging-next into staging 2024-01-17 18:01:27 +00:00
Someone Serge bed725db88
cudaPackages_11_4.nsight_systems: clean up the deprecation comments 2024-01-17 15:17:01 +00:00
Robin Gloster e59524560c
Merge pull request #281555 from fpletz/nixos/ntpd-rs-fix-metrics
nixos/ntpd-rs: fix metrics service
2024-01-17 15:49:24 +01:00
Sandro 23a88afe88
Merge pull request #247112 from OPNA2608/init/lomiri/lomiri-terminal-app 2024-01-17 15:31:11 +01:00
Sandro 35ef7edaea
Merge pull request #281421 from SuperSandro2000/pcsc-polkit 2024-01-17 15:21:26 +01:00
Franz Pletz 35c015ff91
nixos/ntpd-rs: fix metrics service 2024-01-17 15:06:20 +01:00
nikstur 748378a3ec systemd: 254.6 -> 255.2
Removed patches:

- 0007-Fix-hwdb-paths.patch

  The directory we want seems to already be included in the list. Is there
  a reason why we want to restrict it further?

- 0010-build-don-t-create-statedir-and-don-t-touch-prefixdi.patch

  This patch has little to do with how the meson.build file looks now. The
  new patch 0017 is the successor to this one.

- 0015-pkg-config-derive-prefix-from-prefix.patch

  This is fixed upstream. We don't need this anymore.
2024-01-17 14:13:46 +01:00
Robert Hensing 1f9e86f314 nixosTests.docker-tools: Use both code paths in includeStorePath test 2024-01-17 13:50:01 +01:00
github-actions[bot] 4fe3cac67d
Merge staging-next into staging 2024-01-17 12:01:22 +00:00
rht fb8b20d90e
acpid: Disable network access 2024-01-17 06:46:34 -05:00
Maciej Krüger f666630f4a
Merge pull request #280556 from gador/pgadmin-8.2
pgadmin: 8.1 -> 8.2, python3Packages.webauthn 1.11.1 -> 2.0.0, python3Packages.flask-security-too: fix pydantic issue
2024-01-17 08:30:24 +01:00
github-actions[bot] e73431e32f
Merge staging-next into staging 2024-01-17 06:01:31 +00:00
Benjamin Bädorf 7c3ecbdce9 nixos/invoiceplane: add nginx as a webserver option for invoiceplane
Getting the vhost to play nice with phpfpm was done by following this
community post: https://community.invoiceplane.com/t/topic/2654
2024-01-17 05:09:34 +01:00
Ryan Lahfa bbd92ae047
Merge pull request #280561 from RaitoBezarius/fix-listmonk-module
nixos/mail/listmonk: fix hardening directives
2024-01-17 03:42:31 +01:00
Someone Serge 0f70deed1c
cudaPackages: update the release notes with the major version bump 2024-01-17 01:02:34 +00:00
github-actions[bot] 84325112d5
Merge staging-next into staging 2024-01-17 00:02:43 +00:00
Sandro Jäckel 6b1e46597f
nixos/pcscd: fix linking of org.debian.pcsc-lite.policy file for polkit 2024-01-17 00:28:22 +01:00
Alyssa Ross 7abc6d260b nixos/doc: add missing anchor for Linux Rust
Fixes: ec2016dda4 ("doc: explain how to enable Rust support in the Linux kernel")
2024-01-16 23:17:13 +01:00
Madoura c3316bcce4
nixos/bcachefs: add 'bcachefs-tools' to (udev/systemd).packages 2024-01-16 15:19:39 -06:00
Madoura 9dfa878a20
nixos/bcachefs: clarify 'FIXME' comment on when to remove 2024-01-16 15:06:05 -06:00
Madoura d86395db78
nixos/stage-1.init.sh: only set 'IFS' in 'waitDevice' for bcachefs 2024-01-16 15:06:05 -06:00
Madoura 919c05460b
nixos/stage-1.init.sh: fix IFS comment grammar 2024-01-16 15:06:04 -06:00
Madoura 1de7b377f4
rl-2405: change note for bcachefs to be 'linuxPackages_latest' 2024-01-16 15:06:04 -06:00
Will Fancher bf54848f3b
Merge pull request #280232 from jmbaur/sysupdate-example-fix
nixos/sysupdate: fix example text
2024-01-16 15:43:05 -05:00
Will Fancher 66e3ec7d30
Merge pull request #278895 from jmbaur/repart-initrd-loopback
nixos/repart: add loop module to initrd
2024-01-16 15:40:19 -05:00
Maximilian Bosch 7f91c8ef83
Merge pull request #276496 from Izorkin/update-roundcube-nginx
nixos/roundcube: update nginx configuration
2024-01-16 20:40:12 +01:00
Franz Pletz 1a4fa5c047
Merge pull request #279866 from katexochen/mkosi/20
mkosi: 19 -> 20.1
2024-01-16 20:08:45 +01:00
Franz Pletz a436870727
Merge pull request #278179 from sinanmohd/network-interfaces-sit
nixos/network-interfaces: fix implicit dependency on underlying device
2024-01-16 19:49:46 +01:00
github-actions[bot] fe8b51eed0
Merge staging-next into staging 2024-01-16 18:01:37 +00:00
Nick Cao 8161251283
Merge pull request #280924 from Luflosi/kubo-cleanup
nixos/kubo: cleanup
2024-01-16 11:06:47 -05:00
Florian Brandes 03649bfdf2 python3Packages.flask-security-too: fix for webauth 2
also removes pydantic (since webauth 2 doesn't use it anymore)

