Commit graph

9148 commits

Author SHA1 Message Date
github-actions[bot] 7fc19ff961
Merge staging-next into staging 2024-09-20 18:05:01 +00:00
Ryan Lahfa fed418aaf1
add support for building fully dm-verity protected images with systemd-repart (#343252) 2024-09-20 19:59:50 +02:00
Quag 3115573f29 zutty: init at 0.16-unstable-2024-08-18 2024-09-20 19:24:35 +02:00
superherointj e9002b6b54 nixosTests.k3s.{single-node,multi-node}: nixfmt 2024-09-20 13:08:41 -03:00
superherointj 05e13bffe1 nixosTests.k3s.{single-node,multi-node}: enable check-config for aarch64 2024-09-20 12:54:58 -03:00
WilliButz 56d038e17d
nixos/tests/appliance-repart-image-verity-store: init
This test should illustrate how to build a verity-protected NixOS image
with systemd-repart, using the opinionated image.repart.verityStore module.
2024-09-20 17:35:49 +02:00
phaer 01fd62f37a tests/playwright-python: init
For some reason, chromium, which is still the nixpkgs version hangs
 inside the normal test vm, while working fine in .driverInteractive.

I suspect that might have to do with the existence of a display in
.driverInteractive. Neither vm does run X11 or wayland.
2024-09-20 14:52:35 +02:00
github-actions[bot] 33e2cbc61f
Merge staging-next into staging 2024-09-20 12:05:56 +00:00
Cosima Neidahl eee25622ff
nixosTests.terminal-emulators: Fix lomiri-terminal-app test after mesa change (#341573) 2024-09-20 13:42:57 +02:00
Weijia Wang 98a31cdb8d
wordpress: 6.6.1 -> 6.6.2 (#343013) 2024-09-20 10:17:04 +02:00
K900 d8a54461fc Merge remote-tracking branch 'origin/staging-next' into staging 2024-09-20 07:27:56 +03:00
Sandro 97ca40d3ca
turn-rs: init at 3.1.0 (#338928) 2024-09-19 22:53:28 +02:00
Weijia Wang d582ac052d nixos/wordpress: fix tests 2024-09-19 22:25:37 +02:00
K900 d2e6b8dac6 nixos/tests/wpa_supplicant: explicitly set channel
mac80211_hwsim can't emulate ACS, so explicitly choose a channel.
2024-09-19 20:47:18 +03:00
rnhmjoj 7efc956510
Revert "nixos/wireless: link config to /etc by default"
This reverts commit 89eb93dc3f.

It broken setups where /etc/wpa_supplicant.conf is configured
imperatively and reloading of the service on configuration changes.
2024-09-19 16:36:34 +02:00
wxt 1a742a9f80 nixos/turn-rs: init 2024-09-19 07:33:51 +08:00
github-actions[bot] 71d46fbcdf
Merge staging-next into staging 2024-09-18 18:04:48 +00:00
Robert Hensing 30620e7736 nixosTests.nix-serve: Use new entrypoint
This reuses the `pkgs`, so that `pkgs.nixosTests.nix-serve` will
run with the overlays of `pkgs` applied.
2024-09-18 13:42:35 +02:00
Michele Guerini Rocco e3191b8ded
nixos/dhcpcd: harden and run as unprivileged user (#336988) 2024-09-17 19:21:11 +02:00
Vladimír Čunát 75da841952
Merge branch 'master' into staging 2024-09-17 16:38:37 +02:00
Fabián Heredia Montiel 3029a1f91d
frr: 10.0.1 -> 10.1 (#342259) 2024-09-17 07:25:12 -06:00
github-actions[bot] 73cf025711
Merge staging-next into staging 2024-09-17 12:05:50 +00:00
kirillrdy 14392643b6
nixos/tests/freetube: fix ocr (#342383) 2024-09-17 17:36:55 +10:00
ghpzin adff49b178
nixos/tests/freetube: fix ocr
- change text that is waited for on preferences page, as previous one
stopped being recognized by OCR on xorg after freetube update to 0.21.0
- increase timeout from 30 sec to 60 sec as OCR is sometimes slow
2024-09-16 22:56:00 +03:00
github-actions[bot] 1c3463dc7a
Merge staging-next into staging 2024-09-16 12:06:19 +00:00
Aleksana f1580efb3b
maintainers/team-list: add cyberus team (#331059) 2024-09-16 18:14:16 +08:00
Markus Theil 83cdec2e16 nixos/tests/frr: fix ping command
Signed-off-by: Markus Theil <theil.markus@gmail.com>
2024-09-16 11:31:35 +02:00
Sandro fd3ddb6b60
dnscrypt-wrapper: remove package and NixOS modules (#341838) 2024-09-16 11:25:30 +02:00
rnhmjoj bad5251e87
nixos/tests/networking: test nameservers via DHCP 2024-09-16 08:07:55 +02:00
github-actions[bot] 7aea2e99a8
Merge staging-next into staging 2024-09-16 00:14:57 +00:00
rnhmjoj a432668acf
dhcpcd: disable privsep by default
The priviledge separation mode has several downsides:

