Commit graph

882 commits

Author SHA1 Message Date
Peder Bergebakken Sundt 527be14321 nixos/doc: convert links to manpages 2025-02-21 16:31:09 +01:00
éclairevoyant 37d08685e8
nixos/version: validate system.stateVersion 2025-02-06 07:04:02 -05:00
Robert Hensing 0b47fba230 Revert "nixos/nixpkgs: make config.nixpkgs.{localSystem,crossSystem,buildPlatform,hostPlatform} write only"
This reverts commit 0a19371146.
2025-02-05 14:29:18 +01:00
Wolfgang Walther 0a19371146
nixos/nixpkgs: make config.nixpkgs.{localSystem,crossSystem,buildPlatform,hostPlatform} write only
The description for options.nixpkgs.system already hints at this:

  Neither ${opt.system} nor any other option in nixpkgs.* is meant
  to be read by modules and configurations.
  Use pkgs.stdenv.hostPlatform instead.

We can support this goal by not elaborating the systems anymore, forcing
users to go via pkgs.stdenv.

This will prevent problems when making the top-level package sets
composable in the next commit. For this to work, you should pass a fully
elaborated system to nixpkgs' localSystem or crossSystem options.
2025-02-01 12:04:59 +01:00
K900 7c251e2b5f
Revert "pkgs/top-level: make package sets composable" 2025-01-26 09:43:44 +03:00
Wolfgang Walther b3ef08a73c
pkgs/top-level: make package sets composable (#303849) 2025-01-25 21:25:27 +01:00
Wolfgang Walther eec21001b0
nixos/nixpkgs: pass original system args instead of elaborated
Passing the elaborated system defeats what pkgs/top-level/default.nix
tries to do: Pass only the original args and let defaults be inferred.

The underlying problem is that lib.systems.elaborate can not deal with
arbitrary overrides, but will often return an inconsistent system
description when partially overriding some values. This becomes most
prominent if trying to override an already elaborated system.
2025-01-25 18:55:03 +01:00
Sandro Jäckel 4ea0805f4e
nixos/modules: drop findutils locate support
Co-authored-by: 71rd <71rd@posteo.net>
2025-01-21 18:21:04 +01:00
piegames 603733851b treewide: Fix incorrect string escapes 2025-01-07 19:49:28 +01:00
Will Fancher 4971ed01cb nixos/ids: Link to RFC #52 and explain that static IDs are not allowed. 2024-12-23 17:01:59 -05:00
Will Fancher 218901bd4c nixos/whisparr: Remove static IDs 2024-12-23 01:21:59 -05:00
Will Fancher 55e8064b0b Revert "nixis/uinput: use a fixed GID for the uinput group"
This reverts commit 70119aa60f.
2024-12-23 01:21:59 -05:00
Arne Keller e89a8d56de
whisparr: init at 2.0.0.548 + nixos/whisparr: initial commit (#244172) 2024-12-15 23:01:50 +01:00
Drewry Pope d388ee0ec8
nixos/label: fix typo: loosing=>losing (#365294)
typo: loosing=>losing
2024-12-15 11:29:30 +02:00
Silvan Mosberger 4f0dadbf38 treewide: format all inactive Nix files
After final improvements to the official formatter implementation,
this commit now performs the first treewide reformat of Nix files using it.
This is part of the implementation of RFC 166.

Only "inactive" files are reformatted, meaning only files that
aren't being touched by any PR with activity in the past 2 months.
This is to avoid conflicts for PRs that might soon be merged.
Later we can do a full treewide reformat to get the rest,
which should not cause as many conflicts.

A CI check has already been running for some time to ensure that new and
already-formatted files are formatted, so the files being reformatted here
should also stay formatted.

This commit was automatically created and can be verified using

    nix-build a08b3a4d19.tar.gz \
      --argstr baseRev b32a094368
    result/bin/apply-formatting $NIXPKGS_PATH
2024-12-10 20:26:33 +01:00
Philip Taron 82ab56b332
nixos/locate: update hardening from upstream (#362126) 2024-12-06 12:51:10 -08:00
K900 10f4a9ab75
linux/common-config: enable support for crashkernel dumps (#347932) 2024-12-06 10:15:20 +03:00
Sandro Jäckel 578e4012fd
nixos/locate: update hardening from upstream 2024-12-04 15:38:37 +01:00
Doron Behar 32ad523bd5
nixos/documentation: Link Devhelp files (#218123) 2024-12-01 11:25:40 +02:00
Fernando Rodrigues 02e1f93cb4
nixos/version: add extraOSReleaseArgs and extraLSBReleaseArgs
A free-form `attrsOf str` option that is merged with the /etc/os-release
builder, allowing downstreams to customise arbitrary os-release fields.
This is separate from the variant option, as using an attribute set
merge means one gets an infinte recursion when making extraOSReleaseArgs
a recursive set, and the variant attribute is useful to define elsewhere
or multiple times.

Ditto for /etc/lsb-release.