Signed-off-by: Florian Brandes <florian.brandes@posteo.de>
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
2024-01-16 15:55:16 +01:00
Franz Pletz 71435c9869
nixos/tests/podman: firewall now opened by module 2024-01-16 14:46:16 +01:00
github-actions[bot] 7e5906aca4
Merge staging-next into staging 2024-01-16 12:01:24 +00:00
markuskowa 3189db47ce
Merge pull request #274804 from SomeoneSerge/feat/mpich-pmix
mpich: optional pmix support
2024-01-16 12:49:11 +01:00
Doron Behar ead172880f nixos/taskserver: Enable cfg.group to read clients' certificates
This enables the services.taskserver.group to read the certificates
generated by the taskserver.service' preStart script.
2024-01-16 13:09:41 +02:00
Thiago Kenji Okada 401d16acd0
Merge pull request #247256 from lucasew/xrdp-audio
xrdp: add support for audio
2024-01-16 10:06:51 +00:00
rewine 44c752a58a deepin: don't install packages using freeimage by default 2024-01-16 13:08:43 +08:00
Someone Serge 95ae31a015
mpich: deprecate stringly-typed withPm 2024-01-16 02:24:54 +00:00
github-actions[bot] 35f426a31b
Merge staging-next into staging 2024-01-16 00:02:37 +00:00
Peder Bergebakken Sundt 8d9eb920d3
Merge pull request #273807 from h7x4/pkgs-fixup-heimdal
heimdal: 7.8.0 -> 7.8.0-unstable-2023-11-29, large cleanup
2024-01-15 23:16:30 +01:00
Victor Engmark d516870f42
nixos/modules: Split recursive mkdir with permissions
Detected by ShellCheck as violating
<https://github.com/koalaman/shellcheck/wiki/SC2174>.
2024-01-16 08:36:08 +13:00
github-actions[bot] b75d56c840
Merge staging-next into staging 2024-01-15 18:01:17 +00:00
sohalt 38b2778765 nixos/podman: open firewall for aardvark-dns 2024-01-15 18:43:48 +01:00
OPNA2608 62b9942ca2 lomiri.lomiri-terminal-app: init at 2.0.1 2024-01-15 18:42:35 +01:00
kennycallado 73cb336785 nixos/icewm: Update icewm start command
Preferred way to start session in icewm. [docs](https://ice-wm.org/man/icewm-session)
2024-01-15 17:49:01 +01:00
Will Fancher c6f2b53e78
Merge pull request #280296 from ancathri/getKeyLocations-nosnapshots
nixos/zfs: fix getKeyLocations when listsnaps=on
2024-01-15 11:31:25 -05:00
Nick Cao 9c54ad4cf5
Merge pull request #281127 from SuperSandro2000/238474-fixup
Revert "nixos/pcscd: suggest yubikey-personalization for additional u…
2024-01-15 10:02:48 -05:00
Sandro Jäckel 304228fe1c
Revert "nixos/pcscd: suggest yubikey-personalization for additional udev rules"
This reverts commit 6ecb73df1b.
2024-01-15 13:29:34 +01:00
Paul Meyer c8f2f8af99 mkosi: 19 -> 20 2024-01-15 10:15:21 +01:00
Rick van Schijndel c35c3077e9
Merge pull request #260776 from pbsds/substitute-must-match
stdenv: substituteStream: deprecate `--replace` in favor of `--replace-{fail,warn,quiet}`
2024-01-15 07:35:22 +01:00
rewine 7e27869a75 deepin: move distribution.info back to deepin-desktop-base 2024-01-15 14:19:50 +08:00
github-actions[bot] d27cb01f7b
Merge staging-next into staging 2024-01-15 06:01:24 +00:00
Franz Pletz 678b899ac0
Merge pull request #264593 from fpletz/pkgs/ntp-rs-1.0.0 2024-01-15 02:17:36 +01:00
github-actions[bot] a1c9a26c5c
Merge staging-next into staging 2024-01-15 00:02:42 +00:00
Robert Hensing 8e934650ce nixos: Expose lib attribute on configuration for repl 2024-01-15 00:28:07 +01:00
Chris M 6b55672bb5
outline: 0.73.1 -> 0.74.0 (#275007) 2024-01-15 02:31:14 +04:00