  - it's incompatible with alternative memory allocators, including
    graphene-hardened;

  - it needs an unreleased patch to fix a crash;

  - it results in none less than 6 subprocesses running at any time,
    increasing the memory usage;

  - the privileged process (albeit not doing any networking related
    tasks) is still running as root, so it has complete access to the
    system.

Let's disable this by default and instead run dhcpcd as an unpriviledge
user with only the necessary capabilities.
2024-09-16 01:23:54 +02:00
KFearsoff ad11a7357b
maintainers: remove kfears (#342128)
remove kfears from maintainers
2024-09-16 00:57:14 +02:00
github-actions[bot] 952947bdf8
Merge staging-next into staging 2024-09-15 18:04:54 +00:00
Robert James Hernandez a49a45f85e scion: individually verify certs in vmTest 2024-09-15 17:54:03 +00:00
Robert James Hernandez e15e5e8d95 scion: make vmTest handle failured nodes 2024-09-15 17:54:03 +00:00
misuzu 2505777e0c nixos/netbird: remove misuzu as maintainer 2024-09-15 12:57:13 +00:00
github-actions[bot] 84a5c54b60
Merge staging-next into staging 2024-09-15 12:05:26 +00:00
Aleksana c45a2954a5
nixosTests.bittorrent: Fix pkgs scope (#293562) 2024-09-15 17:09:33 +08:00
OPNA2608 d2cf5dda65 nixosTests.terminal-emulators: Disable lomiri-terminal-app colour test
02a4d9a728 made the colour output of the terminal(?) in the icewm environment
on x86_64 BGR instead of RGB, but not on aarch64. Just disable for now.
2024-09-14 20:21:20 +02:00
github-actions[bot] 70ab79847d
Merge staging-next into staging 2024-09-14 18:04:45 +00:00
rnhmjoj 016f6f9f58
dnscrypt-wrapper: remove package and NixOS modules 2024-09-14 17:22:48 +02:00
7c6f434c d0809c6f4e
curl-impersonate: 0.6.1 -> 0.7.0 (#333589) 2024-09-14 12:34:43 +00:00
github-actions[bot] 2e6560786a
Merge staging-next into staging 2024-09-14 12:05:07 +00:00
Michele Guerini Rocco 168c2b9dec
nixos/tests/libreswan: fix test (#341785) 2024-09-14 13:45:11 +02:00
Aleksana 4539b91ab3
tandoor-recipes: Fix formatting string (#341353) 2024-09-14 16:18:35 +08:00
Euan Kemp 554ec1c0f0 nixos/tests: add postgresql wal2json test
This test should ensure wal2json functions.
I'm planning to upgrade wal2json, so it seems nice to have a test here.

It passes on my machine.
2024-09-14 05:17:49 +00:00
github-actions[bot] 76501a1b92
Merge staging-next into staging 2024-09-13 18:04:52 +00:00
Peder Bergebakken Sundt 01f064c99c
nixos/tests/gitdaemon: fix user and group (#340517) 2024-09-13 16:39:46 +02:00
github-actions[bot] 34de158a5f
Merge staging-next into staging 2024-09-13 00:13:45 +00:00
Philip Taron e630216c6b
[staging] perl: 5.38.2 -> 5.40.0 (#333286)
After discussing on Matrix in the [#staging](https://matrix.to/#/#staging:nixos.org) room, I'm merging this as-is without waiting for changes to the `enableParallelBuilding = false;` line.