Signed-off-by: Fernando Rodrigues <alpha@sigmasquadron.net>
2024-11-29 19:58:29 -03:00
Fernando Rodrigues b4d7b9ade2
nixos/version: use 24-bit ANSI colour code
It's almost 2025; we don't need to use 3-bit colour anymore. Let's use
the proper colour code for NixOS' light blue:
ea1384e183/logo/README.md (colours)

Signed-off-by: Fernando Rodrigues <alpha@sigmasquadron.net>
2024-11-29 19:56:30 -03:00
jopejoe1 bf5d64a130
nixos/os-release: make default_hostname distribution default (#359571) 2024-11-29 22:54:21 +00:00
Juanjo Presa 5a6ea278da nixos/os-release: make default_hostname distroId 2024-11-28 13:25:47 +01:00
Felix Buehler 9a8512f460 nixos/meta: remove with lib; 2024-11-27 22:26:56 +01:00
Felix Buehler 0334b1bf8e nixos/label: remove with lib; 2024-11-27 22:26:56 +01:00
Felix Buehler 4feff6c9b5 nixos/crashdump: remove with lib; 2024-11-27 22:26:56 +01:00
Felix Buehler 650b7695e0 nixos/assertions: remove with lib; 2024-11-27 22:26:56 +01:00
Sefa Eyeoglu d8b5f031dc
nixos/crashdump: remove redundant kernel patch
Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
2024-11-24 13:21:20 +01:00
Tristan Ross f49e820fbc
24.11 beta release 2024-11-14 09:02:09 -08:00
Pavel Sobolev d6d7fe94d4
nixos/whisparr: initial commit 2024-11-07 20:46:59 +03:00
MidAutumnMoon ab526e04fe
nixos/ids: explain *why* uids/gids shouldn't be above "399" 2024-11-06 14:13:02 +08:00
Johannes Jöns 846ec9d5ef
nixos/os-release: add additional info (#338461) 2024-10-31 22:09:55 +01:00
jopejoe1 3dec4d4a9e nixos/os-release: add additional info 2024-10-30 20:24:40 +01:00
Tomo 76c7c2dd88 nodePackages.shout: drop
shout has been deprecated since 2016:
90a62c56af

Also, move the top-level `shout` alias to `pkgs/top-level/aliases.nix`.

Part of #229475
2024-10-19 17:53:20 +00:00
Maximilian Bosch 875f00ed40
gogs: remove
Upstream development has stalled and several critical vulnerabilities
that weren't addressed within a year[1][2].

Back then it was fair to mark it as insecure, but given nothing has
happened since, it's time to remove it.

[1] https://forgejo.org/2023-11-release-v1-20-5-1/
[2] https://github.com/gogs/gogs/issues/7777
2024-10-12 10:36:06 +02:00
r-vdp 70119aa60f
nixis/uinput: use a fixed GID for the uinput group 2024-10-05 10:21:26 +02:00
r-vdp 469f505813
nixos/{uinput,ids}: format 2024-10-05 10:21:01 +02:00
Matt Sturgeon 6d9dfef94f
nixos/nixpkgs: show definition files in config assertion 2024-09-20 10:42:45 +01:00
Matt Sturgeon 1bd4da1848
nixos/nixpkgs: fix config assertion text
The assertion message should include the `nixpkgs.config` value, however
it currently includes the entire `nixpkgs.config` _option_.

This means the type, declarations, definitions, etc were all printed.
2024-09-20 10:42:05 +01:00
Felix Buehler 22cbc6c0f6 nixos/nixpkgs: fix incorrect lib usage 2024-09-16 21:07:34 +02:00
Felix Buehler 30c85fe74d nixos/wordlist: remove with lib; 2024-09-15 10:43:46 +02:00
Felix Buehler 609e57485d nixos/nixpkgs: remove with lib; 2024-09-15 10:43:45 +02:00
Felix Buehler 6af918a564 nixos/flake: remove with lib; 2024-09-15 10:43:45 +02:00
Martin Weinelt ad601344e1
Revert "nixos/version: validate system.stateVersion" (#339671)
This broke the eval of the ISOs on nixos/unstable-small and likely nixos/trunk-combined. See #339671 for details.
2024-09-05 03:22:20 +02:00
Johannes Jöns 3df1783166
nixos/version: validate system.stateVersion (#317858) 2024-09-04 18:09:57 +00:00
tilpner 03faf8f3bb
nixos/version: validate system.stateVersion 2024-08-24 15:54:47 +02:00
Emily 7ec755257a hydron: drop
This package was marked as vulnerable in
<https://github.com/NixOS/nixpkgs/pull/255959>, almost a year ago and
over a year after the project was archived upstream. The package and
module are unusable without bypassing a security warning in 23.05,
23.11, and 24.05.

Given that the package is intended as an organizer for
potentially‐untrusted media files, the vulnerability is critical and
leads to remote code execution, and there is basically no prospect
of upstream releasing a fix, remove the package and module entirely
for 24.11.
2024-08-03 20:27:19 +01:00
Maximilian Güntner 23e62062bc
nixos/mxisd: remove module
mxisd and ma1sd are both unmaintained
2024-07-12 11:44:59 +02:00
Sandro Jäckel dd743c70ee
nixos/locate: persist updatedb timer 2024-07-05 20:12:15 +02:00
éclairevoyant 7d8742da87
treewide: fix mkEnableOption usage 2024-06-14 02:41:42 -04:00