Peder Bergebakken Sundt e07a2fab7f stdenv: substituteStream: deprecate --replace in favor of --replace-{fail,warn,quiet} 2024-01-14 22:07:58 +01:00
Nick Cao dfbb7a7c01
Merge pull request #279174 from SuperSandro2000/iso-minimal-override
nixos/installation-cd-minimal: allow overwriting isoImage.edition with mkForce like other options
2024-01-14 15:26:29 -05:00
Nick Cao b9dc8014ef
Merge pull request #278931 from SuperSandro2000/patch-1
nixos/miniflux: allow members of miniflux group to read runtime direc…
2024-01-14 15:24:14 -05:00
Nick Cao 5ba9fede25
Merge pull request #278593 from SuperSandro2000/xdg-data-dirs-display-managers
nixos/display-managers: only link desktop derivation if sessionPackages is not empty
2024-01-14 15:22:57 -05:00
K900 ceede53bfa
Merge pull request #207722 from SuperSandro2000/plasma5-cleanup-pkgs
nixos/plasma5: use plasma5Packages everywhere for clarity
2024-01-14 22:30:39 +03:00
Nick Cao 1840316647
Merge pull request #272556 from SuperSandro2000/influxdb-restart
nixos/influxdb: restart on failure
2024-01-14 14:25:21 -05:00
Nick Cao 2443ba38b6
Merge pull request #272910 from SuperSandro2000/nullmailer
nixos/nullmailer: be flexible about time related types
2024-01-14 14:23:28 -05:00
Nick Cao 205ac6d5d8
Merge pull request #272918 from SuperSandro2000/miniflux
nixos/miniflux: allow ints in config
2024-01-14 14:22:41 -05:00
Maximilian Bosch 8ccc8e9df9
Merge pull request #279890 from onny/nextcloud-cleanup5
nixos/nextcloud: Remove old migration warnings
2024-01-14 20:22:09 +01:00
github-actions[bot] c040ffb531
Merge staging-next into staging 2024-01-14 18:01:21 +00:00
Peder Bergebakken Sundt fa8616a4c0
Merge pull request #279479 from gepbird/c2fmzq-server-bool-setting-allow-false
nixos/c2fmzq-server: allow setting bool settings to false
2024-01-14 18:32:11 +01:00
Sandro Jäckel 74808f169c
nixos/pcscd: remove noop restartTriggers 2024-01-14 18:03:31 +01:00
Sandro Jäckel 6ecb73df1b
nixos/pcscd: suggest yubikey-personalization for additional udev rules 2024-01-14 18:03:31 +01:00
Sandro Jäckel c09acaa905
nixos/pcscd: cleanup code 2024-01-14 18:03:30 +01:00
Franz Pletz 9707745cf8
nixos/ntpd-rs: init 2024-01-14 17:34:42 +01:00
Thiago Kenji Okada 9b3e68356c
Merge pull request #254766 from SuperSandro2000/xxd-closure-size
xxd: reduce closure size by splitting it into it's own output
2024-01-14 16:34:33 +00:00
Adam Stephens ffdcec2d94
nixos/tests/incus: add lxd-to-incus migration test 2024-01-14 09:26:49 -05:00
Felix Bühler 99f4714039
Merge pull request #277501 from Stunkymonkey/prowlarr-check-folder
nixos/tests/prowlarr: check for folder existence
2024-01-14 14:39:27 +01:00
Guillaume Girol e52366c4d8
Merge pull request #272169 from nyabinary/remove-deprecated-network-interfaces
nixos/network-interfaces: remove network-interfaces.target
2024-01-14 14:17:14 +01:00
Guillaume Girol d0f337d181
Merge pull request #278432 from tomodachi94/update/craftos-pc/2.8
craftos-pc: 2.7.5 -> 2.8
2024-01-14 14:13:46 +01:00
Jörg Thalheim 745142de59
Merge pull request #263794 from Mic92/more-dd-flags
docs/installation-usb: add more flags to dd
2024-01-14 13:29:09 +01:00
github-actions[bot] d841ab8796
Merge staging-next into staging 2024-01-14 12:01:53 +00:00
Thomas Gerbet afb57ff041 elasticsearch: 7.17.10 -> 7.17.16
Fixes CVE-2023-31417, CVE-2023-31418, CVE-2023-31419, CVE-2023-46673 and CVE-2023-46674.