There are several in-the-wings PRs (one from @emilazy) that attempt to bring load-limit, which is a more sensible accounting of the work that a derivation is doing, into Nix itself. If and when that lands, we'll be able to just set `enableParallelBuilding = true;` again, without any specific casing around the `NIX_BUILD_CORES` stdenv variable.
2024-09-12 16:22:26 -07:00
Weijia Wang e3f68dc015
opentelemetry-collector: 0.103.0 -> 0.109.0 (#325509) 2024-09-12 23:10:49 +02:00
Jacek Galowicz 60ed2a00ed nixosTests.bittorrent: Format 2024-09-12 20:25:55 +02:00
Jacek Galowicz 6618ec06cc nixosTests.bittorrent: Fix pkgs scope 2024-09-12 20:25:49 +02:00
github-actions[bot] 83e85079ff
Merge staging-next into staging 2024-09-12 18:04:48 +00:00
Gaétan Lepage d4474ed33b
nixos/invidious: add options for configuring inv-sig-helper (#340748) 2024-09-12 14:57:57 +02:00
Victor Engmark 19c3ea3fdd
tandoor-recipes: Fix formatting string
And clarify the message, since some of the URLs it refuses to try to
visit are just "#".
2024-09-12 21:29:43 +12:00
⛧-440729 [sophie] 81b0701a4d
nixos/invidious: add options for configuring inv-sig-helper 2024-09-12 09:08:02 +02:00
K900 4e803e9656 Merge remote-tracking branch 'origin/staging-next' into staging 2024-09-12 07:00:07 +03:00
rnhmjoj f8ec1e4e82
nixos/tests/libreswan: fix test
It was broken by the introduction of automatic IPv6 addressing in the
test infrastructure.
2024-09-11 22:39:23 +02:00
Pol Dellaiera 61235dc6d4
maintainers: remove eclairevoyant (#341075) 2024-09-11 22:24:23 +02:00
Michele Guerini Rocco b94f259714
nixos/wireless: reimplement secrets using ext_password_backend (#180872) 2024-09-11 19:58:36 +02:00
Weijia Wang 031eb8aa79 nixos/opentelemetry-collector: fix tests 2024-09-11 14:11:28 +02:00
github-actions[bot] f210ab99a7
Merge staging-next into staging 2024-09-11 12:06:02 +00:00
nikstur 2eeebc0d5d
userborn: 0.1.0 -> 0.2.0 (#341039) 2024-09-11 11:17:57 +02:00
éclairevoyant 49f7e34d6e
maintainers: remove eclairevoyant 2024-09-10 15:02:41 -04:00
github-actions[bot] e8bf28cd05
Merge staging-next into staging 2024-09-10 18:06:21 +00:00
nikstur e31bb09912 nixos/tests/userborn: add pwck and grpck 2024-09-10 17:26:28 +02:00
r-vdp 1f38ed7013
nixos/tests: fix nixos-rebuild-specialisations test
See https://hydra.nixos.org/build/272096143
2024-09-10 16:54:34 +02:00
github-actions[bot] 3169038ef8
Merge staging-next into staging 2024-09-10 12:06:25 +00:00
Kerstin 5a39b9e407
Gancio service fixes (#340782) 2024-09-10 13:34:07 +02:00
Jean-Baptiste Giraudeau 432bfec026
nixos/gancio: use unix socket between nginx and gancio 2024-09-10 13:13:28 +02:00
github-actions[bot] 8b029cc727
Merge staging-next into staging 2024-09-10 06:05:10 +00:00
Vladimír Čunát 28e9b6d60f
Merge staging-next 2024-09-01 (#338840) 2024-09-10 07:42:45 +02:00
github-actions[bot] b4c8dad507
Merge staging-next into staging 2024-09-10 00:13:45 +00:00
github-actions[bot] 6811659137
Merge master into staging-next 2024-09-10 00:13:21 +00:00
Maximilian Bosch 862ecd674f
nixos/prometheus-exporters/pgbouncer: don't leak DB password into cmdline
Since `connectionStringFile` reads the file and puts it into the
invocation of the exporter, it's part of the cmdline and thus
effectively world-readable.