Security announces:
https://www.elastic.co/guide/en/security/7.17/release-notes-header-7.17.0.html#release-notes-7.17.16

Release notes:
https://www.elastic.co/guide/en/elasticsearch/reference/7.17/release-notes-7.17.16.html
https://www.elastic.co/guide/en/elasticsearch/reference/7.17/release-notes-7.17.15.html
https://www.elastic.co/guide/en/elasticsearch/reference/7.17/release-notes-7.17.14.html
https://www.elastic.co/guide/en/elasticsearch/reference/7.17/release-notes-7.17.13.html
https://www.elastic.co/guide/en/elasticsearch/reference/7.17/release-notes-7.17.12.html
https://www.elastic.co/guide/en/elasticsearch/reference/7.17/release-notes-7.17.11.html
2024-01-14 12:21:45 +01:00
Luflosi a4c451fd37
nixos/kubo: cleanup
- Add note explaining why enabling the Kubo daemon won't fully work immediately and requires logging in again
- Use `builtins.isList addrIn` instead of `builtins.typeOf addrIn == "list"`
- Fix indentation
2024-01-14 12:21:09 +01:00
Bobby Rong 4d47dc2d9f
Merge pull request #280526 from bobby285271/upd/pantheon-test
nixosTests.pantheon: Extend the test
2024-01-14 17:44:09 +08:00
Bobby Rong 40bec35947
nixosTests.pantheon: Extend the test
- Ensure greeter-compositor starts
- Ensure various environment variables are set
- Ensure multitasking view triggers
- Misc updates
2024-01-14 14:10:21 +08:00
github-actions[bot] c9743f0e5c
Merge staging-next into staging 2024-01-14 06:01:18 +00:00
Ryan Lahfa dd5621df6d
Merge pull request #278380 from DeeUnderscore/fix/nginx-etag
nginx: change etags for statically compressed files served from store
2024-01-14 04:55:27 +01:00
h7x4 c71fa4be0c
heimdal: clean up package
- Make inputs more diff friendly
- Add flags for enabling certain libraries
- Disable LDAP support as HDB module by default
- Add support for CJSON
- Flatten contents of `$out/libexec`, which earlier had an
  `heimdal/heimdal` directory
- Use SRI hash
- Enable package tests
- Add `passthru.tests.nixos`
- Add `meta.homepage` and `meta.changelog`

Co-authored-by: Felix Albrigtsen <felix@albrigtsen.it>
2024-01-14 01:13:19 +01:00
github-actions[bot] ec9f3ed3ee
Merge staging-next into staging 2024-01-14 00:02:46 +00:00
Gutyina Gergő 7247d16af6
nixos/c2fmzq-server: allow setting bool settings to false 2024-01-14 00:19:19 +01:00
Dee Anzorge f124c73686 nginx: change etags for statically compressed files served from store
Per RFC 9110, [section 8.8.1][1], different representations of the same
resource should have different Etags:

> A strong validator is unique across all versions of all
> representations associated with a particular resource over time.
> However, there is no implication of uniqueness across representations
> of different resources (i.e., the same strong validator might be in
> use for representations of multiple resources at the same time and
> does not imply that those representations are equivalent)

When serving statically compressed files (ie, when there is an existing
corresponding .gz/.br/etc. file on disk), Nginx sends the Etag marked
as strong. These tags should be different for each compressed format
(as shown in  an explicit example in section [8.8.3.3][2] of the RFC).
Upstream Etags are composed of the file modification timestamp and
content length, and the latter generally changes between these
representations.

Previous implementation of Nix-specific Etags for things served from
store used the store hash. This is fine to share between different
files, but it becomes a problem for statically compressed versions of
the same file, as it means Nginx was serving different representations
of the same resource with the same Etag, marked as strong.

This patch addresses this by imitating the upstream Nginx behavior, and
appending the value of content length to the store hash.

[1]: https://www.rfc-editor.org/rfc/rfc9110.html#name-validator-fields
[2]:
https://www.rfc-editor.org/rfc/rfc9110.html#name-example-entity-tags-varying
2024-01-13 22:07:50 +01:00
Mario Rodas 033f88f786
Merge pull request #277982 from trofi/spark-fix-tests-eval
spark: fix `tests` eval under `allowAliases = false`
2024-01-13 16:06:50 -05:00
Peder Bergebakken Sundt 59cefcbc62
Merge pull request #277783 from gepbird/c2fmzq-server-multiple-freeform-settings
nixos/c2fmzq-server: allow multiple freeform settings
2024-01-13 22:01:23 +01:00
Mario Rodas 76a31fdb5c
Merge pull request #267440 from linsui/starship
nixos/starship: add presets
2024-01-13 14:27:06 -05:00
Ryan Lahfa b5a944511d
Merge pull request #256709 from colemickens/make-squashfs-skip-compression
nixos/lib/make-squashfs.nix: allow disabling compression
2024-01-13 20:23:25 +01:00
github-actions[bot] e59c8549eb
Merge staging-next into staging 2024-01-13 18:01:22 +00:00
Robert Hensing 221ad6d7ff
Merge pull request #277642 from Enzime/fix/nixos-rebuild-remote-sudo
nixos-rebuild: fix issues when using `--target-host`
2024-01-13 18:52:57 +01:00
Ryan Lahfa 32ccbe0927
Merge pull request #272029 from blitz/rust-for-linux
In-kernel Rust on Linux (Optional) (2nd Attempt)
2024-01-13 16:51:00 +01:00
lucasew cf26222cc8 nixos/tests: add xrdp-with-audio-pulseaudio
Signed-off-by: lucasew <lucas59356@gmail.com>
2024-01-13 12:42:06 -03:00
lucasew 44ae5fe211 nixos/xrdp: add audio.enable option
Signed-off-by: lucasew <lucas59356@gmail.com>
2024-01-13 12:42:06 -03:00
maxine a3ada00f8a
Merge pull request #280472 from martiert/fcc-unlock
nixos/modemmanager: Add qmicli and mbimcli when using fccUnlockScripts
2024-01-13 15:45:11 +01:00
nikstur ce1ed11483
Merge pull request #280708 from thillux/fix-trackpoint
modules/trackpoint: fix quote
2024-01-13 15:25:25 +01:00
Markus Theil 7fcfa4f0d6 modules/trackpoint: fix quote
Fixes:

[    7.106281] systemd[1]: /etc/systemd/system/trackpoint.service:10: Unbalanced quoting, ignoring: "/nix/store/iidxwcyp8pqhrq3iji17shs4m6gin0kv-systemd-254.6/bin/udevadm trigger --attr-match=name="TPPS/2 IBM TrackPoint"

Signed-off-by: Markus Theil <theil.markus@gmail.com>
2024-01-13 12:22:06 +01:00
Florian Brandes 1c1ca56266 pgadmin: 8.1 -> 8.2
Signed-off-by: Florian Brandes <florian.brandes@posteo.de>
2024-01-13 09:54:32 +01:00
Yueh-Shun Li d1c42ac350 optparse-bash: drop
Drop because
- it seems abandoned by the upstream years ago[1].
- there are quite some nice alternatives[2] already available in
  Nixpkgs.

[1]: https://github.com/nk412/optparse/commits/master/
[2]: https://github.com/shadawck/awesome-cli-frameworks#bashshell

Co-authored-by: Anderson Torres <torres.anderson.85@protonmail.com>
2024-01-13 05:54:58 +00:00
Simon Hollingshead d077cd8691 nixos/auto-upgrade: add system.autoUpgrade.fixedRandomDelay
From systemd 247, timers can be configured to randomize their delay
once and to apply the same random delay for all future executions.
This allows users to have less jitter between auto-upgrade executions
while still avoiding multiple timers firing simultaneously on a
machine or multiple machines all performing their upgrades
simultaneously.

The default option value (false) is backwards compatible.

All supported versions of NixOS (in fact, back to and including 21.05)
use systemd 247 or later.
2024-01-13 03:40:44 +00:00
ancathri 51dfaf639a nixos/zfs: fix getKeyLocations when listsnaps=on
Encountered boot errors in pool with `listsnapshots=on` getKeyLocations should ignore snapshots as they will not be well-handled by createImportService later on
2024-01-12 19:06:00 -06:00
Alois Wohlschlager 77e5fa5ea6 nixos/libvirtd: support out-of-tree vhost-user drivers
Add an option allowing packages containing out-of-tree vhost-user drivers for
QEMU to be specified. The relevant configurations are then linked at runtime
where libvirt expects them.
An example use case for this is virtiofs.
2024-01-13 00:39:33 +01:00
Yt 827bd96b2b
Merge pull request #280005 from digtail/2024-01-09-ntfy-sh-dynamic-user
nixos/ntfy-sh: clean up DynamicUser workarounds
2024-01-12 23:39:25 +01:00
Maximilian Bosch 90787dbe89
nixos/nextcloud: set up base directories & override.config.php with tmpfiles
Closes #169733

The issue is that Nextcloud fails to start up after a GC because the
symlink from `override.config.php` is stale.

I'm relatively certain that this is not a bug in the Nix GC - that
would've popped up somewhere else already in the past years - and one of
the reporters seems to confirm that: when they restarted
`nextcloud-setup.service` after the issue appeared, an
`override.config.php` pointing to a different hash was there.

This hints that on a deploy `nextcloud-setup` wasn't restarted properly
and thus replacing the symlink update was missed. This is relatively
hard to trigger due to the nature of the bug unfortunately (you usually
keep system generations for a few weeks and you'll need to change the
configuration - or stdenv - to get a different `override.config.php`),
so getting pointers from folks who are affected is rather complicated.

So I decided to work around this by using systemd-tmpfiles which a lot
of other modules already utilize for this use-case. Now,
`override.config.php` and the directory structure aren't created by
`nextcloud-setup`, but by `systemd-tmpfiles`.

With that, the structure is guaranteed to exist

* on boot, since tmpfiles are always created/applied then
* on config activation, since this is done before services are
  (re)started which covers the case for new installations and existing
  ones.

Also, the recursive `chgrp` was used as transition tool when we switched
from `nginx` as owning group to a dedicated `nextcloud` group[1][2], but
this was several releases ago, so I don't consider this relevant
anymore.

[1] fd9eb16b24
[2] ca916e8cb3
2024-01-12 22:11:36 +01:00
Maciej Krüger 6ba04cc302
Merge pull request #270876 from gador/pgadmin-check-pw
nixos/pgadmin: add minimumPasswordLength setting and check
2024-01-12 21:00:40 +01:00
Julian Stecklina ec2016dda4
doc: explain how to enable Rust support in the Linux kernel 2024-01-12 20:29:07 +01:00
Julian Stecklina d1f33201ef
nixos/tests/kernel-rust: init 2024-01-12 20:29:06 +01:00
Ryan Lahfa f520eb3f0c
Merge pull request #263658 from siriobalmelli-foss/sb/zfs-image
openstack-image-zfs and make-single-disk-zfs-image: optionally specify qemu instance memory
2024-01-12 20:25:26 +01:00
Ryan Lahfa 08d0afbbdf
Merge pull request #239028 from chayleaf/miniupnpd
miniupnpd-nftables: init at 2.3.3
2024-01-12 20:17:33 +01:00
Raito Bezarius 4c84c9c1c3 nixos/mail/listmonk: fix hardening directives
For some reason, I don't know why I missed those, but
I didn't look at my logs for a while.