Added a new `connectionEnvFile` which is supposed to be an environment
file of the form

  PGBOUNCER_EXPORTER_CONNECTION_STRING=...

that will be added to the systemd service. The exporter will read the
connection string from that value.
2024-09-09 21:08:17 +02:00
Maximilian Bosch 4980a7d938
nixos/prometheus-exporters: fix assertions declared in exporter modules
And it turns out, the test was using a removed option all along 🙃
2024-09-09 21:08:17 +02:00
Martin Weinelt 420398889e
nixos/matrix-appservice-irc: allow disabling media lifetime
Posting media URLs to IRC that vanish, when they can be refetched from
the remote server they were originated from is not great UX.
2024-09-09 20:35:13 +02:00
github-actions[bot] 8cfce50366
Merge staging-next into staging 2024-09-09 14:31:43 +00:00
github-actions[bot] f3e8528ff7
Merge master into staging-next 2024-09-09 14:31:17 +00:00
K900 a9c0a2e2a1
nixos/tests: don't include switch-to-configuration in DUT by default (#340445) 2024-09-09 16:20:41 +03:00
Artturin 320ecf42ba
nixos/tests/gnupg: fix prompt handling (#340738) 2024-09-09 15:38:18 +03:00
github-actions[bot] 6bb37a137e
Merge staging-next into staging 2024-09-09 12:06:25 +00:00
github-actions[bot] 90a93f92bb
Merge master into staging-next 2024-09-09 12:05:58 +00:00
Artturin b6de6dc0b1
nixosTests.hocker-fetchdocker: remove (#327293) 2024-09-09 14:28:26 +03:00
ghpzin b0caae5c29
nixos/tests/gnupg: fix prompt handling
- change send_chars and wait_until_tty_matches to handle
new password prompt in one TUI. Switching with tab between enter
and re-enter of password
2024-09-09 14:13:18 +03:00
github-actions[bot] c248669008
Merge staging-next into staging 2024-09-09 06:05:35 +00:00
github-actions[bot] 92d531057e
Merge master into staging-next 2024-09-09 06:05:06 +00:00
Pol Dellaiera bcb04b0967
open-webui: Add environmentFile option (#334830) 2024-09-09 03:28:37 +02:00
Martin Weinelt 01d0b0b683
nixos/logrotate: harden systemd unit
Logrotate is a service that runs as root and moves logfiles around while
keeping ownership of these files intact. This means we can and should
severely limit the scope of what can be done during its runtime.
2024-09-09 02:53:36 +02:00
github-actions[bot] bc08a73275
Merge staging-next into staging 2024-09-09 00:15:03 +00:00
github-actions[bot] f2b767ea43
Merge master into staging-next 2024-09-09 00:14:38 +00:00
Adam C. Stephens 4d195209ba
nixosTests.sourcehut: regenerate expired PGP key (#332573) 2024-09-08 18:37:24 -04:00
Kerstin e248589c0f
gancio: init at 1.19.0 (#279011) 2024-09-08 22:51:23 +02:00
github-actions[bot] 5725a1eed6
Merge staging-next into staging 2024-09-08 18:04:33 +00:00
github-actions[bot] 3b1652aad3
Merge master into staging-next 2024-09-08 18:04:04 +00:00
Stig Palmquist 67ecdcbb97
unit: add nixos tests for perl 2024-09-08 19:51:21 +02:00
Pol Dellaiera 31a69c3d85
nixos/tests/vscode-remote-ssh: fix ocr, add timeout (#336154) 2024-09-08 18:20:28 +02:00
Pol Dellaiera eb9ae53c73
nixos/tests/atop: fix version regex, add timeout (#335902) 2024-09-08 18:19:35 +02:00
Pol Dellaiera 9909f400d1
nixos/tests/pleroma: fix timeout (#334688) 2024-09-08 18:19:02 +02:00