It would be nice if we could catch those statically kinda (?) in CI.
2024-01-12 20:14:52 +01:00
Ryan Lahfa 724d5348a6
Merge pull request #272794 from dcarosone/zpool-import-d
nixos/zfs: check pool state with -d, like import
2024-01-12 20:07:24 +01:00
Ryan Lahfa 1b2aeec40a
Merge pull request #275031 from 2xsaiko/outgoing/sieve
nixos/dovecot: add support for sieve extensions, in particular imapsieve and pipe
2024-01-12 20:05:45 +01:00
Ryan Lahfa 6d8630efda
Merge pull request #270270 from SuperSandro2000/nginx-fastopen
nixos/nginx: filter more options when listening has quic
2024-01-12 20:01:29 +01:00
Ryan Lahfa 3287441158
Merge pull request #275484 from Izorkin/update-nginx-http3
nixos/nginx: disable automatic advertise of HTTP/3 protocol support
2024-01-12 19:49:18 +01:00
Maciej Krüger c0ef1f9479
nixos/network-interfaces: add assertion if used in after or wants 2024-01-12 17:29:05 +01:00
Niko 9e2cd6f872
nixos/network-interfaces: remove network-interfaces.target
Co-authored-by: Martin Weinelt <mweinelt@users.noreply.github.com>
2024-01-12 17:29:03 +01:00
K900 391d29cb04 nixos/tests/installer: fix eval 2024-01-12 15:24:49 +01:00
K900 e7b611e59d Merge remote-tracking branch 'origin/master' into staging-next 2024-01-12 13:59:54 +03:00
K900 9490738be7 nixos/lib/test-driver: add setuptools build dep 2024-01-12 13:58:07 +03:00
Martin Ertsås 3e3fea8653
nixos/modemmanager: Add qmicli and mbimcli when using fccUnlockScripts
The ModemManager shipped fccUnlockScripts are using either qmicli or
mbimcli, to unlock wwan modems. These needs to be available for
ModemManager if you set the fccUnlockScripts link, so instead of having
every user than needs it pull it inn in different ways, we should just
provide the tools if we think they might be needed.

https://modemmanager.org/docs/modemmanager/fcc-unlock
2024-01-12 11:53:44 +01:00
Raito Bezarius 3ecaad0e0e nixos/networking/keepalived: do not emit unicastPeers when there are none
In the past, we emitted `unicast_peer` block even with empty unicast peers list.

This now results in:
```
Keepalived_vrrp[392762]: A unicast keyword has been specified without any unicast peers. Defaulting to multicast. This usage is deprecated - please update your configuration.
```

We do not emit it anymore to avoid this warning.
2024-01-12 03:52:39 +01:00
Yureka 1a1c53c271
Revert "nixos/gitlab: Add CI database connection for >=15.9" (#280395) 2024-01-12 02:03:23 +01:00
Yureka 29bc446b5c
Revert "nixos/gitlab: fix database config when no passwordfile is defined" (#280392) 2024-01-12 02:00:49 +01:00
Peder Bergebakken Sundt f489e99576
Merge pull request #277925 from Izorkin/update-nginx-http2
nixos/nginx: use new variant of http2 option for angie package
2024-01-12 01:40:18 +01:00
Lin Jian 52bd30d5c5
Merge pull request #279274 from MarcelCoding/patch-1
nixos/pgadmin: disable upgrade check
2024-01-12 08:16:16 +08:00
Ryan Lahfa 56df644cb4 Revert "nixVersions.stable: 2.18.1 -> 2.19.2"
This version does not pass our NixOS tests, e.g. `nixosTests.misc` and
potentially other fundamental tests such as lib-tests.
2024-01-11 19:15:07 +01:00
Marcel 0be0d8a860
nixos/pgadmin: disable upgrade check 2024-01-11 16:22:28 +01:00
github-actions[bot] 5ee7600250
Merge master into staging-next 2024-01-11 12:01:18 +00:00
Florian Klink 3d1fe1445c
Merge pull request #279433 from wentasah/nsswitch-mdns
nixos/avahi-daemon: let nssmdns{4,6} options affect also non-minimal …
2024-01-11 13:21:24 +02:00
Florian Brandes bc21d288f4
nixos/pgadmin: apply review suggestions
Signed-off-by: Florian Brandes <florian.brandes@posteo.de>
2024-01-11 11:32:32 +01:00
TomaSajt 56a43aaba8
nixos/quark-goldleaf: init 2024-01-11 11:02:01 +01:00
Jared Baur d177e2ef06
nixos/sysupdate: fix example text
The example systemd-sysupdate transfer name has a ".conf" suffix,
although the files on the final system are already appended with this
suffix, so the file ends up being "transfer-name.conf.conf". Remove the
suffix in the example so that users will get a transfer filename they
expect.
2024-01-11 01:47:36 -08:00
Patrik Keller 30b25fa102 nixos/netdata: add missing dependency for syslog alarms
Netdata depends on the `logger` utility for dispatching health alarms to
syslog. This dependency was missing in the systemd units environment.

Issue: https://github.com/NixOS/nixpkgs/issues/272702
Docs: https://learn.netdata.cloud/docs/alerting/notifications/agent-dispatched-notifications/syslog
Docs, archived: https://archive.is/mkQa4
2024-01-11 08:38:52 +01:00
github-actions[bot] 28d4a2210a
Merge master into staging-next 2024-01-11 06:01:20 +00:00
Someone 7953a78641
Merge pull request #280076 from SomeoneSerge/fix/apptainer-nv-cherry
apptainer: unbreak --nv (userns+nvliblist.conf variant)
2024-01-11 00:51:23 +00:00
Ryan Lahfa 176e84d44f
Revert "nixos/systemd-boot: init boot counting" 2024-01-11 01:00:43 +01:00
Ryan Lahfa a6303da3a7
Merge pull request #273062 from JulienMalka/systemd-boot-counting
nixos/systemd-boot: init boot counting
2024-01-11 00:40:07 +01:00
Weijia Wang 2f9e98ccf3 Merge branch 'master' into staging-next 2024-01-10 23:12:44 +01:00
Bernardo Meurer ca25692e79
Merge pull request #280092 from eclairevoyant/nix-stable
nixVersions.stable: 2.18.1 -> 2.19.2
2024-01-10 18:06:22 -03:00
Someone Serge 35de6f1c4e
nixos/singularity: disable setuid for apptainer
(cherry picked from commit 5f4b6ea5dd)
2024-01-10 20:47:57 +00:00
maxine 3534a235f1
Merge pull request #278941 from amaxine/drop-gnome-themes-extra
gnome: don't include gnome-themes-extra by default
2024-01-10 21:07:06 +01:00
Peder Bergebakken Sundt dff635f38d
Merge pull request #243169 from 2xsaiko/outgoing/krb5
nixos/krb5: cleanup, fix and RFC42-ify
2024-01-10 21:06:15 +01:00
éclairevoyant c27bc49c43
nixVersions.stable: 2.18.1 -> 2.19.2 2024-01-10 14:04:30 -05:00
github-actions[bot] 769e5f5d37
Merge master into staging-next 2024-01-10 18:01:17 +00:00
Nick Cao cd8d49773e
Merge pull request #279757 from katexochen/k9s/0-31
k9s: 0.30.8 -> 0.31.1
2024-01-10 10:41:38 -05:00
Martin Weinelt 10b01dcc89
Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
-	pkgs/development/python-modules/types-setuptools/default.nix
2024-01-10 16:09:52 +01:00
Tom Siewert 890ffaa1ae nixos/gitlab: fix database config when no passwordfile is defined
In commit 41ca9c1, the database config got an additional config entry
for a separate CI database connection [1]. Unfortunately, the main connection
must always be the first entry. The fix for this was only applied when
databasePasswordFile has been set.

This commit fixes the order of the config for deployments without a databasePasswordFile.

[1] https://docs.gitlab.com/ee/update/deprecations.html#single-database-connection-is-deprecated
2024-01-10 14:35:57 +01:00
Jonas Heinrich cb919df382
Merge pull request #279887 from onny/dokuwiki-cleanup
nixos/dokuwiki: Remove old migration warnings
2024-01-10 14:04:20 +01:00